zwp

7 ms·

1.
by zwp 5mo ago
> pip allows it but it's with a timestamp A PR to be able to use a relative timestamp in pip was merged just last week https://github.com/pypa/pip/pull/13837/commits
2.
by zwp 10mo ago
You might like https://cs.brown.edu/~spr/codebubbles/
3.
by zwp 1y ago
I used to like having a "depend" target to make the dependencies explicit and so minimize build time, although that fiddles with the contents of the Makefile (some discussion at https://wiki.c2.com/?MakeDepend ). T
4.
by zwp 2y ago
Is it coming? I notice that OpenSSL now has support for raw public keys. The spec (RFC 7250, "Using Raw Public Keys in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)") suggests DANE/DNSSEC as a me
5.
by zwp 2y ago
We already have Macaroons https://en.wikipedia.org/wiki/Macaroons_(computer_science) https://en.wikipedia.org/wiki/Macaroon
6.
by zwp 2y ago
And Layer Cake
7.
by zwp 2y ago
There was a sense of "wasting a port". A modern Linux /etc/services has only 200 or so reserved TCP ports (out of a possible ~50k) so that fear might have been overblown. I suspect the bureaucratic overhead of needing to
8.
by zwp 2y ago
> you are supposed to still continue if you strictly follow the standard Which standard? RFC 3207 (for STARTTLS over SMTP), 2002, says: "If the client receives the 454 response [TLS not available], the client must decide whether or
9.
by zwp 3y ago
def execute(f) f.call "test response" end perform = TOPLEVEL_BINDING.method(:execute) perform.call Kernel.method(:puts)
10.
by zwp 3y ago
You still need to pull out the paths? A sprinkling of grep/perl (awk/sed/ruby/...) is mostly good enough eg: strace -e trace=%file cat /etc/passwd 2>&1 >/dev/null | grep ^open | grep -Po &#x
11.
by zwp 3y ago
You can use "-e trace=open" to trace only open(2) calls Alternatively "-e trace=%file" to get all file-related system calls (will catch eg failing pre-emptive checks using access(3) -> stat(2)).
12.
by zwp 3y ago
> whatever "SSH-2.0-SSHD" is (the authors don't know either) I think this is from the j2ssh/maverick SSH server, used in a bunch of enterprisey Java products. https://jadaptive.com/en/products&#x2
13.
by zwp 3y ago
Tangential question: there is one reason to use NODELETE in the dlopen(3) man page: https://man7.org/linux/man-pages/man3/dlopen.3.html RTLD_NODELETE (since glibc 2.2) Do not unload the shared object
14.
by zwp 3y ago
The PDF ("sec23summer...") has metadata creation/modification timestamp of 20221004165319Z (October 2022). So presumably the paper was written last October and released for Usenix 2023. (Reference [12] is from Usenix July 202
15.
by zwp 4y ago
Slightly silly sketch (bash): sqlite-utils create-table ~/commands.db commands id integer text text --pk id PROMPT_COMMAND="( fc -n -l -1 | perl -p -e 's/^\s+//; chomp if eof' | sqlite-utils inse
16.
by zwp 4y ago
I think one of the motivations for splitting the stdlib into gems was for exactly for this kind of scenario: some users might not be able to update their Ruby immediately. The ruby-lang advisory explicitly recommends bumping the REXML versi
17.
by zwp 4y ago
Rexml has been gemified. Shale's gemspec doesn't require a specific version of rexml and rexml<3.2.5 is vulnerable to CVE-2021-28965. I just checked Ubuntu 20.04 LTS and got Ruby 2.7 with rexml 3.2.3 by default so this seems li
18.
by zwp 4y ago
This old dog is reminded of trn(1), "threaded read news". See top right: https://upload.wikimedia.org/wikipedia/commons/d/d8/Trn_cons...
19.
by zwp 4y ago
Cute! But I get an error if I try "require 'resolv'", is this expected? <internal:/usr/local/lib/ruby/3.2.0/rubygems/core_ext/kernel_require.rb>:85:in `require': cannot
20.
by zwp 5y ago
I wasn't aware of the figurative connotation, I will remember this next time I'm retreating from a climb. "HMS carabiner" is also common amongst anglophone climbers (for the "Halbmastwurfsicherung" knot you mig
21.
by zwp 5y ago
Is that due to SPECTRE & Meltdown mitigations?
22.
by zwp 5y ago
Larry Wall, inventor of Perl: "We will encourage you to develop the three great virtues of a programmer: laziness, impatience, and hubris.", "Programming Perl", 1ed 2ed says: "Laziness The quality that makes you go
23.
by zwp 5y ago
LeGrand's Mosaic range is very similar. I would also be interested to know if there is a standard (although I suspect not). https://www.legrand.fr/catalogue/interrupteurs-et-prises/mos... It's a cute ide
24.
by zwp 5y ago
A colleague used to call this "reading the manual in the bathroom".
25.
by zwp 5y ago
I'm in a similar boat. I use pocket almost exclusively when I'm travelling. It works really well for that but I'd love to extend it. Eg download and store video content, or permit tagging when submitting URLs via email, autom
26.
by zwp 5y ago
A long time ago I similarly tested a (non-heat-reflective) orange plastic survival bag, sleeping overnight behind some rocks on exposed moorland (something like https://www.military1st.eu/cs037-highlander-emergency-surviv...
27.
by zwp 5y ago
Nice find. I'm hopefully preaching to the choir here but please beware that high-visibility flaws often attract fake PoCs. Malicious in the sense "might [also] attack the user" (you!). Often these will surf on work done by va
28.
by zwp 5y ago
A slight tangent but Hogarth's "Beer Street and Gin Lane" (1751) documents a similar example of low grain prices resulting in massive, country-wide alcohol consumption in England. The subsequent government reaction and legisl
29.
by zwp 5y ago
I disagree: for defenders trying to establish veracity of flaws and prioritizing defense this is useful information. "Active exploits seen in wild" is a strong signal. Picking two potentially high impact announcements from the las
30.
by zwp 5y ago
"Tetra" isn't completely unknown in English but perhaps the link is more obvious to Russian-speakers (the original author was Russian)? Is четыре/chetyre a cognate of Greek-derived tetra? https://translate.goo

More ›