xucheng

10 ms·

61.
by xucheng 6y ago
Perfect-forward-secrecy relies on that you didn’t break the underlying cryptography primitives, which is not true with QC.
62.
by xucheng 6y ago
There is also a WIP rust gcc frontend: https://github.com/Rust-GCC/gccrs I wonder how these two projects compare.
63.
by xucheng 6y ago
Also, a learned index from Microsoft: https://github.com/microsoft/ALEX
64.
by xucheng 6y ago
I assumed that a bigger page size would incur a worse query performance. You can already see the trend in the figure. So the index size comparison is based on the b+-tree which has a similar query performance with the proposed learned index
65.
by xucheng 6y ago
Due to the prime number theorem, your toy example actually has a very good approximated mapping.
66.
by xucheng 6y ago
The size comparison here only concerns the size of index. That is the size of the data is excluded.
67.
Vaccine Roundup, Late December(blogs.sciencemag.org)
2 points by xucheng 6y ago|0 comments
68.
by xucheng 6y ago
In a sense, the async API allows you to create green threads. Comparing with the normal threads, which rely on OS schedule and introduce context switches, green threads allow tasks actively yielding the control. This for example can be used
69.
by xucheng 6y ago
I wonder whether there is any ongoing effort to unify the ecosystem between different runtimes. Specially considering that Tokio and futures (by extension async-std) implement their own Async* traits, it seems that it becomes even harder to
70.
Std::visit is everything wrong with modern C++ (2017)(bitbashing.io)
120 points by xucheng 6y ago|232 comments
71.
by xucheng 6y ago
https://adventofcode.com/2019/stats
72.
by xucheng 6y ago
About TSO, I do wonder whether Apple will stop implementing it in its future chips when the transition to Apple silicon is over and Rosetta 2 is dropped.
73.
Cranelift has just been successfully merged as an optional back end for rustc(github.com)
7 points by xucheng 6y ago|0 comments
74.
by xucheng 6y ago
Ironically, the whole over-reaction can be seen as a form of culture imperialism. Punishing people for using other language is itself racism, in this case, to the Chinese minorities. Last time I check, there is no official language in US.
75.
by xucheng 6y ago
I remember some softwares were broken when macOS 10.10 came out. Because they all assumed that the minor version is a single digit. Since TLS 1.3, the version number in Client Hello package has been permanently frozen as TLS 1.0 to prevent
76.
by xucheng 6y ago
It seems that there is a JS context per worker and the workers are shared among different requests. Further, the requests are handled by simple string formatting and eval in the JS context. This means that it should be trivial to inject arb
77.
RFC: Promote aarch64-unknown-Linux-gnu to a Tier-1 Rust target(github.com)
1 points by xucheng 6y ago|0 comments
78.
by xucheng 6y ago
I understand this kind of techniques were common to attack unsafe CGI web servers in the old time. I wonder whether it is still the case nowadays. Is CGI still being used?
79.
Dropbox Passwords(play.google.com)
1 points by xucheng 6y ago|0 comments
80.
Compromised Zoom Credentials Swapped in Underground Forums(threatpost.com)
6 points by xucheng 7y ago|1 comments
81.
by xucheng 7y ago
Quick sort is not the fastest sorting algorithm. It would be nice if there is a benchmark comparing with other state of the art algorithms like Timsort.
82.
by xucheng 7y ago
On the flip side, I think this would make pinpoint the device‘s geo-location much easier.
83.
by xucheng 7y ago
> SGX is disabled by default, it has to be enabled for this exploit to be relevant This is an attack on SGX. If you are not using it, it is irrelevant regardless of whether it is enabled. > POC requires privileged execution, at which
84.
by xucheng 7y ago
Intel SGX is a Secure Enclave embedded in Intel CPU, which aims to provide secure and trust computation environment. For example, storing and processing cryptography secret keys, etc. It is similar to the enclave in Apple A chips used in T
85.
Plundervolt: Software-Based Fault Injection Attacks Against Intel SGX [pdf](plundervolt.com)
108 points by xucheng 7y ago|63 comments
86.
by xucheng 7y ago
It only works if you somehow remove entire China from the Internet.
87.
by xucheng 7y ago
This doesn’t work. The DDoS requests actually come from outside China when oversea visitors are hit by the malicious js while browsing Chinese websites.
88.
iTerm2's preference file leaks sensitive search history(gitlab.com)
3 points by xucheng 7y ago|0 comments
89.
by xucheng 7y ago
> We are particularly worried about Intel's mitigation plan being PoC-oriented with a complete lack of security engineering and underlying root cause analysis, with minor variations in PoCs leading to new embargoes, and these "
90.
MrBeast partners with more than 600 YouTubers to plant 20M trees(theverge.com)
4 points by xucheng 7y ago|0 comments

More ›