mkj

13 ms·

121.
by mkj 3y ago
OpenSSL
122.
by mkj 3y ago
You want the failures to occur deeper in the programs so you cover more code paths.
123.
by mkj 3y ago
Apple's whole advantage is owning the entire stack top to bottom. To achieve that with servers they'd need to develop their own server OS and perhaps app ecosystem on top of it too - that really isn't their focus. Or they cou
124.
Optimize a van Shelf(eng.aurelienpierre.com)
1 points by mkj 3y ago|0 comments
125.
by mkj 3y ago
Also listening for water leaks in underground pipes. https://terra15.com.au/terra15-provides-leak-detection-servi...
126.
by mkj 3y ago
Exactly my sentiment. I didn't use it much (came with the camera), but occasionally did and thought it'd be a decent program to buy if I needed more raw editing. No way that's happening now.
127.
Capture One Express Deprecation FAQ(support.captureone.com)
2 points by mkj 3y ago|2 comments
128.
by mkj 3y ago
That's not actually allowed, it's meant to be research with an "unknown outcome" or some similar wording. But lots of companies ignore yhat and claim regardless.
129.
by mkj 3y ago
Soldering a nicer coloured SMD LED over the top of the blue LED works well. Most colours have a lower voltage drop, so the blue doesn't glow at all. Worked well for my pocketbeagle board which was annoying me, my initial attempts a des
130.
by mkj 3y ago
The caldav and carddav work well, even if you don't use the web ui.
131.
by mkj 3y ago
Around 2003-2006 immediately before git (and mercurial) there were a bunch of new open source distributed VCSes. http://moinmo.in/NewVCS lists a few of them from the time. Bazaar, Bazaar-NG, Codeville, Darcs, Monotone Git a
132.
by mkj 3y ago
I don't think dropping the server-sig-algs packet gives any additional downgrade capability? If a server is going to accept a rsa sha1 signature it will accept it regardless of whether the client receives the server-sig-algs or not. Pe
133.
by mkj 3y ago
Maybe if there were a DNS record for a SSH port number it could work? Separate port per server, not terrible.
134.
by mkj 3y ago
How do they physically align all the parts? Do they have some kind of self-aligning mechanism or it's done with external manipulation? (Or maybe that's TSMC's secret)
135.
by mkj 3y ago
Curiosity-driven learning sounds similar to coverage driven fuzzing for software (AFL etc). When it sees something new happen it tries to do more things in that same area.
136.
by mkj 3y ago
Nice work. A small thing, are the marker icons aligned to their top left corner? Seems like they'd be better aligned to the middle of the icon.
137.
by mkj 3y ago
Does that mean it can avoid having to interpret terminal control codes (ie be a full terminal emulator)? That's a clever way.
138.
by mkj 3y ago
What does "hardware compatible" mean here though? It runs on the same FPGA hardware, but has unrelated CPU architecture?
139.
by mkj 3y ago
If they're so important, people will fork them to make them work with pledge.
140.
by mkj 3y ago
It's best to avoid reading much meaning into CVE scores. So much depends on the perennial question "what's your threat model?"
141.
by mkj 3y ago
ghdl-yosys-plugin works, it's used for Microwatt's ecp5 target.
142.
by mkj 3y ago
A softcore is a CPU to run on an FPGA. Microwatt fits in a Lattice ECP5 FPGA with 85,000 LUTs (plus some block ram). Not sure how you'd get to transistors from that, wild guess times by 15 maybe? (But then the FPGA also has other speci
143.
by mkj 3y ago
I looked into CAA but the current dns provider doesn't support those records. Is there a reason it had to be a new type not a more common TXT record?
144.
by mkj 3y ago
The current tinytapeout 5 adds the first analog support, so I guess it's even a bit more experimental than normal.
145.
by mkj 3y ago
Exactly. If you set your account to "Hibernated" it won't bother you again. Simply unsubscribing isn't really feasible given the dark patterns in their notification settings page, nested trees of boxes to untick.
146.
by mkj 3y ago
Your phone's client encrypts it to a public key of the receiver phone's client. The associated decrypting key never leaves that receiving phone (verified by looking at the source code). You know it's the correct public key if
147.
by mkj 3y ago
If your client puts sensible options first, those are the ones that will get used. So most likely you're using chachapoly and x25519 always anyway.
148.
by mkj 3y ago
Does Apple's secure enclave thing support ed25519 now? I think that was missing support a while ago, probably other hardware too. Webcrypto had missing support in some browsers too (though that was rsa-only on firefox for a while, unsu
149.
by mkj 3y ago
Following the guide's steps wouldn't have helped in the Debian case. I reckon on average a distro ssh maintainer is more aware than an average end user following a hardening guide, even with mistakes like that one.
150.
by mkj 3y ago
The rp2040 was their first foray into custom silicon and has been completely unaffected by supply chain issues. In that case they ordered 10 million chip dies (dice?), I guess it might be similar here. https://www.tomshardware.co

More ›