Author: jra

  • The most important thing when go-fuzzing

    by

    in

    The most important thing to know, when you are using go-fuzz, is that the cover metric should be increasing. I didn’t know that and I wasted one 12 hour run of fuzzing because my fuzzing function was misbehaving in a way that made it return the same useless error for every input no matter what.…

  • Learning Swift, sans Xcode

    by

    in

    Say you are learning Swift. And like a good fanboi, the first thing you do is update to the latest and greatest because that’s like what you do when you are a nerd. But you live in Osh, Kyrgyzstan. You have bitchin’ FTTH from Unilink, but access outside of Kyrgyzstan is still limited by the…

  • Strictly HTTPS!

    Today I added this to the .htaccess files on my sites (nella.org and blog.nella.org) in order to make them HTTPS only: Header set Strict-Transport-Security “max-age=31536000” You should too!

  • HTTP/2: Thanks Cloudflare and Go!

    by

    in

    Look what happened today: 2015/12/04 11:38:07 fetching https://nella.org 2015/12/04 11:38:08 {200 OK 200 HTTP/2.0 2 0 map[Server:[cloudflare-nginx] Date:[Fri, 04 Dec 2015 05:38:08 GMT] Content-Type:[text/html] Set-Cookie:[__cfduid=d3a3ea49ee46eb6a6803e2eb7f597e26e1449207488; expires=Sat, 03-Dec-16 05:38:08 GMT; path=/; domain=.nella.org; HttpOnly] Vary:[Accept-Encoding] Cf-Ray:[24f529d18893372c-ARN]] 0xc8203bbf60 -1 [] false map[] 0xc8200be000 0xc8206cc420} Thank you Go 1.6 and Cloudflare. You guys are bringing my website into the…

  • Industrial-scale power storage and waste heat

    There will, eventually, be a giant wind farm above my house. I say eventually because though Switzerland is not immune from NIMBYism, our court system deals efficiently enough with oppositions so that if something is allowed by law (zoning laws, eco-protection laws, etc) then it does go through. The opposition (and there’s always opposition) does…

  • Hacking cars and fixing them

    A few years ago, I read an academic paper on how to hack cars. Today news came out that what was previously demonstrated via direct access is also possible over the air. I thought it would be fun to look at the firmware update file that fixes this, to see what format it is in,…

  • The “Listen Up” Pledge

    Thanks, Dave, for speaking up for what’s right. I’m with you, buddy. I also find harassment offensive, and I pledge to do the same as you. We need to draw a line in the sand, and organize ourselves so that healthy, respectful teams are on one side of it, and trolls are on the other…

  • Jon Stewart on FIFA… lol

    by

    in

    LOL: Swiss authorities… swiss! FIFA is so bad, they got arrested by the Swiss. See it here.

  • Doing it the hard way

    by

    in

    In my last post I offered to point out some things in Golang Challenge #2 submissions that struck me as “worthy of receiving a (polite) rebuke in code review”, otherwise known as WTFs. This is opt-in abuse. I don’t mind abusing my colleagues, when I know I can take them out for lunch later and…

  • Golang Challenge 2 comments

    by

    in

    I’ve just finished evaluating 40 of the 105 entries to the Golang Challenge #2. The organizer, Satish, asked me to write up my thoughts. The main similarity I noticed in the entries was not enough testing. The vast majority of the entries used the tests provided in with the challenge unmodified. Taking the given tests…