zurn

70 ms·

811.
Was Heartbleed a fuzzing success or failure?
3 points by zurn 13y ago|0 comments
812.
by zurn 13y ago
I'm saying very few high level politicians in western countries are guilty of things of comparable badness.
813.
by zurn 13y ago
> Every ranking official of any country (or company) owns a big share of that country's sins and there are no "clean" administrations. This sounds a lot like apogolism. These war crimes are VERY far removed from the standa
814.
by zurn 13y ago
> Large companies are implicitly trusted by everyone. No. What little trust there is, it comes from people trusting them to be afraid for their own interests. But even then people generally acknowledge that the customer's interest m
815.
by zurn 13y ago
Also, hats off to the heartbleed.com keepers, Codenomicon, for handling this very selflessly - despite this (fuzzing) being their core business and having found the bug itself. They could have made it a "company logo first" market
816.
by zurn 13y ago
Well, this is OpenCL backed and the latest OpenCL is all about sharing the memory space between CPU and GPU. AMD has for some time been making a big deal of sharing the same view of virtual memory on GPU and CPU sides. Which lets you use th
817.
by zurn 13y ago
Maybe, but this would add legitimacy to X.509 and the CA business and cement it even further. It's an enormous ongoing drag to Internet security. I'd like to see Mozilla and Google to team up on a reasonable replacement. Even Micr
818.
Presentations from USENIX NSDI '14(usenix.org)
1 points by zurn 13y ago|0 comments
819.
by zurn 13y ago
To everyone arguing against special-casing matrix multiplication, please base your arguments on the PEP's "Motivation" section to avoid too much of rehashing the obvious. It even has a subsection "But isn't matrix m
820.
by zurn 13y ago
Unless you used forward secrecy, which you should anyway in case of a key compromise. Key compromises can happen in many ways.
821.
by zurn 13y ago
> "Don't roll your own parsers" should really be up there with "Don't roll your own crypto". .. and if you do, don't do it in a highly memory-unsafe language. Espcially when it's for a security cri
822.
by zurn 13y ago
Go C! Hope everyone had forward secrecy on by now.
823.
by zurn 13y ago
Yes, array-of-structs -> struct-of-arrays is a well known manual optimization pattern. Compilers sadly don't do it, except to cheat on SPECint.
824.
by zurn 13y ago
Actually the problem is that compilers have dropped the ball on optimizing data representation. They generally don't even try. Some faint glimpses of light can be seen, like compressed references in HotSpot or this Halide. Rust and Go
825.
by zurn 13y ago
This doesn't sound like a router. Maybe a home wifi ap / NAT box?
826.
by zurn 13y ago
No, they couldn't occur in "any programming language". In fact there aren't other memory unsafe languages in wide use than C/C++. And it's not a "potentially" thing, as is apparent to anyone following
827.
by zurn 13y ago
Exploiting programming errors in the browser is one way. Because browsers are written in very unsafe programming languages (C++), bugs are regularly exploitable so that by specially crafting the bug-triggering input data they can be fooled
828.
Boeing 787 control and in-cabin entertainment networks are/were connected (2008)(educatedguesswork.org)
10 points by zurn 13y ago|1 comments
829.
by zurn 13y ago
Learning & prototyping hardware (ASIC) design. Applications that like low latency I/O. You can respond in microseconds with real time guarantees, eg for radio link layer protocols.
830.
by zurn 13y ago
Yep. People going veg for environmental and/or animal ethics reasons are usually living in a society that's not aligned with their conviction. Principled would be one word for it.
831.
by zurn 13y ago
Look how long it's taking IPv6 support in consumer NAT boxes, and that's something that's hyped and all vendors are officialy drumming for it, and has been finished spec-wise since the 90s. SCTP has had 14+ years - SCTP made
832.
by zurn 13y ago
In my experience people behind NAT very much like Skype, games, WebRTC, file sharing etc to work. They're usually not very knowledgeable about firewalls but most often used host-based firewalls. Which is good since they're general
833.
by zurn 13y ago
TCP would really suck if it went to multi-second coma on every bandwidth adjustment! Buffer getting "overwhelmed" is exactly what causes TCP to adjust. Fortunately TCP doesn't go to slow start immediately when it sees congest
834.
by zurn 13y ago
You have that backwards! NATs are tasked to facilitate communications (same as routers). Yes, firewalls can be configured to restrict communications. And you can have a combined NAT+firewall that is so configured. Just likes routers vs fire
835.
by zurn 13y ago
> TCP has deep problems figuring out what is really loss. and it speeds up too slowly but still doesn't manage to slow down when it should resulting in induced delay TCP is really pretty reasonable. Fast retransmit/fast recover
836.
by zurn 13y ago
On the other hand it's very fortunate that the internet architecture is what it is, because the "dumb network, end-to-end protocols" design principle has enabled deployment of new and improved protocols and applications witho
837.
by zurn 13y ago
For a realtime game, player position would be kind of essential, no? "move here unreliably" "shoot at x reliably" Mixing reliable and unreliable updates for game logic would seem to result in a lot of complexity as thing
838.
by zurn 13y ago
That could mean two things: a) packets are arriving from a fast link and don't fit onto a slow link. Dropping packets signals TCP or your UDP protocol to adjust to the slower link speed, exactly the desired behaviour. b) the router buf
839.
by zurn 13y ago
Your network sounds odd: If you get 12 Mbps when blasting UDP but you experience packet loss high enough to bog down TCP, it actually sounds like your network is congested and TCP is working as designed. Your copper last mile modem (eg. ADS
840.
by zurn 13y ago
Yes, DTLS over SCTP over UDP. TCP doesn't really work if you want to do NAT traversal, which WebRTC needs to do because it's aimed at P2P.

More ›