rwg

14 ms·

61.
by rwg 13y ago
Any protocol that rides in UDP and that will reply to an unsolicited n byte packet with a >n byte response. (But if the amplification factor is close to 1, then you might as well have your botnet just attack the target directly.) Device
62.
by rwg 13y ago
I looked at DigitalOcean's offerings and read through their forums several months ago when I was thinking about moving from a (pathetically underutilized) US$20/month Linode instance to a US$5/month DO droplet, but there were
63.
by rwg 13y ago
Strangely enough, the largest deployment of DNSSEC-enabled, customer-facing, recursive/caching nameservers in the United States is... Comcast. That's right, the same Comcast that, back in 2009, hijacked NXDOMAIN responses by defa
64.
by rwg 13y ago
Using 1:1 mappings of LVM logical volumes to guest VM block devices is the most straightforward and performant method of doing it on Linux, short of doing 1:1 mappings of entire disks or disk partitions to guest VM block devices. While usi
65.
by rwg 13y ago
In your second paragraph, you're conflating two different things. File-based disk images don't leak data when they're deleted because the filesystems those images live on ensure that (non-privileged) users can't get at
66.
by rwg 13y ago
But more importantly, nobody uses TLS-SRP. No browser implements it. The demand for PAKE authentication in TLS is not strong. I'd argue that there's no demand for TLS-SRP because most of the people who could make use of it don&#
67.
by rwg 13y ago
Criminals don't care how much money they're costing their victims, only how much money they'll make from their crime. This is no different than someone smashing your car's window ($100+) and destroying its dashboard ($1
68.
by rwg 13y ago
I really wanted to love the Common Crawl corpus. I needed an excuse to play with EC2, I had a project idea that would benefit an open source project (Mozilla's pdf.js), and I had an AWS gift card with $100 of value on it. But when I
69.
by rwg 13y ago
The problem isn't a lack of software to put on hardware, it's a lack of hardware that doesn't go out of its way to thwart attempts to install different software, either intentionally or as a side-effect of being optimized for
70.
by rwg 13y ago
I Twitter-whinged about this a few weeks ago, except I used an Ars Technica story as the example.[1] I think it's a case of "everyone else is doing it, so we should, too!" Or maybe I'm completely underestimating the &qu
71.
by rwg 13y ago
Because... • TCP-in-TCP (or ${ANY_RELIABLE_STREAM}-in-${ANY_RELIABLE_STREAM}) performs very poorly in the face of packet loss. • SSH itself becomes a bottleneck on networks with a large bandwidth-delay product because of statically sized bu
72.
by rwg 13y ago
The Visual Workstation line failed because you could get 90% of the performance for <50% of the cost by buying/building a dual-PII/PIII workstation and throwing an NVIDIA graphics card in it. The architecture SGI used for the
73.
by rwg 13y ago
Yep. Additionally, there are no user-defined functions, and the limit on the length of the "code" that makes up a cell is low enough that you occasionally bump into it when trying to "program" in Excel. Excel also has a
74.
by rwg 13y ago
Having implemented AES and a few other algorithms in "pure formula" Excel, I fully support seeing more things implemented in Excel! One of the biggest things to wrap your head around is that cells in Excel are write-once, read man
75.
by rwg 13y ago
First off, you're absolutely right. The difference in IPC between a modern CPU and a 2002 vintage Pentium 4 is pretty incredible, and the way forward is all about power efficiency and cramming more cores onto one die. However, I think
76.
by rwg 13y ago
I'd also humbly request that employers hurry up and tell a candidate that they're no longer in consideration for a position as soon as that's decided. It doesn't have to be a involved production — a minimally polite two
77.
by rwg 13y ago
This comment in Linux's bcm2835-rng.c driver makes me wonder about the RNG: /* the initial numbers generated are "less random" so will be discarded */ #define RNG_WARMUP_COUNT 0x40000 How was this magic
78.
by rwg 13y ago
I don't like OpenSSL as a CSPRNG What's not to like about it?! The potential for multiple processes to share PRNG state after fork()s (unless the processes explicitly reseed)? The tri-state return value from the RAND_bytes() f
79.
by rwg 13y ago
Size? The motherboard appears to be smaller than Mini-ITX. I'm also guessing it's based on one of Intel's upcoming "Silvermont" Atom CPUs. That makes me very unlikely to support this project since I'd imagine
80.
by rwg 13y ago
On the first day of my first CS class in college, the gruff old professor passed around a stack of photocopied "VI TUTORIAL" papers. In the "MOVEMENT" section, it had pictures of arrow keys, then X's hand-drawn ove
81.
by rwg 13y ago
Looks like there's a (power gated!) hardware random number generator, too. It uses ring oscillators, so it's not going to pump out hundreds of megabytes per second like RdRand, but it's enough to at least throw a few kilobit
82.
by rwg 13y ago
Well .... making a website != programming. A friend told a story about a recent job interview for a devops position. He'd already had phone interviews and a breakfast chat with some engineers from a company with offices in his city,
83.
by rwg 13y ago
Before I figured out it was garbage, I bought one of the USB<->SATA+IDE dongle things I used at ex-work for use at home: USB to ATA/ATAPI Bridge: Product ID: 0x2338 Vendor ID
84.
by rwg 13y ago
I don't doubt it. At ex-work, I had two different USB<->SATA dongle things with two different brands of USB<->SATA controller IC inside, and both would occasionally corrupt data read from or written to the drive.
85.
by rwg 13y ago
It seems like the C99 _Bool type implements the same implicit type conversion brain damage. It does: "When any scalar value is converted to _Bool, the result is 0 if the value compares equal to 0; otherwise, the result is 1." (f
86.
by rwg 13y ago
Another response, this one from Ken White at Popehat: http://www.popehat.com/2013/08/29/this-is-no-surprise-to-you...
87.
by rwg 13y ago
It encodes a 4-byte sequence number in the base64 glop before the 8-byte chunk of data, so all of the DNS labels generated for a file should be unique.
88.
by rwg 13y ago
Many people have been tweeting similar headlines with the #FalseMedium hashtag. Some of them are pretty great. My favorite so far: kftaba ‏@kftaba 23 Aug How living out of my Tesla made me more productive #FalseMedium https:
89.
by rwg 13y ago
That's kinda how NFS was designed to work. NFS comes from the dark ages of networking, where transient network errors were very common, even on local networks. "man nfs" and "man mount.nfs" and search for "sof
90.
by rwg 13y ago
The default HN experience isn't so great on Android's browser... http://i.imgur.com/TEUoGrT.jpg

More ›