luchs

Joined 15 years ago

Karma
187
Submissions
79
Member since
Jan 22
[ my public key: https://keybase.io/luchs; my proof: https://keybase.io/luchs/sigs/9dsiSEprGEp2SMkFbOET-KSFCN1tZApTDU6j9v5nnKE ]
View on Hacker News

Recent submissions

Comment · 9 years ago
Something this API gets right is having a unified interface for both IPv4 and IPv6. With the sockets API, you have to decide for one of them. Changing isn't easy as the constants and structures are all named differently.

While it's possible to use IPv6 sockets for IPv4 connections, this doesn't cover all use-cases. For example, you can't do IPv4 broadcast with an IPv6 socket. Additionally, as most examples are written for the classic IPv4 API, that's what everyone uses per default. Later on, when people complain about missing IPv6 support, they are turned down because it's a ton of work to change.

Comment · 9 years ago
There are already other RFCs regarding the socket API, such as RFC3493 (IPv6 socket API).
Comment · 9 years ago
Comment · 10 years ago
You have to trust some hardware, but not necessarily the full stack you listed above.

For example, chipTAN is commonly used in Germany to verify online banking. You have to trust the chip on the banking card and the card reader, but not your computer, network connection, or your smartphone.

A similar device may also work for online voting. The hardware would be simple enough to audit it. Your computer would never learn the vote.

Comment · 10 years ago
Comment · 10 years ago
This is exactly what the "block third-party cookies" option does. It really should be enabled per default, possibly with a permission prompt for cases where they are useful.

The interesting thing here is that third-party cookies usually allow a central site (e.g. an ad server) to track a user across many other sites. It's almost the other way around here: "other sites" can track status on a "central site".

Comment · 10 years ago
Not really liberal - leaving out those tags is perfectly fine according to the specification and all compliant browsers will create the same DOM from it.
Comment · 10 years ago
Comment · 10 years ago
>This is the definition of a Hash Function. Not a cryptographic Hash Function.

No, a hash function is just any function which can be used to put values into a hash map. If your inputs are numbers, modulo will work fine as a hash function, but is obviously not one-way.

>Cryptographic Hashes should NEVER collide, on any inputs, ever, period.

This is obviously not possible, as the output of the cryptographic hash function is of fixed-length while the input is variable-length. Finding collision just needs to be hard, not impossible.

Comment · 10 years ago
Looking at the source code, it's actually licensed under the GPLv3 as well, so the software seems to be free, just the resources and game content aren't.
Comment · 10 years ago
But the thing is that a game targeting Windows XP or even Windows 98 still has a good chance of running on Windows 10. On the Linux side, good luck getting binaries made for Ubuntu 14.04 run on Ubuntu 16.04.
Comment · 10 years ago
I'd guess that they track keys which appear on reseller sites. So the "bad actor" comes from later use, not from e.g. stolen Bitcoins.
Comment · 10 years ago
Nice to know that they're working on better HiDPI support. GTK 3 for some reason has two separate HiDPI settings, but one of them only supports integer scaling factors. Additionally, there is no way to specify different factors for each monitor. If you have two monitors with different densities, a GTK window will always have the wrong scaling on one of them.

Qt 5 gets this right. The only frustrating thing there is how many applications still use Qt 4… (same applies to GTK 2, I guess)

Comment · 10 years ago
Tmux supports this as well, just use "tmux new-session -t xy" instead of "tmux attach-session -t xy".
Comment · 10 years ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton