omribahumi

Have you considered using ssh command's ProxyCommand option? It allows you to replace the TCP transport with communication over stdin/stdout.

It could help you replace the TUN with something more cross platform, and possibly with less overhead. You can pass in the hostname using %h, so you can even have virtual DNS.

That's what I've been doing since I was 12 years old :)

My first "programming" experience was with mIRC scripts. I even wrote an IRC client using mIRC sockets at some point, and a dummy webserver / SMTP client. When you do things the wrong way, you pick up a lot of new skills. I learned to "reverse engineer" (my implementations were trivial, not fully fledged) protocols with a proxy/sniffer pretty early :)

From there, the first use case I had for every new language I wanted to learn was write an IRC bot. I had written one in VB6, VB.NET, Python and even C/C++ at some point.

It's funny to see this comment on HN, as this has been my mantra for a while now. On top of string manipulation and networking, another important piece it teaches you about a language is using data structures and manipulating data. IRC client is super stateful. For example, it needs to maintain the list of channels you're in, the list of users in those channels, their op/voice status, etc.

Highly recommended as a project for picking up a new language.

What’s written on the SIM card is called ICCID. For some carriers, you can convert from IMSI to ICCID and vice versa, because they chose this convention.

Different antenna perhaps?

Wasn't familiar with the term.

Thanks!

So they should’ve added new tags for layout, instead of table,tr,td,th ?

Much like yield vs await in Python3 asyncio.

In the Python 2.7 days, people used generator functions to implement async in Python. When Python3 first came out, you couldn’t do both generator and async in the same function. I assume it’s because they used the same mechanism internally.

I think it was Python 3.5 which added support for async generators.

I don’t write client side browser code these days any more, but when I did back in the 2000s, I remember people bashing using tables for layout, and how everyone should switch to CSS.

From quick googling of what CSS Grid Layout is, seems to be like we’re back to using tables, we just offload it to the style sheet.

That's cool. Didn't know that bitcoin does this. It sounds like a much better approach.

I guess you can fine tune how complex you want this to be by changing the number of zeros you require.

A friend suggested something else - make the client bruteforce a short RSA key (of say, 100 bits)

I have an interesting idea.

How about make the login process more resource intensive on the browser side, by running some intensive javascript code before sending it to the server?

The trick would be to make this much more intensive on the client side (say 1s of CPU time), while keeping this relatively easy for the server (say 1ms). We're trying to waste their resources, not ours.

One way I can think of:

1. server sends a random seed to the client

2. client calculates 1000 hashes based an random numbers generated from the seed, something like hash(rand() + password) and sends them to the server

3. server picks a one of those and validates it. In case the hash isn't valid, you'll respond with an invalid password, so the client won't be able to distinguish between a failed authentication because of hash validation or because of a wrong password.

For the 0days, probably.

But even the integration is impressive.

I want to second this. The things I wrote throughout my career that I'm most proud of aren't very complex.

I find it very satisfying to understand a problem so well, up to the point you can find a simple and elegant solution to it. It makes the solution easier to reason about with other team members, and easier for the team to maintain it later. I see this as making your domain expertise available as a framework for the other team members.

This is my idea of sophistication in the software development world.

I wonder how many people worked on this, and for how long

Apple should allow to do this in Software. Make the lockdown mentioned in the link happen immediately when USB is disconnected, forcing you to retype the PIN every time.

Could be a cool feature for the privacy concerned crowd.

Nope. The company was shut down

There’s one reason I could think of. Combining two Internet lines together to get a faster connection. I blogged about this a few years back

https://omri.org.il/2014/08/08/hacking-asymmetric-and-symmet...

It's all serverless now

There was a talk about this in SREcon Europe 2015: https://www.usenix.org/conference/srecon15europe/program/pre...

My thoughts exactly. Seems super inefficient. Why not take the Heroku model of sleeping dynos?

Spinning up a new process to handle each request is probably costly.

I guess that's because you can't resize columns interactively on the console, and the other columns are relatively short (and pretty much static length).

It makes sense to list the filename last IMHO.

Also, HTTP/2 can reuse the same TCP connection for multiple domains with SAN

Putty is 18 years old and only reached 0.69

How is bash faster than Python?

That doesn't mean people don't use it.

Is what you're saying here documented anywhere?

Right, if you're running on x86 hardware. The use case is probably non-x86 hardware running x86 VMs.

For example, I remember using qemu to emulate RPi with ARM software emulation on my x86 machine.

Yes, I get that. I was wondering how widely used is qemu in x86 software mode

> To be clear: As far as I know, this bug only affects the TCG mode (without hardware acceleration), not KVM VMs or so.

I wonder what's the reach of that bug.

This is what squid has been trying to solve with their server first bumping[0] and peek-and-splice[1]

[0] http://wiki.squid-cache.org/Features/BumpSslServerFirst

[1] http://wiki.squid-cache.org/Features/SslPeekAndSplice

edit: reference peek-and-slice too

Oh I was looking for something like this! I always wanted something like `grep --color` but without the `grep` functionality, and with multi color support!

Thanks!

The fact that zsh is a parent doesn't necessarily hurt performance. The parent and child can share the stdin fd, and the child could be the only one reading from it.

Another cool tool for testing HTTP in general is http://httpbin.org