Viewing profile — joecarpenter

Great analysis! The Go binary was also compromised, but there's almost no information what the compromised binary did. Did it drop a python script? Did it do direct scanning? If tr…

In my case I'm decompiling into C and it does a pretty good job at translation. There were situations where it missed an important implementation detail. For example, there is an R…

Reverse engineering with LLMs is very underrated for some reason. I'm working on a hobby project - reverse-engineering a 30 year old game. Passing a single function disassembly + G…

Isn't it the opposite? From the link: Scores range from -100 to 100, where 0 means as many correct as incorrect answers, and negative scores mean more incorrect than correct. Gemin…

Well, there's also mine https://github.com/VectorOps/know with some details what it does and how: https://vectorops.dev/blog/post-1/

VectorOps Know is an extensible code-intelligence helper library. It scans your repository, builds a language-aware graph of files / packages / symbols and exposes high-level tooli…

Ah, the memories! Around the fall of the Soviet Union, there was an IBM-compatible clone called Poisk. It was not 100% compatible with with IBM PC, had 128 KB built-in RAM (extensi…

Which is really weird. Because the code is reverse-engineered and I'm 99% sure the author used Hex-Rays Decompiler (due to variable names, etc).

Typography is horrible in this one

They're being used side by side and running in separate processes. For Campus Bubble, tornado app is a relatively simple push broker. Whenever something happens, Flask app pushes n…

There were requests to create read-only views, but they're domain specific and can be done with existing machinery.

Unfortunately, you can't compare development frameworks to UI frameworks. No one knows that you're a dog on the Internet. But anyone without technical knowledge can see a site that…

Uh, that's typical rhetoric about default Bootstrap interface. Like if someone used default bootstrap skin then he's just lazy and didn't really care. Thus unprofessional. Personal…

Flask-AppBuilder is opinionated fork of the Flask-Admin. It follows similar conventions and uses some of the Flask-Admin code, but comes up with non-default skin and a little more …

Good point, added disclaimer on top.

Mod is just a JAR file that's loaded into Minecraft process. So yeah, no protection whatsoever.

It is mostly number of documents and their size. Single schema. There are no indexes, so whenever client wants to find something in synchronized collection, it'll have to scan thro…

> Started using the SmartCollections package which ditches polling altogether and goes with the MongoDB OPLOG for synchonization. Yes, I'm aware about this package. However, in my …

Interesting enough, I found that Meteor is not production ready, in both current implementation (not mature) and some design decisions. I was thinking about writing blog post about…

> Greenlets don't magically make synchronous libraries asynchronous! That's gevent! That's right - I wrote that they allow writing code in synchronous fashion and I didn't say that…

I'm just sharing my personal experience with both. And no, I prefer Flask (WSGI) and Tornado working side by side, in separate processes.

Thanks for feedback, I added link to the wikipedia article.