eliteraspberrie
Joined 13 years ago
Karma
846
Submissions
291
Member since
Sep 25
www.eliteraspberries.com
View on Hacker NewsRecent submissions
Comment · 10 years ago
For context, Ontario has no natural resources. We have always been an export economy. With globalization and automation, manufacturing is mostly gone, and it's creating social problems. We have a fundamentally different view of the role of government here, we believe government should promote quality of life and happiness. Yes it is socialism and we don't apologize.
Comment · 10 years ago
Xen is worse than Linux in terms of quality, and therefore security. That Linux is much bigger doesn't make Xen any better.
What de Raadt means to say is, generally speaking, you can't build security on top of bad code. No amount of patching, sandboxing, or whatever will help. Security comes from quality and Xen (like Linux) is very lacking in quality.
Comment · 10 years ago
Beautiful! So the dot pattern here is "face centered cubic," right? Would you get a better density with a "hexagonal close-packed" pattern? It may make a difference visually. I would love to see a comparison.
https://en.wikipedia.org/wiki/Close-packing_of_equal_spheres (We memorized this stuff in chemistry class and I never saw it again so I may be completely wrong.)
Comment · 10 years ago
This is such a self-inflicted problem.
Europe could decide to open their borders, and they would be fine. The US deals with much larger migrations every year. Or they could decide to close the borders, and they would be fine too.
Instead they do some schizophrenic dance in between. Some borders open, some closed. Broadcast to the world that people are welcome, and greet them with fences...
Decide and do. Stop talking about how it makes you feel.
Comment · 10 years ago
This is how we got sound to play on the TI graphing calculators. It sounded bad and drained the batteries but it was fun. Another fun thing was getting grayscale graphics on those screens. They had only black and white pixels but flipping them on and off at different frequencies made them gray.
Comment · 10 years ago
Here's an example in a getline implementation: https://github.com/eliteraspberries/ttyprompt/blob/master/ge...
/*@ loop invariant i;
loop invariant j >= 0;
loop assigns j, eol;
*/
for (j = 0; j < (size_t) i; j++) {
if (read_buffer[j] == '\n') {
eol = 1;
j++;
break;
}
}
Comment · 10 years ago
That's an important difference. Christians believe good is from God and evil is from Satan. (Forgive me if I'm mistaken, I know that's a gross oversimplification.) Muslims believe good and evil are both creations of God. So most things have both good and evil in them, including alcohol:
They ask you about wine and gambling. Say, "In them is great sin and [yet, some] benefit for people. But their sin is greater than their benefit."
-- 2:219 http://quran.com/2/219
Keep in mind that the Quran was revealed piece by piece over two decades. The later parts add to the earlier parts. That can be a source of ambiguity to Western readers (not to mention that the chapters are not in chronological order), which is why it's important to understand it as a whole rather than its individual verses or chapters.
Comment · 10 years ago
Venture capitalists are interested in a particular kind of person who can provide them with a quick profit: young people who are naive enough to prioritize business over their own life. If you are willing to spend a few years sleeping under a desk, drinking Soylent, then you are a good candidate for venture capital. If you have your head on your shoulders, you probably want to start a lifestyle business, and that is no good for venture capital.
People here defend VC because they think they too will get rich quick, but they won't, and in the meantime they will be very stressed and nasty on the Internet. Welcome to HN.
Comment · 10 years ago
Thank goodness. Knowing NSA spies on Iranian drones, my civil liberties have been restored.
Comment · 10 years ago
The bug is in the compiler, not OpenSSH. The OpenSSH developers explicitly erased memory with memset. GCC decided to remove those lines without any warning. There's the bug. (Here come the language lawyers...)
What's the difference between GCC deleting parts of your code, and an attacker hacking into the source code repository and deleting those parts of the code?
The C standards committee addressed the problem in 2009 with memset_s. [0] The GNU developers reject patches and state they hope this feature is never implemented. [1]
The bug fix is to stop using GCC for sensitive code. Use CompCert instead. https://github.com/AbsInt/CompCert
[0] http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1381.pdf
[1] https://sourceware.org/ml/libc-alpha/2014-12/threads.html#00...
Comment · 10 years ago
It uses the PyCrypto package to generate random numbers. The Random class is a Fortuna generator seeded with 8 bytes from the system RNG, the PID, and time: https://github.com/dlitz/pycrypto/blob/master/lib/Crypto/Ran...
I doubt eight bytes is enough for cryptography...
If you need random bytes in Python, use os.urandom:
secret = os.urandom(32)
Comment · 10 years ago
I don't think they valued Tor specifically. They did value scientific research, which is what Tor was at the time. Like most research work, it got dropped once they had a working proof of concept. The State Department picked it up years later.
Comment · 10 years ago
Keep an eye on this graph to see when it goes online: https://metrics.torproject.org/userstats-relay-country.html?...
Comment · 10 years ago
Canadian companies doing business with foreign governments get help from the Canadian Commercial Corporation and probably consular personnel too. The Canadian government is very much involved.
Comment · 10 years ago
I use Frama-C without the GUI. The annotations do take some effort, but once you get it, it's very intuitive. Start with adding assertions, for example checking that array indices don't go out of bound. Then start with simple function specifications, and improve on them over time.
I wouldn't use it everywhere, but in small, important functions, it's well worth it.
Here's the classic example of reading into a buffer: https://github.com/eliteraspberries/ttyprompt/blob/master/ge... From those few annotations, Frama-C is able to determine that there are no buffer overflows there.