Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
Soms week ago a client came to me with the request to restructure the nameservers for his hosting company. Due to the requirements, I soon realised none of the existing DNS servers would be a perfect fit. Me, being a PHP programmer with some decent general linux/server skills decided to do what I do best: write a small nameservers which could execute the zone transfers... in PHP. I proposed the plan to the client and explained to him how this was going to solve all of his problems. He agreed and started worked.
After a few week of reading a dozen RFC documents on the DNS protocol I wrote a DNS library capable of reading/writing the master file format and reading/writing the binary wire format (we needed this anyway, we had some more projects where PHP did not provide is with enough control over the DNS queries). In short, I wrote a decent DNS resolver.
Another two weeks I was working on the actual DNS server which would handle the NOTIFY queries and execute the zone transfers (AXFR queries). I used the pthreads extension to make the server behave like an actual server which can handle multiple request at once. It took some time (in my opinion the pthreads extension is not extremely well documented and a lot of its behavior has to be detected through trail and error, or, reading the C source code. However, it still is a pretty decent extension.)
Yesterday, while debugging some last issues, the DNS server written in PHP received its first NOTIFY about a changed DNS zone. It executed the zone transfer and updated the real database of the actual primary DNS server. I was extremely euphoric and I began to realise what I wrote in the weeks before. I shared the good news the client and with some other people (a network engineer, a server administrator, a junior programmer, etc.). None of which really seemed to understand what I did. The most positive response was: "So, you can execute a zone transfer?", in a kind of condescending way.
This was one of those moments I realised again, most of the people, even those who are fairly technical, will never understand what we programmers do. My euphoric moment soon became a moment of loneliness...21 -
A group of Security researchers has officially fucked hardware-level Intel botnet officially branded as "Intel Management Engine" they did so by gathering it all the autism they were able to get from StackOverflow mods... though they officially call it a Buffer Overflow.
On Wednesday, in a presentation at Black Hat Europe, Positive Technologies security researchers Mark Ermolov and Maxim Goryachy plan to explain the firmware flaws they found in Intel Management Engine 11, along with a warning that vendor patches for the vulnerability may not be enough.
Two weeks ago, the pair received thanks from Intel for working with the company to disclose the bugs responsibility. At the time, Chipzilla published 10 vulnerability notices affecting its Management Engine (ME), Server Platform Services (SPS), and Trusted Execution Engine (TXE).
The Intel Management Engine, which resides in the Platform Controller Hub, is a coprocessor that powers the company's vPro administrative features across a variety of chip families. It has its own OS, MINIX 3, a Unix-like operating system that runs at a level below the kernel of the device's main operating system.
It's a computer designed to monitor your computer. In that position, it has access to most of the processes and data on the main CPU. For admins, it can be useful for managing fleets of PCs; it's equally appealing to hackers for what Positive Technologies has dubbed "God mode."
The flaws cited by Intel could let an attacker run arbitrary code on affected hardware that wouldn't be visible to the user or the main operating system. Fears of such an attack led Chipzilla to implement an off switch, to comply with the NSA-developed IT security program called HAP.
But having identified this switch earlier this year, Ermolov and Goryachy contend it fails to protect against the bugs identified in three of the ten disclosures: CVE-2017-5705, CVE-2017-5706, and CVE-2017-5707.
The duo say they found a locally exploitable stack buffer overflow that allows the execution of unsigned code on any device with Intel ME 11, even if the device is turned off or protected by security software.
For more of the complete story go here:
https://blackhat.com/eu-17/...
https://theregister.co.uk/2017/12/...
I post mostly daily news, commentaries and such on my site for anyone that wish to drop by there
19 -
Never have I been so furious whilst at work as yesterday, I am still super pissed about going back today but knowing it's only for another few weeks makes it baerable.
I have been the lead developer on a project for the last 3~ months and our CTO is the product owner. So every now and then he decides to just work on a feature he is interested in- fair enough I guess. But everything I have to go and clean up his horrendous code. Everything he writes is an absolute joke, it's like he is constantly in Hackathon mode "let's just copy and paste some code here, hardcoded shit there and forgot about separation of code- it all goes in 1 file".
