News for hackers. Stuff that matters.

javanix

What regulations / standards would actually stop these things from getting out though?
Re:Ask HN: Examples of reliable software you enjoy using on Tuesday June 28, 2016 @06:08PM (#11997987)
ZFS.

I created a raid-Z zpool in 2010 on FreeBSD and those same bits, with two different drives, are still floating around intact 6 years later, across multiple different operating systems.

I'll be very curious to the the source of this native-Windows port.
Re:The Rise of Renting in the U.S on Wednesday February 17, 2016 @10:37PM (#11123536)
Absurdly high taxes (my parents pay half my tax on a non-rural property twice as big about 120 miles north of me), but still, owning a home is hardly a fiscally ruinous proposition around here.

My property taxes this year were ~$4200 on an average sized lot and home, or roughly $350/month.

My last apartment cost $1050/month for a small two bedroom condo rental.

Re:The Rise of Renting in the U.S on Wednesday February 17, 2016 @05:42PM (#11122131)
Well, in some areas, but it really depends on the market - the property taxes on my home in a University city of 200,000 are 1/3 of what I was paying in rent - with the interest on my mortgage the amount of "lost" money comes out to roughly the same amount for now.

As long as property taxes do not outstrip my interest rate, that ratio should stay in my favor going forward.

Re:Analysis and Exploitation of a Linux Kernel Vulnerability on Tuesday January 19, 2016 @05:09PM (#10934488)
The /proc/kallsyms values are identical across identical kernel compilations.

Suppose you have a vulnerable CentOS 7 system that you want to exploit - you could get the proper addresses from your own CentOS 7 VM running the same kernel, apply those to a modified exploit compilation, and run that compilation on your target host.

Re:Analysis and Exploitation of a Linux Kernel Vulnerability on Tuesday January 19, 2016 @04:13PM (#10934080)
Is SMAP required for mitigation, or is SMEP enough?

IIUC SMEP is on Sandy Bridge processors too.

Re:Analysis and Exploitation of a Linux Kernel Vulnerability on Tuesday January 19, 2016 @12:59PM (#10932467)
Thanks, that worked.
Re:Analysis and Exploitation of a Linux Kernel Vulnerability on Tuesday January 19, 2016 @12:37PM (#10932285)
How do you find those addresses?
Re:Ask HN: Do you play Chess? on Tuesday August 04, 2015 @05:27PM (#10006390)
I cannot for the life of me make it through a game of chess without making some catastrophic blunder.

If programming was that unforgiving I'd have to buy a new system every time I wrote a function.

Re:Ask HN: Do you play Chess? on Tuesday August 04, 2015 @11:05AM (#10003840)
I'd consider myself a good programmer but an absolutely terrible chess player, so no, I don't think they really have much bearing.
Re:Removing Fish from a Surreal Abandoned Shopping Mall on Tuesday January 20, 2015 @04:42PM (#8919833)
I wonder if the fish actually ended up helping with the mosquito population?
Red Hat's communication on their distribution of Florian's patch was sorely lacking, especially after http://lcamtuf.blogspot.com/2014/09/bash-bug-apply-unofficia....

It was in no way clear that Red Hat's second release included Florian's fixes - I found out from Mark Cox's post on this Twitter thread - https://twitter.com/lcamtuf/status/516297412579581952

Re:Summary of ZFS on Linux for Debian on Tuesday September 09, 2014 @02:27PM (#8291774)
Anecdotally I see better performance using ZoL than I did when I was running the same zpool and hardware on FreeBSD.
Re:Summary of ZFS on Linux for Debian on Tuesday September 09, 2014 @02:25PM (#8291758)
Do you boot from your ZFS partition? The initramfs limitation would only come into play in that situation, I believe.
Re:Mailvelope – OpenPGP Encryption for Webmail on Tuesday September 02, 2014 @04:38PM (#8260004)
The "postcard -> unencrypted email as letter-in-envelope -> encrypted email" seems to be a very good analogy for explaining the need for encryption to laypeople.

The technicals are trickier (and outside my scope of expertise), but the "why do I need to use this" answer is one of the trickiest and most important questions to answer for any security application.

Re:GNU Screen v.4.2.1 on Wednesday April 30, 2014 @02:41PM (#7675384)
Unfortunately, not that I can find.

I'd love to expand this concept and do full window manager integration with tmux/screen, actually.

I can't see any problems with having a bottom-tabbed UI with nice tmux keybindings - "C-a 0" to go over to Chrome, quick split of current X view with "C-a %', etc would be phenomenal.

Does anyone know if this exists in some form already?

Re:GNU Screen v.4.2.1 on Wednesday April 30, 2014 @09:53AM (#7673266)
Iterm2 can do this with tmux (newer, non-GNU screen basically).
Re:Inside the tech aiming Aereo through TV's legal hoops on Monday April 21, 2014 @09:51AM (#7621016)
Even if I wanted to put up an antenna, certain spots are just not going to get reception easily for all of the channels I want to watch.
Isn't "except in emergencies" just asking for a company to liberally define "emergency"?
His "D3D interop" layer (I'm not sure why he called it emulation) is almost exactly what Valve just open-sourced.

https://github.com/ValveSoftware/ToGL

Re:Show HN: My Isometric Voxel Engine 6 Months Later on Friday March 28, 2014 @12:51PM (#7488400)
Very very pretty graphics. I love that it doesn't look like voxels.

I wonder if you could use this to import and export meshes from a physics sim?

If you could turn the brick wall, for instance, into a Havok mesh, simulate knocking it down, and then convert the results back into voxel land you could do some really neat turn-based persistent-world destruction stuff.

On a semi-unrelated note, is there a decent English-speaking online Go community anywhere?

I would like to try my hand at playing but I can't find anything along the lines of FICS, or even a decent-looking client for Android.

Re:Linux gets frozen, what do you do? on Friday March 14, 2014 @10:29AM (#7398912)
Sysrq is kinda neat.

You can force a kernel panic by 'echo c > /proc/sysrq' if you really want.

Re:The Truth About Speed Reading on Thursday March 13, 2014 @05:58PM (#7395415)
I read pretty quickly but have never expressly timed it (400WPM on Spritz seems a bit slow anecdotally, but I don't comprehend Spritz even on low speeds).

I think what I do is read pairs/tuples of words at once, and then move on to the next set.

Eg, to quote graeme - I read [This is of interest to me,] <move eyes> [as I have much practical experience] <move eyes> [with teaching people to read faster].

Re:Squirt.io – Readability Meets Spritz Speed Reading on Wednesday March 12, 2014 @12:22PM (#7386548)
Yeah, I tried reading an excerpt from http://deadspin.com/when-englands-greatest-genius-took-over-... and not only did it sound odd in my head, I felt like I wasn't really reading any quicker than I normally would.

I think that perhaps a line-by-line reader would be appropriate, rather than word per word.

Re:Butterfly: Your everyday terminal in your web browser on Friday February 28, 2014 @05:27PM (#7321972)
I think he means as a replacement for Powershell/Cmd.exe.

Older »