sebcat

32 ms·

271.
by sebcat 11y ago
Using this would require whatever process you start to handle SIGTERM properly. Most processes spawning children do this, but it's no guarantee and one needs to be aware of this. In my experience, processes doing IPC with parent gets n
272.
by sebcat 11y ago
FWIW, __int128 and the optimizations mentioned works in clang too, my guess is that the author just runs an old version. #include <stdio.h> int main() { FILE *fp; __int128 v=1234; fp = fopen("fo
273.
Show HN: Record Calls to SSL_read, SSL_write Using LD_PRELOAD(github.com)
2 points by sebcat 11y ago|0 comments
274.
by sebcat 11y ago
> The more you want your code to be small, the more you're gonna need a programming environment (language/API/runtime/framework) doing things for you under the hood. And there's nothing wrong about it! Or have yo
275.
by sebcat 11y ago
the OWASP Broken Web Applications project (owaspbwa) is worth mentioning in this context. It's a collection of vulnerable web applications for web security training, demonstrations and testing. It can be downloaded as a VM from [1]. I
276.
by sebcat 11y ago
I know very little node.js, but by the looks of it that is exactly the type of vulnerabilities I would like to see in a project like this. Kudos for the PRs.
277.
by sebcat 11y ago
I was kinda hoping for node specific vulns. This does not seem to cover more than DVWA, WAVSEP or any other test suites/intentionally vulnerable web applications out there.
278.
by sebcat 11y ago
> Web development is in truly a sad state. Has it ever been better though? Technically, you could argue that webdev has never been as good as it is now. Not that I like the current situation, I just think that things in webdevland are be
279.
Show HN: Parent-child message passing using shared memory(github.com)
7 points by sebcat 11y ago|1 comments
280.
Learning how to use the libcurl multi API(github.com)
4 points by sebcat 11y ago|0 comments
281.
by sebcat 11y ago
What he's saying is essentially "The code I write/the platform I choose scales poorly over multiple cores. Therefor I decide to blame the hardware, and skip features that are good for me" People need to adapt to a world
282.
by sebcat 11y ago
The picture is of Nyhavn, what relevance does this have? Surely they're not located there?
283.
by sebcat 11y ago
Yes. An ncurses-based appliance configuration UI and a seccomp-sandboxed DSL environment. libtcl is really easy to sandbox with seccomp, I recommend it over [interp create -safe]. Run the interpreter in a seccomp-enabled child and have the
284.
by sebcat 11y ago
The BPF target looks promising for writing seccomp filters. Anyone tried it?
285.
by sebcat 11y ago
proc with {file as name block} { uplevel 1 [list set $name $file] uplevel 1 [list eval $block] uplevel 1 [list close $file] } with [open foo.txt w] as file { puts $file "Hello, World!" } I'm s
286.
Show HN: Easy way to work on JSON streams in python3(github.com)
1 points by sebcat 11y ago|1 comments
287.
by sebcat 11y ago
You can have several outgoing connections in one single thread, at the same time. Threading is for CPU bound problems that requires a shared memory space. I/O multiplexing and/or cooperative multitasking means you can have thousan
288.
by sebcat 11y ago
Crawling can be broken down to: 1) fetching resources 2) finding out what new resources to fetch 1) is an network bound problem, 2) is mostly disk/CPU bound. Realizing the difference between these two things and separating the
289.
by sebcat 11y ago
I've been running without Flash for a couple of years now. The only thing I can't do that I would like to be able to do is to watch Facebook videos. Other than that, not having Flash installed is not a problem for me.
290.
by sebcat 11y ago
> The DNS resolver in the net package has almost always used cgo to access the system interface. A change in Go 1.5 means that on most Unix systems DNS resolution will no longer require cgo, which simplifies execution on those platforms.
291.
by sebcat 11y ago
Anecdotally, I've recently come across XSS in search fields and SQL injections in login forms. One could argue that because of reputation and market share, Matasano gets customers who prioritizes security, making such vulnerabilities l
292.
by sebcat 11y ago
> I'm not in love with White Hat as a company, but they do collect stats across their customer base, and their annual stats have shown sharp declines in SQL injection White Hat has a set of tests they run against their customers ove
293.
[tcpdump-workers] BPF Extended: Addressing BPF's Shortcomings(lists.sandelman.ca)
1 points by sebcat 11y ago|0 comments
294.
by sebcat 11y ago
> Most people looking at the code won’t see anything Sadly, most people don't look at the code at all. They buy products marketed as making them safer, or trust central authority figures.
295.
by sebcat 11y ago
A common way to solve that is to have a function argument point to a place where you want the result to end up, and always return FOO_ERROR or FOO_OK. i.e., int foo_new(foo_t **res); int foo_mutate_copy(foo_t *foo, bar_t *bar, foo
296.
by sebcat 11y ago
> The way I use Firefox is that having 50 or more tabs open is normal for me I've never understood this. Isn't that what bookmarks are for?
297.
by sebcat 11y ago
Why is it that these lessons remain forgotten? I find them to be accurate. I can't help but to think that we are all doomed to repeat the same mistakes over and over again.
298.
by sebcat 12y ago
> I needed lots and lots of OS file descriptors Why? I ask because I wrote a port scanner professionally once, and I got away with using one fd for network I/O. I can only think of one case where you end up using a lot of fds and th
299.
by sebcat 12y ago
Another problem where double linked lists are generally better suited than arrays is caches with LRU eviction. Example: https://github.com/sebcat/store/blob/master/store.go#L68-L15...
300.
by sebcat 12y ago
You have code running on your computer for rendering the content. Historically, pictures (GDI+ buffer overflow, and others) and .pdf files has been used for exploiting bugs in that code. Sandboxing would have made that a non-issue, or at le

More ›