So yesterday he added a application to the project and instead of reusing a shared data access layer he added an entirely new ORM, which is near identical to the existing ORM in use, for this one application.
Being anal about these things, the first thing I did was delete his shit and simply reference the shared library then refactor a little code to make it compatible.
WELL!! I certainly hit a nerve, he went crazy spamming messages on Slack demanding I revert as it broke ONE SINGLE QUERY that he hadn't checked in (he does 1 huge commit for 10 of everyone else's). I stuck to my principals and explained both ORM's are similar and that we only needed one, the second would cause a fragmented codebase for no benefit whatsoever.
The lead Dev was then forced to come and convince me to revert, again I refused and called out the shit quality of their code. The battle raged on via the public slack group and I could hear colleagues enjoying the heated debate, new users even started joining the group just to get in on mine and the cto's difference of opinion.
I even offered to fix his code for him if he were to commit it, obviously that was not taken well ;).
Once I finally got a luck at the cluster fuck of shit he had written it took me around 5 minutes to fix and I ever improved performance. Regardless he was having none of it. Still the demands to revert continued.
I left the office steaming after long discussions with the lead Dev caught in the middle.
Fortunately my day was salvages with a positive technical discussion that evening at a company with whome I had a job offer from.
I really hate burning bridges and have never left a company under bad terms but this dictator is making me look forward to breaking the news today I will be gone in 4 weeks.4 -
Breaking news!
An anomaly in human communications was discovered!! It appears that when a person asks a tech oriented friend "can you help me with my computer?" And receives a positive response, what he actually hears is "yes, I agree to be your slave for any technical issue you have from now and until the end of time"!
Scientists are investigating...2 -
This week in positive news: "Video Editor" comes to Windows 10, so I can finally uninstall my hacked-together version of Movie Maker8
-
In the 90s most people had touched grass, but few touched a computer.
In the 2090s most people will have touched a computer, but not grass.
But at least we'll have fully sentient dildos armed with laser guns to mildly stimulate our mandatory attached cyber-clits, or alternatively annihilate thought criminals.
In other news my prime generator has exhaustively been checked against, all primes from 5 to 1 million. I used miller-rabin with k=40 to confirm the results.
The set the generator creates is the join of the quasi-lucas carmichael numbers, the carmichael numbers, and the primes. So after I generated a number I just had to treat those numbers as 'pollutants' and filter them out, which was dead simple.
Whats left after filtering, is strictly the primes.
I also tested it randomly on 50-55 bit primes, and it always returned true, but that range hasn't been fully tested so far because it takes 9-12 seconds per number at that point.
I was expecting maybe a few failures by my generator. So what I did was I wrote a function, genMillerTest(), and all it does is take some number n, returns the next prime after it (using my functions nextPrime() and isPrime()), and then tests it against miller-rabin. If miller returns false, then I add the result to a list. And then I check *those* results by hand (because miller can occasionally return false positives, though I'm not familiar enough with the math to know how often).
Well, imagine my surprise when I had zero false positives.
Which means either my code is generating the same exact set as miller (under some very large value of n), or the chance of miller (at k=40 tests) returning a false positive is vanishingly small.
My next steps should be to parallelize the checking process, and set up my other desktop to run those tests continuously.
Concurrently I should work on figuring out why my slowest primality tests (theres six of them, though I think I can eliminate two) are so slow and if I can better estimate or derive a pattern that allows faster results by better initialization of the variables used by these tests.
I already wrote some cases to output which tests most frequently succeeded (if any of them pass, then the number isn't prime), and therefore could cut short the primality test of a number. I rewrote the function to put those tests in order from most likely to least likely.
I'm also thinking that there may be some clues for faster computation in other bases, or perhaps in binary, or inspecting the patterns of values in the natural logs of non-primes versus primes. Or even looking into the *execution* time of numbers that successfully pass as prime versus ones that don't. Theres a bevy of possible approaches.
The entire process for the first 1_000_000 numbers, ran 1621.28 seconds, or just shy of a tenth of a second per test but I'm sure thats biased toward the head of the list.
