News for hackers. Stuff that matters.

justinfrankel

yep that makes sense
ah reading their analysis, there are errors that explain this. Particularly this:

  tcp_now   = 4,294,960,000  (frozen at pre-overflow value)
  timer     = 4,294,960,000 + 30,000 = 4,294,990,000
              (exceeds uint32 max → wraps to a small number)
timer wraps to a small number, they say

  TSTMP_GEQ(4294960000, 4294990000)
they forgot to wrap it there, it should be TSTMP_GEQ(4294960000, small_number)

  = (int)(4294960000 - 4294990000)
  = (int)(-30000)
  = -30000 >= 0 ?  → false!
wrong!

There may be a short time period where this bug occurs, and if you get enough TCP connections to TIME_WAIT in that period, they could stick around, maybe. But I think the original post is completely overreacting and was probably written by a LLM, lol.

have multiple macOS machines with 600-1000+ day uptimes, which do TCP connections every minute or so at a minimum, they are still expiring their TIME_WAIT connections as normal.

these kernel versions:

Darwin Kernel Version 20.6.0: Thu Jul 6 22:12:47 PDT 2023; root:xnu-7195.141.49.702.12~1/RELEASE_ARM64_T8101 arm64

Darwin Kernel Version 17.7.0: Wed Apr 24 21:17:24 PDT 2019; root:xnu-4570.71.45~1/RELEASE_X86_64 x86_64

so... wonder what that's about?

Re:How Honeycrisp Apples Went from Marvel to Mediocre on Saturday November 30, 2024 @09:04PM (#42285562)
+1 here -- Mutsu are fantastic, readily available at NYC greenmarkets in the fall and into the winter, though there are pretty large differences in flavor and texture between various orchards too. Samascot is my fav.
If you have an Apple Silicon mac you can install Win11 in UTM and it works great for dev purposes. Can get the free builds via Windows Insider, too.
Re:We've Been Treating Concussions All Wrong on Monday March 18, 2024 @11:31PM (#39752683)
except: 1) avoid the possibility of head injuries, and 2) if you suffer more than slight symptoms from daily routine, dial it back
Re:Git log is not a changelog on Saturday July 16, 2022 @10:58PM (#32124077)
or you might have an alternate prefix for "things that go in development build changelogs but not final changelogs", e.g. "-"
Re:Winamp source code leak on Monday November 29, 2021 @06:05PM (#29386513)
you can also install reaper and this plug-in and get something highly winampish with its own special authenticity:

https://landoleet.org/reaplay.zip

Re:Winamp source code leak on Monday November 29, 2021 @05:55PM (#29386411)
fwiw dro’s been around a long time and i would be inclined to trust them :)
Re:Exciting Days for ARM Processors on Monday July 06, 2020 @11:01PM (#23755282)
Is plain win32 API supported on arm64/Windows? Is there a version of MSVC? Or does one use mingw?
> I’m not highly conversant with ARM linux, but in my mind I imagine it’s still largely a second class citizen

IMO ARM linux is great, the real thing lacking is good hardware to run it.

Re:A new project: multi-track audio editing (2005) on Sunday June 07, 2020 @10:58PM (#23453177)
"Interesting to see that it took 15 years to get where he is today."

If I had started it in 2000 it would've taken 20 years to get to where it is (OK fine, would be) today...

Re:UTF-8 Everywhere on Tuesday April 14, 2020 @07:43PM (#22872811)
I would leave this on their facebook page, but fuck facebook so I'm posting it here hoping that someone will find it useful.

We have a zlib-licensed wrapper header for some commonly-used win32 APIs to make them take UTF-8, see:

https://github.com/justinfrankel/WDL/blob/master/WDL/win32_u...

https://github.com/justinfrankel/WDL/blob/master/WDL/win32_u...

(This is used in REAPER so it's relatively well tested!)

Re:Coronavirus has caused a bicycling boom in New York City on Saturday March 14, 2020 @03:18PM (#22577877)
I have short-reach dual pivot brake calipers on a bike which sees >2000 miles year-round each year in NYC, and my rims are still fine after 7 years.

