wolf550e

33 ms·

331.
by wolf550e 7y ago
"nation state" in the infosec industry means "sovereign government". Yes, it's wrong and it's very unfortunate, but it seems it's too late to change, though Maciej Cegłowski has been trying for about a yea
332.
by wolf550e 7y ago
I think the conclusion is that C++ is too dangerous in the hands of non-experts.
333.
by wolf550e 7y ago
The payload fairing has holes, it's not hermetically sealed. The air escapes as the rocket ascends. It's a windshield, not a pressure vessel. Falcon 9 reaches above breathable air seconds after launch.
334.
by wolf550e 7y ago
The first launch of a Falcon9 pays for the rocket in full (manufacturing costs, not development costs).
335.
by wolf550e 7y ago
Bus vs taxi. Bus fare is cheap, but it only goes according to its schedule and only to predetermined stops. Recently SpaceX have announced improved schedule for rideshares (up to monthly frequency) but a rideshare still can't choose th
336.
by wolf550e 7y ago
Do you mean like Apache mod_asis [0] which will serve a pre-formatted HTTP response, including the headers, directly from disk? Then your HTTP server can speak very little HTTP (compare request line to preformatted "GET /file HTTP
337.
by wolf550e 7y ago
Yes. It's not using any native UI widgets or UI code, but drawing everything itself using the lowest level API it can get, which I guess on iOS is Metal (and something for input). This means that the look and feel and the behavior and
338.
by wolf550e 7y ago
Maybe disconnect and reconnect cause windows network share to lose locks or something like that.
339.
by wolf550e 7y ago
Like the numbers in product names, only with the understanding that smaller is better.
340.
by wolf550e 7y ago
It's still a marketing term that has nothing to do with specific feature sizes, but they do increase density from one node to another. https://en.wikichip.org/wiki/5_nm_lithography_process
341.
by wolf550e 7y ago
The case of the disks not honoring fsync is famous. I learned about it from Brad Fitzpatrick, author of LiveJournal (later on the Go team at Google) writing about it in 2005: https://brad.livejournal.com/2116715.html
342.
by wolf550e 7y ago
*running, obviously. Too late to edit.
343.
by wolf550e 7y ago
When most people who know C learned C, this technology didn't exist. Currently John Regehr teaches his students that they must use sanitizers. Note that ruining sanitizers in prod might be insecure. They're for development.
344.
by wolf550e 7y ago
NSA has both attack and defense mandates and organizations. Currently, the attack org has priority, but it's not like the defense org does nothing. So if the attack org doesn't want a vuln, they can let the defense org reveal it f
345.
by wolf550e 7y ago
Also see this about the same topic: https://rachelbythebay.com/w/2016/10/07/magic/
346.
by wolf550e 7y ago
https://xkcd.com/1827/
347.
by wolf550e 7y ago
There was that article I saw on HN where IIRC a doctor explained that disability diagnosis depends on the kind of work a person can get. If they are a blue collar worker and they can't stand for a whole shift, they get disability. If t
348.
by wolf550e 7y ago
You want more fanout to use the entire cache line or even the entire virtual memory page. RB trees assume access to any address in memory has equal cost, which is extremely incorrect.
349.
by wolf550e 7y ago
I would like to see the performance of KanagarooTwelve in the same tree structure as BLAKE3, with AVX-512, on the same hardware (AWS c5.metal).
350.
by wolf550e 7y ago
Not 100% of the chip is enabled, they disable defective parts and don't advertise a model that has 100% parts enabled, so they don't need magical zero defect wafers. Images of the whole computer were published, you can see the mas
351.
by wolf550e 7y ago
Analysis of security of arbitrary programs is in its infancy, we can't quantify anything yet. I think the best we have is halvarflake's provable unexploitability [1] and that is very weak. 1 - https://ieeexplore.ieee.or
352.
by wolf550e 7y ago
I reacted to "isn’t signing almost identical to encrypting" and "encryption and signing algorithms use the same cryptographic operations".
353.
by wolf550e 7y ago
> They are related in the sense that encryption and signing algorithms use the same cryptographic operations. What is being encrypted in ECDSA? Or in Ed25519? You are wrong. Read the link.
354.
by wolf550e 7y ago
Please read this to stop thinking signing and encryption are related: https://security.stackexchange.com/a/87373/70830
355.
by wolf550e 7y ago
I have seen many questions on security stack exchange and /r/crypto where the correct answer should have been "use age", but because it didn't exist the correct answer was something bad. openssl CLI is not meant to
356.
by wolf550e 7y ago
NIST FIPS 186-5 (Draft) has Ed25519. https://csrc.nist.gov/publications/detail/fips/186/5/draft NIST SP 800-186 (Draft) has the curve definitions. But says only for Ed25519, not for X25519. They hav
357.
by wolf550e 7y ago
How about the code written by Backblaze (cloud storage and backup company)? https://github.com/Backblaze/JavaReedSolomon Is it comparable?
358.
by wolf550e 7y ago
But you don't want to run the special corp Google distro with hardening and spying / remote control as your personal computer. I wrote about their recommendation for regular users, which is to prefer win10 over win7.
359.
by wolf550e 7y ago
Chrome security and Google project zero wrote that windows 7 is insecure, will never get the security fixes in Windows 10 and you shouldn't use it.
360.
by wolf550e 7y ago
The author about the writing: https://www.metafilter.com/166166/Og-to-til-javanissen#69855...

More ›