zrm

88 ms·

901.
by zrm 10y ago
> They seem to suspend the Ethernet controller but don't wake it when packets come in, presumably because the controller doesn't support that. The machine appears dead from the outside after a few seconds of inactivity. It seem
902.
by zrm 10y ago
BitTorrent solved the limited upload speed problem. Split the data into chunks and download from multiple users at once. Even that is only necessary if a user doesn't have enough upload bandwidth for a stream, which for 1080p is ~5Mbps
903.
by zrm 10y ago
If the attacker knows or controls any part of the data then the compressed size leaks information about the unknown data because the compressed size will be smaller if the known data shares bytes with the unknown data.
904.
by zrm 10y ago
That kind of violates the intuitive "red/orange/yellow is alarm, blue/green/black is expected" notion though. What you could do is put ASCII characters in blue and non-ASCII characters in red.
905.
by zrm 10y ago
Blocking ICMP type 3 breaks path MTU discovery. When the path MTU is less than the server's MTU, the client will typically send a request which is smaller than the path MTU and then the server's response isn't so it's th
906.
by zrm 10y ago
It's doing both things. When you're trying to compete with a huge incumbent you always have the Wine vs. Qt/GTK question, where you have to choose between compatibility and design freedom. But even when you choose compatibili
907.
by zrm 10y ago
The main difference between a package manager and an app store is that a package manager can allow you to install apps from more than one source and can do proper dependency management. What part of that is supposed to frighten the townsfol
908.
by zrm 10y ago
So you put location services on the list of things to replace.
909.
by zrm 10y ago
> While you're technically right, no other operating system has the problem that its most popular applications will not work without an additional proprietary platform being installed. It's kind of like if amazon services were
910.
by zrm 10y ago
> Given how cheap drives are I think upstream bandwidth for that storage will quickly eclipse the storage itself. Which suggests a solution -- keep several of copies of everything (or copy-equivalents with erasure coding) and then downlo
911.
by zrm 10y ago
> Ensuring that every endpoint has a monitoring agent installed and functioning at all times is vastly more complex than ensuring that a network traffic inspection appliance is present and functioning. That complexity is a sunk cost. You
912.
by zrm 10y ago
It seems like the problem with doing this is that there are multiple localhost IPs. If it was as simple as "every A query for [any].localhost is 127.0.0.1, every AAAA query is ::1" then it would be one thing, but the A query could
913.
by zrm 10y ago
> Which is why trying to maintaining a blacklist of bad things ("enumerating badness") is destined to fail. Unfortunately it's also why "enumerating goodness" is destined to fail. It's like the instructions
914.
by zrm 10y ago
It seems you're answering your own question. Why are there no other popular URL schemes? Because too many things don't support generic schemes so any new ones are DOA. Here's an example. Suppose I want to do content-addressib
915.
by zrm 10y ago
> You seem to be assuming a lot about a development environment that was never specified. The position you've staked out is "stop trying to enumerate badness." All I need is one good counterexample. For example, Google S
916.
by zrm 10y ago
> The blacklist approach means you need to make sure you know of every single possible URL scheme that may possibly be supported, and evaluate every single one of them to determine if they should be blacklisted. The whitelist approach re
917.
by zrm 10y ago
> Anything unknown is by definition not properly supported by the software you're writing. This seems to be where you're going wrong. There is no god-mode where you can see the whole universe and perfectly predict everything th
918.
by zrm 10y ago
> Can we please stop trying to enumerate badness [1]? No. Because we don't know what goodness looks like. The world can be separated into good, bad and unknown. If you classify anything unknown as bad then anything new is DOA. Peop
919.
by zrm 10y ago
You could do that on the client side too though. Have the clients refuse to long-term pin anything until they've seen it multiple times over multiple days.
920.
by zrm 10y ago
It's like sendmail et al are to email what BIND is to DNS, and what small mail servers really need is the analog of dnsmasq. The problem is it then needs to be popular enough for widespread use to sand down the rough edges, which is ch
921.
by zrm 10y ago
> This hosting/mirroring issue was solved decades ago by having the trusted source provide a hash of the document in question, and then allowing anyone to mirror it. And solved even better by digital signatures.
922.
by zrm 10y ago
It's both. More traffic is better for anonymization but it also consumes finite resources. The solution of course being for more people to run relays.
923.
by zrm 10y ago
Be careful with this if you're expecting anonymity though. The Tor browser does a lot of work trying to prevent identifying information from being sent to the other side. If you run an arbitrary protocol over Tor without any of that, i
924.
by zrm 10y ago
Something I would really like to see in modern operating systems is the ability to do TCP like UDP, i.e. you bind a socket and then send and receive TCP packets (everything after the ports in the TCP header) as datagrams. The problem that s
925.
by zrm 10y ago
> Assuming that the user only uses one proxy, you can use GeoIP to get his proxy location, and then if you account for the proxy-webserver distance, you can get a pretty accurate geolocation. A congested network link can easily add more
926.
by zrm 10y ago
Sort of. You measure the latency from the user to the proxy + the proxy to the site, so what you end up with is the approximate location of the proxy and a radius around it where the user could be. But the radius is liable to be 3000 miles,
927.
by zrm 10y ago
They have their secret sauce so that legacy software can pretend the SSD is spinning rust. Let them. Why shouldn't we also demand standard low level primitives so that every OS can do the thing you're describing?
928.
by zrm 10y ago
Taking advantage of the differences between flash and spinning rust only requires that you know which one you're running on. Moving the wear leveling code into the OS where the filesystem can see it is an interesting idea but why aren&
929.
by zrm 10y ago
That doesn't really change anything about the filesystem design. A storage device can fail to write data it claims to have because of damage as well as design defects. When that happens, a reliable filesystem will detect it and a less
930.
by zrm 10y ago
Control over hardware doesn't really buy you anything here. Just about any hardware can use any filesystem with, in the worst case, the requirement that you have a small boot partition using the legacy filesystem.

More ›