Viewing profile — dchest

Looks like it was caused by result confusion: crypto_dispatch returns errors in two different ways: https://man.freebsd.org/cgi/man.cgi?query=crypto_dispatch&ap... "crypto_dispatch…

FORTH LOVE? IF HONK THEN

With CGO disabled, it only reads /etc/passwd, while the glibc getpwnam(3) can query LDAP etc.

Which uses libc via CGO or parses /etc/passwd with no CGO, which won't work for some cases. https://github.com/tailscale/tailscale/blob/e4144230f410204a... // userLookupGetent uses…

I did something like this using fail2ban for some time, but 1) it didn't help much due to the larger number of IPs, 2) it blocked widely used VPN services.

Can be malware? Something like https://news.ycombinator.com/item?id=48667495

https://www.youtube.com/watch?v=E_6d3JBBo4s

Being able to quickly reject invalid sessions identifiers is a useful property in some cases and is normally done by authenticating stateful session tokens with a MAC using a globa…

WTF: > Each user has a secret: Stored securely in the database. > Stateless Validation: The core validation remains stateless. We only need to consult the database for the user's s…

Yeah, you made a revocation list but with time value instead of the token value.

It's interesting that most of the comments here are about using this feature to bypass security restrictions (whether valid or not). It says a lot about the attack surface of GNU u…

Oops, of course, thanks for correction!

> just a block cipher in the category of endofunctors A block cipher is just a keyed pseudorandom permutation! :) Imagine that we have arranged all numbers from 0 to 11579208923731…

Did you use their volumes for node_modules or a shared dir? I mounted the whole project directory (with node_modules) inside the container and it seems to work fine (MBA M1 8 GB RA…

The are not a "gatekeeper" under DMA (not enough users). Same as macOS.

That's almost what it does? It's in the article: > "When a contact calls you and you're both using Phone by Google, their device sends a silent confirmation signal in real time to …

They'll just tell you to clear cookies and use Chrome.

"RT kernels"

Well, obviously, software can't do things that the author didn't write code for. But AppKit components do get updated with some new features even if the original software didn't ha…

> For instance, an app can't start using Apple Intelligence if it's compiled with an older version of the SDK that doesn't know that such a thing exists. That's not true, it became…

Fun fact: the original iPhone's UITextField and UITextView were backed by WebKit ( https://x.com/kocienda/status/1400484168199401477 )

How does a high-reliability system have a broken /dev/random? You're better off fixing it rather than trying to fix every downstream component that uses it. You can put your AES-12…

That was after IAC: "Additional acquisitions in 2006 included ShoeBuy.com,[46] which the company later sold to Jet,[47] and Connected Ventures including CollegeHumor and Vimeo".