News for hackers. Stuff that matters.

cschramm

Re:How SSH got port number 22 on Monday April 24, 2017 @02:16AM (#14182280)
You can follow the assignments of such "socket numbers" for NCP in RFCs 349, 433, 503, 739, 750, and 755. RFCs 758, 762, 770, 776, and 790 address both socket numbers for NCP and port numbers for TCP/IP simultaneously. RFCs 820, 870, 900, 923, 943, 960, 990, 1010, 1060, 1340, 1700 continue that work for port numbers only and RFC 3232 finally switches it to an online database.

RFC 349:

        Socket          Assignment
           1            [Old] Telnet
           3            [Old] File Transfer
           5            Remote Job Entry
           7            Echo
           9            Discard
RFCs 349, 433, and 503 also provided a list of conflicting socket numbers used on specific hosts.
Re:Pin-pointing China's attack against GitHub on Sunday April 05, 2015 @03:48PM (#9325107)
There's absolutely no proof in this.

The fact that a request with a TTL smaller than 12 does not trigger a response does not mean the responder is the host after 12 hops. Assuming none of the previous hosts misbehaves (they could be increasing or at least not decreasing the TTL) you can only conclude that it is none of the later hosts, but it can still be any of the previous ones.

That leaves you with Comcast AND China Unicom hosts and, considering that the replies you see in the traceroute results can easily be spoofed, it can be any third party as well.

Possible scenarios include (I don't say they are more likely):

1. Comcast is producing the responses, but only does so if the request TTL is large enough to make you blame China Unicom.

2. China Unicom hands the packets over to a third party after just a few hops in their backbone. The third-party sends ICMP Time exceeded messages looking like they are from other China Unicom hosts to make you blame China Unicom.

Conclusion: This is either an obvious attack from within the China Unicom backbone OR a more sophisticated attack where the attacker wants to a) hide his identity and b) blame China Unicom for it (I can't think of a scenario where b) would be a by-product and not on purpose).

Just saying. The sentences in the post that include the words "prove" and "proven" are simply wrong.

For me it's the RSS feed
Re:Don't Copy-Paste from Website to Terminal on Monday April 08, 2013 @02:40AM (#5510287)
Yeah, copying GitHub URLs sucks. You cannot actually select it with your mouse, since some creepy JavaScript interferes and selects it for you. the result is that it's selected, but not copied to PRIMARY, as you'd expect. I fall into this trap every single time.
Re:Ask HN: What Software Did You Pay For In 2012 on Wednesday December 26, 2012 @11:34AM (#4969802)
PhpStorm and RubyMine subscription renewals during Doomsday sale. :D
Re:Hey, C Is a Functional Language Too on Friday November 02, 2012 @05:53AM (#4731905)
No it's not. What makes a language functional is its ability to eliminate tail recursion.
Re:The development of Ubuntu Tweak is stopped. on Friday October 19, 2012 @11:31AM (#4673945)
Not using Unity?
Re:Edu domain meant for the world,restricted to US on Wednesday October 03, 2012 @04:26AM (#4606415)
Many of the universities around here (Munich) got an edu domain (tum.edu (e. g. www.cs.tum.edu), hm.edu).

Really US-restricted TLDs, as far as I know, are mil, gov and pro.

Looking at MattJ100's link (http://pubs.opengroup.org/onlinepubs/009695399/utilities/gre...), it seems like POSIX grep actually does not have any recursion.

Hence, only lubutu's comment ("-R is the recursion flag for ls, cp, rm, etc") is true, while _delirium ("-R is the POSIX-standard flag for recursive grep") is wrong, which means AIX is free to do whatever it wants with both the -r and the -R flags.

The commit details are back now. :)
If it's not a load issue and neither some intended limitation to prevent load issues, somebody pulled it on purpose. ...which I actually included in not being able to handle HN. ;)
*BSDs have (=> OS X probably too).

Solaris, HP-UX and OpenServer have not.

AIX is weird:

> -r Searches directories recursively. By default, links to directories are followed.

> -R Searches directories recursively. By default, links to directories are not followed.

Yes, seems like Savannah can't completely handle HN ;)
Another thought: Since rgrep is an alias for grep -r and grep -r has changed, the complete rgrep tool has changed and this can _not_ be fixed by using the "right" switch. Hence rgrep is useless for scripting now.
I've always used -r before, since it saves a key press. ;)

But I started using -R today, in the middle of a WTF event while inspecting some Python files, digging up a Debian bug report, inspecting the upstream change and posting this to HN.

I still think it's not the best idea for Debian (or any other system) to break compatibility with upstream, since this will lead to different behaviors on different systems, not only depending on version and vendor (GNU or *BSD). But of course, it could also lead to the change being reverted, which would be welcome (guess nobody relies on the new behavior yet).

The POSIX argument is definitely valid, but nevertheless GNU's grep has always supported -r and BSD versions do as well (although OpenBSD's man page reads "This implementation supports those options; however, their use is strongly discouraged."), so it just unnecessarily breaks existing stuff.