Viewing profile — richm44

SBOMs are more an attempt to solve some of the problems introduced by software reuse. https://archive.fosdem.org/2025/schedule/track/sbom/ has some interesting talks about the succ…

Try this https://theconversation.com/the-reinhart-rogoff-error-or-how...

Here's an example I made a while ago of how easy it is to use LD_PRELOAD to hook things and change file contents etc. https://github.com/richmoore/reciprocity

If that same tool is unable to spot LD_PRELOAD in use then I'd suggest getting a new one. :-)

Time for me to dust off CVE-2010-3170 again? :-)

Odd - I also have 16.93 on Mac and I don't get the checkbox (unless I just can't find it I guess).

As the article explains, that's not been implemented on Mac yet.

Downloading things from the AIA fields would mean triggering HTTP/HTTPS requests to an untrusted URL from a certificate you haven't verified - not a good idea. What firefox does is…

1. A SYN will receive a SYN-ACK or a RST 2. A host from my machine is the same as from your machine 3. An IP from my machine is the same as from your machine

It was also possible in earlier browsers by using hidden frames. User interaction or a timer would trigger, then you load the frame (which contained dynamically generated js) and t…

You can't get perfection, but you can do things like ask for them to document the controls they implement and to evidence that they have operated them appropriately via an audit li…

See https://woboq.com/blog/verdigris-qt-without-moc.html for detailed breakdown

You're looking for these: https://github.com/hoglet67/RGBtoHDMI - HDMI adaptor - works nicely with the beeb https://www.gotekemulator.com/ - Floppy emulator that lets it use USB st…

Here's a version of the same as a BBC Microbot tweet https://twitter.com/bbcmicrobot/status/1333542986588753921

This video is good background for khtml/webkit on which chrome was based https://www.youtube.com/watch?v=Tldf1rT0Rn0

If you care about performance then you should start by reading High Performance Browser Networking (the text is available online here https://hpbn.co/ ).

Must be a while ago then - it's 12 characters upper, lower and digits. Pretty reasonable.

I remember coding this effect in C a long time ago. Back in the day we used to use the frame buffer as the data store too, not really feasible today!

The primary implementation on MacOS and iOS is SecureTransport.

A few more: - Localhost is 127.0.0.1 - A TCP SYN will also always result in a SYN-ACK - Ok, a SYN-ACK or a RST - Ok, ok, an out-going TCP packet will always result in a TCP respons…

There are some other fun edge cases - for example: - If you have a port-forward to a machine that is switched off then you can get ICMP network unreachable or ICMP host unreachable…

I'd recommend this book instead 'The Linux Programming Interface' http://man7.org/tlpi/ it's a lot more recent and the content is excellent, though it's not a free download. The au…

I'd like a standardised function to clear a block of memory that is guaranteed to not be optimised out, and a constant time compare function.

Sadly it doesn't on linux due to overcommit. You can actually get the failure much later when you try to use the memory. The exception is when you try to allocate absolutely huge b…

I was part of the Qt community at the time (and still am) and that's really not how it happened.