q3k

7 ms·

91.
by q3k 6mo ago
https://en.wikipedia.org/wiki/American_Service-Members%27_Pr...
92.
by q3k 6mo ago
Potassium iodide is not going to help you much in the event of a nuclear war. It's only really useful for nuclear accidents where the primary radioisotope release is I-131. It's not a magical radiation protection shield (for examp
93.
by q3k 6mo ago
I'm so tired of this particular kind of LLM (-assisted) slop. The engagement bait, the stupid little hacker-style animations, the drawn out text... Please, people, use your own words, and don't overdo every little thing. It's
94.
by q3k 7mo ago
Aren't heavily regulated sectors the one where you usually encounter snake oil? Useless WAFs and other security snake oil products, Microsoft 'collaboration' jank like Teams and Sharepoint, MitM proxies, etc?
95.
by q3k 7mo ago
> SCION right now provides the backbone for the Swiss financial network moving 200 billion CHF each day This is a meaningless benchmark - for a small group of trusted big enterprises with insurance policies and mutually signed contracts
96.
by q3k 7mo ago
It's implicit state that's also untyped - it's just a String -> String map without any canonical single source of truth about what environment variables are consulted, when, why and in what form. Such state should be stron
97.
by q3k 7mo ago
1. Randomly peeking at process.argv and process.env all around. Other weird layering violations, too. 2. Tons of repeat code, eg. multiple ad-hoc implementations of hash functions / PRNGs. 3. Almost no high-level comments abou
98.
by q3k 7mo ago
The code looks, at a glance, as bad as you expect.
99.
by q3k 7mo ago
> Attack the argument not the man. But the man's argument is that since he sees something a given way then it's the truth. What people are doing in return is showing that he can only do so because of who he is.
100.
by q3k 7mo ago
Everyone's trying to be the new thought leader enlightened technical essayist. So much fluff everywhere.
101.
by q3k 7mo ago
The work is mysterious and important.
102.
by q3k 7mo ago
> 12-stage detection pipeline What is this recent (clanker-fueled?) obsession to give everything fancy computer-y names with high numbers? It's not a '12 stage pipeline', it's just an algorithm.
103.
by q3k 7mo ago
You can only pick the parts that you need and aren't now exposed to a supply chain attack. You can also easily adapt the code to your needs easily, especially as your needs change. https://www.youtube.com/watch?v=PAAkCS
104.
by q3k 8mo ago
Coward.
105.
by q3k 8mo ago
Yeah, anyone who says 'the government should be ran like a company' has likely never worked in a large corporation. It's full of meaningless work, bullshit jobs and red tape.
106.
by q3k 8mo ago
Don't access it over https then? The link is http.
107.
by q3k 8mo ago
This makes me want to stop reading 'Show HN' threads.
108.
by q3k 8mo ago
I'm not saying it's not important, it is. I just don't believe that '[the] majority of memory bugs are from out of bounds access'. That was maybe true 20 years ago, when an unbounded strcpy to an unprotected return
109.
by q3k 8mo ago
Or type confusion bugs, or any other stuff that stems from complex logic having complex bugs. Boundary checking for array indexing is table stakes.
110.
by q3k 8mo ago
> People Are Being Thrown In U.K. Prisons Over What They’ve Said Online. Hmm yeah, let's see. > The recent arrest at London’s Heathrow airport of a noted Irish comedian, Graham Linehan, for the “crime” of three politically incorr
111.
by q3k 8mo ago
Why not?
112.
by q3k 8mo ago
Just let my work have a soul, please.
113.
by q3k 8mo ago
> I was recently trying to analyse a 600mb exe (denuvo/similar). I wasted a week after ghidra crashed 30h+ in multiple times. During the startup auto analysis? For large binaries it makes sense to dial back the number of analysis pa
114.
by q3k 8mo ago
I really want to like Binary Ninja, but whenever I have the choice between not paying (Ghidra), paying for something that I know works (IDA) and paying for something that I don't know if it works (Binja) then the last option has always
115.
by q3k 8mo ago
I recommend it for serious work. Well, serious enough that I got paid for doing it, and/or given talks about it. (not if you're only doing x86/ARM stuff, though)
116.
by q3k 8mo ago
Stuff I've recently analyzed that IDA has no decomp support for (and Ghidra's is anywhere from good enough to actually good): - AVR - Z80 - HC08 - 8051 - Tricore - Xtensa - WebAssembly - Apple/Samsung S5L87x
117.
by q3k 8mo ago
IDA is the better tool if you're being paid to work with architectures that IDA supports well (ARM(64), x86(_64), etc). This usually means 'mainstream' security/malware research. It's not worth the price for hobbyis
118.
by q3k 8mo ago
How so? Why would a couple of months break in employment (worst case, if I truly become unemployable for some reason until I learn the tools) harm or destroy my career?
119.
by q3k 8mo ago
Why should I worry about lacking preparation in the future? Why can't I just learn this as any other skill at any other time?
120.
by q3k 8mo ago
Ceph is fundamentally an object storage system. RBD (block devices) are built on top of that layer.

More ›