Viewing profile — hlandau

I haven't laughed this hard in a long time. I'm honestly having difficulty telling whether this is real or an extraordinary piece of performance art.

I'm a bit confused. This is described as being related to 'NitroTPM', which is described as a 'virtual device [...] which conforms to the TPM 2.0 specification'. Ordinarily, the wa…

Most webapps would be dramatically improved if the developers were banned from using any JavaScript on the client side in the first version, and allowed only to apply progressive e…

This seems overcomplicated. Maybe I'm missing something, but is there some reason not just to define a psuedoelement on the current option? option::picker-current { ... }

With every new PostgreSQL release we see yet more features and sugar added to the frontend, yet seemingly no meaningful improvement to the backend/storage layer which suffers these…

The underlying lesson here should be that centralised package registries are unnecessary, yet new language ecosystems keep making the same mistake. There's really no reason for NPM…

This is lovely. This feels like a new genre of hardware hacking to me, where someone is motivated to make a device out of compassion for their family or others. It reminds me of th…

Very nice! Not free, but the "Technic", "Simplex" and "ISOCP" fonts included with AutoCAD are also of this aesthetic, if people want an exhaustive list of candidates.

Personally I've always considered it bad hygiene to commit generated outputs, but this article notes that this takes on a new significance in the light of supply chain security con…

The problem (at least for me) is input format support. Assorted foobar2000 plugins support every obscure tracker format, every obscure video game music format (.vgz, etc.), and the…

foobar2000 is so good, and so unmatched, especially with its plugins ecosystem, I use it for my music playback needs under wine on Linux.

Interesting. Are there better MCUs on the market for these applications (other than massively expensive actual 'rad-hardened' space chips)? You can get MCUs with lockstep dual CPUs…

The context of this discussion is my claim that "the adoption of electric, centrally controlled doors was naturally motivated in major part by timeliness." You're claiming that thi…

I would absolutely consider prisons a technology, most obviously because we can see human societies where prisons are not a viable technology. If a member of a more primitive tribe…

The first quote is simply a statement that central locking is safer. I don't think that's really disputed, but it's not the same as saying that it was the defining motivation, espe…

Prisons are a technology as I define it, as is writing, agriculture, etc.

Author here. In a word: yes. The universe is cold, ruthless, and does not care about us. I make no claims otherwise. Society isn't that, though. Not least because nobody is particu…

Author here. This misses the point that computers are a technology. Like any technology, the choice to adopt a technology is always made by a human actor with some knowledge of the…

Author here. Can you elaborate? I don't see anything to support this claim from the link you provide. You are correct that the completion of the phase-out of slam-door rolling stoc…

Indeed, double-free, not UAF; I should know better than to write comments while sleep-deprived... I suppose a cookie could be used in a "trust, but verify" approach if the free fun…

My own view on this is that a hardened allocator API should separate the functions of an allocation identifier/cookie and the actual pointer to the allocated memory: func alloc(num…

See comment below. More generally what I'm seeking is something in the card form factor which is suitable to store cryptographic secrets (i.e., a smartcard). Separate IC is a disad…

This is interesting but clearly not intended for security/cryptographic applications... no security hardening, no hardware cryptography, and it's also not available in a card form …

The NFC chip I want still doesn't exist: a CPU and flash I can write a program for, directly, no VMs, no Java, without an NDA'd datasheet. These exist, but they're all behind NDAs …