HN user

dfox

5,959 karma

http://hakl.net/ ales@hakl.net

[ my public key: https://keybase.io/adh; my proof: https://keybase.io/adh/sigs/-nlOT3TEcphUI1F_WEG_MzCvPXi5fQ6Z5oZaDLQGuVw ]

Posts69
Comments2,546
View on HN
codapi.org 1y ago

Codapi: Interactive Code Examples"

dfox
2pts0
arxiv.org 5y ago

The EMV Standard: Break, Fix, Verify

dfox
3pts0
github.com 6y ago

Modernish – Harness the Shell

dfox
2pts0
tvblackbox.com.au 7y ago

A man who invented Gaffer Tape dies at 92

dfox
2pts0
justanotherelectronicsblog.com 7y ago

ECL logic ramblings

dfox
21pts2
blog.wizsec.jp 8y ago

Breaking open the Mt. Gox case

dfox
2pts0
themerkle.com 8y ago

Sources Say BTC-E Hacked Mt. Gox of $2.21B Bitcoin

dfox
1pts0
www.usenix.org 9y ago

On the (In)Security of Automotive Remote Keyless Entry Systems [pdf]

dfox
2pts0
passcode.csmonitor.com 9y ago

The cypherpunk revolution

dfox
4pts0
www.abc.net.au 13y ago

Anti-pirating ad music stolen

dfox
2pts0
www.bunniestudios.com 13y ago

The Factory Floor: Picking (and Maintaining) a Partner

dfox
76pts7
www.huffingtonpost.com 14y ago

Stuffed Giraffe Shows What Customer Service Is All About

dfox
4pts0
dfsch.org 14y ago

Show HN: dfsch - my originally toy Scheme implementation

dfox
26pts5
www.businessinsider.com 14y ago

The Astonishing Lengths Apple Went Through To Keep The iPad Secret

dfox
5pts0
www.dreamsongs.com 15y ago

Evolution of Lisp [PDF]

dfox
2pts0
www.gamasutra.com 15y ago

Designing Better Levels Through Human Survival Instincts

dfox
3pts1
www.fossil-scm.org 15y ago

Fossil Versus Git

dfox
104pts85
c0de517e.blogspot.com 15y ago

Collecting garbage (in game programming)

dfox
1pts0
www.latimes.com 15y ago

Workers' complaints surround Ikea's U.S. factory

dfox
4pts0
www.slate.com 15y ago

Famous Unsolved Ciphers

dfox
5pts0
mashable.com 15y ago

Will 3D Printing Reboot Manufacturing?

dfox
26pts23
www.netsurf-browser.org 15y ago

Hubbub - HTML5 Parsing Library in C

dfox
4pts0
lwn.net 15y ago

The trouble with volatile

dfox
54pts8
www.hackingnetflix.com 15y ago

Studios Crippling Netflix Rental Discs to Encourage DVD Sales

dfox
5pts0
members.cox.net 15y ago

America's Aversion to the Metric System

dfox
1pts0
hackmii.com 15y ago

Wii Homebrew Channel used by professional Wii game developers.

dfox
1pts0
www.techflash.com 15y ago

Microsoft: Kinect wasn't hacked, USB port left open 'by design'

dfox
15pts12
www.thinkbrilliant.com 15y ago

6 Ways to Structure Your Company for Happy Employees

dfox
2pts0
www.boingboing.net 15y ago

People and their desks [video]

dfox
9pts0
www.cloudave.com 15y ago

IPad’s Climb Up the Disruptive Innovation Cycle

dfox
3pts0

Basically the only thing interesting about the ConcertMaster is that Carmack used it (and that it looks somewhat cool). As for the keyboard itself, it is just a basic OEM membrane keyboard and not that good one even. The speakers are lets say adequate for the time and size.

Interestingly, the speaker part and the keyboard part are completely separate. The "cable" consists of four separate cables (keyboard, power, line out, mic in) in a thin sleeve. Mine was supplied with AT plug on the keyboard cable and Y-adapter that converted PS2 into AT DIN and barell jack for the speaker power. The keyboard label indeed says it is powered by 9V DC, but I guess that never really happened as PS/2 is 5V no matter what various devices say.

Edit: And as for the supper hard to find nowadays part: I suspect that part of the reason is that the keyboard module inside the thing is ridiculously sensitive to even minor spills.

Do not do this unless you do not have any other choice. Preferrably use whatever native barcode support of the printer involved, if it does not have that, just generate the barcode as vector image or bitmap with a resolution that is a integer fraction of the printers resolution. Generating correct Code128 as a SVG is about the same amount of work as generating the correct input for some sort of barcode font (the hard part is determining the switches between character sets, not generating bars from bytes).

The fact that this is standard practice does not mean that it is not perverse. It kind of works sanely for plain Code39 (and even then you will see effects of doing that in weird places, like VAG stamping human readable VIN on a chassis, including the Code39 start/stop symbols), once you start using barcode fonts for Code128-derived symbologies (ie. UPC/EAN) the whole thing becomes a pointless exercise.