If theres any other approach or ideas I may be overlooking, I wouldn't know where to begin.16 -
Feeling like shit, tired, stressed and then going into a performance review where aparently im far exceeding what i need to do. Makes me wonder why i need to feel like this, i dont really feel excited although there was positive news.. I think i need sleep1
-
A bit longer rant, somehow triggered by the end of this rant:
https://devrant.com/rants/7145365/...
The discussion revolved around strpos returning false or a positive integer.
Instead of an Option or a Exception.
I said I'm a sucker for exception, but I'm also a sucker for typing.
Which is something most languages lack - except the lower level ones like C / C++.
I always loved languages which have unsigned and signed types.
There, I said it... :) I know that signed / unsigned is controversial, Google immediately leads to blog entries screaming bloody murder because unsigned can overflow – or underflow, if someone tries to use a -1on an unsigned integer.
Note that my love is only meant for numeric types, unsigned / signed char is ... a whole can of insanity on its own.
https://phoronix.com/news/...
If you wanna know more.
Back to the strpos problem, now with my secret love exposed:
strpos works on a single string, where a string is a sequence of chars starting with 0.
0 is a positive integer.
In case the needle (char that should be looked up in the string) cannot be found in the haystack (the string), PHP returns "false".
This leads to the necessity of explicitly checking the type as "0" (beginning of string, a string position)... So strpos !== false.
PHP interprets 0 as false, any other integer value is true.
In the discussion, the suggestion came up to return -1 if a value could not be found – which some languages do, for example Scala.
Now I said I have a love for unsigned & signed integers vs. just signed integers...
Can you guess why the -1 bothers me very much?
Because it's a value that's illogical.
A search in a sequence that is indexed by 0 can only have 0 or more elements, not less than zero elements.
-1 refers to a position in the sequence that *cannot* exist.
Which is - of course - the reason -1 was chosen as a return value for false, but it still annoys me.
An unsigned integer with an exception would be my love as a return value, mostly because an unsigned integer represents the return value *best*. After all, the sequence can only return a value of 0 ... X.
*sigh*
Yes, I know I'm weird.
I'm also missing unsigned in Postgres, which was more or less not implemented because it's not in the SQL standard...
*sob*29 -
Not a rant, positive news instead. Finally after 2.5 years of searching I found a new job! Especially after a interview that I thought went south very quickly. Ended up with an offer 30 minutes after the fact.1
-
I feel I need to write some side project summary somewhere.
So here it is about 3 months later:
- deleted 90% of code I created during last 3 months
- rewrote backed 5 times
- 200 lines POC still waiting to put in any meaningful architecture on frontend
- frontend part after aurelia, next, gatsby, react I think it would be vue powered by nuxtjs
- forced myself to buy food for whole week and don’t go out (except go running ) before I finish at least what I wrote on whiteboard
Now some positive news:
- there is not much left to be fucked up, removed or unnecessary added
- I think I got a plan
- this is probably first side project that makes me happy for such long time
- there is some probability it would help people and this is what I want to do in my life
Most important is that I know it would take at least half a year to do basic version of it and I don’t care.
Wish me luck so I can put some sneak peak after next 3 months. -
So I have question about my resume.
During my college time, I have done two projects related to politics:
One is to analyze the bias of media. What I did is scrape news covers for Trump and Hillary during election year and get sentiment analysis. The result is not surprising that among NY Times, NBC, Fox, Eashington Post, and CNN, Fox news is clearly favoring Trump, since Fox news is a republican news site.
The other project I did was to analyze the speech complexity and sentiment of the election. One of the observation we made was that Hillary and Trump are almost at the same level regarding speech complexity. However, Trump has a more positive sentiment in the speech, which is true consider how much he loves to say make America great again.
Now the question is, when I gave my advisor my resume, she said that I'd better not put those two projects on my resume since they are related to politics.
But, I am applying for a data science master degree. Seriously, I was just collecting the data and the data speaks for himself, why should I take those projects off my resume? I'm very proud of those projects I did as a matter of fact.
