v8dev123

14 ms·

31.
by v8dev123 5y ago
Encryption is "obscurity". For example, Quantum computers will break RSA. > Quantum computers will break RSA Now here it will take X amount of time so is breaking any protection like DRM. The goal of any security method is incr
32.
by v8dev123 5y ago
>> Why Google needs DRM for a web email app? The reason we use such tactics is to increasing barrier of reverse engineering because our teams value their work. Some people claim that security through obscurity is bad. I challenge this
33.
by v8dev123 5y ago
I believe he imply two different things. Boost heavy on templates and the malware heavy on OOP. His original comment was, "Using boost to turn the code into a clusterfuck of OOP and sadness)" Whatever. Everything is true because I
34.
by v8dev123 5y ago
These Rustic people write very dishonest articles. They write all flaws of C++ and then compare how bad C++ is. It really harm the Rust language itself not the C++. Professionals will dislike Rust because of it's community not the lang
35.
by v8dev123 5y ago
OOP and Boost also Templates has benefits when it comes to increasing barrier of static reverse engineering. For example, Security researcher "Marcus Hutchins" famously echoed that Boost is a cluster fuck of OOP sadness [0] Simila
36.
by v8dev123 5y ago
Well, nowadays you can use WASM with JS to access libraries at near native speed.
37.
by v8dev123 5y ago
I have one hypothesis why Aliens are hiding. It's just they are simply afraid of humans torturing them for their color and appearance.
38.
Can you trust literacy rate?
3 points by v8dev123 5y ago|1 comments
39.
by v8dev123 5y ago
DDG uses Bing.
40.
by v8dev123 5y ago
Sometimes Stackoverflow own's search is better than Google.
41.
by v8dev123 5y ago
Maybe but it will be like Stephen Hawking hosting a party for time travelers.
42.
by v8dev123 5y ago
Why it's called as "AI"?
43.
by v8dev123 5y ago
The author of this Ransomware [0] scrounged through the trash heaps and smoked cigarette butts. He walked 10 km one way to the school. He wore the same clothes for six months. In his youth, in a communal apartment, he didn’t eat for two or
44.
by v8dev123 5y ago
This won't scale. It will be like AppleScript for Web :)
45.
by v8dev123 5y ago
Compiler identification is not fairly straightforward when you remove all metadata that gives you hints. It gets worse when you fake the metadata. My opinion echoed by many top people in reverse engineering industry. Modern C++ is obfuscate
46.
How does Startups pay salaries when they raise only 125k USD?
17 points by v8dev123 5y ago|17 comments
47.
by v8dev123 5y ago
> The quote was Around 70% of our high severity security bugs are memory unsafety problems. This quote simply means there are 70% high severity security bugs and it doesn't implies anything about sandbox. You can have a use-after-fr
48.
by v8dev123 5y ago
The thing with memory bugs is that you need another bug for Sandbox to fully exploit the browser. Here is a real world logical exploit that knock sandbox and Rust won't prevent this stuff, https://bugs.chromium.org/p&#x
49.
by v8dev123 5y ago
> read-before-write is still undefined behaviour, dereferencing null is still undefined behaviour, divide-by-zero You rarely do these in Modern C++. It's your responsibility to check the input of program before doing anything with i
50.
by v8dev123 5y ago
> Relying on integer overflow’s wrapping behavior is considered an error Your doc also says this. > I hear there are some who want to dilute the safety guarantees of Safe Rust Unfortunately, I don't use Rust at work. I can't
51.
by v8dev123 5y ago
> integer overflow does not cause undefined behavior Source please? I ask this since Rust doesn't have a formal specification and I can't keep up with it's inner changes. It did cause undefined behavior in my case but that
52.
by v8dev123 5y ago
Rust doesn't prevents logical bugs. Chromium had plenty of those. Most are capable of RCE. They were more dangerous than memory ones because they bypass sandbox in one-click. As for Windows, The Russians exploited a logical bug in kern
53.
by v8dev123 5y ago
Okay. I suggest you to try Clang's Cling. It's the JIT version of C++ and everything is instant. https://root.cern/cling/
54.
by v8dev123 5y ago
llhttp different from the original http-parser. It has lesser bugs because it's written in Typescript which transpiled to C and it's faster than the original http-parser
55.
by v8dev123 5y ago
You might love evpp instead ASIO. It's just pain to install it but once you do it's a heaven. As for HTTP parsing, llhttp does great job. It however lack multipart parsing.
56.
by v8dev123 5y ago
I was asking C++ version not compiler version. So, C++11 or C++14?
57.
by v8dev123 5y ago
Graydon Hoare is a OCaml developer. Graydon Hoare mentions Rust as linear ML in C++ clothing. https://twitter.com/graydon_pub/status/1154476823557754880 I empathized the can't deny relationship between Rust a
58.
by v8dev123 5y ago
I don't want people even competitors to steal my intellectual property so making job of those reverse engineers harder is a feature not a bug.
59.
by v8dev123 5y ago
I don't spam C++ and I comment on C++. There is no fight. There is made-up flame-war. Every war happen at HN and Reddit's Echochamber not at Real World. Every languages has headaches. You won't find a perfect language ever. Y
60.
by v8dev123 5y ago
Network level fingerprinting has nothing to do with IPs. It works by using protocol artifacts. But VPN do migrate the problem.

More ›