rawling

22 ms·

361.
by rawling 3y ago
Oh, that's evil. In some places my tooling only shows 7 digits of the git SHA. I wonder how hard it would be to write something to tweak my commits until those are all the same. And I wonder how long it would take until someone noticed
362.
by rawling 3y ago
Yeah, I forgot how many bits were in a hex digit and made it seem much harder than it really was to myself.
363.
by rawling 3y ago
I'm confused as to how they've done this. The original message, sure, you can brute force the digits and hope you get a collision, and try a new, plausible preamble if not. But I don't see how they've found this collisio
364.
by rawling 3y ago
That makes the other collision even weirder. Someone took 4 years to find another plausible sentence that matched the same 7 digits? E: Ok, someone else in the tweet replies says it isn't that hard. I'm going to stop reading and s
365.
by rawling 3y ago
> Was just verifying your tweet's hash, and then...omg!!! I couldn't believe what I realised. The SHA256 of THIS tweet starts with exactly the same 7 characters as your tweet's hash. What are the chances of that? As always
366.
by rawling 3y ago
I know X did try that, but didn't they roll it back?
367.
by rawling 3y ago
Start it off like > John, whereas James had had "had", had had "had "had"... and you can get them all together...
368.
by rawling 3y ago
> The post-mortem results are presented as if events happened as a random set of unfortunate circumstances: the attacker just happened to work for Microsoft Does it say that? > the Storm-0558 actor was able to successfully compromise
369.
by rawling 3y ago
Some existing discussion https://news.ycombinator.com/item?id=37394665
370.
by rawling 3y ago
https://news.ycombinator.com/item?id=37342490
371.
by rawling 3y ago
Ah, thanks. The WP link on "D-Day" goes to the wrong page.
372.
by rawling 3y ago
What's the comparison here? Just from the Wikipedia pages (and just the allied side), Exercise Tiger: 749 killed ~200 wounded 2 LSTs sunk 2 LSTs damaged Operation Overlord: United States 124,394 casualties; 20,668 killed United Kingdom
373.
by rawling 3y ago
https://news.ycombinator.com/item?id=37203945 Related, 189 comments
374.
by rawling 3y ago
https://news.ycombinator.com/item?id=37199164
375.
by rawling 3y ago
404?
376.
by rawling 3y ago
https://news.ycombinator.com/item?id=37184864
377.
by rawling 3y ago
Tell HN: YouTube requires watch history on for home screen https://news.ycombinator.com/item?id=37158674 Tell HN: YouTube is not showing home recommendations when watch history is off https://news.ycombinator.com
378.
by rawling 3y ago
Tell HN: YouTube requires watch history on for home screen https://news.ycombinator.com/item?id=37158674 Tell HN: YouTube is not showing home recommendations when watch history is off https://news.ycombinator.com
379.
by rawling 3y ago
https://news.ycombinator.com/item?id=37062820 (Commentary on a different source, 1 week ago)
380.
by rawling 3y ago
Not deliberately? Old key used for the backups was accidentally erased halfway through the story, shredded key was just the last cleartext copy of the new key.
381.
by rawling 3y ago
This is a weird use case (deliberately making the hash public) and the usual concept of a salt feels weird here. Any kind of server-side secret would have effectively stopped this attack, even if it was the same in every hash.
382.
by rawling 3y ago
When my tech lead decided we were going to move to GraphQL, one of the reasons I was told it was great was because it solves/avoids the n+1 problem. But from this it sounds like that's something you have to detect and code for dir
383.
by rawling 3y ago
That report is about them registering their vehicles at their GRU office address, nothing to do with passport numbers. Here's one about two agents with passports 3 digits apart: https://www.bellingcat.com/news/uk-a
384.
by rawling 3y ago
> Did you not prepare any real answers ahead of time to obvious questions? You could just be copy/pasting detailed statements with actionable items in them right now instead of typing non-answers every 5-15 minutes. That would be a
385.
by rawling 3y ago
> Just look at building a simple HTTP endpoint in C# compared to Node or even F#! It's... basically the same? Include library, create server object, tell server object what request to handle and what to return, start server object.
386.
by rawling 3y ago
> Please submit the original source. If a post reports on something found on another site, submit the latter. Well in this case that's, uh... > An old torrent I’d guess? Wrapped in a 9-month old Reddit comment https://
387.
by rawling 3y ago
Can we have "right click on an item pinned to the Start Menu to see its recent document list" back next please?
388.
by rawling 3y ago
As a positive, everyone who clicks the submission can now see that this has been fixed.
389.
by rawling 4y ago
Can you still get Technic kits to build machinery? All I seem to be able to find now is replica vehicles, albeit some still seem to have pneumatic parts.
390.
by rawling 4y ago
I had some fun inverting and then rotating the hue back around.

More ›