113 reputation
6
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 2 years, 9 months
seen 2 days ago

Nov
6
comment How do I print pi (3.14159)?
@MichaelKjörling When you say O(1) don't you actually mean O(n)? The download time in linear in the number of digits you need, hence O(n).
Sep
24
awarded  Autobiographer
Sep
10
awarded  Supporter
Sep
5
awarded  Editor
Sep
5
revised How to configure Ruby to use the correct gemset or Ruby version on a per-project basis?
Fix typo in title and other cleanup
Sep
5
suggested suggested edit on How to configure Ruby to use the correct gemset or Ruby version on a per-project basis?
Aug
6
comment How to rename file to .. (dot dot)?
@PTwr The windows story is trickier than that. Some special things happen at the file system level / NT API level, some in the Win32 subsystem and some and the shell level. For example the GUID magic from your second link is at the shell level, so you won't see them in a typical command line application. I'm not sure if . and .. actually exist in NTFS and the NT API or if they're only added by the Win32 API. I know that there are several discrepancies between the lower level NT API and Win32, for example Win32 hides several files from the drive root.
Jul
3
awarded  Commentator
Jul
3
comment Why doesn't GCM HTTPS work with nginx?
Do you know it's GCM that causes the problem? Choice of curves for ECDHE or hash algorithm for the RSA signature are potential failure points.
Jun
7
comment Is there a command line method by which I can check whether a downloaded file is complete or broken?
@Creek What I meant is that wget might think the download was complete, even if it broke. Proxies information about broken TCP connections vs. closed TCP connections which is problematic with HTTP since it uses closed TCP as end mark by default. That's why I added a check if the file size from the header matches the downloaded file size when I ran a mass download. Not sure if wget does such consistency checks or what the http spec says on this issue.
Jun
7
comment Is there a command line method by which I can check whether a downloaded file is complete or broken?
I expect this to not work when used with SOCKS proxies like tor.
Mar
24
comment How to reverse a string made of digit in bash?
I'm interested in how well rev understands text (and thus charsets and unicode), or if it simply operates on bytes. Consider an input which contains characters outside ASCII. For example with UTF-8, one code-point often maps to two bytes. If you reverse the bytes, that will produce a broken output. Same for legacy multi-byte charsets like they're common in Asia. Similarly if you have a letter followed by a combining diacritic, simply reversing the code-points means that it will combine with the wrong base letter.
Mar
24
comment How to reverse a string made of digit in bash?
Which definition of character does it use? Byte, code-unit, code-point, or does it even a full combining character sequence?
Mar
16
comment RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference?
32 bytes read from a well seeded CSPRNG gives 256 bits of security (which is a damn lot). An RSA-2048 bit key only offers about 112 bits of security. The only dubious property of a /dev/urandom is that (on linux) it doesn't block before it's seeded directly after booting. Once it has been seeded it will remain secure forever.
Nov
20
comment Is there way to stop random software packages from remotely transferring your files?
I'd store high-value wallets on a dedicated computer that's kept offline. Use this comp to sign transactions, and a normal computer for the reading part. A friend uses a raspberry pi to store the wallet since it's simple and cheap.
Jul
5
awarded  Citizen Patrol
Mar
23
comment Why is there a big delay after entering a wrong password?
The difference between early and late failure while comparing a password hash is measured in nanoseconds. With proper coding(constant time memory comparison) there is no difference at all. That's no justification for adding a delay.
Feb
15
awarded  Teacher
Jun
19
comment Which Fedora CPU architecture should I choose? i386 or i686?
Isn't a Pentium 1 a i586?
Jun
18
comment What methods are used to encrypt passwords in /etc/passwd and /etc/shadow?
Note that the crypt hashes based on SHA-2 are not plain SHA-2, which would be bad since plain SHA-2 is weak against dictionary attacks. The SHA-2 crypt schemes use the plain hashes as building block, but add a variable work-factor(to slow down dictionary attacks) and a salt.