So here is the question. Shall I take off those two projects on my resume because they were political or I should leave it thereawarreally need some professional views. Please.1 -
Losing a significant amount of money, especially after years of hard work, was something I never expected to experience. As a pilot, I had spent countless hours away from home, saving diligently from my earnings. When I decided to invest my 133K CAD gratuity with ForexTilt, I thought it was a smart decision that would help grow my savings. The platform seemed promising, and I was confident in my choice. However, everything quickly began to fall apart. The platform’s performance started to decline, and before I knew it, my entire 133K CAD investment had vanished. I was in shock. This money wasn’t just an investment; it was a product of years of sacrifice and hard work. Losing it was heartbreaking, and I was left feeling utterly helpless. At first, I tried to convince myself that it was a temporary issue, but the reality soon set in: I had been scammed. The disappointment and frustration were overwhelming, and I had no idea where to turn for help. I felt an overwhelming sense of loss and was unsure how to recover from it. My confidence in financial markets, in general, had been shattered. I kept thinking of the time away from home, the long hours, and the sacrifices that had all gone into that money. The fear of not only losing my savings but also not being able to provide for my family weighed heavily on my mind. I knew I had to act fast, but I didn’t know where to begin. In my search for a solution, I turned to friends, family, and online forums. After hearing stories of others who had been in similar situations, I came across Malice Cyber Recovery. I read numerous positive reviews, and it seemed like they had a solid track record of helping people recover their lost funds. After some careful consideration, I decided to reach out to them. From the moment I made contact, Malice Cyber Recovery Recovery's team was nothing short of professional and empathetic. They took the time to understand my case and reassured me that they had the expertise needed to help recover my 133K CAD. Their confidence gave me hope when I had nearly given up on ever getting my money back. They worked tirelessly on my behalf, and to my amazement, my funds were recovered in full. I could hardly believe it when I received the news, especially since the recovery happened just before Christmas. It felt like a miracle, and it brought me an immense sense of relief and joy to enter the holiday season without the financial burden I had been carrying. Thanks to Malice Cyber Recovery, I got my life back on track, and the overwhelming sense of hopelessness was replaced with renewed hope for the future.
1 -
Experiencing a security breach involving your Bitcoin wallet can be a harrowing ordeal. This was my reality when I received an unexpected BTC security code on my phone. At the time, I didn’t realize the significance of this code and, unfortunately, ignored it. To my dismay, I later discovered that my Bitcoin wallet had been hacked by an unknown scammer, resulting in the theft of all the funds I had accumulated. The frustration and helplessness I felt during this period were overwhelming. My entire Bitcoin portfolio was inaccessible, and the sense of losing control over my assets was incredibly distressing. The funds that had been stolen represented not just an investment, but a crucial part of my financial security. I was left without any clear path forward, grappling with the reality that my savings were gone and that I had no immediate way to recover them. In my search for a solution, I turned to online resources and discussions in hopes of finding a way to retrieve my lost funds. It was during this search that I heard about FAYED HACKER from a trusted friend. They spoke highly of FAYED HACKER’s reputation for recovering lost funds and providing effective solutions for hacking incidents. Encouraged by their positive feedback, I decided to reach out to FAYED HACKER for help. I contacted them through their email, providing all the relevant details about my situation. The response from FAYED HACKER was swift and professional. They offered a detailed consultation and outlined the steps I needed to follow to initiate the recovery process. Their instructions were clear and comprehensive, guiding me through every necessary action to address the breach and attempt to regain control of my wallet. Following their expert advice, I was able to take the necessary steps to begin the recovery process. FAYED HACKER’s team worked diligently on my case, employing their expertise and advanced techniques to trace the stolen funds and secure my compromised wallet. The process required patience and careful adherence to their instructions, but their support was unwavering and reassuring throughout. Within a few weeks, I received the incredible news that my Bitcoin wallet and the stolen funds had been successfully recovered. FAYED HACKER’s efforts to rectify the situation were nothing short of remarkable. They had not only restored access to my wallet but also ensured that the stolen BTC was returned. I was once again able to manage my wallet independently, regaining control over my financial assets. The successful recovery of my Bitcoin and wallet was a huge relief and a testament to the effectiveness of FAYED HACKER’s services. Their professionalism, expertise, and commitment to their clients were evident throughout the entire process. I am profoundly grateful for their help and would strongly encourage anyone who finds themselves in a similar predicament to seek assistance from credible and ethical recovery services like FAYED HACKER. Dealing with a hacked Bitcoin wallet can be an incredibly stressful experience, but recovery is possible with the right help. FAYED HACKER provided me with the expert support and guidance needed to regain my assets and restore my peace of mind. Their dedication to their clients and their effective recovery strategies make them a trustworthy choice for anyone facing issues with stolen or compromised Bitcoin. If you ever find yourself in a situation where your funds or wallet have been hacked, reaching out to a reputable recovery service like FAYED HACKER could be the key to reclaiming what you’ve lost.
