News for hackers. Stuff that matters.

rjgray

Re:Understanding the Go Runtime: The Memory Allocator on Thursday February 26, 2026 @07:06PM (#47174258)
I found https://nghiant3223.github.io/2025/06/03/memory_allocation_i... to be another excellent resource on this topic.
Re:Frequent reauth doesn't make you more secure on Friday June 13, 2025 @05:51AM (#44267122)
ISO 27001 doesn't say this. The control implementation guidance (ISO 27002) specifically cautions against requiring frequent password changes.
Re:Ed: The little editor that could [video] on Friday May 30, 2025 @11:53PM (#44141743)
I love this video about 'ed', the standard Unix text editor. I'll admit that in nearly 30 years of using Unix, my occasional interactions with ed have involved opening it accidentally and immediately exiting with ctrl-c. Having used vi and vim for most of that time, it's interesting to see how much of vim's interface draws from ed.
Re:Tailscale has raised $160M on Wednesday April 09, 2025 @01:48AM (#43629247)
Do you mind sharing the better solutions you'd consider at the higher price point?
Hanno Böck's monthly Bulletproof TLS Newsletter is an excellent summary of TLS/PKI goings-on.

https://www.feistyduck.com/bulletproof-tls-newsletter/

Re:Liverpool Football Club’s reliance on analytics on Wednesday May 22, 2019 @04:33PM (#19985160)
Arsenal F.C. on the other hand are commonly referred to as the Arsenal.
Re:Bitcoin Blows Past $9,000 on Sunday November 26, 2017 @05:12PM (#15783344)
I don't know where you're based, but for me (NZ), I get redirected to gizmodo.com.au. I see $12k as well, but I'm guessing that's in AUD? Looking at BTC price graphs it seems the most recent peak was at about $9500USD
In terms of affordability, you'd need to look at average salaries as well. My impression is that Auckland doesn't fare so well on that front.
Re:Use caps lock as a language switch on Thursday September 15, 2016 @08:32PM (#12511080)
I don't have my Mac in front of me, but you can do this using Seil[1] and Karabiner[2]. From recollection, you disable caps-link in OS X settings, use Seil to map caps-lock to control, and then use Karabiner to map tapped-ctrl to escape. Sounds a bit hackish, but it works very well.

You can also do the same thing on Linux using xcape[3]

[1]: https://pqrs.org/osx/karabiner/seil.html.en [2]: https://pqrs.org/osx/karabiner/index.html.en [3]: https://github.com/alols/xcape

Re:Let's Encrypt Root and Intermediate Certificates on Friday June 05, 2015 @04:50AM (#9664514)
Another factor is that some browsers will automatically retrieve intermediate certificates that aren't supplied by the server. I'm not sure if it's still the case, but it used to be that Firefox would fail on HTTPS connections with a broken chain where IE would succeed.

http://serverfault.com/a/449144

1. That's my understanding from the article.

2. I think this is for the situation where the glob doesn't match, and the nullglob shell option is not set. Without that option, a non-matching glob is processed as a regular word. e.g. In an empty directory:

  $ for file in ./*; do echo $file; done
  ./*
Note the glob pattern is printed by the echo statement. The -e test catches this condition.
Is there any good reason to use this approach over the more readable 'dirname $0'? Not that it would have made any difference to the bug in question of course.
Re:Pythonpy – Command-line Kung Fu with Python on Tuesday January 06, 2015 @07:41PM (#8848160)
It's required to prevent the shell from interpreting and expanding special characters. e.g. in the example you provide, without quotes * will be expanded to a list of files in the current directory.
I presume by 'Stack Y' they mean a network protocol not supported out of the box, rather than a platform the editor doesn't yet run on.
Re:Rolling Shutters on Monday October 13, 2014 @04:29AM (#8447935)
Cool!

It reminds me of the slitscan special effects technique that was used to create the stargate sequence at the end of 2001: A Space Odyssey.

http://filmmakeriq.com/lessons/slit-scan-recreating-the-star...

Re:Click – Python library for command-line interfaces on Thursday April 24, 2014 @07:26AM (#7639489)
It's a wrapper around optparse, as per http://click.pocoo.org/why/.

I'm curious about that decision given that optparse is deprecated. It says it's because argparse doesn't allow nested commands, but I don't really see why that feature is so desirable as to warrant using a deprecated module. I probably need to have a play with it to find out.

Looks like a nice module.

Re:DynDNS ends free services on Wednesday April 09, 2014 @08:10AM (#7558795)
For anyone that happens to use PointDNS DNS hosting (it's free for a single domain I believe), I've written a small script to be called from cron.

https://github.com/vortura/point-dyndns

Re:SSL/TLS analysis of the Internet's top 1,000,000 websites on Saturday January 11, 2014 @09:59AM (#7042724)
This repo is a collection of sensible SSL/TLS options for a variety of web servers, including Apache.

https://github.com/ioerror/duraconf

Re:Fourier Toy on Wednesday November 06, 2013 @05:12PM (#6685863)
Wow! So cool. I love the connection between the waveform and the trochoid curve on the left.
Re:/dev/null as a Service on Tuesday October 29, 2013 @06:24PM (#6637932)
I especially love that the web proxies at my place of employment block this site as "Online Storage"
I think the article was saying that only 1 in 5 people who need a hearing aid have one, rather than that every 5th person should have one.