coolj

6 ms·

1.
by coolj 11y ago
Since this is just sending out DISCOVERs and never REQUESTs on any OFFERs that come back, servers can technically reuse IPS from outstanding offers: https://tools.ietf.org/html/rfc2131#page-31 Because the serve
2.
by coolj 12y ago
Way back in the 90's my CRT monitor went out. Money was tight so I had to wait a couple of weeks before I could replace it. I went to a local computer repair shop (as in, actual repair, like replacing blown capacitors on mainboards and
3.
by coolj 12y ago
You put together a really awesome project! Kudos on that and for sharing it first and foremost!! I speak regex pretty fluently, and I may very well have reached for sed/perl -ne there as well, depending on mood. I guess it just struck
4.
by coolj 12y ago
I get the impression that most violent terrorist groups are rather low-tech and are not using _any_ server hardware. If you're aware of terrorists routinely operating DCs or co-locating servers, feel free to correct my understanding.
5.
by coolj 12y ago
The regexp must have taken some time to write and debug: s/^. "n":"(.+)","i":"(.+)","p":\[([\d\.\-]+),([\d\.\-]+)],"s":"(\w+)","c":"(.+)". $&#x2F
6.
by coolj 12y ago
GDB uses a system call(s) to attach to the running process[1], and python exposes an API that lets you evaluate code in the current VM context[2]. Specifically, https://github.com/lmacken/pyrasite/blob/develop
7.
by coolj 12y ago
> Based on my data, they're not 1:1 native performance. I suggest you consider the data before dismissing it. I think you're conflating his separate points: "What you -are- benchmarking is namespaces, cgroups, CoW filesyst
8.
by coolj 12y ago
INAL (but I play on one daytime TV): Their whole claim aginst TOR amounts to: pp. 2-3 "According to its website, TOR "was originally designed, implemented, and deployed as a third-generation onion routing project of the U.S. Naval
9.
by coolj 12y ago
Can you parse HTML with regex? http://stackoverflow.com/a/1732454
10.
by coolj 12y ago
Brute force is infeasible if you get random heap data along with key fragments. Based on the way the exploit works[0], my amateur guess would be they sent small payloads and actually did get SSLv3 records, because they found the right heap
11.
by coolj 12y ago
Probably less of a downside than not being able to move your lower body at all, but yeah.
12.
by coolj 12y ago
What if it was a donation to Americans United or Planned Parenthood? There are people who earnestly believe that AU hates religions and-or religious people, or that PP hates traditional family structure. What if he donated to a group that w
13.
by coolj 12y ago
> an opinion people shouldn't be held to account for... I believe people should be held publicly accountable for their actions, not their thoughts/opinions, no matter how strongly I may disagree with their ideas. I wouldn'
14.
by coolj 12y ago
https://defuse.ca/audits/encfs.htm https://defuse.ca/audits/ecryptfs.htm Probably better to use ecryptfs or dm-crypt.
15.
by coolj 13y ago
curl -s https://raw.github.com/bluedragonz/bad-bot-blocker/master/.h... | awk -F\" '/SetEnvIfNoCase/ {pattern = pattern $2 "|"} END {print "if ($http_user_agent ~ (" su
16.
by coolj 13y ago
Should you judged by the views and actions of others who self-identify as "hackers"? If the label includes people with a wide range of fundamentally incompatible views, it's not very useful to use as a yard stick. It looks a
17.
by coolj 13y ago
Agreed. I wasn't defending DO's professionalism there, just saying that from my experience creating base images for a (different) cloud provider, it looks like an artifact of image creation rather than a real cause for alarm (I wo
18.
by coolj 13y ago
To be honest, this looks like an artifact of the base image creation process. "This file is used to clean up traces from DigitalOcean images before being published." I don't think someone actually logged in and ran those comm
19.
by coolj 13y ago
> Or, that our policy on not doing a secure delete by default isn't something you agree with? This one. Choosing insecure defaults for a virtualization API is a Bad Idea. As a rule of thumb (to put it bluntly), people are dumb. If y
20.
by coolj 13y ago
Looking at their pricing page, it looks like an instance with 512MB RAM comes with a 20GB disk. Depending on host load, IO and process niceness etc, I can see a `dd if=/dev/zero of=...` taking ~10 minutes easily.
21.
by coolj 13y ago
I think he's showing that the data is not "destroyed" in the sense it still exists. Destroy in a virt context doesn't necessarily mean "destroy all the resources associated with a VM"--I don't know about D
22.
by coolj 13y ago
DO is essentially saying they're using insecure defaults by design, which is a Really Bad Idea, even if it prima facie saves time/money. It's relatively easy for them to post a point in a FAQ about why you're billed for
23.
by coolj 13y ago
If you make an API call that asks for your data NOT to be scrubbed, then it's not a leak that your data isn't scrubbed--you asked for it. If you haven't read the docs, you might not be aware that you're asking for it. Th
24.
by coolj 13y ago
I don't really see how this is leaking data. I can use the dropbox API to make a bunch of files with private data shared with the world. But dropbox isn't "leaking" my data, I'm using the API in such a way that make
25.
by coolj 13y ago
Also, even if they zero the primary block device, what about swap if it's provided as a separate block device?
26.
by coolj 13y ago
Check out the Mouseless Browsing extension if you're using firefox: https://addons.mozilla.org/en-us/firefox/addon/mouseless-bro... It's overkill to have it show the IDs all the time, so you can dis
27.
by coolj 13y ago
http://www.tldp.org/LDP/abs/html/ TLDP's Advanced Bash-Scripting Guide is a great resource for learning bash. For example, this section talks about the meaning of "$*": http://www.tl
28.
by coolj 13y ago
It's nice to see a renewed interest in developing mplayer. Do you know if there are plans to get it packaged by the major distros?
29.
by coolj 13y ago
> Interesting, but now I'm even more confused. How can we possibly explain that a (go client -> go server) (which are in separate go processes) performs far worse than (go -> scala server), given that the go server seems to be
30.
by coolj 13y ago
Interestingly, both the go client and the scala client perform the same speed when talking to the scala server (~3.3s total), but the scala client performs much faster when talking to the go server (~1.9s total), whereas the go client perfo

More ›