HNHacker News
TopNewBestAskShowJobs

_cbsz

1,911 karma · joined March 8, 2009

submissionscomments
_cbsz··on Ask HN: Do CS students enjoy C anymore?
All the information is in the binary, sure, but IDA makes the process a lot less tedious.

objdump doesn't give you the pretty "graph view," showing the basic block structure of the code. (In particular, this is really nice for switches and other jump tables.) It doesn't make it trivially easy to see where certain rather important-looking strings are referenced in the code. It doesn't show strings that are being referenced right next to the assembly instruction that references them, like changing

    push   0x8049808
to

    push offset aD        ; "%d"
It doesn't let you mark up

    mov eax, [ebp-0x4]
to

    mov eax, [ebp-first_number_I_entered]
and have that renaming automatically propagated through the entire function, so that you can easily track accesses to the same variable.

In addition, the Hex-Rays decompiler (http://www.hex-rays.com/decompiler.shtml) produces C-like output. I don't have a license for it, but I imagine it would make short work of the bomb lab.

_cbsz··on Ask HN: Do CS students enjoy C anymore?
IDA Pro seems to make the bomb lab considerably easier (e.g., by showing the basic block structure of the assembly); I imagine that the Hex-Rays decompiler would be even more so. Students willing to torrent that software would probably have a much easier time with the lab...
_cbsz··on Firesheep: Easy HTTP session hijacking from within Firefox
Haven't thought too hard about passive attacks, but you're not secure against an active MITM like airpwn (http://airpwn.sourceforge.net/Airpwn.html), because the MITM can inject JS into the unencrypted content that steals your JS security scheme's secrets. Effectively, an active MITM allows XSS on plain ol' HTTP sites.
_cbsz··on Firesheep: Easy HTTP session hijacking from within Firefox
Wildcard certs don't match the underlying domain, though. See, for example, dropbox.com instead of www.dropbox.com; they've got a wildcard cert and it's not valid for dropbox.com.
_cbsz··on Ask HN: How do you secure yourself on public WiFi?
Your personal machine isn't going to be connected through "modern enterprise-grade switches like you would find in a data center," so ARP spoofing is a totally legitimate attack.
_cbsz··on Enterprise Javascript is...
Closure doesn't do it that way, and the Closure Compiler will collapse the namespacing so that it doesn't result in runtime overhead.
_cbsz··on Ask PG: Lisp vs Python (2010)
"refudiate" isn't a word (though it appears to be a Palin-ism -- http://www.urbandictionary.com/define.php?term=Refudiate). Perhaps you meant "repudiate?"
_cbsz··on The Real Price Fixing Scandal in Angel Investing is Deal Syndication
s/Scandle/Scandal/
_cbsz··on So I made something that's pretty stupid but had fun doing it
You can't pre-compute it with the Floyd-Warshall algorithm in C or something?

EDIT: to try to answer my own calculation on the back of the envelope...

We're going to need n^2 space and n^3 time, where n is the number of nodes. There are about 3.5 million articles (http://en.wikipedia.org/wiki/Wikipedia:Size_of_Wikipedia), and if we assume that the diameter of the Wikipedia graph is 255 or less, we need 1 byte * 3.5 million * 3.5 million = 12.25 TB just to store path lengths for all pairs. It's also going to take a while because locality is going to be hosed. You might be able to do something smarter, like do the all-pairs solutions for something that will fit in memory (top 30000 pages or so), and hope that queries match a long-tail distribution...

_cbsz··on Hacking the D.C. Internet Voting Pilot
> I don't think a paper receipt is necessary if the system is trusted (the system gives feedback if it accepted your input).

Front-end: "vote counted!"

Back-end: vote redirected to /dev/null!

It's not immediately obvious to me how to make such a system transparent enough to convince the losers that they lost honestly. Cryptographic schemes may be able to solve it, but I think it's an open question whether they'll be convincing and secure in practice.

