xucheng

12 ms·

91.
Kerbal Space Program 2(kerbalspaceprogram.com)
661 points by xucheng 7y ago|227 comments
92.
Dan Povey, Developer of Kaldi, Fired from JHU(danielpovey.com)
32 points by xucheng 7y ago|16 comments
93.
by xucheng 7y ago
The issues are not due to C but rather failing to verify the PKCS#1v1.5 format. For example, skip verifying the padding or metadata, etc. This allows to insert garbage data in the signatures which leads to successful signature forging.
94.
by xucheng 7y ago
> The former hasn't been broken and is still pretty solid. Most internet certificates are signed using RSA PKCS#1v1.5 I believe. FYI, RSA PKCS#1v1.5 signatures can be broken due to trivial implementation errors. [1] [1]: https:&#x2
95.
by xucheng 7y ago
> At least at some points we need proper transactional behaviour and Sqlite implements that by talking a temporary copy of the database - not an option for large keyrings. I don’t understand how GPG maintainers think they can implement s
96.
IEEE Backtracks Decision to Ban Huawei, Here’s a Recap of What Happened(en.pingwest.com)
1 points by xucheng 7y ago|0 comments
97.
by xucheng 7y ago
It gets more complicated when considering Huawei is also a major sponsor to a variety of research conferences, open source projects, etc. I wonder what is ACM's stand on this?
98.
by xucheng 7y ago
One is caused by an authoritarian government, the other one is applied to individual researchers and academic freedom as whole.
99.
by xucheng 7y ago
Or McCarthyism 2.0.
100.
IEEE forced to ban Huawei employees from peer-reviewing papers(twitter.com)
98 points by xucheng 7y ago|70 comments
101.
by xucheng 7y ago
Yes, this works well in writing and it is common practice in Eastern Asia. However, how about oral conversation? Sometimes, I am not sure what is the proper way to introduce my Chinese name in English conversations? If I put family name at
102.
by xucheng 7y ago
To see the current value for different time standards (e.g. UTC, GPS, TAI): http://leapsecond.com/java/gpsclock.htm
103.
by xucheng 7y ago
https://cpu.fail/
104.
by xucheng 8y ago
Also GPS does NOT use UTC at all. Ref: http://leapsecond.com/java/gpsclock.htm
105.
by xucheng 8y ago
It seems that the official rust implementation wireguard-rs[1] is currently GPL licensed. [1]: https://github.com/WireGuard/wireguard-rs
106.
by xucheng 8y ago
So the employer can literally claim the copyright for all of the employee’s speeches and DMCA them if so they choose? It seems that this can be argued as a violation to the first amendment.
107.
by xucheng 8y ago
> And yet loads of people employed by companies work on open source software, write blogs, ... [snip] ... Is it something like companies legally may be able to assert ownership For open source software and blogs, is it feasible to argue
108.
by xucheng 8y ago
EASA has just banned 737 MAX jets throughout Europe. https://www.easa.europa.eu/newsroom-and-events/press-release...
109.
by xucheng 8y ago
Is there any recent history for FAA to issue an emergency grounding for one type of aircraft? The only example I know is DC-10.
110.
US bans transporting lithium ion batteries as cargo on passenger flights(theverge.com)
2 points by xucheng 8y ago|0 comments
111.
by xucheng 8y ago
> breaking crypto will require quantum computers with millions of qubits I don’t think this is true. It is estimated that breaking 2048bits RSA only requires 4000 logical qubits (though the number of physical qubits would be much higher)
112.
by xucheng 8y ago
By this logic, there is no need to compel Cloudflare to handover the private TLS key. They can just compel any CA based in Australia to sign a fake cert. Or directly compelling OS vendors (Google, Apple, Microsoft,etc) to make government ce
113.
Security researcher demos MacOS Keychain exploit without sharing with Apple(9to5mac.com)
3 points by xucheng 8y ago|0 comments
114.
Most unexpected answer to a counting puzzle [video](youtube.com)
2 points by xucheng 8y ago|0 comments
115.
by xucheng 8y ago
Official announcement https://blog.github.com/2019-01-07-new-year-new-github/
116.
GitHub: Announcing unlimited free private repos and unified Enterprise offering(blog.github.com)
17 points by xucheng 8y ago|0 comments
117.
by xucheng 8y ago
The only use case of XQuartz for me is the ability to ssh into a Linux server with X11 forward so I can remotely control the GUI app running in the server. That’s why I ask whether Noah would be good replacement for such purpose. I agree wi
118.
by xucheng 8y ago
It’s worth noting that, since the ID in the same millisecond is incremented, it may suffer with enumerate attack. So it should not be used to generate one time token or object ID used in url address.
119.
by xucheng 8y ago
There is another way to compute pi from random numbers while having nothing to do with geometry. The probability of two random numbers being co-prime is related to pi [1]. Notably, standupmaths did this once by hand [2]. [1]: https:/&
120.
by xucheng 8y ago
Why the downvote?

More ›