HSTS Super Cookies

Using HSTS to track your browsing habits evades the features of web browsers designed to control more normal ”cookie” based tracking mechanisms. Using ”incognito” or ”private” modes means that existing cookies won’t be shared with sites you visit. Browsers also let you entirely delete cookies that could be used to track you. Because HSTS is a security feature and isn’t intended to be used for tracking, web browsers treat it differently from cookies. It is only by intentional misapplication that HSTS can be exploited to track users. ...

January 11, 2015 · 1 min · 92 palabras · Nacho Cano

How we made editing Wikipedia twice as fast

HipHop Virtual Machine, or HHVM, reduces the median page-saving time for editors from about 7.5 seconds to 2.5 seconds, and the mean page-saving time from about 6 to 3 seconds. Below, I’ll explain the technical background for HHVM on MediaWiki and some of the far-reaching benefits of this change that will go beyond the recent performance gains. » Ori Livneh | blog.wikimedia.org

January 11, 2015 · 1 min · 62 palabras · Nacho Cano

An unbeatable computer program has finally solved two-player limit Texas hold’em poker

Two-player limit Texas hold’em poker has finally been solved, according to a study published in Science today. Scientists have designed a computer program, named Cepheus, with a strategy for the game that is so close to perfect that statistical analysis shows it can’t be defeated by a human poker player, even if that player competed against the computer for an entire lifetime. This means that no matter how the game starts out, the computer will win or break even in the long run — making it essentially unbeatable. » Cepheus ...

January 10, 2015 · 1 min · 95 palabras · Nacho Cano

Code rot & OpenBSD

The background is set, you know why I took interest now it’s time to tell what solidified the decision. Each change made to the OpenBSD codebase undergoes a code review before it’s committed to the tree. If you managed to get that far in this article you perfectly know why I deem that of upmost importance. No matter how many features your software has, if your documentation is sub-par then your software is most likely useless. The quality of OpenBSD documentation is on a level I didn’t expect even after reading about it in so many places. Not only will you get information on how something works, what’s possible and how to use it. It will also tell you the best practices for using the tool and warn you about the common pitfalls. ...

January 6, 2015 · 1 min · 135 palabras · Nacho Cano

Secure Secure Shell

Reading the documents, I have the feeling that the NSA can 1) decrypt weak crypto and 2) steal keys. Let’s focus on the crypto first. SSH supports different key exchange algorithms, ciphers and message authentication codes. The server and the client choose a set of algorithms supported by both, then proceed with the key exchange. Some of the supported algorithms are not so great and should be disabled completely. If you leave them enabled but prefer secure algorithms, then a man in the middle might downgrade you to bad ones. This hurts interoperability but everyone uses OpenSSH anyway. ...

January 6, 2015 · 1 min · 100 palabras · Nacho Cano

Software Library: MS-DOS Games

Software for MS-DOS machines that represent entertainment and games. The collection includes action, strategy, adventure and other unique genres of game and entertainment software. Through the use of the EM-DOSBOX in-browser emulator, these programs are bootable and playable. Please be aware this browser-based emulation is still in beta - contact Jason Scott, Software Curator, if there are issues or questions. » archive.org

January 5, 2015 · 1 min · 62 palabras · Nacho Cano

Solucionado el error «ImportError: cannot import name IncompleteRead» al ejecutar pip en Ubuntu Trusty Tahr 14.04

Si al ejecutar pip nos encontramos con el siguiente error: Traceback (most recent call last): File "/usr/bin/pip", line 9, in load_entry_point('pip==1.5.4', 'console_scripts', 'pip')() File "/usr/local/lib/python2.7/dist-packages/pkg_resources.py", line 352, in load_entry_point return get_distribution(dist).load_entry_point(group, name) File "/usr/local/lib/python2.7/dist-packages/pkg_resources.py", line 2307, in load_entry_point return ep.load() File "/usr/local/lib/python2.7/dist-packages/pkg_resources.py", line 2021, in load entry = __import__(self.module_name, globals(),globals(), ['__name__']) File "/usr/lib/python2.7/dist-packages/pip/__init__.py", line 11, in from pip.vcs import git, mercurial, subversion, bazaar # noqa File "/usr/lib/python2.7/dist-packages/pip/vcs/mercurial.py", line 9, in from pip.download import path_to_url File "/usr/lib/python2.7/dist-packages/pip/download.py", line 25, in from requests.compat import IncompleteRead ImportError: cannot import name IncompleteRead Parece ser debido a un problema entre el paquete requests y pip. A partir de las versión 2.4.0 de requests se eliminó requests.compat.IncompleteRead. Sin embargo, las versiones de pip anteriores a julio de 2014 aún utilizan IncompleteRead. ...

January 2, 2015 · 1 min · 151 palabras · Nacho Cano

Homenaje a un clásico: las 10 mejores curiosidades de Monkey Island

Monkey Island es uno de los videojuegos más míticos de todos los tiempos. Está lleno de pequeñas curiosidades, anécdotas y huevos de pascua. Estas son 10 de nuestras favoritas. » Carlos Rebato | gizmodo.com

January 1, 2015 · 1 min · 34 palabras · Nacho Cano

Quake on an oscilloscope: A technical report

A summary of some problems I faced when tinkering with Quake to get it play nicely on an oscilloscope. After seeing some cool clips like this mushroom thing and of course Youscope, playing Quake on a scope seemed like a great idea. It ticks all the marks that make me happy: low-poly, realtime rendered and open source. » Pekka Väänänen | lofibucket.com

January 1, 2015 · 1 min · 62 palabras · Nacho Cano

El ’canon AEDE’: claves del presente y el futuro de la tasa de agregación de contenidos

Este jueves, 1 de enero, entra en vigor gran parte de la ley Lassalle de propiedad intelectual y con ella su artículo 32.2, que obliga a los editores y autores a cobrar —aunque no quieran— cuando los agregadores de Internet enlacen y distribuyan sus contenidos. Estos son los aspectos clave a tener en cuenta sobre el denominado canon AEDE. » M.M. | 20minutos.es

January 1, 2015 · 1 min · 63 palabras · Nacho Cano