szc

10 ms·

1. 31.▲
   by szc 6y ago

   Sorry, I got animated and committed the faux-pas of familiarity. I forgot that this medium is not the same as a lively discussion between people who "know" each other - I see lots of your posts and the thoughts and depths of your
2. 32.▲
   by szc 6y ago

   Yeah, you totally got the snark in that. Despite the end result of the cycle, in the long term of making better software through embarrassing disclosure, it really does leave a negative impression on "why should this be made open sourc
3. 33.▲
   by szc 6y ago

   I am posting this as an independent comment. There isn't a "popular" CPU architecture that is 100% PIC for all of the allowed address ranges. There are "optimizations" the compiler can choose for limited addresses &
4. 34.▲
   by szc 6y ago

   Sorry no. This is not about the main executable - this is a misdirection. The comments you make about the "main binary" are 100% correct. But, they do not address my comment at all. My comments were entirely about the shared cache
5. 35.▲
   by szc 6y ago

   Slap, slap, slap. I do not think you did a complete or accurate analysis. Randomization is NOT free. Randomization either requires that the values are pre-computed before install (which means delivering and pre-computing N different version
6. 36.▲
   by szc 6y ago

   This could be evidence that the often used trope that "open source" software is more secure because there are more "eyes" looking at it is false or just misleading. If everyone using "open source" believes some
7. 37.▲
   by szc 6y ago

   Speaking as a judge of the 27th competition, formatting doesn't give an entry as much of an advantage as you might think - what it does beyond the formatting has more influence. Code "quality" is always evaluated after pre-pr
8. 38.▲
   by szc 6y ago

   I don't think so, CDs have a spiral track, so the spiral would also have to be reversed.
9. 39.▲
   by szc 6y ago

   This is also misleading. The paper does not intend to mean that "lockdowns will cause you to get infected by the people you live with". Which is what you seem to have written. Restrictive measures do not increase your absolute
10. 40.▲
    by szc 6y ago

    The way this is presented is going to be interpreted incorrectly. It is incorrect to compare percentages or probabilities like this. Here is a different example to try and illustrate the problem: Is 10% larger than 5%? It is not possible to
11. 41.▲
    by szc 6y ago

    I do not recommend using this encoding. Enjoy this decoding... [110910, 91980, 6424802, 44, 5910625, 44, 241512485, 4852678, 5696324, 5626611, 97, 43196449936799].map(&:base_52).join(' ')
12. 42.▲
    by szc 6y ago

    A source of inspiration for good ideas might be had by looking at how early computers worked and handled this. My understanding, from stories my parents told (both of whom were active in early computing), is those from the 1950s and 1960s t
13. 43.▲
    by szc 6y ago

    I personally think that TLS certificate expiry should be a server problem not a client problem. The TLS server code is the piece that is using the certificate every time a page is requested. Why doesn't server code log an error warni
14. 44.▲
    by szc 6y ago

    I'm not ex-NSA, current NSA and I have not worked in SIGINT for any country. I cannot demonstrate proof of this. I do not believe that the Snowden slides show proof of collusion by any of those companies. All the slides do are indicate
15. 45.▲
    by szc 6y ago

    Mac users can already add any certificate to the Apple keychain and authorize them for code signing. The outage today, which what was being written about in the article, was caused by the OCSP.APPLE.COM service not responding. The OCSP serv
16. 46.▲
    by szc 6y ago

    Sorry, but there are no details about how PRISM works. The 2012 date is also suspicious - it is in the same year a new Apple datacenter in Prineville came online. I personally think that PRISM works by externally intercepting data communica
17. 47.▲
    by szc 6y ago

    I don't think that snooping on the connection explicitly reveals what app is being being launched - it just reveals the identity of the developer that signed it. But I agree that if the developer only has one App, then it does sort of
18. 48.▲
    by szc 6y ago

    Sorry, but please can you point to any real evidence that Apple allows state-level actors access? From what I can see it is exactly the opposite. I am not an advocate for big brother.
19. 49.▲
    by szc 6y ago

    I'm not going to comment on the linked article, other than say I think it contains serious mistakes in describing what OCSP is for and errors in other statements. In the background there is a war going on, but it isn't what you th
20. 50.▲
    by szc 6y ago

    I have been working to improve the usability for this years winning entries. For some entries it doesn't work well to "inline" the C code.
21. 51.▲
    by szc 6y ago

    Christopher Mills' winning entry for the 25th IOCCC (2018) is a PDP-11 emulator. Included with the BSD 2.9 image is the mullender.c entry -- you can compile and run it. < https://ioccc.org/2018/mills/hint.ht
22. 52.▲
    by szc 6y ago

    You will likely be interested in this then, https://github.com/adrianschlatter/threadlib Lifted from the comments of this HackADay article, https://hackaday.com/2020/07/12/lea
23. 53.▲
    by szc 6y ago

    Sorry, but the /usr model for compiling is out of date / flawed. It isn't about "me" it is about "you" the target for running the executable. For many years, macOS has supported being a cross compilation e
24. 54.▲
    by szc 6y ago

    There is a separate Hacker News thread on an "article" that points to this PDF -- https://news.ycombinator.com/item?id=23074447 The summary, from my perspective is that this approach is terrible. It builds a socia
25. 55.▲
    by szc 6y ago

    Ugh. This is dreadful. Chock full of fallacious arguments. This is a very nuanced problem, but as described this approach is deeply flawed... I'm cannot determine who is supposed to be the target audience for this "messaging&quot
26. 56.▲
    by szc 6y ago

    Absolutely, but this then means if apps want to adopt some sort of sandboxing, they will quite possibly have to adopt or obey some rules. Sometimes app developers will refuse. Being pragmatic, what can be done then? Observing the system cal
27. 57.▲
    by szc 6y ago

    Sure. But does / did Photoshop have its own custom file picker? Some apps or multi-platform frameworks (like QT) have rolled their own in the past.
28. 58.▲
    by szc 6y ago

    The problem is not the viewing, but editing. When you say "Open In Photoshop" does this mean you can make changes and then save the "file"? What if Photoshop doesn't just "save" a file, but writes severa
29. 59.▲
    by szc 7y ago

    There are some real issues with implementing revokable capabilities on UNIX and Unix Like operating systems. For example, access to a file. Lets say you have a capability that grants file access. One can open the file and read and write to
30. 60.▲
    by szc 7y ago

    This seems like a somewhat similar idea to the USB Bit Whacker -- UBW < http://www.schmalzhaus.com/UBW/index.html> . The original UBW used a PIC 18F2550 directly connected to USB.