xtrapolate

8 ms·

61.
by xtrapolate 8y ago
I can recommend Snyk[0] (I am not affiliated, have used their products with clients before). They've got a fully functional free tier, and they have a ton of relevant features. And yes, there are other, competing products out there you
62.
by xtrapolate 8y ago
> "Considering C++ or Rust." You've mentioned many issues you've had with your Python code base. Would you kindly expand on how/why C++ or Rust solve those in your particular case?
63.
by xtrapolate 8y ago
> "you cannot afford to spawn the interpeter on each request" You mention this as a case against using Python, but this is entirely unrelated to Python as a framework. In other words, had they used PHP or Node or %s, they'
64.
by xtrapolate 8y ago
https://rada.re/r/cmp.html Radare, in my opinion, is mostly lacking on the user-experience sides. IDA is easier to pick-up and use. Also, I feel Radare's decompilers don't fare as-well as Hex-Rays. I equate t
65.
by xtrapolate 8y ago
Honest question. You keep expecting all of these to be readily available for you in C (as part of the standard). Why don't you, instead, just a use a language/ecosystem which already offers all (or most) of these for you today? (i
66.
by xtrapolate 8y ago
It doesn't really matter which hash function they use here... Your common MAC-48 address is a [Manufacturer ID (3 bytes), Device ID (3 bytes)], this further reduces the enumeration requirements...
67.
by xtrapolate 8y ago
What happens when a GDPR claim is dismissed by a court? Are the plaintiffs required to compensate the defendants? Can Facebook/Google counter-sue for damages? What's stopping anyone from randomly filing GDPR claims against every o
68.
by xtrapolate 8y ago
> "hope they dont have a wealth of new source IP's to spawn their attacks from" You'd still be able to detect new addresses and block as necessary. I don't see your point, of course the solution proposed isn&#x27
69.
by xtrapolate 8y ago
None of these options will solve your issues. Your attackers will simply re-adjust the mechanism as soon as they figure out your heuristics. You'll need to focus on two efforts: (1) Being able to identify the IPs from which attacks ori
70.
by xtrapolate 8y ago
Do I have to state the obvious? This is an open source effort. Not all attempts at persuasion bear fruit. If you feel you are being ignored (by what would appear is a group of maintainers you absolutely despise), I guess the other option wo
71.
by xtrapolate 8y ago
> "instead of fixing what it has and being standards compliant, it chooses to break away and do its own thing along with the new bugs and other issues which will surely arise." Well, people are still free to maintain and improv
72.
by xtrapolate 8y ago
> "Old does not mean bad" It doesn't automatically mean "good" either. > "in its pursuit to be Windows" Would you please elaborate?
73.
by xtrapolate 8y ago
> "Typically these are brittle C/C++ programs, with lots of state and branching logic, and further they become extremely hard to refactor because their function is so integral to running the facility" Switching to Erlang w
74.
by xtrapolate 8y ago
> "Your argument is that there is no case law so you get to claim whatever imaginary consequence you want." No, that's not my argument at-all. That's just your personal interpretation of my words. > "You’re al
75.
by xtrapolate 8y ago
> "I guess we should only enact new laws which already have established case law. /s" I disagree with the author's lenient and dismissive take on people's genuine concerns. Interpret it as you will.
76.
by xtrapolate 8y ago
Stop spamming every single comment on this thread. Your question is irrelevant and misdirected - I've literally started my argument by saying that "there's currently no case law surrounding GDPR".
77.
by xtrapolate 8y ago
There's currently no case law surrounding GDPR. Moreover, some elements of the GDPR are up for interpretation. People are rightfully concerned. > "This post is an attempt to calm the nerves of those that feel that the(ir) world
78.
by xtrapolate 8y ago
> "But switching off location will probably do it too." Wrong. Phones can be triangulated by the carriers regardless.
79.
by xtrapolate 8y ago
(1) I don't want to hire dishonest/unreliable/disingenuous people. I wouldn't want to work alongside them, and I prefer to distance myself from such personalities at all cost. (2) From a job seeker's perspective, I
80.
by xtrapolate 8y ago
> "(Astute readers will notice they are all AMD (Socket AM4) motherboards. The whole Meltdown/Spectre debacle rendered my previous Intel system insecure and unsecurable so that was the final straw for me — no more Intel CPUs.)
81.
by xtrapolate 8y ago
> "But maybe I'm wrong." I don't think you are wrong. Timing APIs are tricky and complicated. The small print really matters. Experienced engineers will know this, and so the answer in this instance, as annoying as
82.
by xtrapolate 8y ago
I'd personally just prepare a small VirtualBox image with everything required to build the code, and release that instead.
83.
by xtrapolate 8y ago
AI is large enough a field to warrant a new, dedicated track. In practice, as of current times, AI R&D/academia are enabled (perhaps even fueled) largely by the "traditional" constructs of computer science. In my opinion,
84.
by xtrapolate 8y ago
Correct me if I'm wrong, but Objective-C's ecosystem is very much Apple-centric. Things in that regard have only started changing fairly recently.
85.
by xtrapolate 8y ago
Very interesting! On a slightly related note, I'd personally love to see more "C++ variants" (for lack of a better term) out there. By that, I'm referring to ecosystems/languages that are essentially a simplified&#x
86.
by xtrapolate 8y ago
> "ptrace (with PTRACE_O_EXITKILL from kernel 3.8+) is designed to be reliable for this." One of the key points I'd like to raise is the (unsurprisingly) substantial performance degradation caused by tracing every syscall&
87.
by xtrapolate 8y ago
> "It rewrites the syscalls to make them succeed" Imagine some applications expect the syscall to actually fail (ie. some odd way to test permissions). I fail to grasp how this is a strength. Pulling the rug from under applicat
88.
by xtrapolate 8y ago
> "I guess it rewrite syscalls that would otherwise fail for lack of privileges" That's not how access control works (on most systems). The system calls are still issued from a single process. If the gVisor process is runn
89.
by xtrapolate 8y ago
> "Since gVisor is itself a user-space application, it will make some host system calls to support its operation, but much like a VMM, it will not allow the application to directly control the system calls it makes." [ https:&#
90.
by xtrapolate 8y ago
> "But the language isn't defined in terms of a CPU." I disagree. I submit the whole reason we pass objects by reference or by value in the first place, has much more to do with conserving computational resources/redu

More ›