richm44

8 ms·

1.
by richm44 7mo ago
SBOMs are more an attempt to solve some of the problems introduced by software reuse. https://archive.fosdem.org/2025/schedule/track/sbom/ has some interesting talks about the successes and failures of t
2.
by richm44 7mo ago
Try this https://theconversation.com/the-reinhart-rogoff-error-or-how...
3.
by richm44 11mo ago
Here's an example I made a while ago of how easy it is to use LD_PRELOAD to hook things and change file contents etc. https://github.com/richmoore/reciprocity
4.
by richm44 11mo ago
If that same tool is unable to spot LD_PRELOAD in use then I'd suggest getting a new one. :-)
5.
by richm44 1y ago
Time for me to dust off CVE-2010-3170 again? :-)
6.
by richm44 2y ago
Odd - I also have 16.93 on Mac and I don't get the checkbox (unless I just can't find it I guess).
7.
by richm44 2y ago
As the article explains, that's not been implemented on Mac yet.
8.
by richm44 2y ago
Downloading things from the AIA fields would mean triggering HTTP/HTTPS requests to an untrusted URL from a certificate you haven't verified - not a good idea. What firefox does is cache intermediates that it has seen elsewhere, t
9.
by richm44 2y ago
1. A SYN will receive a SYN-ACK or a RST 2. A host from my machine is the same as from your machine 3. An IP from my machine is the same as from your machine
10.
by richm44 3y ago
It was also possible in earlier browsers by using hidden frames. User interaction or a timer would trigger, then you load the frame (which contained dynamically generated js) and then call the javascript you'd just loaded.
11.
by richm44 3y ago
You can't get perfection, but you can do things like ask for them to document the controls they implement and to evidence that they have operated them appropriately via an audit like SOC2.
12.
by richm44 4y ago
See https://woboq.com/blog/verdigris-qt-without-moc.html for detailed breakdown
13.
by richm44 4y ago
You're looking for these: https://github.com/hoglet67/RGBtoHDMI - HDMI adaptor - works nicely with the beeb https://www.gotekemulator.com/ - Floppy emulator that lets it use USB storage There are
14.
by richm44 5y ago
Here's a version of the same as a BBC Microbot tweet https://twitter.com/bbcmicrobot/status/1333542986588753921
15.
by richm44 5y ago
This video is good background for khtml/webkit on which chrome was based https://www.youtube.com/watch?v=Tldf1rT0Rn0
16.
by richm44 6y ago
If you care about performance then you should start by reading High Performance Browser Networking (the text is available online here https://hpbn.co/ ).
17.
by richm44 7y ago
Must be a while ago then - it's 12 characters upper, lower and digits. Pretty reasonable.
18.
by richm44 8y ago
I remember coding this effect in C a long time ago. Back in the day we used to use the frame buffer as the data store too, not really feasible today!
19.
by richm44 8y ago
The primary implementation on MacOS and iOS is SecureTransport.
20.
by richm44 10y ago
A few more: - Localhost is 127.0.0.1 - A TCP SYN will also always result in a SYN-ACK - Ok, a SYN-ACK or a RST - Ok, ok, an out-going TCP packet will always result in a TCP response
21.
by richm44 10y ago
There are some other fun edge cases - for example: - If you have a port-forward to a machine that is switched off then you can get ICMP network unreachable or ICMP host unreachable as the response to the a SYN in the initial handshake. This
22.
by richm44 10y ago
I'd recommend this book instead 'The Linux Programming Interface' http://man7.org/tlpi/ it's a lot more recent and the content is excellent, though it's not a free download. The author is also
23.
by richm44 11y ago
I'd like a standardised function to clear a block of memory that is guaranteed to not be optimised out, and a constant time compare function.
24.
by richm44 11y ago
Sadly it doesn't on linux due to overcommit. You can actually get the failure much later when you try to use the memory. The exception is when you try to allocate absolutely huge buffers. So malloc returning a valid pointer doesn'
25.
by richm44 11y ago
I was part of the Qt community at the time (and still am) and that's really not how it happened.
26.
by richm44 11y ago
Heh. Qt was released in 1995 and the The Cathedral and the Bazaar was released in 1997 with the OSI being formed in 1998. This means Qt pre-dates the term 'open source' by approximately 3 years!
27.
by richm44 11y ago
And people can't comment on them etc? TBH I'd be fine with it if they were flagged as the adverts they are.
28.
Is YCombinator astroturfing now?
1 points by richm44 11y ago|2 comments
29.
by richm44 11y ago
> - It's somewhat complicated for a site to implement correctly This is true, but the same thing was said about running a site at all not long ago. > - It mainly protects users who have already connected to a site once from a se
30.
by richm44 11y ago
That's not correct, it was to learn bignum arithmetic not C.

More ›