onlydnaq

6 ms·

1.
by onlydnaq 9mo ago
802.1x is quite trivial to bypass if you have an authenticated device (in this case the intercom) that you can transparently bridge[1]. [1]. https://www.defcon.org/images/defcon-19/dc-19-presentations/...
2.
by onlydnaq 4y ago
Something about that headline really irks me. I think GitHub is an amazing place for people to share code, I also think it’s really nice of them to do this. But the maintainers aren’t “their” maintainers. They are maintainers using GitHub f
3.
Anatomy of a Ghost CVE(daniel.haxx.se)
2 points by onlydnaq 4y ago|0 comments
4.
by onlydnaq 5y ago
Without having looked into it too deeply I feel that they are somewhat “cheating” by using a superserver to launch a new process for each connection, thus letting the OS handle the dynamic allocation needed for each connection. Still pretty
5.
by onlydnaq 5y ago
A CPU can halt as a power saving measure, and still respond to interrupts.
6.
by onlydnaq 5y ago
I don’t know where the files for the mouse are (or if they’ve been released), but the design files for the trackball can be found here [1]. [1] https://github.com/ploopyco/classic-trackball/tree/master/ha
7.
by onlydnaq 5y ago
I have one of the full size Ploopy trackballs, and it feels really good in the hand. It is 3D-printed, and it shows, but the texture of it feels pretty nice when using it. I struggled a bit with accuracy at first, but now I’ve lowered the D
8.
by onlydnaq 6y ago
> There’s probably a way to get those last three into my NixOS config There is, it’s called home-manager [1] and it’s a pretty nice way to manage your config files and user packages even if you’re not on a NixOS system. [1]. https:&#x2F
9.
Crux: Our new open-source tool for software verification(galois.com)
3 points by onlydnaq 6y ago|0 comments
10.
by onlydnaq 6y ago
It's worth to know that the watch also tracks HRV whenever you use the Breathe app, so if you want to get consistent HRV readings the easiest way is to use Breathe once a day (for example right when you wake up).
11.
by onlydnaq 6y ago
That was their April fools joke though.
12.
by onlydnaq 6y ago
> Could I have done all that in a single shell, then had it automatically cleaned up when I was done? Yes, that is a pretty standard workflow for most nix users. You either set up a shell.nix for your project with all of its dependencies
13.
by onlydnaq 7y ago
Why would anyone use rdrand directly? Seems like user space applications should use getrandom() or /dev/urandom and the kernel should use rdrand as a complementary random number source in its random number generator. No user space
14.
by onlydnaq 7y ago
That’s exactly what I meant as well. SQL may be the implementation, but if so with a well designed exposed schema, not with the application internals.
15.
by onlydnaq 7y ago
When it comes to modern web development I’m more of an observer than a contributor, so my opinion might not carry a lot of weight. However for me all these abstractions seems to get closer and closer to querying a database using SQL directl
16.
by onlydnaq 7y ago
I believe you might be confusing it with Voat.
17.
by onlydnaq 8y ago
I believe the correct way to protect against ReDOS is to use one of the many regular expression implementations that do not have exponential worst cases. Nowadays there are good DFA or Tree based matching algorithms that are O(mn) where m i
18.
by onlydnaq 8y ago
If I want to decrypt a message to you that I have intercepted I can create my own email containing a modification of the intercepted message and send it to you, causing you to send me the plaintext contents.
19.
Fair is not the default(design.google)
2 points by onlydnaq 9y ago|0 comments
20.
by onlydnaq 9y ago
The only difference I’ve seen is a function that converts Keras models into TensorFlow estimators.
21.
Pytorch 0.2.0(github.com)
2 points by onlydnaq 9y ago|0 comments
22.
by onlydnaq 9y ago
You could take a look at tobii [1]. They make some interesting products where they combine eye tracking, speech analysis and other stuff to create user interfaces for people with specific needs. [1] https://www.tobiidynavox.com&#
23.
by onlydnaq 9y ago
I would recommend you to try the intel python distribution. Comes with highly optimized numpy, scipy, matplotlib, pandas and so on. Everything compiled with icc and linked with MKL (intels BLAS library).
24.
by onlydnaq 10y ago
This is a classic trick, and as you write could be used for performance benefits in the old day. However, the semantics differ from just using a temporary variable in that if a and b are in the same memory location then the result will be z
25.
by onlydnaq 10y ago
To be honest, nonce reuse with Bernsteins authenticated encryption algorithms will lead to the same problem as those the author points out with GCM (i.e. plaintext recovery). However, the biggest issue with GCM isn't that the plaintext
26.
by onlydnaq 10y ago
That really depends on your use cases. I love Postgres and have been using it for a long time. However if you need good support for, for example, self-updating efficient materialized views, then Postgres won't really do (yet).
27.
by onlydnaq 10y ago
I don't really agree with the premise that not having type classes is as big of a problem that the author thinks, but to answer your question OCaml has functors which are basically higher order modules. A functor in OCaml is a module d
28.
by onlydnaq 10y ago
> At the moment there are few enough that they could fetch a list of all of them and cache it (the public registry lacks a documented API for doing that right now, but we can certainly provide one) Might I suggest having a bloom filter c
29.
by onlydnaq 11y ago
Awesome, good work. I was just going to ask you if you had any roadmap for adding Argon2i.
30.
by onlydnaq 12y ago
I don't believe that this is a critical issue. The PGP-trust model doesn't need you to trust neither the keyserver nor the connection to the keyserver. You are supposed to look at the actual key, and the actual signatures of the k

More ›