286c8cb04bda

It's sending the "wrong" one --

    $ curl -I http://lcamtuf.coredump.cx/squirrel/
    HTTP/1.1 200 OK
    Date: Thu, 11 Aug 2016 05:18:00 GMT
    Server: Apache
    Last-Modified: Mon, 19 Sep 2011 23:31:49 GMT
    Accept-Ranges: bytes
    Content-Length: 135938
    Content-Type: text/html

286c8cb04bda

10년 전discuss

pacman has been ported to OS X a few times

  https://bbs.archlinux.org/viewtopic.php?id=53960
  https://bbs.archlinux.org/viewtopic.php?id=122544

286c8cb04bda

11년 전discuss

> certs are never "renewed" but just reissued with new dates

This is correct.

286c8cb04bda

11년 전discuss

> anki is good, but for some reason they have a self signed certificate on their site, which I haven't checked out yet, so I won't link to it

It's not self signed, it's the wrong domain (Error code: ssl_error_bad_cert_domain) HTTPS requests to ankisrs.net get a certificate for *.ankiweb.net, which is the domain the app uses for the sync web service.

286c8cb04bda

11년 전discuss

Maybe in theory, but when the DRM tracks when you're reading the book:

https://www.adobe.com/privacy/ade.html

286c8cb04bda

11년 전discuss

The ebook version from MIT press is Adobe Digital Editions. It is also available (more expensive) in Kindle format: http://www.amazon.com/-/dp/B0135G71BG

286c8cb04bda

11년 전discuss

An URL for the edification of others -- http://www.amazon.com/dp/B00L00EJU6

(I have just purchased the book, and the problem mentioned in negative reviews about the text not matching the title seems to have been fixed.)

286c8cb04bda

11년 전discuss

I recommend this book: http://www.amazon.com/-/dp/0321877586

It focuses on the language, not any specific implementation. The examples all use the command-line compiler, not Visual Studio. So you would be able to use the Mono Development Kit.

286c8cb04bda

11년 전discuss

Jails are run by counties or cities, and are for persons awaiting trial (i.e. not been convicted) or persons found guilty and serving short sentences.

Prisons are run by a state or by the Federal government, and are for holding persons who have been convicted of a crime and sentanced to a longer term.

286c8cb04bda

11년 전discuss

> 1470 open issues

That's a really weak argument. Here's 5000 Firefox bugs:

    https://bugzilla.mozilla.org/buglist.cgi?component=General&product=Firefox&query_format=advanced&resolution=---&order=bug_status%2Cpriority%2Cassigned_to%2Cbug_id&limit=0

286c8cb04bda

11년 전discuss

The biggest recurring issue was deadlocks in the garbage collector. It would start cleanup in a subvolume and trip all over itself. After that, any I/O to that specific directory would never return. The only solutions was to reboot the server and fsck for a few hours.

Second frequent problem: Hitting 90% capacity in a filesystem has a non-trivial chance to ruin it forever. Hit the wrong code path, and, even if you immediately delete a bunch of things, I/O to that filesystem would be forever 3000% slower.

286c8cb04bda

11년 전discuss

I've used btrfs (at several-petabytes-of-data scale) and wouldn't trust it any more than HFS+.

Use ZFS if you like, or XFS, or even ext4 instead.

286c8cb04bda

11년 전discuss

> Though they provide RSA and DSA signatures how would I verify the signatures themselves?

Ideally, it goes something like this --

1. Start with the master keys. Download them from their website & import them into your keyring.

2. Fetch signatures for those keys from some key servers. (E.g. gpg --recv-keys 6A93B34E).

3. Examine the signatures (E.g. gpg --list-sigs 6A93B34E). Do you trust anybody in that list to have verified the ownership of the keys?

If "yes", then import the release keys and verify that _they_ have been signed by the master keys. You can use the release keys to verify the downloaded binary.

If "no", then you might recurse down those keys to see if you know anyone who signed any of _them_. At this point, you'll need to consider very carefully what your trust policy is going to be.

286c8cb04bda

12년 전discuss

> I'm still certain I've seen talk of indexing metadata...

This reminded me of BFS: https://en.wikipedia.org/wiki/Be_File_System

286c8cb04bda

12년 전discuss

> Presumably in this editor "_" represents the "whole line" region, which leads to also "c_" and "y_".

That's not specific to this editor. In vim _ goes from the cursor to the end of the line (but does not include the newline at the end like $ does).

286c8cb04bda

12년 전discuss

That's kinda close. In sign languages, individual signs can be decomposed into different elements: Hand shape, motion, position, et al. Related terms or ideas will use some of the same elements.

I'll use a couple of examples from American Sign Language:

1. The gender of a subject in a phrase is sometimes communicated by performing the corresponding motion with the specific hand shape in front of your forehead (for male) or in front of your chin (female).

2. A signer could communicate "a chair", "then he sat down", and "so help you god, jimmy, you better go sit down right now or i'm going to make you wish that you were never born" with what is basically the same sign (first two fingers on right hand tapping top of first two fingers on left hand), just by repeating it more times and with more emphasis.

286c8cb04bda

12년 전discuss

> Why do they do this?

This short form is "for historical reasons". That's not "they're too lazy to fix it" reasons, rather there is a very large amount of hardware deployed elsewhere which you might have to interact with making assumptions. You have to fit within the lowest common denominator of all those assumptions.

> If your tools cannot handle unlimited length names, use different tools.

Because that's not possible. According to the RFC[1], FQDNs are are limited to 255 characters. Individual components (i.e. between the dots) are limited to 64 characters. Having to account for e.g. IDN, means space limits are an active concern.

[1] http://www.ietf.org/rfc/rfc1035.txt

286c8cb04bda

12년 전discuss

> Application configuration can be static (just hardcode localhost:3306 for your DB, for example).

I wonder how this scales when you have multiple databases, or have read-only slaves, or something like that.

Then developers have to remember to send some traffic to localhost:3306 and some traffic to localhost:3307, and who knows how many more ports.

Documentation never manages to stay up-to-date, so perhaps you could use some sort of Service Discovery Protocol to map these semi-arbitrary numbers to more memorable names.

Then, as long as you know what port the service-discovery-service runs on, you could simply query it for the address to reach your databases.

Maybe that's too much work, though. We could just stuff everything in /etc/hosts.

286c8cb04bda

12년 전discuss

> Also a designer can tell a dev exactly what he/she wants in terms of animation values (assuming they're using origami)

Thank you for introducing me to Origami! My time on HN today was not wasted.

(It's at https://facebook.github.io/origami/ if somebody else reading this also did not know about it.)

286c8cb04bda

12년 전discuss

> Am I the only one that would like to be able to setup a time range when it's allowed to use my bandwidth?

You can. After you setup a target open the Preferences window. Select the target therein and click the "Edit..." button.

The dialog that follows has an option to "Pause between [00:00] and [00:00]", where [00:00] is a drop-down which lets you pick the top of any hour of the day.

286c8cb04bda

Submissions

Interviews with the Masters eBook (includes Paul Graham interview) now free.

comments