pipeep

14 ms·

61.
by pipeep 12y ago
The value objects proposal for es6/es7 might fix that: http://wiki.ecmascript.org/doku.php?id=strawman:value_object...
62.
by pipeep 12y ago
I'm not familiar with libcUrl, so I can't say what you missed, but I am suspicious. Do however look at my complaints about your code. I understand that writing good safe C code is hard (I've written plenty of bad C code mysel
63.
by pipeep 12y ago
Given the final paragraph: > I still haven't answered a very important question. Why is libcUrl so much slower? I'd assume it's likely a result of misuse of libcUrl, or cUrl properly implementing some part of the spec that
64.
by pipeep 12y ago
Google Authenticator has a PAM module, and you can use it for SSH.
65.
by pipeep 12y ago
There's a missing newline on line 00590: https://gist.github.com/PiPeep/11126853/revisions
66.
by pipeep 12y ago
- They only compared people they already suspected. - Satoshi should've already known about linguistic analysis. - It's likely Satoshi had someone read and rewrite his works to avoid linguistic analysis. Nick Szabo would've b
67.
by pipeep 12y ago
I'm very impressed with how short and clean the code. I did a very quick code review, and things appear to be implemented sanely (eg, they drop permissions and chroot properly). There aren't many comments, but most of the code is
68.
by pipeep 12y ago
I totally agree and sympathize here. I've seen a few solutions that compile to VHDL or Verilog, as most platforms support one of those, to work around this.
69.
by pipeep 12y ago
From the limited amount of VHDL I did in my Digital Design class at my university, I found hardware description similar to functional programming. State is expensive to represent in hardware (you need latches, flip-flops, etc), and so VHDL&
70.
by pipeep 12y ago
It's the wrong abstraction layer for a heartbeat signal. That can easily be done by the application if it's needed. TLS and DTLS should provide encryption wrappers for TCP and UDP. That's it. Sure, it's convenient to hav
71.
by pipeep 12y ago
It's marked as static and isn't used anywhere there, so it's not an issue: they have an up-to-date version of upstream OpenSSL.
72.
by pipeep 12y ago
It's probably not practical, but it doesn't hurt to fix or remove (it's not used internally in OpenSSL) the code anyways. I submitted a pull request to Ruby, where the code was copied to, and is used: https://githu
73.
by pipeep 12y ago
Link?
74.
by pipeep 12y ago
The code in question is a Ruby FFI wrapper for OpenSSL (not a fork). Originally the function wasn't static, so when OpenSSL made it static, Ruby copied the function implementation to their source tree, as to avoid breaking their API.
75.
by pipeep 12y ago
Not in OpenSSL, but Ruby uses it: https://github.com/ruby/ruby/blob/1aa54bebaf274bc08e72f9ad38...
76.
by pipeep 12y ago
I made a patch to ruby swapping the memcmp for CRYPTO_memcmp, which should be constant-time. I'm checking to see that I didn't break the build, after which I'll make a pull request to https://github.com/ruby&#
77.
by pipeep 12y ago
It looks like there's some github projects using it: https://github.com/search?q=SSL_SESSION_cmp&ref=cmdform&type...
78.
by pipeep 12y ago
It wasn't static for older versions of OpenSSL, so this still might be an issue if someone was using that function with the assumption of it being constant-time.
79.
by pipeep 12y ago
memcmp compares two blocks of memory byte-by-byte. If the first two bytes don't match, the function can return early, otherwise it has to check the next byte. By measuring the execution times for all 256 possible bytes, one should be a
80.
by pipeep 12y ago
Seeing as it's static, it's not part of the public API. Apparently it was used in Ruby at one point: https://groups.google.com/forum/#!topic/mailing.openssl.dev/... I think it's probably a piec
81.
by pipeep 13y ago
Most hosting providers and domain sellers will provide this for free. CloudFlare also offers free DNS (which you can use with a patched version of ddclient). CloudFlare uses anycast, so it's fast, and as a DoS protection company, they
82.
by pipeep 13y ago
> probably the only web browser with a `garbage collect` menu entry In Firefox, you can force the global JS engine to GC on the `about:memory` page.
83.
by pipeep 13y ago
They're providing power, redundancy, and network connectivity.
84.
by pipeep 13y ago
I don't think it's a static generator as there's no compilation step. Rather, they just replaced the database with file lookup. The server still needs a php interpreter.
85.
by pipeep 13y ago
I was able to get it to load, and pull it down. Here's a temporary mirror on my own webserver: http://b.enjam.info/rgb
86.
by pipeep 13y ago
> Does anyone have recommendations for a good multi chat app replacement besides trillian? Pidgin (Win/Linux), Empathy (Linux), Adium (OS X), or Finch (Console-based, on Linux/OS X).
87.
by pipeep 13y ago
Damn. I bought the standard.
88.
by pipeep 13y ago
I bought a yubikey, but hardly any web services support it.
89.
by pipeep 13y ago
defer and async are about eliminating round trip latency by opening multiple simultaneous http connections. Multiple TCP streams are sometimes faster than one. (I say sometimes, because negotiating a new connection has an overhead)
90.
by pipeep 13y ago
While the caching would be more effective with one large centralized instance, I think the intended use case is to have one cache per server. So then it's not really extra infrastructure.

More ›