xucheng

16 ms·

121.
by xucheng 8y ago
I wonder can this be used as a replacement to XQuartz? Especially, if what I only need is for ssh X11 forwarding. BTW, XQuartz seems to be dead now.
122.
by xucheng 8y ago
FYI, Elipical Curve Cryptography is also broken with the quantum computer using the same Shor’s algorithm.
123.
by xucheng 8y ago
Possible details on what went wrong: https://www.reddit.com/r/macbookpro/comments/91256u/optimal_... TL;DR The CPU is stuck in a cycle of switching between minimum clock frequency and turbo speed.
124.
by xucheng 8y ago
In addition to the MacBook Air and normal non-4K external display, it seems that this will also affect projectors. Therefore, it seems that presentation using macOS Mojave will only make your slides/keynote look bad and less profession
125.
by xucheng 8y ago
Will it mean that we will see Atom and VS code merging in the near future?
126.
by xucheng 9y ago
KAISER is developed to mitigate another less severe vulnerability. From the meltdown paper: > We show that the KAISER defense mechanism for KASLR [8] has the important (but inadvertent) side effect of impeding Meltdown. We stress that KA
127.
by xucheng 9y ago
There were several reports that DPI can detect shadowsocks. For example http://ieeexplore.ieee.org/document/8048116/
128.
by xucheng 9y ago
The claim is bogus. The outline is a just wrapper of shadowsocks, an open source SOCKS5 proxy tool developed since 2012. However, the outline in its current form may indeed have certain license issue. https://github.com/shad
129.
by xucheng 9y ago
Another missing is the X86 mov instructor. https://github.com/xoreaxeaxeax/movfuscator
130.
by xucheng 9y ago
Correct me if I am wrong. But doesn’t Github Page have the same issue? Both of them fail to validate the ownership of the custom domain.
131.
by xucheng 9y ago
The first one you received (the one is the bottom) said there is an earthquake in progress expecting certain areas to feel the shocks with level 4. The next one is the earthquake information after it happens.
132.
by xucheng 9y ago
It’s from Taiwan’s earthquake early warning system. https://en.m.wikipedia.org/wiki/Earthquake_warning_system
133.
by xucheng 9y ago
I think the miner can cheat in step 3. After you submit your private key as a transaction, the miner can delay it to be included in the blockchain for arbitrary time. During which, the miner can use your private key to decrypt your answer s
134.
by xucheng 9y ago
> Alice’s commit transaction needs to specify some block height after which further guesses are ignored, and then publish the “reveal” message some (safe) number of blocks after this. I think this is unsafe as well. Noted that since ever
135.
by xucheng 9y ago
Sadly the region lock thing still exists in blue ray age.
136.
by xucheng 9y ago
FYI, prime number test can be done in determining polynomial time (instead of NP). So it is not a hard problem.
137.
by xucheng 9y ago
You may want to read the following from the Meltdown paper. > We also tried to reproduce the Meltdown bug on several ARM and AMD CPUs. However, we did not manage to successfully leak kernel memory with the attack described in Section 5,
138.
by xucheng 9y ago
Yes, I am aware of them and agree with you. In fact, cache-miss side channel attacks are known by academics for years as well. However, this is the first time someone combining various of previous techniques (timing, cache-miss, speculative
139.
by xucheng 9y ago
I think there is another important reason to extend embargoes aside preparing patches. Vulnerabilities like Meltdown and Spectre are in fact a whole new family of attack methods. It would take time to fully evaluate the extent of the proble
140.
by xucheng 9y ago
And it continues: > As a compromise, I allowed them to silently patch the vulnerability. In hindsight this was a bad decision, since others might rediscover the vulnerability by inspecting their silent patch. To avoid this problem in the
141.
Homebrew Core/Formulae Split(groups.google.com)
4 points by xucheng 11y ago|0 comments
142.
by xucheng 11y ago
find /Applications ~/Applications -name Sparkle.framework -exec plutil -extract SUFeedURL xml1 -o - {}/../../Info.plist \; | grep '<string>http://'
143.
by xucheng 11y ago
This is still failing: bind-key -t vi-copy Y copy-end-of-line \; run-shell "reattach-to-user-namespace -l zsh -c 'tmux save-buffer - | pbcopy'"