News for hackers. Stuff that matters.

darkhelmetlive

Re:The Great Firewall of Yale on Tuesday January 14, 2014 @06:45PM (#7060631)
I'm glad I was around as BearScat came out and before the killed it.
Re:Heap Overflow in Floating Point Parsing (CVE-2013-4164) on Friday November 22, 2013 @12:40PM (#6782303)
There's also a commit right after the merge commit to change

  if (nf > DBL_DIG * 2) continue;
to

  if (nf > DBL_DIG * 4) continue;
Re:Do You Even Load Balance? on Monday June 17, 2013 @07:55PM (#5896731)
Yeah, it was kind of a "hey it does it for free" sort of thing.

I mean, if it's never really a problem, why spend more time setting extra things up. That being said, I'd have no problem setting up and managing HAProxy if we wanted to do that.

The fw boxes are from these guys: http://www.watchguard.com/ They were X550e's this weekend we're installing XTM 515's

Re:Do You Even Load Balance? on Monday June 17, 2013 @07:35PM (#5896654)
I was playing with load balancers this past weekend. Some code that came out of it: https://github.com/darkhelmet/balance
Re:Make Your Own Celluloid Ruby Gem on Monday February 11, 2013 @05:47PM (#5203892)
Sorry, didn't realize "celluloid" meant something else. Changed the title.
Re:Playing with Go: Embarrassingly Parallel Scripts on Monday December 03, 2012 @01:45PM (#4867049)
Tooting my own horn here, but I'm working on a book covering the Go Standard Library. Still in progress, and not at the sync package yet, but it's coming along. Check it out if you feel inclined.

http://thestandardlibrary.com/go.html

Re:A Timing Attack In Action on Monday August 20, 2012 @05:41PM (#4409932)
Awesome, thanks! Added this and the other one to the post.
Re:A Timing Attack In Action on Monday August 20, 2012 @05:41PM (#4409930)
Awesome, thanks!
Re:A Timing Attack In Action on Monday August 20, 2012 @05:12PM (#4409822)
It can work the same way. You just slowly figure out the hash: this pw for this user was a bit faster than all the other failures, so we know the first byte of the hash is ...

If you have a bunch of hashes precomputed, you can start to figure things out pretty quick.

The point is it's still leaking information about what's going on.

Re:A Timing Attack In Action on Monday August 20, 2012 @05:08PM (#4409799)
I do have the sentence "This difference is enough to measure, even on web applications." in the fourth paragraph. Should I highlight that a bit, bold maybe?

I'd also like a good reference for that, and my Google skills were failing me. Do you happen to have a link to something show that off?

Re:Ask HN: Got a Kindle. What now? What books should I read? on Saturday September 17, 2011 @03:32AM (#3007490)
Thanks for the support! Kindlebility has a new name as of yesterday though: Tinderizer http://tinderizer.com/
Re:OS X Isn't for Developers on Thursday March 10, 2011 @07:00PM (#2311368)
Xcode 3 is free, but not 4. Either the developer program, or $5 on the app store.
Re:OS X Isn't for Developers on Thursday March 10, 2011 @06:53PM (#2311336)
I don't even use Xcode at all. I'd much prefer a `brew install` or even if they had their own *.pkg file or something that was just the toolchain.
Re:OS X Isn't for Developers on Thursday March 10, 2011 @06:52PM (#2311331)
No doubt, hence why just the toolchain would be awesome. I don't even use Xcode.
Re:OS X Isn't for Developers on Thursday March 10, 2011 @06:44PM (#2311300)
The few of points I've made about this are:

1. The Xcode 4 download compared to Xcode 3 is basically just a different IDE. The gcc version is, for all intents and purposes, identical. There's nothing stopping anybody from just installing that if all they need is the toolchain.

2. The other big 2 OS's (Windows and Ubuntu) don't have any build tools installed by default either. Granted they are just an apt-get away on Ubuntu, but it's still something you have to explicitly install.

3. If I wasn't a dev, I'd be pissed to find some compiler toolchain IDE gongshow eating up 5-15GB of my disk space, so not having it by default is probably a good thing. Most people aren't devs.

I paid the $5, but I'd still like to see just the toolchain available as a free download, though I still don't think it would be a good thing to have it installed by default.

Re:Import Delicious To Google Bookmarks on Friday December 17, 2010 @11:59AM (#2016795)
Ahh I see according to http://lnkr.mobi/bm/google_bookmarks_api/ that is about all the docs on that API there are, and it doesn't support annotations/notes. Mine doesn't either, but it's a one line change to make it do so.
Re:Import Delicious To Google Bookmarks on Friday December 17, 2010 @11:56AM (#2016778)
That's definitely cool. Are there any docs for that "upload" API?

It's good to see people find solutions to the problem Yahoo! is causing.

I'm an idiot and had a wrong email configured for sending. If you had problems with it not working, try again.
I thought the free one would only download over wifi? Or does it do both? (I have a wifi only Kindle, so no clue).

Older »