Writing functions without braces.

Knowing how method dispatch works is vital when writing performant code, and can illuminate some of the confusing behavior found in Swift.

There’s quite a lot too it. Long article.

So here’s the thing, and there’s no getting around it: my mom was right, on all particulars. She had done nothing, the computer had done it to her. It’s Twitter who is at fault, having continued to resend that confirmation email every couple months for six years.

The net80211 stack and iwm(4) driver now support MIMO in -current.

I want to be angry but I have to do some reading first!

http://lawsandsausagescomic.com/

In this, the fourth post in the Windows Command-Line series, we’ll discuss the new Windows Pseudo Console (ConPTY) infrastructure and API - why we built it, what it’s for, how it works, how to use it, and more.

It’s based on the misconception of adding security features. It’s like dieting, where people insist you should eat more kale, which does little to address the problem you are pigging out on potato chips. The key to dieting is not eating more but eating less. The same is true of cybersecurity, where the point is not to add “security features” but to remove “insecure features”. For IoT devices, that means removing listening ports and cross-site/injection issues in web management. Adding features is typical “magic pill” or “silver bullet” thinking that we spend much of our time in infosec fighting against.

One of Go’s signature features is goroutines, which are lightweight threads that are managed by the Go runtime. The Go runtime implements goroutines using a M:N work stealing scheduler to multiplex goroutines on to operating system threads. The scheduler has special terminology for three important entities; a G is a goroutine, an M is an OS thread (a ‘machine’), and a P is a ‘processor’, which at its core is a limited resource that must be claimed by an M in order to run Go code. Having a limited supply of Ps is how Go limits how many things it will do at once, so as to not overload the overall system; generally there is one P per actual CPU that the OS reports (the number of Ps is GOMAXPROCS).

source: HN

A better CRAM-MD5. Interesting to consider, probably would not use in production.

source: solar

A critique of sorts of Go’s decision to prioritize latency. A good summary of challenges in garbage collection, but I’m not sure it does much to rebut the assertion that people really do care a lot about latency.

Better CPU support, better guest support, better configuration.

source: L

If it all comes down to a rainstorm in Philly, does that count as a political mandate from the people?

If there’s some Z that you will believe only if Trump wins but not if Hillary wins, then I suggest you seriously reconsider what thought process has led you to decide that you will flip your views on politics and society depending on whether or not there’s a rainstorm or a 2% polling error or whatever.

This fanless Apollo Lake system targets the low-end market segment, and aims to differentiate itself by supporting two LAN ports.

At $180, could be a decent entry level firewall.

After years of annoying gimmicks, the gaming legend offered the simple pleasures we desperately needed

source: HN

Let’s say a machine in your corporate fleet gets infected with malware. How would you detect it? How could you find out what happened on the machine? What did the malware do? Did it steal your browser’s passwords? What network connections did the malware make? Was it looking for crypto currency? By having good telemetry and a good host monitoring solution for your machines you can collect the context necessary to answer these important questions.

The story of what shipped, how the impact was measured, and the tradeoffs that were made.

Quite long. Considers a variety of aspects.

But every once in a while, a securities class-action suit comes along that combines high stakes, serious legal issues and potentially astronomical damages. A case called “In Re Allergan Inc Proxy Violation Securities Litigation” is one such lawsuit. It should be getting a lot more attention than it is.

T-Mobile, Sprint, and AT&T are selling access to their customers’ location data, and that data is ending up in the hands of bounty hunters and others not authorized to possess it, letting them track most phones in the country.

Senators call for investigation: https://motherboard.vice.com/en_us/article/j5z74d/senators-harris-warner-wyden-fcc-investigate-att-sprint-tmobile-bounty-hunters

AT&T to stop: https://motherboard.vice.com/en_us/article/nepab8/att-stop-selling-location-data-tmobile-sprint-microbilt-zumigo

Further: https://motherboard.vice.com/en_us/article/nepx5x/we-could-easily-stop-location-data-scandals-but-we-cower-to-lobbyists-instead

And now: https://www.bloomberg.com/news/articles/2019-01-29/seems-you-can-track-someone-s-cellphone-for-300-lawsuit-ensues

For more than half a century, governments all over the world trusted a single company to keep the communications of their spies, soldiers and diplomats secret.

But what none of its customers ever knew was that Crypto AG was secretly owned by the CIA in a highly classified partnership with West German intelligence. These spy agencies rigged the company’s devices so they could easily break the codes that countries used to send encrypted messages.

Follow up: https://www.washingtonpost.com/national-security/compromised-encryption-machines-gave-cia-window-into-major-human-rights-abuses-in-south-america/2020/02/15/bbfa5e56-4f63-11ea-b721-9f4cdc90bc1c_story.html

Follow up: https://www.washingtonpost.com/national-security/as-the-us-spied-on-the-world-the-cia-and-nsa-bickered/2020/03/06/630a4e72-5365-11ea-b119-4faabac6674f_story.html

source: HN