EMAIL: writeus @ fayedhacker . tech or fayedexperthack @ solution4u . com
WHATSAPP: + 44 (753) (524) (0205)
-
HIRE FAST USDT-BTC RECOVERY EXPERT\FOLKWIN EXPERT RECOVERY.
I had a dreamlike beginning to my Bitcoin journey. The success stories and the notion that cryptocurrencies could transform how we invest and accumulate money enthralled me. I made a sizable investment in Bitcoin after doing extensive research and planning in the hopes of securing my financial future. Everything seemed ideal for a while, and my investment seemed to be yielding positive results. However, everything came crashing down. My Bitcoin was taken due to a huge hacking attack and a succession of missteps, which saddened me. My hard-earned savings and investments were gone in an instant. My loss was unbearably heavy. I not only lost a lot of money, but I also felt like I had failed myself and my future. I was overcome with regret, fear, and helplessness. Every attempt to get access to my cash failed, and the prospect of ever seeing my money again became increasingly distant. In my efforts to look for a helping hand, I contacted various so-called "recovery services," but they all revealed to be scams or failed to deliver any meaningful remedies. I was frantic, terrified that my money had been lost forever, and I was sinking more into despair. The prospect of irreversible financial devastation worried me, and I felt worthless. That’s when I found ( Folkwin Expert Recovery ). At first, I was hesitant. After all, I had already been burned by false promises. But after reading about their track record of successful recoveries and their professional, transparent approach, I decided to give them a chance. It felt like my last shot at recovering what I had lost. After weeks of persistence, I received the incredible news that my stolen Bitcoin had been recovered. The relief I felt was overwhelming. What had seemed like a hopeless situation had been reversed, and my financial future was no longer in jeopardy. I couldn’t believe it—I had been given a second chance. Thanks to ( Folkwin Expert Recovery ), I was able to overcome the devastation of losing my Bitcoin and begin to rebuild my financial security. They showed me that with the right team and the right approach, even the most devastating losses can be turned around. Contact Folkwinexpertrecovery (AT) tech-center (DOT) com or W-h-a-t-s-A-p-p; +1 (740)705-0711 for help.
Regards,
Edward H Macnamara.
3 -
While I was browsing online for some school-related information, I stumbled upon a recommendation for a service called Malice Cyber Recovery. At first, I didn’t think much of it. However, after reading several positive reviews and testimonials from people who had used their services, I decided to reach out. I had been struggling with a problem of my own: I had 2 BTC stuck in my binary options trading account, and no matter what I did, I couldn’t withdraw the funds. I felt completely frustrated and helpless. I had tried everything to resolve the issue on my own, but nothing worked. That's when I decided to give Malice Cyber Recovery a shot, based on all the positive feedback I had seen. I reached out to them, and to my surprise, their team responded almost immediately. They were professional and clearly knew what they were doing. They explained the whole process to me step-by-step, and I felt reassured that I was in good hands. Within just 24 hours of contacting them, I was able to successfully withdraw my 2 BTC. I couldn’t believe how quickly and efficiently they were able to recover the funds I had thought were lost forever. Their team made the entire process smooth, and I was kept updated every step of the way. It was clear that they were experts in handling situations like mine, and they took care of everything with professionalism. I am incredibly grateful to Malice Cyber Recovery for coming through for me when I didn’t know where to turn. They helped me get my funds back in a way that I couldn’t have done on my own. The entire experience was hassle-free, and I didn’t have to worry about a thing. Interestingly, just the other day, I saw a segment on NBC 5 Dallas, where they mentioned Malice Cyber Recovery. They highlighted how the service had helped people recover their funds from binary brokers, especially those who had trouble withdrawing their money. This news made me even more confident in my decision to reach out to them. If you're having trouble withdrawing funds from your binary options account or are facing similar issues, I highly recommend Malice Cyber Recovery. They really came through for me, and I’m so thankful for their help.
