Nate Lawson Breaks Google Keyczar's HMAC Crypto Signatures
I recently found a security flaw in the Google Keyczar crypto library. The impact was that an attacker could forge signatures for data that was “signed” with the SHA-1 HMAC algorithm (t…
The latest blog posts to take off on Hacker News. 14,544 posts.
I recently found a security flaw in the Google Keyczar crypto library. The impact was that an attacker could forge signatures for data that was “signed” with the SHA-1 HMAC algorithm (t…
...
I've turned off that old server. If you're missing something, ping me and I'll dig it up.
Spotify for Windows contains code so awesome that OllyDbg can't look at it without crashing.
djng is nearly two weeks old now, so it’s about time I wrote a bit about the project. I presented a keynote at EuroDjangoCon in Prague earlier this month entitled …
We've launched user accounts at EveryBlock , and we faced the interesting problem of needing to cache entire pages except for the "You're logged in as [username] " bit at the top of the page. For example, the Chicago homepage takes a nontrivial amount of time to generate and doesn't change often -- which means we want…
Git is a simple, but extremely powerful system. Most people try to teach Git by demonstrating a few dozen commands and then yelling “tadaaaaa.” I believe this method is flawed. Such a treatment may leave you with the ability to use Git to perform simple tasks, but the Git commands will still feel like magical…
A frequently emphasized advantage of XML is the availability of plenty tools to analyse, transform and selectively extract data out of XML documents. XPath is one of these powerful tools.
Welcome to Ocean of Games where you can download free Ocean games, reviews and charts of best and top rated games by official oceanofgames 2025 get full, rip or compressed games setup with videos guides
This draft was released March 15, 2006. Please email comments to bret worrydream.com . You can also download the PDF .
We’re pretty obsessed with performance at Gilt Groupe . You can get a taste for what we’re dealing with, and how we’re dealing with it, from our recent presentation at RailsConf .
A few weeks ago, I talked about how the d20 system (You know: Hit points, damage rolls, and health potions) was great for tabletop games but terrible for video gaming. I suggested that developers would do well to come up with a new system for dealing with deadly combat rather than using the d20 system when it doesn’t…
There’s a big ‘ol thread going on down at comp.lang.lisp about Clojure vs. Common Lisp. I’m biased, of course, but I have to say that Clojure and Rich Hickey are holding their own against some of the top c.l.l. flamers.
New Profiling and Debugging Tools in WebKit
In a conversation at work about the architecture of a new product, someone made an assertion along the lines of, ``then we'd need to use a garbage collector, and that would hurt performance.''