HNHacker News
TopNewBestAskShowJobs

fubarred

59 karma · joined December 16, 2014

submissionscomments
fubarred··on One day left to help Internet Archive reach its donation goal
It's like the perpetual "going out of business" sale.

The issue is that any free service needs a revenue model to stay afloat, and folks like wikipedia will turn their site into a PBS pledge-break begging platform when they don't actually need the cash. (Ivy league universities always cut back budgets and layoff people in bad economic times, even when the endowment can fund the school indefinitely because keeping donations coming and being seen as "doing their part (even though it's unnecessary)" are the primary goals.)

PS: Does anyone know IA's financial position?

fubarred··on Last Call: HTTP2
SSL/TLS is something that needs to be thrown away and start over (not that it would happen realistically without immense pressure after another spectacular failure). The over-complexity of X509 and the ease of which one can acquire legitimate certs for domains one doesn't own is appalling. From recent revelations, it's even more troublesome the number and scale of exfiltration of private keys, making it possible for some state actors to MITM 10's-100's megaconnections. (One has to put on their tinfoil hat to estimate how many countries have successfully placed staff in core IT/webops positions of Fortune 100 that are then able to leverage that access... Not to mention high-level engagement. [The direct approach conversation might go like this: "gives your keys or we will send in agents to expose embarrassing details about your org and we will still get the keys anyway."])

Perhaps folks like 'cperciva would be kind enough to propose a single, simple TOML-based cert system that is extremely lightweight with the fewest of features. (Not that TLS/SSL would change without focused, sustained herculean effort immediately after yet another Heartbleed.)

fubarred··on HP sells Palm trademarks
Wow, it seems only a short time ago that I and a colleague wagered to which stable the place would go. We were consultants on-site at Palm HQ pre-exit. Seems sad considering webOS was ahead of its time, but alas, the shop was unable to generate the numbers necessary to stay afloat on its own.
fubarred··on When security goes right
Probably right, sorry for jumping to conclusions too hastily (a common antipattern on the ol' internets). Certainly if someone deleted a parent comment, there's several design decisions for comment services on how to handle child threads. One would hope that if a parent comment were deleted, it would leave a placeholder like HN, but it's doubtful that it's only design branch taken.
fubarred··on James Golick has died
Bump. Thanks for this. Taxis, microbuses and shuttle buses... if they have 'em, use 'em. If they don't, opt for the next one.
fubarred··on Subtraction is not comparison
Cool. Brings back memories of implementing various jump instructions and carry prediction adders (do adds twice, pick result based on actual carry later) (I recall I had the smallest microprogram in the course class and it used the fewest microcycles by far... everyone hated me. :)

Would it be nice to be able to access the carry in and carry out as "variables", as well as the full imul/idiv if i.e. 32 args -> 64 bit full-precision results without dropping down into assembly. Perhaps it's unreasonable, but it seems there are few limited differences per generic instruction across processors that assuming they are all each "special unique snowflakes" is obviously untrue FUD.

Understanding architecture / assembly comes in handy to replace high-level branching code with branch-free code to avoid pipeline stalls when branch predictions (eg the branch prediction infrastructure) is guessing incorrectly. Also, being able to go down the stack is really helpful because there are most definitely bugs the way down.

fubarred··on James Golick has died
It is.

Curious: Does anyone have experience with losing a massive % of body mass and quitting smoking? Which is harder?

fubarred··on James Golick has died
Not sure of the circumstances beyond a car accident in MX, but it's awful and painful.

For those still living, a few simple best practices for ground transport that cut the risk:

0. Always hire a driver foreign countries.

1. Make sure the driver isn't high, drunk or insane.

2. Assess yourself the vehicle is in safe, working order and has enough mass and safety features to "win" an accident.

3. Wear a seatbelt, even if it's hidden or nobody else does.

Being reasonably careful isn't about being a p$ssy, "worrying too much" or eliminating all unforeseeable risks, it's about not letting other people down by dying and causing a loss that really could have been prevented by making other choices. There are plenty of difficult/nearly impossible unpreventable ways to shuffle off the mortal coil, no reason to volunteer. I'd venture this wasn't one of those, because JG sounded like a sensible fellow.

Condolences, again.

fubarred··on Subtraction is not comparison
Having designed microcoded pipelined processors from gates on up in uni, that's true.

integer cmp x, y often reduces to microcode that effectively runs:

  - 3A: sub x, y, dummy_result (att syntax) <-- most likely^
  - 2A: sub copy_of_x, y (intel syntax)
  - 1A: push x, push y (or y, x), sub, update flags, pop
^ Depends heavily on the microarchitecture, because there's likely all sorts of extra features and ops that can be set in the same microinstruction cycle to implement the macroinstructions.

In signed 2's-complement (mostly everything), zero flag just checks that all result bits to be zero and the less than flag is just the result's MSB (negative result if 1).