1 -
If you’ve suffered financial loss due to fraudulent investments, lottery scams, romance scams, or any other form of cyber fraud, it’s understandable to feel as though all hope is lost. However, there is encouraging news for those affected. One organization making significant strides in addressing these issues is Digital Tech Guard Recovery. They are dedicated to helping victims of cyber fraud recover lost funds and cryptocurrencies while also collaborating with authorities, including the FBI and INTERPOL, to combat cybercrime. Digital Tech Guard Recovery operates at the intersection of technology and justice, utilizing sophisticated tools and methods to trace scammers and retrieve lost assets. Their team consists of experts in various fields, including cybersecurity, financial investigations, and law enforcement, allowing them to offer a range of services tailored to the needs of those affected by cyber fraud. Their work involves recovering funds from scams that can range from fraudulent investment schemes to lottery and romance scams. For individuals who have lost money in these types of scams, Digital Tech Guard Recovery provides a ray of hope. Their expertise in navigating the complexities of financial fraud means they can often achieve positive outcomes where other methods might fail. In addition to recovering funds, Digital Tech Guard Recovery is also equipped to handle a variety of cyber-related tasks. These include addressing issues related to phone hacking, spying, and conducting thorough investigations into matters such as Binary and Forex trading scams, NFT frauds, and cryptocurrency thefts. Their comprehensive approach ensures that every aspect of the fraud is examined and addressed. Many clients who have sought Digital Tech Guard Recovery’s assistance have reported positive experiences. Testimonials from satisfied customers often highlight the organization’s professionalism, effectiveness, and dedication to achieving results.
-
I still remember the day I received the phone call that changed my life. I had been a victim of online scams, and I had lost a significant amount of money to a group of cyber thieves. I was devastated, unsure of how I was going to recover from the financial hit. But then, a friend recommended that I reach out to Malice Cyber Recovery, a company that specialized in helping people recover their stolen funds. At first, I was skeptical. I had tried contacting the authorities, but they had told me that there was little they could do to help. I had also tried contacting other recovery services, but they had all promised me the world and delivered nothing. So, why should I trust Malice Cyber Recovery? But, I had nothing to lose at this point, so I decided to give them a shot. I reached out to Malice Cyber Recovery via their website, and I was immediately impressed by their response time. Someone from their team got back to me within the hour, and we started discussing my case. They asked me for all the details of the scam, including the amount of money I had lost and the supposed cryptocurrency wallet address that the thieves had used. Armed with this information, Malice Cyber Recovery launched an investigation into the scam. They worked tirelessly behind the scenes, using their expertise and resources to track down the thieves and locate my stolen funds. I was amazed at how quickly they were able to move, and I found myself checking my email and phone constantly, waiting to hear from them. As the days turned into weeks, I started to lose hope. I was beginning to think that I would never see my money again. But, the team at Malice Cyber Recovery never gave up. They continued to work tirelessly, following every lead, every tip, every hint that might lead them to my stolen funds. And then, one day, they called me with the news that I had been waiting for. They had located the cryptocurrency wallet address that the thieves had used, and they had been able to track down the funds. They informed me that my money was safe, and that they would be able to recover it for me. I was overjoyed. I couldn't believe that I was finally going to get my money back. I felt a weight had been lifted off my shoulders, and I couldn't wait to get my hands on my hard-earned cash. The team at Malice Cyber Recovery walked me through the process of recovering my funds, explaining every step of the way what was happening and when I could expect to see my money. And then, the day finally arrived. My money was transferred back into my account, and I was finally able to breathe a sigh of relief. I had gotten my money back, and I couldn't thank Malice Cyber Recovery enough for their help. They had taken a difficult and stressful situation and turned it into a positive one. As I look back on that experience, I realize just how lucky I was to have found Malice Cyber Recovery. They are a team of experts who truly care about their customers, and they will stop at nothing to help you recover your stolen funds. If you're a victim of online scams, I urge you to reach out to them. They are the real deal, and they will get you the help you need.
1
Top Tags
Weekly Rant
View