infraruby

Joined 12 years ago

Karma
94
Submissions
73
Member since
Mar 14
http://infraruby.com/blog
View on Hacker News

Recent submissions

Comment · 8 years ago
Binoculars.
Comment · 9 years ago
> I'm describing the CBC padding oracle attack.

Ah! Wouldn't that be "attackers can replace an original ciphertext with two chosen blocks"?

> I'm surprised this is the thing you want the link for, and not "1 biased bit destroys the security of a 256 bit nonce where the other 255 bits come from secure random".

IIRC the link for that is in your hiring post!

Comment · 9 years ago
> You could "weaken" a protocol so that attackers can replace an original plaintext with 16 uniform random bits. If the protocol is using CBC mode, you've allowed attackers to recover whole plaintexts.

Do you have a link explaining this?

Comment · 9 years ago
Comment · 10 years ago
For a program without recursive calls the students can get away with believing that local variables are statically allocated, but for a program with recursive calls the students must understand that local variables are allocated on the stack; that what appears (lexically) to be one variable in the source may be many variables at runtime!
Comment · 10 years ago
Yes:

  def f(n = 16)
    n
  end

  p f # => 16
  p f(nil) # => nil
Comment · 10 years ago
The caller may pass nil explicitly.
Comment · 10 years ago

  require "securerandom"

  module SecureRandom
    F = File.open("/dev/urandom")

    def self.random_bytes(n = nil)
      F.read(n || 16)
    end
  end
Comment · 10 years ago
Comment · 11 years ago
> Plus a number of other things according to the article.

Yes, combining methods works even better! It's far from saying that the best way is "to just talk to them".

Comment · 11 years ago
> I can see this being misinterperted badly in the field of software engineering (it doesn't seem specific to software)

Would you prefer Google's take on it? http://www.wired.com/2015/04/hire-like-google/

> So most "sample work" for an interview will actually be nothing like that but a short rushed version that is supposed to emulate it in some way.

Yes, that's the idea! And it works.

Comment · 11 years ago
Comment · 11 years ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton