News for hackers. Stuff that matters.

fidget

Yeah, we really should rewrite the kernel.
Re:An Ancient Kernel Hole Is Not Closed on Wednesday June 21, 2017 @02:35AM (#14601331)
That's GRSecurity for you
Man, I've got some horrible news about your CPU.
There are other bad things about ssh. Tofu sucks balls and ssh users are far too comfortable with it.
Doesn't particularly make a difference, given that this issue is about users not upgrading (for whatever reason) their windows XP installations. Would the exploit having being disclosed by the NSA or by someone else have changed the fact that these users would not have upgraded and gotten a patch?
His arms and influence is also changed the way I view conflict between states.
Re:How to ship production-grade Go on Wednesday May 03, 2017 @04:19PM (#14259644)
It's not strongly coupled beyond requiring that the wrapper implement a `Cause() error` method. I don't really think that could ever be considered strong coupling
Re:How Google Could Collapse on Friday April 28, 2017 @02:48PM (#14222013)
So short it
Please let me know where you work, so I can avoid any product potentially produced by you.
Re:How We Built r/Place on Thursday April 13, 2017 @02:21PM (#14109572)
Are you suggesting that you had a concurrency bug that was solvable without changing your entire storage layer? Heresy..
Re:Jeff Bezos’ Annual Letter on Thursday April 13, 2017 @02:12PM (#14109490)
No one does, you estimate each task to have a different number of points, which modify the task's contribution to the burndown graph.

I guess the idea is that points should correlate to time (questionable), and if you're estimating perfectly, that should give you a linear burndown graph. Which is stupid. What might be less stupid is that if you want to get some idea of how well your team is estimating tasks, compared to i.e. this time last year, you could look at the volatility (across several sprints) this year compared to last year, and a lower burndown rate volatility might suggest that the team has improved at estimating the duration of tasks.

However, when you just focus on the volatility as a metric, then people start optimizing for it, which is not the point at all.

Re:DNSCrypt – A protocol to improve DNS security on Thursday March 30, 2017 @01:50PM (#13997422)
Isn't anycast ip usually used for that instead?
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works on Saturday March 11, 2017 @03:39AM (#13844802)
Right, which is why I said those blackbox methods were pretty rubbish. You step through it with a debugger.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works on Saturday March 11, 2017 @03:17AM (#13844768)
Unannounced side channels seems like by far the easiest thing to deal with there; send a 2mb file, observe network patterns, raise an eyebrow if 2mb gets sent over a channel that you didn't expect.

As for using the correct key, dismantle the signal message envelope until you get your blob of encrypted message. Then see if the same blob appears on the target device. Multiple keys? I imagine either correlating message size and network traffic (encrypting stuff twice could well show up), or going at it with a debugger.

Which is really the answer to all of these questions instead of any network shenanigans. You root your phone and attach a debugger, then step through what signal is doing.

Not a security researcher, never reverse engineered anything for security reasons in my life.

Re:Notepad++ V 7.3.3 – Fix CIA Hacking Notepad++ Issue on Thursday March 09, 2017 @03:30AM (#13827951)
Phew lad. You're a bit far gone aren't you.
>I think you're giving too much importance to something quite insignificant here, his race and background.

How about his entire socialisation?

Re:Ask HN: Is S3 down? on Wednesday March 01, 2017 @03:46AM (#13762293)
The GCS being referred to by the GP is Google Cloud Storage, not Cloud Sequel. You really do need failover set up though. That's true for basically any MySQL installation, managed or not.
Re:Ask HN: Is S3 down? on Tuesday February 28, 2017 @07:16PM (#13759669)
They have a minimum of 1 year deprecation policy in their terms of service.
Re:Ask HN: Is S3 down? on Tuesday February 28, 2017 @06:20PM (#13759247)
Functions are going beta this week
Re:When “Dumb Pipes” Get Too Smart on Saturday February 25, 2017 @03:34AM (#13730651)
Helps a ton if you're terminating SSL at the edge, due to the number of roundtrips you need before the server can even start generating that first byte.
Re:Torus development has been stopped at CoreOS on Sunday February 19, 2017 @05:57AM (#13679139)
Well that seems eminently reasonable
Re:How both TCP and Ethernet checksums fail (2015) on Monday January 30, 2017 @04:19AM (#13519626)
The end to end principle says no, you need application level checksums anyway
It was before the vote to renew, and was not disclosed to people making that vote.
Well that seems like an easily applied solution to the problem of GC in javascript.
Re:IPv6 Support for EC2 Instances in Virtual Private Clouds on Thursday December 01, 2016 @06:47PM (#13084708)
8 IPs per instance, max :/
Re:Grafana 4.0 with alerting is released on Wednesday November 30, 2016 @04:06AM (#13069396)
https://twitter.com/fabxc/status/803870900097523712

> I repeat: Your alerts and dashboards belong into your SCM, not a random SQL database!

(And I 100% agree, particularly for alerts)

Re:Never accept a counter-offer on Sunday October 02, 2016 @06:24PM (#12624583)
> my ace in the hole was an unsecured network share drive where I found an offer letter for a coworker showing he made $135k.

Eww

Re:Creating a PostgreSQL Cluster Using Helm on Friday September 09, 2016 @07:48PM (#12466848)
God I hate helm. Buggy piece of shit
Re:Docker not ready for primetime on Sunday August 28, 2016 @05:36PM (#12378663)
Yeah setup time is great. However, it seems that the number of commands required for stability with docker swarm -> ∞
Re:Britain’s scientists are freaking out over Brexit on Sunday July 31, 2016 @09:27AM (#12196878)
Not everyone has the means to change country

Older »