HN user

Metalnem

852 karma

Nemanja Mijailovic

Blog: https://mijailovic.net/

GitHub: https://github.com/metalnem

Posts58
Comments28
View on HN
microsoft.github.io 10mo ago

Pragmatic Rust Guidelines

Metalnem
3pts0
devblogs.microsoft.com 11mo ago

.NET 10 Preview 7 is now available

Metalnem
5pts0
notes.eatonphil.com 11mo ago

Cheerleading

Metalnem
3pts0
words.filippo.io 11mo ago

Go Assembly Mutation Testing

Metalnem
40pts3
blog.viettelcybersecurity.com 11mo ago

ToolShell – A Critical SharePoint Vulnerability Chain Under Active Exploitation

Metalnem
1pts0
brandur.org 1y ago

The special hell of Bolt, Europe's Uber clone

Metalnem
40pts79
radleybalko.substack.com 1y ago

The police militarization debate is over

Metalnem
2pts0
chelseatroy.com 1y ago

What can we expect of LLMs as Software Engineers?

Metalnem
1pts0
devblogs.microsoft.com 1y ago

.NET 10 Preview 6 is now available

Metalnem
4pts0
www.girlonthenet.com 1y ago

Please don't use AI to write porn

Metalnem
3pts1
www.cyberark.com 1y ago

C4 Bomb: Blowing Up Chrome's AppBound Cookie Encryption

Metalnem
2pts0
words.filippo.io 1y ago

Running a Certificate Transparency log

Metalnem
160pts68
www.levels.fyi 1y ago

Meta's Compensation Philosophy

Metalnem
4pts1
chelseatroy.com 1y ago

A Conversation with Tim O'Reilly about Generative AI

Metalnem
3pts0
github.com 1y ago

.NET Memory Model

Metalnem
8pts0
blog.quarkslab.com 1y ago

Beyond the Hook: A Technical Deep Dive into Modern Phishing Methodologies

Metalnem
14pts2
www.nespressocapsules.coffee 1y ago

Show HN: A website for comparing Nespresso capsules

Metalnem
2pts2
mijailovic.net 1y ago

Optimizing memory usage with modern .NET features

Metalnem
1pts0
mijailovic.net 2y ago

My bug finding chronicles (and how to earn money through vulnerability research)

Metalnem
3pts0
mijailovic.net 3y ago

How StackOverflowException can bring down an expensive compute cluster

Metalnem
2pts0
mijailovic.net 3y ago

How safe are .NET serialization libraries against StackOverflowException

Metalnem
2pts0
mijailovic.net 3y ago

Why piracy can (still) be justified

Metalnem
6pts1
mijailovic.net 3y ago

Reverse engineering yet another eBook format

Metalnem
389pts86
mijailovic.net 5y ago

Cosmos DB capacity pitfall: When more is less

Metalnem
1pts0
mijailovic.net 5y ago

Cosmos DB capacity pitfall: When more is less

Metalnem
1pts0
mijailovic.net 6y ago

How to burn the most money with a single click in Azure

Metalnem
699pts397
mijailovic.net 6y ago

How to burn the most money with a single click in Azure

Metalnem
6pts0
mijailovic.net 6y ago

Using Azure managed identities with Azure blob storage back end for Django

Metalnem
1pts0
mijailovic.net 7y ago

SharpFuzz: Bringing the power of afl-fuzz to .NET platform

Metalnem
2pts0
mijailovic.net 7y ago

SharpFuzz: Bringing the power of afl-fuzz to .NET platform

Metalnem
2pts0

As someone who's been reading Angry Metal Guy for more than seven years, I hated the decision to use the AI-generated images in this post, too. But don't let that get in the way of the main idea: buy albums on Bandcamp if you can afford it, use Apple Music or Tidal otherwise.

Great story! Successful cloud performance investigations are always extremely satisfying. I love this conclusion:

It’s a reminder that sometimes performance bottlenecks are hard to diagnose, but with careful debugging, good data, and collaboration with providers, even cloud-level issues can be resolved.

I've been a Kindle user for over 15 years, but I finally stopped buying Kindle books after Amazon removed the "Download & Transfer via USB" option, effectively eliminating the ability to remove DRM.

The author raised some great questions! But as he admits, they are unlikely to be answered in public, which is why I usually find public retrospectives a bit underwhelming.

Service Control did not have the appropriate randomized exponential backoff implemented to avoid this. It took up to ~2h 40 mins to fully resolve in us-central-1 as we throttled task creation to minimize the impact on the underlying infrastructure and routed traffic to multi-regional databases to reduce the load.

If nothing else, this section of the incident report reminded me of my favorite distributed systems paper: Metastable Failures in Distributed Systems. You should definitely check it out if you haven't already:

https://sigops.org/s/conferences/hotos/2021/papers/hotos21-s...

I recently wrote a tool called SharpFuzz that enables fuzzing .NET programs with AFL (https://github.com/metalnem/sharpfuzz#trophies). It has found over 70 issues so far in various libraries (including the .NET standard library). The most common ones are unexpected exceptions (for example, method that should not throw anything throws IndexOutOfRangeException or NullReferenceException), but there are also many serious ones, such as temporary/permanent hangs, stack overflows, and process crashes.

I listen to audiobooks when I’m walking to work and back—that’s an hour a day on average. That counts for at least 2000 pages in each quarter. I also read anything between 10 and 40 pages of technical books every day, which adds up a lot after three months.

That's an interesting question. There is one thing that is unique to the Edge Magazine app on iOS, though. Zip archives of the magazine do not contain just pdf files, but also bunch of high resolution game screenshots. Those screenshots can be seen in the app by clicking the gallery button in a several places. The gallery button link is in the form media://image.jpg, which probably means that the application registered custom protocol handler and handles it by displaying image on top of the magazine itself. That's the way to recognize iOS version, but I'm not sure if Google Play Newsstand has the same feature.

I thought about trying the "strings" command first, but I didn't expect that the password would be just laying there. Even if I found the "SavedPassword" string, I couldn't use it the way I did without jailbroken device, because configuration file that contained the saved password wasn't embedded in the application. The password was actually written to configuration file on the device first time it was used.

You can decompress every .ipa files and see bunch of resources and configuration files in plaintext, which can falsely lead you to believe that you have everything decrypted, but the main binary file is still encrypted, and the only way to decrypt is by running software like Clutch on the jailbroken device.

So there are more people who read Dark Horse comics and think like me :) Converting into CBZ directly was my initial idea, but then I discovered that there is direct download link to tar archive that contains all the images (I did that by following the network traffic of the iOS app). I didn't want to bother with half-baked JavaScript libraries to extract the tar archive and recompress it into zip, so I just quickly wrote a Go application to do that.