w8rbt

25 ms·

211.
by w8rbt 9y ago
You can't overflow a vector. It's not a fixed size array. It grows automatically as needed. What your example shows is an attempt to access a vector element that does not exist (std::out of range). And, that is undefined behavior
212.
by w8rbt 9y ago
std::vector<whatever> in C++ is safe and is nothing at all like a fixed size array of whatever in C. People who don't understand this are ignorant of the facts. They are totally different languages. C++ is much safer than C. Go a
213.
by w8rbt 9y ago
You can use DNS and NTP to discover IPv6 nodes.
214.
by w8rbt 9y ago
I've done this too. It's neat to watch a 'read-only' register on a PLC change because of a packet you sent it. Overflowing a buffer into an adjacent buffer remotely. It's an art that should have died long ago. PLCs
215.
by w8rbt 9y ago
In addition to easy cross compiling, being able to easily link statically is another nice feature of Go. You get one executable that has everything it needs to run.
216.
by w8rbt 9y ago
The other nice thing about C++ is that you can specify which standard you want to use -std=c++11, etc. when compiling. I hope AWS Lambda supports C++ someday too. Anyway, I like Go too and agree it's very stable and while it's not
217.
by w8rbt 9y ago
use letsencrypt ;)
218.
by w8rbt 9y ago
This! A small dev team with an AWS account and a git repo will run circles around the IT team in terms of speed, compliance requirements and scalability. Traditional network infrastructure, virtualization, security, DBMS, etc. are all on th
219.
by w8rbt 9y ago
That's why they make protractors for measuring and cutting external baseboard trim. I've seen a few 90 degree corners, but not many.
220.
by w8rbt 9y ago
IT is not CS. Not even similar.
221.
by w8rbt 9y ago
You can use the dig utility to see if a DNS server is recursive. Just do the scan in two steps. One major port scan using masscan, netscan, etc., then a smaller scan of the IPs with port 53 open to see if they are recursive or not. You&#x27
222.
by w8rbt 9y ago
It seems the malware was installed on an engineering workstation connected to a SIS (Safety Instrumented System). https://en.wikipedia.org/wiki/Safety_instrumented_system The only purpose of a SIS in a CPS (Cybe
223.
by w8rbt 9y ago
FM is just a mode of modulation. A general purpose receiving radio can have multiple modes (AM, FM, WFM, SSB, digital, etc.). I would not worry about receivers dropping support for FM.
224.
by w8rbt 9y ago
Most all of the registrars and DNS mgt services support TOTP now for 2FA. If yours does not, move to one that does.
225.
by w8rbt 9y ago
Buy old pans at yard sales if you can find them. They are much lighter and much more refined/polished compared to the new mass produced pans.
226.
by w8rbt 9y ago
Is your Golang source code public? Great 2FA methods BTW, the only two I trust. Long live OATH and FIDO. Edit: Never mind... I read further up. Looking forward to seeing it!
227.
by w8rbt 9y ago
Thank you for the links. I hope Go gets a good, solid container library that is reputable and widely used. And even better if that makes into Go proper some day.
228.
Alibaba’s Jack Ma Tells U.S. Companies to Stop Whining About China(wsj.com)
40 points by w8rbt 9y ago|63 comments
229.
by w8rbt 9y ago
That is illegal.
230.
by w8rbt 9y ago
Nice read. I like Go a lot too. As to the minimalism in Go, I wish it came with a few more default data containers. Sorting a map by using a slice gets old after awhile. Why can't I pick a sorted tree based map (like std::map or std:se
231.
by w8rbt 9y ago
Awesome news. Long live C++ ;)
232.
by w8rbt 9y ago
Someone should start by writing all the setuid apps in Go. OpenBSD would probably be more open to Go than Rust since Go is a lot like C with a Garbage Collector. They love C.
233.
by w8rbt 9y ago
Tell them to pass a law that makes it illegal to set obvious passwords. That is negligent and it harms others. It's illegal for a bus driver to get drunk and drive a bus full of people. Why is it not illegal for a sys admin to set &#x2
234.
Ban Lethal Autonomous Weapons(autonomousweapons.org)
4 points by w8rbt 9y ago|0 comments
235.
by w8rbt 9y ago
Sensors can also introduce problems: http://cap.ece.gatech.edu/papers/1569927381.pdf You may also make the LIDAR think something is in front of the vehicle (when that's not true) and maybe it'll slam on the b
236.
by w8rbt 9y ago
If you prefer command line programs and you like keeping your TOTP secrets PGP encrypted, try goathen: https://github.com/w8rbt/goathgen
237.
by w8rbt 9y ago
In the USA, these were called Party Lines. https://en.wikipedia.org/wiki/Party_line_(telephony)
238.
by w8rbt 9y ago
I like Go a lot, but it doesn't always build fat binaries. go build xyz.go xyz: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, not stripped
239.
by w8rbt 9y ago
"Previous messages will be readable by the attacker with the stolen subkey even if that subkey gets revoked..." This assumes the attacker also knows the key's password. And we all use very strong, unique passwords on ke
240.
by w8rbt 9y ago
"And if you really want a random number, paste this into your browser’s JavaScript console..." I would suggest rolling dice instead. The PIN that produced would be truly random.

More ›