_cbsz··on Voting System Pwned by Michigan Wolverines
There is a blog post with more information at http://www.freedom-to-tinker.com/blog/jhalderm/hacking-dc-in... .
_cbsz··on FreeBSD Quickstart Guide for Linux Users
That's why Gentoo's system is called Portage.
_cbsz··on Man jailed over computer password refusal
Did you mean: Post-Vacation-Amnesia?
_cbsz··on Ask HN: Python gaining popularity
Speaking as a Python person who recently had to dig through a Ruby project, I can see why people like Ruby and RoR (lack of explicit return statements make your code look functional, lack of parens makes your code look minimal, it's nice to have "unless"), but it is not for me.

(I will not go into Ruby's disadvantages nor direct language comparison because I don't want this thread to devolve into a language flamewar.)

_cbsz··on Hacker Monthly Issue #5 - October 2010
I only see direct discussion links, not article links.
_cbsz··on Nuitka — A Python Compiler
This issue is why bison's license contains a special exception for the part(s) of itself it includes in its output. http://www.gnu.org/software/bison/manual/html_node/Condition...
_cbsz··on Python idiom for taking the single item from a list
This is Python. Subclass it and fix the problem, unless the guts are so opaque that your code would be littered with subclasses and you can't figure out an elegant, general way of fixing it (unlikely).
_cbsz··on Python idiom for taking the single item from a list
If he's defending against None, he should

    assert l is not None and len(l) == 1
_cbsz··on Tell HN: An Observation
Because articles cannot be downvoted, I am very stingy with upvotes. I don't like most articles on the front page, let alone the new page. If your article is really great, it won't be on the new page but not the front page for long anyway.
_cbsz··on Reddit copies HN's logo today
It's labeled as YCombinator, not HN.
_cbsz··on Down with fun: The depressing vogue for having fun at work
I can't speak for everyone, but based on my experience, regularly drinking (even lightly) during the day would be likely to cause significant productivity loss. Duh?
_cbsz··on Ask HN: What Firefox/Chrome extensions do you use?
https://chrome.google.com/extensions/list/popular

Next question.

_cbsz··on The Hardy Boys - The final chapter (1998)
Re: cartoons, I had a good time watching Reboot with some fellow interns a few years back. Lots of CS in-jokes, and the production issues / tropes are merely fodder for a drinking game.
_cbsz··on D-Bus in the kernel, faster
"X" is a really bad variable to use, seeing as how it's the windowing system.
_cbsz··on Poll: How many hours do you sleep per day?
I'll have a much better idea sometime in the next couple of weeks, if/when WakeMate finally ships...
_cbsz··on BareMetal OS: A 64-bit Operating System in only 16KiB
FWIW, I found a local privilege escalation vulnerability (arguably just a bug allowing apps to trash the kernel, since it's single-user anyway) in Menuet32, and I'm not optimistic about the network stack. I would have expected ping of death to work, but it doesn't even seem to support IP packet fragmentation.

These throwback OSes are cute, but there would be hell to pay if they ever took off.

_cbsz··on Announcing Micro Instances for Amazon EC2
If you use a 1-year reserved instance, it'll cost you about $115/year, which is substantially cheaper than the lowest-priced Linode. I'll be switching http://mbusreloaded.com/ after its Linode subscription runs out, as there's absolutely no way I use more than 10 GB of bandwidth per year.
_cbsz··on How to go about learning Objective-C?
http://www.reddit.com/help/faqs/programming
_cbsz··on Ask HN: What would you like to see in a students resume
1) Use the apostrophe correctly, when applicable: "student's". Your resume should have no obvious proofreading errors.

2) Include everything relevant without being too verbose. Education, Experience, Skills. Probably relevant coursework in the Education section. Don't put anything in Skills that you wouldn't be comfortable being asked about in an interview; it's appropriate to differentiate between "strong experience" and "experience".

By the way, I am not a recruiter, but my student resume landed me interviews for internships with Microsoft and Google, among others. If my experience is any guide, your first resume will suck, but getting the content out there is a good first step, and then you can improve. Spend several short sessions on it.

_cbsz··on Ask HN: Is Perl dead?
I suspect that the grandparent meant "write shell scripts".
← PreviousPage 8 of 29Next →