ef47d35620c1

5 ms·

1.
OpenBSD ASLR versus Linux ASLR(aboutthebsds.wordpress.com)
2 points by ef47d35620c1 12y ago|0 comments
2.
by ef47d35620c1 12y ago
I've had very good reliability from my SSD drives as well. Some have been running almost continuously since 2009.
3.
by ef47d35620c1 12y ago
I'm learning to do this again. At first, I had to make myself, but now I really enjoy it. I typically walk during lunch and in the evenings, just for the sake of walking and thinking. I find that it reduces stress and helps me to think
4.
by ef47d35620c1 12y ago
tmux is included in OpenBSD base too. So if you use OpenBSD, it's there by default.
5.
by ef47d35620c1 12y ago
You could also remove the hard drive. It's very easy to do and would prevent any accidental write.
6.
by ef47d35620c1 12y ago
I very much agree. When that happens to me, it's usually because I'm thinking about the issue in the wrong way because of how I have read (or perceived) the code and how I think the code should be. Wrong notions, assumptions, etc.
7.
by ef47d35620c1 12y ago
The post was deleted, but it implied that all software closes TCP with a FIN. Some software sends a RST, no FIN. The issue is that the answer is relative. There are no absolutes. So yes, it does depend and yes there is always an explanation
8.
by ef47d35620c1 12y ago
The 'it depends' answers are good and I would not cite them as evidence of a problem. You employee people who understand what they are talking about and who also understand the importance of an accurate answer. They are probably v
9.
by ef47d35620c1 12y ago
I don't know much about systemd, so I can't say either way. So long as I can still get syslog style plain text logs, then I have no objections. Unix and text log parsing is unparalleled. If simple text log parsing and manipulation
10.
by ef47d35620c1 12y ago
Also, I believe that only binaries can be FIPS certified, not source code, so there are times when one has to use an old, out-dated openssl binary in order to be compliant.
11.
by ef47d35620c1 12y ago
That's part of the culture. It's nothing personal. Don't take it to heart if what they say offends you.
12.
by ef47d35620c1 12y ago
Would a possible solution be to check how many people are using the random generator...? One preson may have multiple processes reading from /dev/urandom.
13.
by ef47d35620c1 12y ago
Yes. Here's a Windows keystroke logger (with source code) that uses GetAsyncKeyState. I wrote this years ago to show an IT auditor that a restricted user could run a keystroke logger (he was adamant that was not possible). It works on
14.
by ef47d35620c1 12y ago
I agree, and I think that the COPD is probably worse than the cancer. I only meant to point out that many people in affluent western countries smoke, over eat, drink excessively and do other physically unhealthy things (because they have th
15.
by ef47d35620c1 12y ago
I heard once that one cigarette a day as a stress relief may actually extend your life. I'm not sure about that, but I do think we need to be mentally and emotionally healthy too. Our health and well-being is not purely physical. I wou
16.
by ef47d35620c1 12y ago
Thanks. I did not know that.
17.
by ef47d35620c1 12y ago
What language is he implying to be "good"? It's obvious that he thinks C, C++, C# and Java are bad (due to syntax). The world mostly runs on those, so I guess we're all doomed. But if they are so "bad", then wh
18.
by ef47d35620c1 12y ago
I do not think this is significantly new as it has been documented in the official TC source code and various 3rd-party source code (TCHead, tcplay, etc.) for many years. I was the first to crack the majority of the TrueCrypt volumes in the
19.
by ef47d35620c1 12y ago
If I went around lording my specific domain knowledge over others, I would never learn anything new myself. What a waste of my life and human interactions that would be.
20.
by ef47d35620c1 12y ago
The truth stands on its own.
21.
by ef47d35620c1 12y ago
It's a client problem too. Many people are over-looking that.
22.
by ef47d35620c1 12y ago
Secure coding is very prevalent in C++ (outside the group of old C programmers who write C++ code as if it were C). C++ is far safer than C.
23.
by ef47d35620c1 12y ago
Thank you for pointing out that this is not an issue in C++, only in C. There are times when we need C and one can write C code and compile it with a C++ compiler. It's an option to help ease people to modern, idiomatic C++, but please
24.
by ef47d35620c1 12y ago
I would suggest that they are only 14 years old right now, so none of them have made it to 100 yet. The truth will be know in 86 years, perhaps sooner.
25.
by ef47d35620c1 12y ago
A local news outlet in the town of Springfield doesn't typically need to place the town name in absolute terms. The locals know what they mean. Springfield is the place (right here) that they all know and love. The onus falls on nation
26.
by ef47d35620c1 12y ago
The insurance company knows your boyfriend smokes now. Expect higher rates soon.
27.
by ef47d35620c1 12y ago
A degree is just a piece of paper. I have one. It has 'Phi Beta Kappa' printed on it, but most people don't know or care what that means. When I look at it, I see a cloud full of rain. The rain drops fall on the earth and wat
28.
by ef47d35620c1 12y ago
In C++, std::set and std::map are typically implemented as RB trees. To compare the performance of those to a hash backed container, try std::unordered_set and std::unordered_map.
29.
by ef47d35620c1 12y ago
I do not. That would interfere with my experiment. My hosts stand on their own on the Internet. All account passwords are 160-bits. Have at guessing them.
30.
by ef47d35620c1 12y ago
These are not production systems, but yes, that patch logs all passwords. I only use keys.

More ›