Signed and unsigned have their under/overflow issues. Being able to detect that and handle it in code, rather than crashing or silently producing undefined results, can be important, such as safely re-callocing memory (multiply overflow). (There are other issues like pointer/slice index over/underflow too, and these are related problems.)

The issues are usually around whether branch-free code is absolutely necessary or whether predicting branches wrong would incur disastrous pipeline stall/s (greatly depends on the specific use-case, especially inner loops... don't prematurely overoptimize).

I almost feel there needs to be something in-between IR languages like LLVM IR and general-purpose C, that's not assembly but still general-purpose, functional/imperative, static analysis and able to expose math and branching state/options/differences cleanly across a variety platforms without a fugly/verbose syntax.

To make up a pseudoreligion (if it's doesn't look like your preferred Turing-complete language, sorry) at random:

     var x, y int32

     # ... assign x and y somehow here
     begin
       x = x +! y   # or x +=! y
     rescue IntegerOverflowError
       # ... int32.max + int32.max => (0xFFFFFFFF + 0xFFFFFFFF) & 0xFFFFFFFF => 0xFFFFFFFE (-2, int32)
     rescue IntegerUnderflowError
       # ... int32.min + int32.min => (0x7FFFFFFF + 0x7FFFFFFF) & 0xFFFFFFFF => 0xFFFFFFFE (-2, int32)
     end


     var s, t uint64

     # ... assign s and t somehow here
     begin
       s *=! t
     rescue IntegerOverflowError
       # ... uint64.max * uint64.max => ... => 1 (1, uint64)
     end
fubarred··on When security goes right
Re: whois.

There's a need for extremely private registrations that still have a feedback channel. A guy I know has such a registrar, but I doubt there's any means of contacting any site's operator for technical, legal or other matters. (The whois postal address always lists somewhere Europe, but there's absolutely no published details. So it's a registrar that's about as private as allowable.)

fubarred··on When security goes right
Don't have a screen capture, but several insightful comments on the blog disappeared. Wtf?
fubarred··on [Wanted] MagicFolder – Private, Resilient Filesharing on Tahoe LAFS
https://github.com/LeastAuthority/OTF-Magic-Folder-proposal
fubarred··on Heathkit – The Electronic History Mystery
I remember at 3-years-old that I took endless mischievous joy in figuring out how to change the channel of a Healthkit TV* with an ultrasonic remote control system by furiously jangling keys. *My father and grandfather built it together.
fubarred··on How to Be an Expert in a Changing World
Life is suffering, change, taxes and death.

The meta of Buddhist philosophy (sans religion, spirituality, etc.) appears to be one of the most honest of the major, religion-derived belief systems.

fubarred··on “Openntpd is not vulnerable.”
Excerpt from our several year old netbsd build scripts with annotations:

    install_openntpd() {
      install_from_source net/openntpd ### via pkgsrc
      cp /usr/pkg/share/examples/rc.d/openntpd /etc/rc.d/
      replace_service 'ntpd' 'openntpd' ### idempotently edits rc.conf to ensure ntpd=NO and openntpd=YES
    }
The openntpd default pool.ntp.org is a sane default that also doesn't leak host OS information as do most NTPd-based default confs.
fubarred··on Apple EFI Firmware Security Vulnerabilities
Wanted:

- "Tripwire" for firmware - host-based (not perfect) & bootable live cd/usb/image (still not perfect)... Perhaps some JTAG verifying device that could be hard-wired to all supported chips directly? (Very painful to setup, but potentially interesting.)

- Host-based peripheral firewall (not perfect, but more usable) - e.g.: selectively disable, ask user permission and/or limit rights to connecting devices from the various buses: USB, FW, PCI, SD card, SATA/SAS, BT, TB, SPI, FC, ... On OSX, it's doable considering VMware Fusion "patches" IOKit (check out IORegistryExplorer) selectively based on user preferences (whether to redirect a USB device to a guest or to the host).

fubarred··on Our 6 TB Hard Drive Face-Off
Backblaze is pretty awesome for open-sourcing, effectively, their costs in a high-competition segment. It would be difficult (read: pointless) to compete in that market without massive vertical integration, greater scale, deep pockets and compelling, differentiated value (eg something different enough besides all the other entrants).

For anything critical in business (customer list, billing, finance, etc.), I would recommend also using Tarsnap in addition to whatever other (non-AWS) vendor/s are used for "offsite"/"offcloud" backup.

fubarred··on Bit Twiddling Hacks (2005)
Neat. Also here's some other sources beyond the usual CS bookshelf suspects:

http://www.hackersdelight.org/

http://www.inwap.com/pdp10/hbaker/hakmem/hakmem.html

(We recently had to grab the C standards in order to bust out some integer under/overflow macros that wouldn't be brittle.)

← PreviousPage 3 of 3