zrm

62 ms·

601.
by zrm 7y ago
Ethernet can carry protocols other than IPv4. IPv6 is one of them, but there were at one time a whole slew of them, like IPX and Appletalk. But ISPs don't carry them, so they're effectively blocked and have largely died out, and e
602.
by zrm 7y ago
> Flag anything that isn't obvious plaintext or already being MiTM'ed for analysis follow up. The failure being that the long tail of uncategorized data would be large . Do you have a good reference for what game state updates
603.
by zrm 7y ago
Using CAs to authenticate clients is subject to the same attack. They block communication from any client that won't disclose its private key to the MITM box or use it to encrypt/sign whatever the MITM requires it to. You can&#x27
604.
by zrm 7y ago
The first function is wrong because it leaves the compiler the discretion to do something dangerous. But isn't that the same problem as the second function? The compiler has much more discretion in the first case, all the way to nasal
605.
by zrm 7y ago
Suppose you have a function that looks like this: void f(int a[], size_t len) { size_t i=0; while(1) { int val = a[i++]; if(i > len) break; do_something(val); } } You would expect for this code to c
606.
by zrm 7y ago
> Especially for security-critical operations, it is often a good idea to disassemble the relevant sections of the binary and ensure that things are handled appropriately. The problem there being that a) all code is security-critical if
607.
by zrm 7y ago
All the more reason there should be a function in the C standard that does it properly and uniformly across platforms.
608.
by zrm 7y ago
> Therefore, we propose that Annex K be either removed from the next revision of the C standard, or deprecated and then removed. This irked me, because along with useless junk like memcpy_s, Annex K had memset_s, which in particular (and
609.
by zrm 7y ago
> Getting all operating systems to do that, across the board, is much harder than changing a cross-platform browser. Is it? I understand that Debian has just added support. It should be as easy for Google to add it to Android as add it t
610.
by zrm 7y ago
> The only reason they're gaining control is becuase the rest of the linux userbase has decided that although they might complain about Red Hat's work on hacker news and deride it as "not good", it's actually goo
611.
by zrm 7y ago
The thing about the 9700K (which they point out) is that it doesn't support hyperthreading. Then it even beats the 9900K by a significant amount in a lot of the same tests, even though the 9900K should otherwise be the faster one, indi
612.
by zrm 7y ago
> At least on Linux, isn't DNS all at the application level anyway? There is no system level DNS lookup Nearly all applications use the standard library, i.e. getaddrinfo(3) or the old gethostbyname(3) or something that wraps them.
613.
by zrm 7y ago
> If you say so, but it seems necessary to counter your apparent lack of empathy for people without perfect vision. How is that any more helpful than me accusing you of an apparent lack of empathy for people with vision that can discern
614.
by zrm 7y ago
> Yes but many such active adversarial networks prevent most traffic besides http/tls leaving the network. DoH solves this problem. So do VPN tunnels over HTTPS/TLS. There is also happy eyeballs. Use DNSCurve and DoH at the sam
615.
by zrm 7y ago
> So your basically saying screw them all since it's impossible to include everyone? Your disposition is needlessly antagonistic. Moreover, regardless of what is common to every standard cable, anyone is free to put their own labels
616.
by zrm 7y ago
You use colors that the largest number of people can distinguish between. At some point there will always be someone who something doesn't work for. You suggest using symbols, but what about people who are completely blind? So you use
617.
by zrm 7y ago
Why is it exclusionary if you use the colors they can still distinguish between?
618.
by zrm 7y ago
> There are instructions on how to route all operating system DNS requests through DoH here Then the next step is to get operating systems to ship it by default and support DoH as a DHCP option: https://tools.ietf.org/htm
619.
by zrm 7y ago
The problem isn't the lack of a configuration option, it's when the default is to ignore the one configured in the operating system. Suppose I have all my devices configured to use my local DNS where I've added names for my o
620.
by zrm 7y ago
True color blindness is very rare. Most "color blind" people are red-green color blind and can still distinguish between e.g. red and blue.
621.
by zrm 7y ago
This is really the issue. DoH is a little ugly/slow, but the security improvement over vanilla DNS is real. There are superior alternatives like DNSCurve but DoH > plaintext DNS even if DNSCurve > DoH. The problem is implementing
622.
by zrm 7y ago
> More than two orders of magnitude? More than two orders of magnitude. You put a refrigerator in an environment where the outside temperature is below its set temperature and it doesn't run at all, or one where 100% of its power us
623.
by zrm 7y ago
> From the first google result I came across, "A typical fridge of about 400-500 litres can use around 495kWh of electricity each year". The problem with "typical" is that the variance is high. It's even worse th
624.
by zrm 7y ago
> Why would they be replacing a product that earns them money? Because they can make just as much money licensing versions of SQL Server et al for Linux or selling Linux cloud instances, not have to spend any more money developing a sepa
625.
by zrm 7y ago
> At minimum a refrigerator uses 150 watts and averages over 200. That's only when the compressor is running though, which it only does when the temperature is above the setting. For a well-insulated modern refrigerator, that is far
626.
by zrm 7y ago
> Then the bean counters say "why are you buying this software, when you could have gotten it for free." Because it's the "officially supported" version and companies don't like running software that isn&#x2
627.
by zrm 7y ago
> While that might prevent one bad process from evicting things, it seems like it might almost lead to substandard cache utilization, especially on servers that might just want to run one related thing well. Right, that's the trade
628.
by zrm 7y ago
> If you want to keep the direct drive though you would need to have a larger engine and use hook-up and variable cut-off to keep the efficiency of the smaller engine while cruising. An alternative would be to make hybrids. Use an electr
629.
by zrm 7y ago
> I unsure what the previous comment was taking about, but how does amds differ from Intel in that is prevents one bad process from blowing cache? Ryzen/Epyc has cores organized into groups called a CCX, up to four cores with up to
630.
by zrm 7y ago
Keep in mind that Navi (RX 5700 series) is out next month and is a new architecture.

More ›