News for hackers. Stuff that matters.

mje__

Re:In Defence of Monoliths on Friday October 23, 2015 @03:50PM (#10440903)
Or sometimes 10s, or never, or partial results, or dropped connections, or...

The network is not reliable.

assert() is a macro that is usually disabled in production builds. Input validation is obviously most important in production, so assert() should never be used for validation.
Re:Photos Preview on Friday February 06, 2015 @02:48AM (#9008069)
That's not true at all. Lightroom can add photos at their current location, or import them to a location of your choice. There's no "hidden directory".

Lightroom supports sidecar (xml) changes, or syncing metadata to the files. Your choice.

Re:A few About boxes from vintage Mac applications on Saturday January 17, 2015 @08:44PM (#8906288)
All that dithering! I don't miss that at all.
Re:Attack Surface: Why I Unikernel, Part 1 on Wednesday November 05, 2014 @03:30PM (#8564083)
The smallest EBS snapshot you can create is 1GB
Re:AWS Frankfurt, Germany Region on Thursday October 23, 2014 @07:48PM (#8501364)
I'm not sure what you mean?
Re:Tabnabbing: A New Type of Phishing Attack (2010) on Tuesday September 09, 2014 @02:31AM (#8288996)
Yeah, me too. I opened up a bunch of tabs from the front page (as is my usual habit here, reddit, etc), and by the time I got to this it had changed to Gmail and I was totally fooled. I've gotta be more careful!
Fascinating article. I also really enjoyed the presentation - the mix of writing, video and images worked well together. This is the first time I've seen the "BBC Magazine", and the experience is great.
Re:Comparing Cloud Compute Services on Tuesday July 08, 2014 @01:13PM (#8005551)
I'm really impressed with the amount of effort that has gone into this study, but those charts are just awful. Those line charts should be bar charts IMHO, I'm immediately scanning the chart left-to-right before I realise that the x-axis are actually categories
Re:Improved default settings for Linux machines on Tuesday June 24, 2014 @11:50PM (#7942148)
Agreed. The last thing you want is to have to debug those weird "it worked on my desktop" issues that come from having a really weirdly configured system
Re:Amazon Fire Phone on Thursday June 19, 2014 @12:47AM (#7914520)
Sure, but Prime Music is also only a few weeks old
Re:Docker container breakout? on Wednesday June 18, 2014 @01:11PM (#7911249)
Agreed. It's also a question of complexity. Xen (for example) has a significantly smaller attack surface than the linux kernel because it just has less stuff to do
Re:$4 ARM PSoC prototyping kits on Tuesday June 17, 2014 @02:00PM (#7905889)
I generally understand the motivation of these companies, but damn I really hate that they all build IDEs. I wish they would focus on command-line tools or libraries and integration with (say) eclipse for those that really want an IDE. Having a different half-assed IDE for each hardware platform makes for a frustrating day at work

Build automation for embedded systems is such a PITA. My previous job we had a build step that used AutoHotKey to click through the manufacturers 'proprietary tools'. You can imagine how reliable that was

It will cost you if you have a malicious uploader. I'm pretty sure S3 is not free just because you had objects in there for less than 24h.

S3 supports pre-signed urls for exactly this use-case.

EDIT: Nope, my bad. Doesn't look like S3 supports pre-signed urls for multipart uploads

Re:Understanding IP, TCP, and HTTP on Saturday March 08, 2014 @06:53AM (#7364949)
If you write anything that communicates over a network (e.g. anything using HTTP), you need to know at least some of this stuff, otherwise you're not going to be able to explain why (for example) your service call latencies have a big spike around 200ms.
Re:Rubygems.org AWS bill for Feb 2014 [pdf] on Wednesday March 05, 2014 @02:38AM (#7345858)
Wow, as someone who uses rubygems all day and is not in "US and EU only", I'm glad you're not involved in this project.
Re:The future of Fiber on Wednesday February 19, 2014 @03:43PM (#7266097)
It seems one of the biggest costs of fiber is installation; i.e. trenching. Why is it not hung from poles? It must be much cheaper and quicker, surely?
Re:AWS Tips, Tricks, and Techniques on Thursday January 30, 2014 @10:19AM (#7151056)
Also useful for authenticated downloads - don't tie up an app thread, but have your app redirect to a pre-signed url
I found a similar thing happening in Yongsan - Seoul's electronics market. I visited recently after a 5-year absence and was saddened to see so many shuttered stores.
Isn't this because the US wouldn't export crypto software that supported keys > 40 bits to Korea in the 90s, forcing them to develop their own stronger algorithms?

Anyway, it's so bad that my (technophobe) wife refuses to shop online anymore because she is forced to use IE (and vastly prefers to use Chrome)

Is Github still running Ruby 1.8? vmg mentioned at last year's Rubyfuza they had "one of the largest 1.8 deployments in the world".
Re:How Tumblr uses \0 in the output of meta tags on Sunday September 15, 2013 @09:05AM (#6388956)
Without doubt, this is the most important lesson I've learned in my professional career.
Re:Don't trust me: I might be a spook on Tuesday September 10, 2013 @01:14PM (#6361415)
It doesn't mitigate untrusted software, but an interesting approach to tamper resistance can be found in Infineon SLE78 security controllers (for smart cards, etc). They run dual CPUs out-of-sync and compare results after each instruction.

http://www.infineon.com/cms/en/product/chip-card-and-securit...

Re:Moving From Oracle to CouchDB: Data Management at CERN on Friday September 06, 2013 @11:49AM (#6341016)
"In the end, Zdenek had a single-server CouchDB installation on the order of hundreds of megabytes of metadata stored."

I think the title is a little inflammatory, no?

Re:How not to check the validity of an email address on Thursday September 05, 2013 @07:15AM (#6333404)
Yeah, it "literally" kills me every time
Re:Containers and Docker: how secure are they? on Wednesday August 21, 2013 @07:03PM (#6253898)
I would disagree with your assertion in the case of PV guests in Xen - they have an extremely small attack surface. The hypervisor may be "on the front line", but is a far simpler beast than the kernel.

Certainly Xen has its fair share of vulnerabilities, but vastly fewer than the kernel.

Re:Tesla Nabs 8% of the U.S. Luxury Car Market on Monday August 05, 2013 @02:28AM (#6158725)
Did anyone else notice the stock price? From $35 in March to $138 today; that's pretty impressive growth
Re:Rooting SIM cards on Monday July 22, 2013 @04:08AM (#6082440)
SIM's use a derived key - which means that getting your hands on that key would only affect that specific SIM, and generally the Km (master key) exists only on an HSM.

There's not much point in the intelligence services going after these keys, if they can just put a box in the operator's data center and capture unencrypted traffic

Older ยป