swolchok

37 ms·

331.
by swolchok 16y ago
After some thought, I agree with your assessment. You could set up a server to make people mostly play nice, but in the current stage of development, a gentleman's agreement is probably the right choice. If you sandboxed the Python proces
332.
by swolchok 16y ago
I've developed an extremely aggressive AI that is able to wipe out mind1 in about a minute. It's based on mind2 but uses a better algorithm for exploration, and, when attacked, it calls for help rather excessively. http://github.com/swolch
333.
by swolchok 16y ago
The performance is actually not too bad the way it is right now.
334.
by swolchok 16y ago
> You can't fork at cell-run-time, because while a process couldn't write anything back out to the parent, it could still grovel over the parent's data space which could still be used to advantage, and depending on the rest of your code
335.
by swolchok 16y ago
Looks like very little attention has been paid to performance in favor of praying that psyco works on the player's system. I'm avoiding work and I've forked the project, so watch for a series of little perf tweaks. A few specific complain
336.
by swolchok 16y ago
People will most certainly ask you why you studied Art History in college if it turns out that you came out the other end with no marketable skills, especially when articles about your woes show up in the New York Times as though your poor
337.
by swolchok 16y ago
Why is the scribd version 1) ugly and 2) in Flash? I thought they were all HTML 5 these days, and I'd clicked the scribd link to give them another chance.
338.
by swolchok 16y ago
Don't forget to expire it server-side. It's not hard to save a cookie before expiration.
339.
by swolchok 16y ago
Are you sure? $ echo 'int main(int argc, char **argv) { if (argc < 0) { return 1; } else {return 0;}}' > test.c $ gcc -v Using built-in specs. Target: x86_64-linux-gnu Configured with: ../src/configure -v --wit
340.
by swolchok 16y ago
Actually, I had just woken up from sleeping ~8 hours about 3-4 hours before the question was released, and we didn't do any of the exploitation of networked services except Pwtent Pwnables 200 (compiled Python) and Binary L33tness 100 and 2
341.
by swolchok 16y ago
Local mirror should be up at http://scott.wolchok.org/ctf2010/t500_47b7c308e6d24e14c5.bin (also now linked from the article).
342.
by swolchok 16y ago
I elided the hour or so spent trying to figure out what Power PAQ was. Google has no results for PAQ804; as the writeup says, a teammate eventually Binged it. I also elided the debugging needed to get the FFT to work (but you need to know w
343.
by swolchok 16y ago
There's a tiny bit and an index of other writeups now at http://scott.wolchok.org/ctf2010/
344.
by swolchok 16y ago
I'm not a script kiddie, I'm a grad student in security. I did, however, bang out that article in one go after only partially recovering from the 50+-hour contest, so it's not the most coherent.
345.
by swolchok 16y ago
I was assuming it was bytes allocated and freed; this system has 4 GB of memory, I had a few VMs plus chrome with many tabs open running at the time, and I didn't notice any thrashing.
346.
by swolchok 16y ago
That's exactly what I did -- the spectrogram is from sndfile-spectrogram, not baudline. baudline helpfully draws a line parallel to the frequency axis and shows you what point on the time axis you're at, so measuring times is easy.
347.
Extracting hidden data from an audio file with the FFT(scott.wolchok.org)
52 points by swolchok 16y ago|27 comments
348.
by swolchok 16y ago
Poisoning is arguably harder to deal with in a distributed architecture.
349.
by swolchok 16y ago
Thing is, there's nothing wrong with thinking of fun, clever ways to post/share stuff. If nothing else, you can do it to anticipate what the bad guys might do, on the same principle as any other kind of attack research.
350.
by swolchok 16y ago
It seems incredible to me that someone would consider funding a profit-making venture to be an act of philanthropy.
351.
by swolchok 16y ago
To interfere with foreign citizens' probing of their network?
352.
by swolchok 16y ago
What prevents the Great Firewall from whitelisting pings from these machines?
353.
by swolchok 16y ago
My university hands out unlimited .edu addresses to students that can be configured to forward to any email address...
354.
by swolchok 16y ago
and if it doesn't appear to have peaked? why, just wait a bit longer!
355.
by swolchok 16y ago
cherrypad.com is parked. I think you meant http://www.cherrypal.com/ . That said, if someone legit was selling $100 netbooks, I'd definitely buy one. I do most of my testing on remote servers anyway; all I want out of a netbook is "an ins
356.
by swolchok 16y ago
Link is getting Error 324 (empty response) for me, using Chrome on Linux.
357.
by swolchok 16y ago
That's a painfully old brainteaser. The answer: He was playing Monopoly.
358.
by swolchok 16y ago
No, they don't. The clip-on attack can electronically stuff the EVM by rewriting the internal EEPROM, bypassing the EVMs' rate-limiting feature.
359.
by swolchok 16y ago
What does this mean for their copy protection? How can they prevent people from downloading/printing works now?
360.
by swolchok 16y ago
Yawn. These are hardly JavaScript-specific programming tips, except the Firebug ones. You can easily build a stack or queue on top of arrays in any language, and common subexpression elimination helps in other dynamic languages as well.

More ›