Viewing profile — pavfarb

So that's why Taleb deadlifts like a madman.

The way I see it, Acra combines rather unique security guarantees in a very elegant way. More precise questions could fruit more precise answers, though

Woohoo! I am one of the engineers behind the project, and can answer questions if anyone has any.

"built-in JSON serializer/deserializer" near "closures" and "coroutines (via fibers)" feels a bit.. odd. Sign of the times, I understand, but still. Apart from this boring grumblin…

If we could avoid doing so - we would, because we understand how hard earned Go's guarantees are. But, things are the way they are.

But, as he says, 'sometimes you have to'. This is a time like this.

Well, it is true: it was interesting side effect that 'just worked', we were like 'hmm, if GC is able to control external memory allocation, well, fine, maybe Go is even better tha…

It would, but the place where these techniques are helpful the most (untyped languages with problematic input sanitization) are the languages for which hurting intermediary perform…

Not so, regular engineers should write, it's a question of what they write. I'm a regular engineer, my colleagues are as regular boring folks as possible, yet we're writing stuff f…

>I actually miss the days when engineers blogged more rather than accumulating karma on Stackoverflow. 100% hit. I do write sometimes on StackOverflow to give back some help to the…

It's really unfortunate that people do read my comment as "engineers shouldn't write". Engineers should write. I actually write a lot of stuff, because I like it. There are some pi…

Writing is, publishing and noising the channels isn't. I'm afraid I find experimentation like that at cost of other people's time and attention to be a bit petty crime.

Engineers should blog publicly when they have something to say. Something useful for their colleagues. Engineers shouldn't waste time forcing themselves to blog instead of work jus…

If we think that intentional collision is not a threat vector, while, as life shows, it is: https://bugs.webkit.org/show_bug.cgi?id=168774#c23

Now I really wonder what will happen to Git we all know and love.

SHA1 use cases are not limited into integrity verification of documents, but used a lot for traffic integrity and generation of authentication codes: - Torrents of all kinds. - Ver…

The whole idea of relying core security guarantee (provable 'no knowledge' on server side) on unreliable mechanism (in-browser cryptography) is feels really wrong. There are many s…

Much cryptographic agility such wow (can't resist, like, every time I see another OpenSSL bug like this).