One point is that there is no reason for the entire secret to be one element of the underlying field, it can very well be a n-tuple of elements of a smaller field, with GF(2^8) being the somewhat obvious choice if you do not expect ridiculous numbers of shares, no need to deal with bignum math.

IIRC the really cheap Casio Organizers/DataBanks of 90's used 5x5 font. And then my ex used something like that on linux in order to fit a ridiculous amount of xterms onto 14" CRT (somewhat absurd feat with her congenital vision defect).

The telling part about uselessness of that window is that the most visible difference between StarOffice 5.2 and OpenOffice.org 1.0 was that equivalent of this window was removed. It got reintroduced probably because it makes packaging LibreOffice for macOS easier.

running identical software on multiple computer systems is the name of the software-architecture game

In the railway signalling industry (which for historically obvious reasons is obsessed with reliability) there even is a pattern of running different software implementing the same specification, written by different team, running on a different RTOS and different CPU architecture.

All the magic of Smalltalk is in the development tools that work by means of introspection into the running image, writing source code in text files causes you to lose all that. Add to that the fact that Smalltalk when written as source files is quite verbose.

Smalltalk does have standard text source file format, but that format is best described as human-readable, not human-writable. The format is essentially a sequence of text blocks that represent operations done to the image in order to modify it to a particular state interspersed with "data" (mostly method source code, but the format can store arbitrary stuff as the data blocks).

One exception to this is GNU Smalltalk which is meant to be used with source files and to that end uses its own more sane source file syntax.

There is this kind of webdev-adjacent niche where the model of using documentation (or even intentionally sub-par documentation) as a marketing funnel for consulting and/or "Pro" versions is a thing. These projects are somewhat vocal about vibe coding killing their business models. If these projects really create any meaningful value is another question.

Creating obfuscated values using integers

While that is often neat solution, do not do that by simply XORing the numbers with constant. Use a block cipher in ECB mode (If you want the ID to be short then something like NSA's Speck comes handy here as it can be instantiated with 32 or 48 bit block).

And do not even think about using RC4 for that (I've seen that multiple times), because that is completely equivalent to XORing with constant.

Security? MUCH worse.

Comparing single-purpose declarative language that is not even really turing-complete with all the ugly hacks needed to make DOM/JS reasonably secure does not make any sense.

Exactly what you can abuse in XSLT (without non-standard extensions) in order to do anything security relevant? (DoS by infinite recursion or memory exhaustion does not count, you can do the same in JS...)

It is not only that ASN.1 was there before SSL, but even the certificate format was there before SSL. The certificate format comes from X.500, which is the "DAP" part of "LDAP", L as in "Lightweight" in "LDAP" refers mostly to LDAP not using public key certificates for client authentication in contrast to X.500 [1]. Bunch of other related stuff comes from RSA's PKCS series specifications, which also mostly use ASN.1.

1] the somewhat ironic part is that when it was discovered that using just passwords for authentication is not enough, the so called "lighweight" LDAP got arguably more complex that X.500. Same thing happened to SNMP (another IETF protocol using ASN.1) being "Simple" for similar reasons.

The reasoning behind the auto-locking feature is that when the doors are locked it adds to rigidity of the car and thus decreases the likelyhood of the passanger cabin collapsing on the occupants. Auto unlocking the doors would completely defeat the reason for that feature.

The actual mechanism of how the door works as kind of "configurable deformation zone" usually involves somewhat thick steel rod running down the middle of the door that on hinge side abbuts similar strength member in the chasis and on the latch side connects to the latch. The latch has two distinct positions depending on whether the door is just latched or locked and the only latched position is not strong enough to hold the potential impact forces..

The specifications document was so long that it would be difficult for anyone else to implement it properly.

In contrast to ODF specification that is long, complex and written in such a terse way that it really does only specify what is a valid ODF file and not in any way what it means. Good luck implementing that without just copying whatever LibreOffice does.

My experience with Dell is that they are not that focused on selling enterprise support (at least compared to HPE), at most they will push for bundling hardware (cables, cable trays, front covers, PERC...) that you do not really need in order to get better volume discount.

Price-wise I don't see a meaningful difference between Dell and SuperMicro (or even "non-traditional" server vendors like Asus and Gigabyte).

Modern protocols running over RS-485 UART usually use some kind of HDLC-inspired framing scheme with flag characters and byte stuffing.

But still there is a lot of stuff that uses ASCII STX/ETX and then some kind of field separators inside otherwise human readable message. Things like industrial scales, industrial barcode readers and what not usually use something like that as default output format.

The mishap involves doing touch-and-go twice with an arrested landing capable version of the aircraft. The report even says that they considered doing arrested landing, but it was deemed as too much risk for the pilot (apparently the actual flight manual of F-35A advises against trying that with non-centered NLG), because the ways how that could go horribly wrong do not allow for safe ejection.

The article is somewhat sensationalistic. If you read the actual report you will find out that:

The pilot was not part of the conference call!

What froze was not hydraulic fluid for actuators (in some hydraulic line), but hydraulic fluid in the shock absorbers.

The last paragraph of the article and seems to be missing a few words and reads as the investigators blaming the people directly involved, which is essentially a complete opposite of what conclusions of the report say.