wolf550e

23 ms·

211.
by wolf550e 5y ago
Some applications use a database which is shared by multiple applications, and you are not allowed to change the models (i.e. you can't ALTER TABLE). You code your application knowing that data can be changed by others. Your applicatio
212.
by wolf550e 5y ago
If you make sure no one can write to postgres except the app server, the difference is only efficiency.
213.
by wolf550e 5y ago
Since I'm a persistence person and not a UI person, I am more interested in what is on the other side of the Phoenix/Elixir/BEAM VM server cluster: the database/persistence. I understand that currently apps mostly talk t
214.
by wolf550e 5y ago
TLS 1.3 is much better than TLS 1.2, and has fewer options and knobs (e.g. no need to choose cipher suites), but it is not what a modern protocol designed from scratch would look like. For that you should look at WireGuard, or the general N
215.
by wolf550e 5y ago
Yes, they launched a new generation of hardware.
216.
by wolf550e 5y ago
hardware key support exists: https://github.com/str4d/age-plugin-yubikey
217.
by wolf550e 5y ago
https://www.bbc.com/news/uk-58255865
218.
by wolf550e 5y ago
https://en.wikipedia.org/wiki/Megan_Rice
219.
by wolf550e 5y ago
Here are some DB dump compression tests done years ago, look at the pareto frontier and see that zstd wins between LZ4 and LZMA (xz): https://zeevt.github.io/compress_pareto.html
220.
by wolf550e 5y ago
ppm and paq are a LOT slower than LZ77.
221.
by wolf550e 5y ago
lzma is slow to decompress. Unless the bandwidth / storage costs are the primary concern, zstd has good enough compression ratio and the very fast decompression makes everything much nicer. Built-in threaded compression, long range com
222.
by wolf550e 5y ago
SerenityOS has implemented its own TLS 1.2 client from scratch (no server side support so far), currently with TLS_RSA_ and TLS_DHE_RSA_ only, and AES-CBC and AES-GCM only (software table driven AES, software GCM, naive CBC padding handling
223.
by wolf550e 5y ago
See: https://twitter.com/tqbf/status/1232843986529849344 https://twitter.com/tqbf/status/1276214060036632576 https://twitter.com/tqbf/status/1288891834131939329
224.
by wolf550e 5y ago
https://arstechnica.com/science/2021/07/blue-origin-is-devel...
225.
by wolf550e 5y ago
High performance unauthenticated remote code execution
226.
by wolf550e 5y ago
This is the fix, it seems: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux...
227.
by wolf550e 5y ago
Hardware issues that cause bitflips like that one famous issue[1] with Sun servers in ~2000 (supposedly caused by radioactive isotopes in IBM manufactures SRAM chips) are often called "cosmic rays". 1 - https://www.comp
228.
by wolf550e 5y ago
Do you understand that chacha20 is CTR? A bit flip only affects that single bit, does not propagate to any other bits?
229.
by wolf550e 5y ago
You can run chacha20-poly1305 decryption without verifying the MAC, and accept that an adversary can accurately bitflip any and all bits they want. Normal tools don't have command line flags for that, but a recovery tool can do that no
230.
by wolf550e 5y ago
maybe useful context from llvm: https://lists.llvm.org/pipermail/llvm-dev/2021-June/151199.h...
231.
by wolf550e 5y ago
Please don't repeat terrible 90s pedagogy about RSA. Even in RSA, the padding for signatures and for encryption is different (for very important reasons). The fact that RSA encryption and RSA signatures share code (but are not identica
232.
by wolf550e 5y ago
Even in the 90s, SSL (and PGP) used hybrid encryption. The data is encrypted (and authenticated) using symmetric primitives and the symmetric keys are exchanged or established using asymmetric cryptography. Asymmetric cryptography is also u
233.
by wolf550e 5y ago
Of course there is comparison with LZ4: http://www.radgametools.com/oodlemermaidselkie.htm LZ4HC is LZ4 compressed with the slow compressor to achieve better compression. It is decompressed using regular LZ4 decompressor. T
234.
by wolf550e 5y ago
This is what the games industry uses in practice. It is optimized for fast decompression. http://www.radgametools.com/oodle.htm
235.
by wolf550e 5y ago
Boeing and Lockheed Martin, separately and together under the name of ULA, and Northrop Grumman (as Morton Thiokol, ATK, Orbital ATK and now NGIS) have been milking the taxpayer for decades. Their business plan always involved making everyt
236.
by wolf550e 5y ago
AWS fixed S3 consistency in December 2020: https://aws.amazon.com/about-aws/whats-new/2020/12/amazon-s3...
237.
by wolf550e 5y ago
What HN does now is very good. Posts and comments belong to the community, so they can't be edited or deleted after some time. Not allowing frequent multiple submission is a good heuristic, but if something important happened and there
238.
Remote exploitation of a man-in-the-disk vulnerability in WhatsApp(census-labs.com)
12 points by wolf550e 5y ago|1 comments
239.
by wolf550e 6y ago
This is a good explanation about join order optimization: https://www.sqlite.org/queryplanner-ng.html No database can find perfect join order when you have more than about 8 to 10 tables in the join.
240.
by wolf550e 6y ago
Since it's a left join, you will get all the rows from tableA, and for each row the matching rows in tableB. If the ranges in tableB are non-overlapping, maybe you have names for time ranges and you want the name of the time range for

More ›