Tootfinder

Opt-in global Mastodon full text search. Join the index!

@wtfismyip@gnu.gl
2024-04-04 17:21:25

Here's the writeup of the new #http2 continuation flood vulnerability from the researcher who discovered it: nowotarski.info/http2-continua

HTTP/2 `CONTINUATION` Flood: Technical Details
Preface In October 2023 I learnt about HTTP/2 Rapid Reset attack, dubbed “the largest DDoS attack to date”. I didn’t have deep knowledge of HTTP/2 back then. I knew it’s basics like frames or HPACK but I was focusing more on HTTP/1.1 protocol and programming languages vulnerabilities. I decided to dedicate time to exploring HTTP/2 from a security analysis perspective after concluding my then-current research. A quick intro to HTTP/2 The main difference between HTTP/1.

@frankel@mastodon.top
2024-03-17 17:07:01

Implicit returns are a feature in some languages. They have recently bitten me, so here’s my opinion.
#coding

The pitfall of implicit returns
Implicit returns are a feature in some languages. They have recently bitten me, so here’s my opinion. Statements, expressions, and returns Before diving into implicit returns, we must explain two programming concepts influencing them. A lot of literature is available on the subject, so I’ll paraphrase one of the existing definitions: An expression usually refers to a piece of code that can be evaluated to a value. In most programming languages, there are typically three differ

@fell@ma.fellr.net
2024-04-30 13:17:14

I just heard the bad news that I am probably going to need a new job starting in July.
So, before beginning the regular search, I wanted to ask my Fedi friends if anyone could use a capable C programmer with lots of graphics and networking experience. I wouldn't mind a change, so I'm open to anything. Even other programming languages! It would be awesome if I could use Linux to do the work. 🐧
Locations I would consider are: Central Europe, Melbourne, Sydney or Remote<…

@mgorny@social.treehouse.systems
2024-04-25 15:54:46

New #RustLang projects are popping up all over the place. Many of them quickly reach feature parity with their non-Rust predecessors, then beat them both in functionality and performance. Seeing all this, it's hard not to think of Rust as a language that makes rapid development and deployment possible, and that outperforms other programming languages.
While I won't argue that Rust has its advantages, that's not the real reason here. In my opinion, it's all about its popularity. All the cool kids use Rust nowadays, and cool kids are precisely the kind of people who have time and energy to develop stuff rapidly. Add to that corporations investing in the next boom, and delivering a full-time paid workforce and funding, the culture of code reuse (i.e. sharing lots of crates), and last but not least, the benefit of starting from scratch.
Old folk like us, who barely manage enough energy to keep things alive, can't compete with that. However, we have one advantage. We don't care about being cool anymore. We aren't going to pack our bags and run after the next shiny thing, whenever the next best thing since sliced bread gets invented.
#Gentoo #OpenSource

@fanf@mendeddrum.org
2024-04-21 19:42:03

nowotarski.info/http2-continua - HTTP/2 CONTINUATION flood denial of service vulnerability.

HTTP/2 `CONTINUATION` Flood: Technical Details
Preface In October 2023 I learnt about HTTP/2 Rapid Reset attack, dubbed “the largest DDoS attack to date”. I didn’t have deep knowledge of HTTP/2 back then. I knew it’s basics like frames or HPACK but I was focusing more on HTTP/1.1 protocol and programming languages vulnerabilities. I decided to dedicate time to exploring HTTP/2 from a security analysis perspective after concluding my then-current research. A quick intro to HTTP/2 The main difference between HTTP/1.