teoruiz

Many years ago I was obsessed with Berkeley DB and its performance.

But when I discovered Tokyo Cabinet and Tokyo Tyrant I almost literally fell in love. We used it for things that would have been impossible without it at the time.

Still worth checking it out: https://github.com/hthetiot/Tokyo-Cabinet

Back in 2011 (!) I went to a wedding in Denia, a medium-sized town on the Mediterranean coast of Spain.

The day after the wedding we went to a restaurant by the sea to have some hangover paella, part of the wedding celebrations. Weddings in Spain are usually 2 or 3 day affairs. Anyway, since we were travelling back to Madrid later that day we left our luggage in the trunk of the car, not visible from the outside. We locked the doors and off for paella.

Or so we thought: some bad guys were jamming the car key frequencies so the car didn’t actually lock. They hit jackpot with my bag: my Canon IXUS camera (I loved that camera), my Kindle 3G, my MacBook Pro and my iPad… with 3G.

When we found out later that day we went to the local Guardia Civil and told them the story. I opened “Find My” on my phone and told them exactly where the bad guys were, all the way in Valencia already.

You should have seen the face of the two-days-shy-from-retiring officer when I told him that my iPad was connected to the internet and broadcasting its location continuously. Remember this was 2011.

So they sent a police car to check out the area and found a suspiciously hot car. They noted it down and did some old-fashioned policing the rest of the summer. Two months later I got a call: they had found them and waited on them to continue stealing using the same MO, until they had a large enough stash that they could be charged with a worse crime.

They had found my bag, my MacBook and my iPad. The smaller items had already been sold on the black market.

It still is one of my favourite hacker stories. I went to court as a witness and retold the whole thing. The look on the judge’s face was also priceless.

Not yet! Really looking forward to it. Their development pace is hard to keep up with.

I found that the PydanticAI [0] framework strikes a perfect balance between control and abstraction.

I’m building a non trivial AI app and the validation and dependency injection is such a great addition compared to using the LLM libraries directly.

[0] https://ai.pydantic.dev/

Honest question: why are houses in the US primarily built with wood? Is it just because it’s cheaper?

Even if it’s cheaper, is it worth to have a cheaper but obviously less durable building when compared to brick and mortar?

It’s always been baffling for my southern European mind.

* ECS: Two containers can not use same port on same node. Anti pattern to containers.

That's solved if you use Application Load Balancer instead of ELB classic for your ECS service.

Is there any indication the vulnerability is present on Intel-based Macs?

Exactly the same right now from Spain. It seems the attackers are now targeting Dyn's European servers.

Try with `brew upgrade git`

How long will it take for the CA to be distributed to a large enough browser base?

I mean, it could be years. Is there any other, speedier process? (cross-signing, for instance).

I joined a startup wholly-owned by GOWEX 5 months ago. A startup that is now defunct.

I know it sounds crazy but we all believed those numbers, we were happy, money everywhere.

But from time to time one of my mental alarms would go off, and I would just ignore it. "What could possibly be wrong with this company? It's a publicly-traded company, after all."

The moral of the story is: pay attention to your instincts.

The first time around you curled "www.trucrypt.org" (note the missing "e") and it went to a domain parking service (findingresult.com).

The second time you went to the real "www.truecrypt.org", which is the real domain that now redirects to SF.

Thanks a lot. Subscribed to all!

I would absolutely love subscribing to that list, would you be open to share the Spotify link?

Thanks!

I find the Toccata and Fugue just amazing to watch and listen, an the performer is even adorable.

http://allofbach.com/en/bwv/bwv-565/detail/

This is a very comprehensive write-up by Daniel Tenner, startup founder, about his experience taking Modafinil:

http://swombat.com/2012/2/27/modafinil-and-startups

Very shameless plug: we just launched a t-shirt campaign with teespring.com. All proceeds will be donated to the OpenSSL Software Foundation:

* Campaign: http://teespring.com/hbts

* HN thread: https://news.ycombinator.com/item?id=7567461

OP here. Mandatory disclaimer: we're not affiliated with the OpenSSL Software Foundation but we thought it was a good idea to launch a commemorative Heartbleed t-shirt and donate all proceeds to the foundation.

The Teespring base cost for the t-shirt is around $11, the remaining $4 will be donated to the OpenSSL Software foundation once the campaign ends.

Weird. Can you try "openssl version -a" on both? Like this:

  $ openssl version -a
  OpenSSL 1.0.1 14 Mar 2012
  built on: Mon Apr  7 20:33:29 UTC 2014
  platform: debian-amd64
  options:  bn(64,64) rc4(8x,int) des(idx,cisc,16,int) blowfish(idx)
  compiler: cc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN 
  -DHAVE_DLFCN_H -m64 -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector --param=ssp-buffer-size=4
  -Wformat -Wformat-security -Werror=format-security -D_FORTIFY_SOURCE=2 
  -Wl,-Bsymbolic-functions -Wl,-z,relro -Wa,
  --noexecstack -Wall -DOPENSSL_NO_TLS1_2_CLIENT -DOPENSSL_MAX_TLS1_2_CIPHER_LENGTH=50 
  -DMD32_REG_T=int -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 
  -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM 
  -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
  OPENSSLDIR: "/usr/lib/ssl"

The one posted in a previous thread is significantly more clarifying. It features a web server and a command line version:

* Live version: http://filippo.io/Heartbleed/

* Code: https://github.com/FiloSottile/Heartbleed

Care to link to that comment? :)

Where did you end up?

They switch to white-triangle-in-yellow-circle when they find out that there is a real problem. They just switched.

Ok, this comment is repeated a few times. Never use an app that doesn't have responsive UI feedback :-(

I'd love to see a postmortem.

They seem to be using CloudFlare. That's good PR!

Wow, that's actually great news.

Mainly because those come from Akamai. Facebook would likely be able to add SPDY to their own services, but it's up to Akamai to start doing something on their side.

Don't hold your breath.

To install the whole set of Python modules needed and iPython in a virtualenv (trick: there is no "pylab" module to install):

  % virtualenv --distribute --no-site-packages pandas_venv
  [blahblah]
  % . pandas_venv/bin/activate
  (pandas_venv) % easy_install readline # Probably only needed in Mac OS X for iPython to behave 
  [blahblah]
  (pandas_venv) % pip install ipython
  [blah blah]
  (pandas_venv) % pip install numpy
  [lots of blahblah]
  (pandas_venv) % pip install matplotlib
  [quite a bit of blahblah]
  (pandas_venv) % pip install pandas
  [some more blah blah]
  (pandas_venv) % pandas_venv/bin/ipython --no-banner
  
  In [1]: import numpy as np
  
  In [2]: import pandas as pd
  
  In [3]: import pylab as pl
  
  In [4]:

It's a great step towards domain anonymity, but at the end of the day Namecheap is a company in the USA that needs to comply with USA law and its enforcers. And we know it's not the most privacy-friendly country in the world.

To be fair, registering a .com domain is a bad idea if you want to stay anonymous. Go for a .is, a .ch or even a .eu.