Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
ycmbntrthrwaway
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
10 ms
·
61.
▲
by
ycmbntrthrwaway
9y ago
You have not replied to this: > To use ROP you need not only the RET instruction, but the code before it. You want to execute some existing function and return only then, not just return. Ok, you found RET in some unexpected place, like
62.
▲
by
ycmbntrthrwaway
9y ago
https://nuxtjs.org/guide
63.
▲
by
ycmbntrthrwaway
9y ago
> but given that it seems to makes no attempt to remove C3 and C2 bytes from elsewhere in the machine code, that ROP tools will in fact continue to work just fine. To use ROP you need not only the RET instruction, but the code before it.
64.
▲
by
ycmbntrthrwaway
9y ago
How does it compare to OMEMO? Here is what the page says about OMEMO (aka Signal Protocol): "It is an incredibly powerful solution but it is reliant on asynchronous communication and is therefore also dependent on the messaging platfo
65.
▲
(n+1)sec – a protocol for distributed multiparty chat encryption
(equalit.ie)
269 points
by
ycmbntrthrwaway
9y ago
|
50 comments
66.
▲
by
ycmbntrthrwaway
9y ago
As for the audit[1], how would HTML sanitization on sender side protect the reader? On page 12 they suggest adding "HTML sanitization" in onSendClick function. It is as lame as protecting against XSS with JavaScript. Attacker will
67.
▲
by
ycmbntrthrwaway
9y ago
> Do any such laptops actually exist? Older ThinkPad laptops had physical switch for microphone.
68.
▲
by
ycmbntrthrwaway
9y ago
Yes.
69.
▲
by
ycmbntrthrwaway
9y ago
JMAP has no E2E encryption: http://jmap.io/#end-to-end-encryption
70.
▲
Magma – An encrypted email server daemon
(magmadaemon.org)
291 points
by
ycmbntrthrwaway
9y ago
|
60 comments
71.
▲
by
ycmbntrthrwaway
9y ago
It is signed by WoSign. Firefox is ok with it for now, but StartCom and WoSign are going to be removed eventually in favor of Let's Encrypt. See https://security.googleblog.com/2016/10/distrusting-wosign-a...
72.
▲
by
ycmbntrthrwaway
9y ago
Library Genesis is a caching backend for scihub. Scihub is a number of proxies, but already downloaded articles are not going anywhere in case of takedown. Libgen offers torrent and usenet downloads. The best way to help is by joining http
73.
▲
by
ycmbntrthrwaway
9y ago
> But even worse than that, end-to-end encryption is off-by-default, and users must opt into it. Why? Because it is unusable. It has no synchronization between devices, only 1 device to 1 device. And if you accidentally closed the chat,
74.
▲
by
ycmbntrthrwaway
9y ago
Telegram offers at least some degree of anonymity, you can join group chat without exposing your phone number. And even if telegram administration closes the group, they are unlikely to report all members to police. WhatsApp and Signal offe
75.
▲
The Tectonic typesetting system
(tectonic-typesetting.github.io)
1 points
by
ycmbntrthrwaway
9y ago
|
0 comments
76.
▲
Scuttlebutt – secure gossip platform
(scuttlebutt.nz)
2 points
by
ycmbntrthrwaway
9y ago
|
0 comments
77.
▲
by
ycmbntrthrwaway
9y ago
> The world is drowning in cash—and it's making us poorer and less safe. > So what is all that cash being used for? The answer is simple: a large part is feeding tax evasion, corruption, terrorism, the drug trade, human trafficki
78.
▲
by
ycmbntrthrwaway
9y ago
There are people who want to prohibit cash, control the Internet, forbid guns. There are countries which do just that.
79.
▲
by
ycmbntrthrwaway
9y ago
If you make bitcoin illegal, criminals will use it no matter what or just find a way to get anonymous bank account if it happens to be cheaper. Making some technology that criminals use illegal (think guns, knifes, cash, computer networks,
80.
▲
by
ycmbntrthrwaway
9y ago
The point of decentralization in case of BitTorrent is offloading files hosting to users. That is how Debian and Blizzard use it. It is better to advertise BitTorrent as such but then use it to avoid control. Same point was raised about Tor
81.
▲
by
ycmbntrthrwaway
9y ago
> I want anyone to be able to do whatever they want to with my code. That includes developers wanting to create a proprietary application. Telling them they can't is not freedom. In a perfect environment without any means of coercio
82.
▲
by
ycmbntrthrwaway
10y ago
Go took this idea from Plan 9. In fact, Go shares a lot with Plan 9 C compiler structure. Related: http://doc.cat-v.org/henry_spencer/ifdef_considered_harmful
83.
▲
by
ycmbntrthrwaway
10y ago
> Here is a model of waves, as in light or sound, but not as in water waves or electron waves How water waves are different from sound? Water wave are sound, aren't they?
84.
▲
by
ycmbntrthrwaway
10y ago
You can explain what a monad, for example, is, in one sentence, but it is useless if you don't show how it is used. Similarly, you may know what eigenvector, or derivative function, is, but without practice you can't understand wh
85.
▲
by
ycmbntrthrwaway
10y ago
Read this: http://learnyouahaskell.com/chapters Just don't skip chapters and read from the beginning to the end.
86.
▲
by
ycmbntrthrwaway
10y ago
Related: https://en.wikipedia.org/wiki/Mutual_Aid:_A_Factor_of_Evolut...
87.
▲
Pijul 0.3, our first public release Featuring nest.pijul.com
(pijul.org)
3 points
by
ycmbntrthrwaway
10y ago
|
0 comments
88.
▲
How Telegram obfuscates its traffic to allegedly circumvent censorship
(blog.susanka.eu)
2 points
by
ycmbntrthrwaway
10y ago
|
0 comments
89.
▲
Intro to Parsing with Parsec in Haskell
(jakewheat.github.io)
2 points
by
ycmbntrthrwaway
10y ago
|
0 comments
90.
▲
by
ycmbntrthrwaway
10y ago
I think it is unlikely because major part of it is not protocol implementation, but peer discovery and things like that. Have a look at librevault [1] instead, it is written in C++ [2]. [1] https://librevault.com/ [2] http
More ›