HN user

marlin

33 karma

https://github.com/martinlindhe

Posts1
Comments37
View on HN

That's a cool project. I use ImHex myself but wasn't even aware of this.

Over the years there has been a silly amount of projects in this space, it is very hard to keep track of them all.

I did try to summarize the ones I know about in the feng project, see here, under "SIMILAR WORK":

https://github.com/martinlindhe/feng/blob/main/RESOURCES.md

Was there anything in particular you wanted to bring to my attention about the ImHex pattern language?

From a quick glance it looks similar indeed, with the same basic building blocks as feng (data types and structs), while they use a rust inspired format, and I use yaml format (however I also use the rust-inspired data type naming u8, u16, s16 and so on).

A major difference is that feng strives to be usable with minimal/no programming (a custom dsl was developed around this idea), while the ImHex pattern language does look rather classic programming focused data processing (like 010 templates but more pretty syntax)

This entire genre of tools has been a long time point of interest for me.

Same for me! It turned into a long journey and I am working on a solution that I am very happy about.

Somewhere mid-journey I learned about kaitai struct and lost a bit of steam seeing it was similar. But I think my offering is superior in a more simple template format with less programming required and a nice cli app.

I am yet to announce it publicly, but i been meaning to for so long already.

If you would like to check it out I would be happy!

You can use it to map / view content from a format there is a template for. Alot of common formats is already included and you can extend it using your own templates.

https://github.com/martinlindhe/feng

About a central database of binary parsers, I've been wanting this for ages too. The closest I ever found was augeas, but that's for configuration files.

I'm working on something, that is a open template format for binary file formats. It is usable today as a universal file extractor, with some bugs and limitations.

Check it out at https://github.com/martinlindhe/feng

EDIT: i realized i answered about btsync while question was about syncthing, sorry.

Regarding detecting file modifications: my friend had issues with his synology diskstation eating 100% cpu with btsync with around 50k files. With less files it was down to 20%. We never debugged it properly but it may be polling issues, but it could also have been out of ram-swapping issues (512MB ram was not enough).

Others have reported issues with many files:

https://forum.bittorrent.com/topic/23802-syncing-600gb-10-mi...

According to [1], "LAN sync" only works when file has already been uploaded to the dropbox servers.

If this is accurate, then I guess this is the issue i have noticed.

1: https://superuser.com/questions/663600/set-dropbox-to-only-u...

UPDATE:

Confirmed by [2], that Dropbox LAN sync indeed only works once the file reached their servers.

"Well, when you add a file to your computer's Dropbox, the file is then synced with Dropbox servers. Dropbox will then initiate the syncing process as soon as it determines a change has been made to the file. All linked computers and shared folders will then download any new version of the file. With LAN syncing, Dropbox will look for the new file on your Local Area Network first, bypassing the need to download the file from Dropbox servers, thus speeding up the syncing process considerably."

2: https://www.dropbox.com/help/137/en

Dropbox actually have a "Sync over LAN" checkbox. It just never seem to been implemented/enabled.

I actually just dropped Dropbox for btsync the other week and are very happy, it's iOS app even serves other clients with files over LAN.

Btsync however uses quite crappy crypto and is closed source etc etc.

Syncthing mentions they use TLS encryption, hopefully i can roll my own 8k keys.

I tried Sparkleshare last year aswell, but my experience was mixed. Also it relies on quite a different architecture (git) than a "versioning bittorrent protocol".

Looking forward to evaluating syncthing when time permits.

Dont understand your issue. the only javascript served by this page should be

  <script type="text/javascript">
  function byId(id) {
    return document.getElementById(id);
  }

  function vote(node) {
    var v = node.id.split(/_/);   // {'up', '123'}
    var item = v[1];

    // hide arrows
    byId('up_'   + item).style.visibility = 'hidden';
    byId('down_' + item).style.visibility = 'hidden';

    // ping server
    var ping = new Image();
    ping.src = node.href;

    return false; // cancel browser nav
  } </script>
for the <a> links, as such:
  <a id=up_7666264 onclick="return vote(this)" href="vote?for=7666264&amp;dir=up&amp;xxxx">
and this makes it surely works correctly even without javascript.
Exec($_GET 12 years ago

You now also excluded thousands of true positives which dont present the code exactly as queried

Exec($_GET 12 years ago

After looking at the search result i can see that most of the results have legit reasons.

Instead of half-assing the problem, please dedicate 10 minute of your life to look in, analyze & report one or two of the problems you find.

Also explain why you think this is an security issue.

You will:

  * help someone out by pointing out an issue

  * hopefully educate the person how to write better code

  * educate yourself in reading and understanding others spaghetti code
Exec($_GET 12 years ago

You should. But be factual. No point in bringing the attitude.

One i remember clearly was on my first programmer job in 2000. The other coders were poking at PHP but the company had several customers on WebCrossing [1], which at the time was considered one of the "serious" website building tools.

I had to customize WebCrossing to the needs of Svenska Spel [2], the swedish lottery company. They had about 200 pages of drawn screenshots how they wanted _EVERY_ detail to look.

The problem was WebCrossing did not offer much of customization built in, and i had to basically override every single template. Especially i had to create whole new forum code, because the WebCrossing way of presenting stuff was not how the customer wanted it.

Also, for some reason, aftonbladet.se, Swedens then (and still?) biggest news site had got 2 guys from WebCrossing USA office to come over and build their site.

Since i did the first gig, i also ended up rewriting the publishing system to aftonbladet.se:s forum from a "pre-moderation" system, into a self-moderating (post-moderation) system. The reason for this was beause the site managed to approve some nazi posts, and the publisher got fined [3].

After all this horror i could finally start learning PHP instead.

1: https://en.wikipedia.org/wiki/Webcrossing 2: https://web.archive.org/web/20010615000000*/http://chat.sven... 3: https://www.aftonbladet.se/nyheter/article10198408.ab

LibreSSL 12 years ago

OpenBSD folks, what is your obsession with CVS????

I'm not seeing how these questions are relevant to very many swedes right now, with regard to ongoing world-wide & european political development.

We seem to have the same confused politics in Sweden as usual. Womens rights & equality is important and seeing some progress locally, while from a more global perspective we can actually expect this trend to go backwards.

A substainable economy is left to the "industry", and the government are selling out the last parts of the welfare.

We have a strong right-wing movement in Sweden now, which we didnt have since the early 90's. A movement whose european cooperatives are open fascists.

One of our negihbour counties are being invaded by Russia.

Sweden is in bed with USA and the UK with regards to signal spying (https://en.wikipedia.org/wiki/National_Defence_Radio_Establi... which puts Sweden in quite a bad spot against Russia. Russian cables go through Sweden and wiretapping of these cables is what the FRA are supplying to NSA / GCHQ. This is not even discussed in the Swedish media.

And still, you believe the Pirate Party's ideas are relevant for this year's election?