From my experience, stopping distance is usually dictated by road conditions more than the brakes. This is with 34mm wide tires, and properly adjusted brakes (a lot of times when people complain about rim brakes, the issue is that they are not working properly).

Side note: fenders are a must!

Re:Reaper: Digital Audio Workstation on Saturday December 21, 2019 @09:50PM (#21854837)
I'm not sure why, either... but since we're here: REAPER is very programmable which might appeal to readers of this site. Specifically:

ReaScript: can program high level UIs/project manipulation/etc in Lua or EEL2

JSFX: can write realtime signal processors in EEL2

Video: can write/edit video FX in EEL2 (a ton of included presets are there which can be tweaked on the fly)

This bill is an offensive joke -- more than 2 years until the first plan is due? The first plan is due after the next city council and mayoral election.

The new city government could completely cancel the bill if they felt like it.

How many people will be killed by cars in the meantime?

IMO if you're a city responsible for the safety of your citizens, and you agree what the right thing is to do, adding unnecessary delay for no real reason is reprehensible.

A quote from the NYT article https://www.nytimes.com/2019/10/28/nyregion/nyc-biking-death...

"To gain Mr. de Blasio’s support, Mr. Johnson’s office agreed to push back the start date for the first streets plan, from this month to December 2021, around the time the next mayor takes office."

Re:Practice Sight-Reading Music on Sunday October 20, 2019 @10:39PM (#21308940)
Very cool but Bb doesn't seem to work right here: https://1014.org/_/sightread_bb.png
Re:Deciphering the postcard-sized raytracer on Tuesday December 25, 2018 @04:36PM (#18759306)
This is awesome!

There’s a bug in the deobfuscated version — sizeof(letters) should be 60 or sizeof(letters)-1 (that version reads past the end of the buffer otherwise).

Re:Removing a recursion in Python, part 1 on Saturday December 15, 2018 @04:21PM (#18690407)
Am I the only one who read this and thought: hmm, for any number 32 or higher, the minimum cost would always be 5? Who cares about recursion when it's such a constrained problem? :)
Re:1/0 = 0 on Friday August 10, 2018 @06:37PM (#17737195)
FWIW the EEL2 language (part of https://www.cockos.com/wdl/ and what powers REAPER's JSFX audio, video processors, etc) also makes this design decision...
Re:Lenovo ThinkPad X1 Carbon 5th Gen Laptop Recall on Friday February 09, 2018 @03:18PM (#16343504)
I got a peek at the recall instructions, for those inclined to check themselves: https://twitter.com/JustinFrankel/status/962056021156945920
Re:A Reimplementation of Winamp 2.9 in HTML5 and JavaScript on Thursday February 08, 2018 @08:44PM (#16337248)
token comment
Re:UPX – Ultimate Packer for Executables on Thursday October 12, 2017 @04:24PM (#15461022)
You can actually set NSIS to UPX-pack its stub, if you're so inclined, but the stub is pretty small already.
Re:Learn Ethereum smart contract programming on Monday July 24, 2017 @11:44AM (#14839400)
right on, the tutorial was interesting (even for someone with little interest in all things blockchain :)
Re:Learn Ethereum smart contract programming on Monday July 24, 2017 @08:37AM (#14837896)
yeah, it's completely broken. which normally you would fix, but oh look too late!
Re:Learn Ethereum smart contract programming on Monday July 24, 2017 @07:56AM (#14837686)
the lottery code is so broken it isn't even funny. actually it is hilarious! the first bet will almost always win, especially if it's a very small bet!
Re:On Blockchain, Intermediaries, and Hype on Tuesday June 27, 2017 @11:14PM (#14651452)
That's all great sounding in theory, but how exactly would someone in Venezuela go about acquiring bitcoin?
Right, most people using audio applications probably don't really care about 10 bit color.
Rendering the arrange view, which can change drastically in response to user edits. We've tested using OpenGL to update, but as the texture needs to get uploaded each frame it's only marginally faster, and uses significantly more resources.
We render everything (for portability) in 32bpp ARGB, so that'd require conversion anyhow.

Older »