2,675 reputation
11025
bio website
location
age
visits member for 4 years, 3 months
seen 5 hours ago

11h
comment Why does Google call Thunderbird “less secure”?
@Nemo: changing password for Google Account do require reauthentication with password, IIRC. The cookie alone cannot be used to change password.
Dec
23
comment Why does Google call Thunderbird “less secure”?
@Nemo: if you use the remember authentication when accessing your mail in the browser, the password is exchanged for a cookie (essentially an OAuth token). Until the remember me timeout or unless doing actions that require forced reauthentication, the web client don't need to have your password or the keyring unlocked.
Dec
23
comment Why does Google call Thunderbird “less secure”?
OAuth is more secure because it only need to decrypt the keyring (i.e. passwords in plain text) for the very short duration while you authorize the mail agent, this is true whether you do the authentication in browser or if the mail software itself supports inbuilt OAuth authorization. If the mail software doesn't use OAuth, you'll need the keyring unlocked practically all the time, thus defeating the purpose of encryption (also your password is at risk every time you suspend or hibernate the computer with the keyring unlocked).
Dec
13
comment What is Windows “hosts” file alternative for OSX?
You might also need to give yourself permissions for the parent folder /etc so saving works. No, just no. That's the worst advice you can ever give to anyone.
Dec
12
comment Why Linux /etc/fstab UUIDs are case sensitive?
UUID is NOT a hexadecimal string, rather UUID is a 128-bit value (a 128-bit integer, if you will). The hexadecimal string used for UUID is only its canonical textual representation.
Nov
26
comment Is there any difference between computer speakers and a hi-fi?
This is off topic but, if you like a good sound, a good pair of earphone or headphone would be a much better way to get a good sound without spending a fortune. Unless you regularly held parties at your house, you probably don't need a speaker, and nobody cares about sound quality in a party anyway (it usually will be just too noisy to fully enjoy the sound, and if you play your sound loud enough to drown the buzzes, your neighbor will come knocking, unless you spend more money on soundproofing...).
Nov
14
comment I have a 3.3Volt PCI ethernet card working on a 5Volt PCI slot. How is it possible?
Maybe the guy who did it read somewhere that the circuitry in the board is actually a universal one, but the card is sold without a cut for market segmentation?
Oct
31
comment How does a server get notified about the HTTP request?
Careful, "ping" has a different totally unrelated meaning in networking. Also, why has nobody mentioned "hardware interrupts"?
Oct
21
comment Do hard drives really have open cases now?
It's clearly a marketing decision. A fully enclosed hard drive would be simply a beige box and very hard to distinguish from other storage technologies like SSD, CD/DVD/BR Drive, etc. Showing a product shot with the cross section of the drives makes it easier to identify that the product is a hard disk without having to read the text (keep in mind that these stores may sell to people who don't know a single word of English).
Oct
13
comment Installing Linux on a laptop whose DVD drive and usb drives do not work
There are Linux flavors that can be installed simply by unzipping the files into a bootable partition (e.g. Gentoo can be installed this way), but you still need to be able to modify the boot record or install a bootloader (e.g. GRUB). Note Gentoo is not a beginner's system. Can you confirm whether or not you can modify the boot record? As a last resort you can set up GRUB to be chain loaded by Windows' NTLDR.
Oct
13
comment How does HTTP become stateless?
@skolima: on the other hand, statelessness is the reason why HTTP is the most scalable and reliable protocol in wide use. HTTP has always been explicitly designed for scalability rather than performance (yes, they're different thing), so if you think you need hard low latency than you are either using the wrong protocol or you are using the protocol incorrectly. While HTTP2 intends to improve performance, it does so in a way that remains true to statelessness. When used for what it's intended for, I had never seen statelessness being a bottleneck of a well designed HTTP application.
Aug
22
comment ulimit not limiting memory usage
I knew that ulimit only work within the same bash shell for programs started after the limit is set (see how I started the program from my sample shell session), my question was that the limit still didn't work even after taking that into account.
Jul
4
comment Terminal: prefix previous command?
I can't remember whether it's Ctrl+A or Cmd+A, but this shortcut is what I usually use when I used to work on OS X. Note that Ctrl+A gets you to the start of the command like "Home" button and Ctrl+E gets you to the end of the command like "End" button. I'm usually hesitant to use !! especially in combination with sudo, in case it turns out that the previous command isn't what I thought it ought to be.
Jun
23
comment Is it safe to power on a motherboard outside of its case?
@stephenbayer: a case is useful for protecting those sensitive parts from the environment. A naked boards may much more easily get contact with liquid or conductive metals which is never good. So while it's not a problem to run a PC naked, given some basic precautions, a case is a good investment to protect those expensive parts.
Jun
22
comment Sudo vs root; any actual differences?
@dmanexe: sudo doesn't stand for superuser do, it's "switch user do". su and sudo can be used to switch to any users rather than just the superuser. Also there is nothing pseudo about sudo, you really get the actual root when running sudo not some faked anything. Note that the magic of sudo really comes from setuid permission bit.
May
24
comment How does virtualizing differ from emulation, in terms of structure?
@NothingsImpossible: unless you have a very old machine, most mainstream CPU sold nowadays supports hardware virtualization. Basic virtualization is always possible because the CPU will sent an interrupt to the supervisor (kernel) if any program (like a Guest OS) tries to execute instructions that aren't allowed in the current security level. All the Host OS got to do is to trap those interrupts, figure out the desired operation, and resume the execution of the child process. AMD-V/VT-x only enables a more efficient virtualization, as now the CPU itself can serve the "disallowed" instructions.
Apr
12
comment What's an efficient way to change my 200+ account passwords?
good thing that we're now moving on to OpenID/OpenAuth based signon. All you need is just change the password for the identity provider and the rest is on the individual websites. Also, do note that it's only worth it to change password for sites that have already updated their OpenSSL library; probably a good number of those 200 websites you have never makes any updates on their system even in the face of Heartbleed.
Mar
9
comment How does an instruction in a CPU report that is has finished?
Many RISC systems doesn't have multi-cycles instructions. Not having to keep track of multi-cycles instructions are part of what makes them much simpler than CISC.
Feb
23
comment Is my BIOS at risk using the BIOS browser?
@Everyone: theoretically, if implemented well, they may be safer. However, as I said, implementation varies, some of these systems provides read only or even write access to the Windows partition. Also, they may not be updated as often as they should be, and that means they may not have security fixes from the latest Linux/Firefox/whatever software they have installed.
Feb
22
comment Is my BIOS at risk using the BIOS browser?
Hyperspace and ExpressGate are simply just Linux optimized for quick booting, which resides in a read only memory area. Security wise, it's like booting to a Live CD.