HNHacker News
TopNewBestAskShowJobs

avisaven

34 karma · joined April 5, 2017

doing various things

https://github.com/acceptable-security

submissionscomments
avisaven··on J one-page interpreter fragment (1992)
I actually used this as inspiration for a little self-challenge to write a programming language in 24hrs not too long ago [1]. I didn't get quite as far as I'd've liked to, but nonetheless if you have some time to kill, it was an extremely fun task to tackle.

[1] https://github.com/block8437/afternoon-lang

avisaven··on Building personal search infrastructure for your knowledge and code
A similar but more structured (though perhaps Hound supports a similar feature set) code searching tool is OpenGrok [1]. It's a bit more setup as it uses Apache Tomcat, but once it is setup it has an incredibly fast and useful code querying tool with really useful abilities to x-ref functions/structures, highlight uses of variables, and integrates git info as well. If you've ever used elixir.bootlin.com to go through the Linux source code, opengrok is effectively a more feature packed open source version of that. I highly recommend taking a look to anyone who spends a lot of time digging through code.

[1] https://oracle.github.io/opengrok/

avisaven··on Exploiting Wi-Fi Stack on Tesla Model S
If you find WiFi-based attacks on devices to be interesting, you may be interested in the following research from Google Project Zero on attacking the iPhone’s WiFi stack (and linked are articles on Android):

https://googleprojectzero.blogspot.com/2017/04/over-air-expl...

avisaven··on Building a RISC-V PC
If you want to play with RISC-V hardware right now, I highly recommend taking a look at the Sipeed MAIX [1]. It has a bunch of neat features along with a dedicated RISC-V processor, for a considerably lower price (~$35 if my memory is correct). I've received a M1w, which is working quite well. The campaign has ended but it seems you can get the hardware on external retailers, however I cannot vouch for these [2]. They also have a Telegram chat where the developers of the product talk quite a bit, and if you ever have any questions they're quite responsive and helpful.

[1] https://www.indiegogo.com/projects/sipeed-maix-the-world-fir... [2] https://www.seeedstudio.com/Sipeed-MAIX-I-module-WiFi-versio...

avisaven··on About V, the language Volt is written in
I had been looking for this exact project, but I couldn't remember its name for the longest time. But I remember that home page exactly. Doing a bit of seraching it turns out volt.ws appears to be a rebranding of a previously posted [1] Eul (eul.im), posted by alex-e (whom I assume is its author). Either way, volt.ws and the associated V language sound quite interesting, I look forward to hearing more about this in the future.

[1] https://news.ycombinator.com/item?id=14778263

avisaven··on Show HN: The operating system I built as my high school project (2016)
What a coincidense, for my high school senior project in 2017 I built an operating system as well [1] (which I still work on to this day). For anyone who is put off by the difficult of building an operating system I highly recommend just going in and getting your hands dirty. osdev.org is a fantastic resource and theres plenty of reading to do on the web, and getting more intimately familair with your hardware is an incredibly gratifying and enlightening experience. Even if you never end up with something useful, the learning experience of working in such a liberated and constrained (theres no rules, but no supports! anything goes within the constraints of the hardware) environment is second to none. And once you build your operating system, you can always go back and do something new with it. Mine has become something of a zen garden where I can just play with new ideas and algorithms, without having to worrying about reaching some sort of goal.

[1] https://github.com/block8437/brackos

avisaven··on Experiment with particles using WebAssembly and WebGL
That's odd, I'm running on a Macbook with an Intel Iris Pro integrated graphics card and I'm getting 60FPS. Using Chromium 62.0.3202.89 (Developer Build) (64-bit) though. https://i.imgur.com/wbiUT5l.jpg

EDIT: Ah just noticed I'm only using 586k particles.

avisaven··on Tell HN: I want to teach you finance. In 30 mins. For free
I'd love to talk about cryptocurrencies/software engineering/cybersecurity if you're interested. avi . saven (at) gmail
avisaven··on [dead]
This is a real shame. I had used Skype for Linux as part of a research project creating a Tor Bridge that used QR codes in a video stream to send the Tor data. It had a pretty decent RPC that there were Python libraries for. As far as I know, there aren't any other Skype clients with an RPC as powerful.
avisaven··on Announcing Google Capture the Flag 2017
Out of curiosity, why would something like this be closed off to people < 18 y/o?
avisaven··on Ask HN: As a skilled developer, how do you make pocket money with little time?
I've recently been playing around with HackerOne. It's a great way to both benefit society (by finding, reporting, and eliminating security flaws in software that people rely on) and yourself (most companies on HackerOne give Bug Bounties out, anywhere from a couple hundred to thousands of dollars, depending on the bug). Specifically, I looked at shopify's mruby bug bounty (https://hackerone.com/shopify-scripts) and used a fuzzer (AFL/honggfuzz) to find bugs in mruby, which I could then investigate and report. That specific bug bounty is a lot of C/low level security, but there are many bug bounties which are geared towards websites/web development (XSS/SQLi/etc).
avisaven··on How Dirty COW works from the Linux kernel’s perspective
A very common methodology is using a technique called fuzzing. There exists many fuzzers which have produced great success finding a plethora of both non-exploitable and exploitable bugs for Linux [1] [2].

[1] https://github.com/kernelslacker/trinity [2] https://github.com/google/syzkaller/

avisaven··on Cicada – Decentralized Application and Direct Democracy Platform
I thought of the same thing. I have a feeling it's not the same organization however because when Cicada 3301 refers to themselves, they use 3301 rather than Cicada.