mrswag's comments

mrswag | 9 years ago | on: Ask HN: Excluding WordPress, what is your favorite for blogs or small stores?

I generate static webpages from markdown in a < 100 lines bash script. It's just a for loop using sed, pygments and markdown, hosted on github.

It has a local webserver, spell check, optional image compression, and minimal dependencies.

I don't get the need of Jekyll or Hugo. They're bloated and it's a pain to customize so called "themes". I'm OK with 'boring' HTML and CSS.

mrswag | 9 years ago | on: HandBrake 1.0.0 Released

It has a nice GUI frontend with useful presets, understandable for the layman. Very good tool for the people not too versed in CLI and/or video formats.

mrswag | 9 years ago | on: Things I learnt making a fast website

The bottom line is the power consumption. A big fat i7 (desktop) can draw 91W, while a fanless, battery operated smartphone can pull from 5 to 10W.

Power optimization come at a performance cost.

mrswag | 9 years ago | on: GitHub censored my research data

This censorship show that you don't even begin to understand the problem.

This list could prevent people from getting their card skimmed, and you take it down.

I'm moving away from gitlab.

mrswag | 9 years ago | on: Experiments with disabling the ME on Sandybridge x230

It's theoretically possible, provided you have a small trusted circuit. It's an active research area. The basic idea is to use multiple separate, untrusted chips and have them do multiparty computation, coordinated by the small trusted circuit.

With testing amplification, you can then set an upper bound on the probability that the chip will run a backdoor.

mrswag | 9 years ago | on: A bite of Python

It's in their threat model under 'Module injection':

> The mitigation is to maintain secure access permissions on all directories and package files in search path to ensure unprivileged users do not have write access to them.

mrswag | 9 years ago | on: A bite of Python

Some points are valid, but come on, if an attacker has write access to your code, you can't recover from that, ever.
page 1