tytso

53 ms·

361.
by tytso 13y ago
That's not hard. Just get an ionizing smoke detector: http://www.etoan.com/random-number-generation/
362.
by tytso 13y ago
Making the pool larger isn't sufficient for embedded systems that don't have a lot of sources of entropy in the first place. Especially since very often the most critical secrets (such as the RSA keys for the certificates used by
363.
by tytso 13y ago
One other thing about the quote from Matt Mackall referenced in the mail archive above. I was the original author of the Linux /dev/random code, and many years ago, I let him take over when I didn't have the time to keep up
364.
by tytso 13y ago
There are several different ways in which randomness is used in the kernel. One general class of randomness is things like randomizing the sequence numbers and port numbers of new network connections. If you can predict the result of t
365.
by tytso 13y ago
Using context is quite different from people not seeing alternate points of view. If someone is interested in LGBT issues, it's more likely that the "Pride Weekend" is what they might be interested in, especially if the sea
366.
by tytso 13y ago
Sure, if you are willing to do all of the computation on the client, and only use the server as a place to store an encrypted bag of bits. If you have a sufficiently fast network connection (or enough local disk cache and the ability to pre
367.
by tytso 13y ago
Cringely's server appears to be down. Here's a Google cache version: http://webcache.googleusercontent.com/search?q=cache:trvMH5p...
368.
by tytso 13y ago
You can use something like Channel ID[1] to bind the D-H connection into the bearer token used for authentication (i.e., an OATH token). This won't protect against a MITM attack per se, but laptops and mobile devices tend to connect
369.
by tytso 13y ago
To be clear (it wasn't mentioned explicitly in the blog post), but it's obviously what the author was referring to, this is about people who are deploying web sites with static content which is being managed via git.
370.
by tytso 13y ago
Do you really work for Google? It's possible to find metrics for most things. It might be the number of times SRE's get paged. It might be reducing the amount of time SWE's need to worry about thread safety; so even code cleanup can hav
371.
by tytso 13y ago
Um, promotions every 18 months is not unheard of, but it's not what I would call typical. There are lots of people way smarter than me at Google, so I'm sure some folks have managed to reach Staff Engineer in six years, but IMHO it's a bi
372.
by tytso 13y ago
Actually, in some ways it's easier for those of us who work in the infrastructure groups to demonstrate monetary value. Google has a very large number of machines, and an even larger number of hard drives. Hard drives have fundamentally
373.
by tytso 13y ago
The problems with keeping the original commit and then putting the fixes on top are, (a) it makes the history harder to follow, (b) it makes it easy for someone to screw up a cherry-pick of a bug fix to a maintenance brance, since now you h
374.
SFLC: VP8 cross-license draft compatible with FOSS licensing(softwarefreedom.org)
3 points by tytso 13y ago|0 comments
375.
by tytso 13y ago
It's so much better to send these sorts of proposal via e-mail. It's much easier to review the patches via e-mail, and everyone on the development community can make suggestions. Even so, it's not uncommon for patches to require three or
376.
by tytso 13y ago
Compression doesn't help CPU utilization, which in turn doesn't help battery consumption. In addition, if the protocol is "chatty" (i.e., sends lots of packets even if there isn't any communication going on -- say, when users change their
377.
by tytso 13y ago
The fact that 3DES is slower is actually an advantage if you are trying to prevent against brute-force attacks. Given that we are encrypting binary data, it's unlikely that knowledge of the plaintext (for example, knowing that it's probab
378.
by tytso 13y ago
Comparing against Amazon's total cloud sales may be comparing apples and orange. To quote from the article: "Microsoft’s $1 billion sales figure includes Azure, as well as software provided to partners to create related Windows cloud servi
379.
by tytso 13y ago
There's also the question of whether the original poster was telling the truth, or even told the whole story. If for example, the spreadsheet had a form for the entry of usernames and passwords, and someone came across it (maybe because it
380.
by tytso 13y ago
It really depends on what sort of pictures you are taking. If you are taking photos in low light, a better sensor (whether it's a full-frame 35mm or an APS-C sensor) will allow you take photos without using a flash in certain environments
381.
by tytso 14y ago
When I was at IBM, I was hired in as a STSM (band 10; the next level up was DE). One of the huge handicaps I had for being parachuted into a very large company at a relatively high level was that I had to work extra hard to establish my "n
382.
by tytso 14y ago
Unfortunately, the vast majority of jobs in the US, especially the ones that in the I/T industry and in the startup world, have "at will" employement, which means very little protection for the employees. Also, startups typically have very
383.
by tytso 14y ago
As I noted recently, Google Currents is an Android application which uses RSS. And it is a product which has been getting updates, and is available at the Play Store here: https://play.google.com/store/apps/details?id=com.google.and...
384.
by tytso 14y ago
I actually read RSS feeds --- using the Currents application (which is supported by Google and under active development; it's getting updates) on my Android Nexus 10 tablet. https://play.google.com/store/apps/details?id=com.google.and... .
385.
by tytso 14y ago
The e2tools command line utilities should work just fine on OSX. I'm surprised no one has bothered to make OSXFUSE work with an ext3/4 driver, but it should be pretty simple. The libext2fs library which ships with e2fsprogs is pretty easy
386.
by tytso 14y ago
I have no doubt that there are problems in America caused by the fact that children who are born from poorer families have significant handicaps (i.e., it's hard to concentrate in school when you're hungry, and the sound of gunshots at nigh
387.
by tytso 14y ago
I know Hal, and he's someone that I would trust; he's someone who has a lot of integrity, and is someone who is quite sympathetic to Aaron's goals (although perhaps not to specific methods). So I disbelieve that this is going to be in any
388.
by tytso 14y ago
I very much doubt this is Dell's primary hope for righting the ship. It might be an skunkworks / "interpreneurship" effort inside of Dell --- but I'm sure it's not the only thing behind Dell's thinking about why it might be better to take
389.
by tytso 14y ago
Sabre, the airline reservation system, doesn't use transactions either, for very similar reasons.
390.
by tytso 14y ago
Unfortunately, Variable Length Arrays (VLA's) are optional in C11. So use of VLA's may lead to portability problems, especially if you care about your code getting compiled on minority compilers.... such as MSVC. For this reason I'm not p

More ›