HNHacker News
TopNewBestAskShowJobs

z29LiTp5qUC30n

275 karma · joined June 12, 2017

submissionscomments
z29LiTp5qUC30n··on Stage0 – A set of minimal C compiler bootstrap binaries
it is less than 15kb in size written in assembly supports structs, unions, inline assembly, gotos, breaks, function pointers Thus it support more than otcc supported in a fraction of the size
z29LiTp5qUC30n··on A Brief and Brisk Overview of Compiler Architecture
Yes, read this https://github.com/oriansj/M2-Planet

and you will know how a cross platform self-hosting C compiler works in 1,982 lines of code

and if you want to know how an assembler works read this: https://github.com/oriansj/mescc-tools/

only about 562 lines for the linker, 645 for the macro assembler and 204 lines if you want dwarf stubs in your binaries. Oh and it is cross platform too

z29LiTp5qUC30n··on Show HN: Two Kilo – A curses-based text editor in 2kb of code
I say hardware and that 1072 bytes beats the shit out of that:

https://github.com/oriansj/stage0/blob/master/stage1/SET.s

z29LiTp5qUC30n··on The password “ji32k7au4a83” has been seen over a hundred times
My view is your secrets should be secure even if the attacker knows everything about how they are generated and used. For example: My password is 8192 characters long, leveraging only the ASCII character set (except \n\r\t\0) It is changed every 28days at 11:05am It is only used on exactly 1 website and the username on that website is also only used on that website and randomly generated as well.

Good luck (Tell me how and where I can make this stronger)

z29LiTp5qUC30n··on C compiler with support for structs written in Assembly
The C version is alot easier to read: https://github.com/oriansj/M2-Planet
z29LiTp5qUC30n··on C compiler with support for structs written in Assembly
git clone 'https://git.savannah.gnu.org/git/stage0.git' make test

That should do the full bootstrap in about 1 minute

z29LiTp5qUC30n··on C compiler with support for structs written in Assembly
That is because it is compiling for x86. It is the Knight Architecture, designed for TTL implementation
z29LiTp5qUC30n··on C compiler with support for structs written in Assembly
Well, there is work to have MesCC bootstrapped off this: https://gitlab.com/janneke/mes Which can build GCC.

So literally once that step is done, we would have a full path...

z29LiTp5qUC30n··on C compiler with support for structs written in Assembly
M0 macro assembly, it is implemented here: http://git.savannah.nongnu.org/cgit/stage0.git/tree/stage1/M... Which is Built in Hex2 which is implemented here: http://git.savannah.nongnu.org/cgit/stage0.git/tree/stage1/s... Which is built in Hex1 which is implemented here: http://git.savannah.nongnu.org/cgit/stage0.git/tree/stage1/s... Which is self-hosting and implemented here: http://git.savannah.nongnu.org/cgit/stage0.git/tree/stage1/s...

And was written using the bare metal text editor found here: http://git.savannah.nongnu.org/cgit/stage0.git/tree/stage1/S...

z29LiTp5qUC30n··on Ask HN: As a team lead how to handle project going off the rails?
Well there is only one way a modernization project could have gotten into that position; You were doing a rewrite.

A modernization project is only a modernization project if it is incremental by design and you have frequent releases (minimally monthly).

Throw out the flag onto the field and get the train stopped before you end up causing the entire group to be fired.

z29LiTp5qUC30n··on Show HN: T2b – A wicked-powerful text macro language for building binary files
Not as good as https://github.com/oriansj/mescc-tools But certainly a good start
z29LiTp5qUC30n··on Chezscheme 9.5 in Debian Testing
Actually you missed a bunch. MesC is soon going to be bootstrapped by M2-Planet https://github.com/oriansj/M2-Planet Which is in the process of becoming bootstrapped via stage0 https://savannah.nongnu.org/projects/stage0/ Which bootstraps off a sub 240Byte hex Monitor and is hardware neutral.
z29LiTp5qUC30n··on Facebook Container for Firefox
ReCaptcha means to me that I need to blacklist your site and never come back. F@ck that noise
z29LiTp5qUC30n··on How Much Does a Compiler Cost?
Posts like this make me think of this: https://github.com/oriansj/M2-Planet A C compiler with support for inline assembly, gotos, structs and weighs under 2000lines and is self hosting.
z29LiTp5qUC30n··on Lisp in fewer than 200 lines of C
as there is a project aiming to "bootstrap the world" https://savannah.nongnu.org/projects/stage0/ and they hand wrote a FORTH http://git.savannah.nongnu.org/cgit/stage0.git/tree/stage2/f... and a compacting garbage collecting lisp http://git.savannah.nongnu.org/cgit/stage0.git/tree/stage2/l...

and their opinion was that it was easier to do the lisp than it was to do the FORTH. Although right now they are trying to improve their C Compiler prototype https://github.com/oriansj/M2-Planet before they convert it to assembly

z29LiTp5qUC30n··on Reverse engineering of competitor’s software cost company big
SAS Supports R, so simply write R scripts and replace the proprietary crap piece by piece. Then use cost and security issues to kick them to the curb (A newspaper article about wasted Millions usually works if you can't get management to listen to reason and a researched cost-benefit analysis)
z29LiTp5qUC30n··on An esoteric programming language compiler on LLVM based on Brainfuck
Jesus that is Huge, I've seen a Garbage Compacting Lisp Interpreter in only 8.4KB and a Full FORTH in 4.1KB (http://git.savannah.nongnu.org/cgit/stage0.git/tree/stage2) One would hope a Brainfuck interpreter isn't larger than those...
z29LiTp5qUC30n··on Learn from your attackers – SSH HoneyPot
If you do it right it doesn't matter.

The default ip(6)tables rule: drop all packets

For example to access my least secured public facing server you need to do the following: 17 port port-knocking to enable crypto port knocking Which enables ssh Which requires a 16K RSA key and TOTP The only accounts that can be logged in have 18 character randomly generated usernames and 255 character passwords. The login accounts have no access to administrative functions. So you'll need to su to an administrative account and guess the 255 character password or have a zero day exploit that can bypass SELinux and cryptographically signed white-listing of binaries.

z29LiTp5qUC30n··on Fingerprints are usernames, not passwords (2013)
And smarter organizations are deploying things like mooltipass https://www.themooltipass.com/ and keepass http://keepass.info/
z29LiTp5qUC30n··on Mal – Make a Lisp, in 68 languages
Actually you might like stage0 http://git.savannah.nongnu.org/cgit/stage0.git/ It literally goes from a 280byte hex monitor all the way through a compacting garbage collected lisp and FORTH

Without the assumption that any other software exists

z29LiTp5qUC30n··on Status update from the Reproducible Builds project
Well you may want to mention stage0 https://savannah.nongnu.org/projects/stage0/ it starts with just a 280byte hex monitor and builds up to a rather impressive lisp AND forth, while building tools such as a text editor and line macro assembler along the way
z29LiTp5qUC30n··on Oil changes, safety recalls, and software updates
Or better yet https://nixos.org/ Make state something exactly defined.
z29LiTp5qUC30n··on Hackers Are Hijacking Phone Numbers and Breaking into Email, Bank Accounts
I am surprised no one here mentioned mooltipass https://www.themooltipass.com/
← PreviousPage 2 of 2