News for hackers. Stuff that matters.

boklm

Re:IRCAnywhere on Tuesday November 03, 2015 @05:42AM (#10498653)
From what I see, shout-irc does not allow you to stay connected on IRC channels when you are offline or close your browser.
Re:Tor Messenger Beta: Chat Over Tor, Easily on Friday October 30, 2015 @08:49AM (#10477450)
Re:Security concerns with minified JavaScript code on Monday August 31, 2015 @07:09AM (#10146256)
This link has already been posted: https://news.ycombinator.com/item?id=10107833
Re:“I wish systemd would get over its thing about syslog” on Saturday April 11, 2015 @02:13PM (#9360097)
No, journald has its own benefits. Creating an alternative to some software doesn't mean you have ill will towards it.
Re:“I wish systemd would get over its thing about syslog” on Saturday April 11, 2015 @02:06PM (#9360069)
systemd is 100% free software, unlink Windows. systemd has a command line interface unlike most Windows tools. And I don't know what is the Windows init system but I doubt it is similar to systemd. It's probably much closer to the Mac OS X init than Windows'.

Seriously, it does not make any sense to say that systemd is a "Windows" approach.

Correction on the title: this activist is a girl, so it should say "on on her car", not his.
Re:Possible upcoming attempts to disable the Tor network on Friday December 19, 2014 @06:14PM (#8775117)
Because the clients need to get the list of nodes from somewhere.

You can read more about how this works at this URL: https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt

Re:The Case of the Modified Binaries on Friday October 24, 2014 @06:05AM (#8502907)
This exit node is now flagged as BadExit: https://atlas.torproject.org/#details/8361A794DFA231D863E109...
Re:LibreSSL on Thursday April 24, 2014 @10:20AM (#7640392)
> Blaming the VCS that much is a bunch of lazy excuses.

I'm not blaming CVS as an excuse, because as I said, I didn't plan to review it anyway.

> No it doesn't make code review difficult.

It does make code review difficult, for all the reasons I gave. And I've seen several people who try review it complain about that too.

Re:Core Infrastructure Initiative on Thursday April 24, 2014 @10:13AM (#7640350)
> I somehow can't imagine an organization named "Linux Foundation" to give money to OpenBSD and other non-Linux related open source projects.

Why not ? I could imagine them giving money to OpenSSH developers at least, seeing how it is part of the core infrastructure.

Also, would you have imagined Microsoft giving money to an organization named "Linux Foundation" ?

Re:LibreSSL on Tuesday April 22, 2014 @04:31PM (#7630233)
> Basically, I don't see any reason to question their use of CVS.

Why not ?

With CVS, the security rely on the security of a single server. Anybody with root access to the CVS server can modify history, and nobody would notice.

Re:LibreSSL on Tuesday April 22, 2014 @04:08PM (#7630087)
There's many problems that makes it very annoying to review their changes:

- CVS commits are per file. You can't see changes made by a single commit to multiple files.

- CVS cannot rename files. You have to create a new file and remove the old one. So you cannot follow history of the changes.

- CVS is really slow. You cannot clone the repository locally, so it takes a few seconds to show any change, whereas git shows you any commit and logs instantly. And you can't do it offline (for instance if you need to spend a few hours in a train).

- git log / show / diff is so much better than cvs log / diff.

- you can't use things like git blame

- they've lost all openssl.org history. If they were using git, they could have cloned the openssl git repository, and add their commits on top, keeping all history (which is often very useful when you're trying to understand why something has been done like this, or who introduced some change).

I'm not an openssl expert, so I didn't plan to review their changes anyway. But if I had to, using CVS would be the most annoying thing.

Re:LibreSSL on Tuesday April 22, 2014 @04:44AM (#7626471)
Because people might be interested to review their changes, and CVS makes that very difficult.
Re:Results of the GitHub Investigation on Monday April 21, 2014 @07:47PM (#7624767)
It's not telling. Whether what you say is true or not, in either case it would be risky to attach your name to something like this.
Re:Git Source Code Review on Sunday March 30, 2014 @05:53AM (#7495708)
It's used for more than git-svn: git-add--interactive.perl git-cvsexportcommit.perl git-cvsserver.perl git-relink.perl git-svn.perl git-archimport.perl git-cvsimport.perl git-difftool.perl git-send-email.perl

There is actually more lines of perl than shell if we exclude tests:

  -------------------------------------------------------------------------------
  Language                     files          blank        comment           code
  -------------------------------------------------------------------------------
  C                              340          20596          18649         135900
  Perl                            43           4698           4310          27503
  Bourne Shell                    77           2523           1843          18766
  C/C++ Header                   140           2636           4635          11132
  -------------------------------------------------------------------------------
  SUM:                           600          30453          29437         193301
  -------------------------------------------------------------------------------
If we don't exclude tests:

  -------------------------------------------------------------------------------
  Language                     files          blank        comment           code
  -------------------------------------------------------------------------------
  C                              341          20602          18656         135910
  Bourne Shell                   761          21736           6908         124222
  Perl                            47           4728           4325          27739
  C/C++ Header                   140           2636           4635          11132
  -------------------------------------------------------------------------------
  SUM:                          1289          49702          34524         299003
  -------------------------------------------------------------------------------
Re:Anonyfish – Chat Anonymously With Another Secret User on Sunday March 16, 2014 @05:49AM (#7408821)
> Messages are encrypted using AES and BLOWFISH ciphers on the way into the database.

Using a key that is stored in the same database ? How is that useful ?

> IPs and logs aren't stored.

Except when they decide they want to keep logs.