RSSAmplifier

Blog

m1el

Byte Juggling

m1el.github.ioRSS feed ↗10 posts

Latest posts

How (Not) to Design a Hash Function

Recently, Casey Muratori has implemented a proof-of-concept terminal , which is designed around fast input processing and rendering. This is an important and commendable effort, since the vast majority of software performs tens to thousands of times slower than it can. [citation needed] One of the design choices of refterm is to use a hash table to cache glyph rendering. The key in this table is…

What does Oculus Runtime send home?

I wanted to know what data Oculus Runtime sends home. To do that, I’ve implemented a custom tool to extract TLS keys from a running Oculus Runtime instance. You can find my findings below. Methodology I’ve captured HTTP packets using Wireshark, and decrypted them using SSL KEYLOG generated by oculus-tls-extractor . Then I’ve manually inspected the captured packets over multiple sessions.…

Extracting TLS keys from an unwilling application

I want to be able to inspect the traffic of programs running on my computer. I don’t really trust those programs and ideally I’d like to put nearly all of them into a high security jail. One of those programs is Oculus software. There are a few reasons why I want to be cautious about Oculus software. Oculus is owned by Facebook, which means Facebook can dictate what Oculus software does with…

The smallest lambda interpreter in JavaScript

This post is heavily inspired by Tom Stuart: Programming with noting , William Byrd on “The Most Beautiful Program Ever Written” , Guowei LV – The Most Beautiful Program Ever Written , John Tromp – Binary lambda calculus . When I first learned about Lambda calculus , I was amazed by a strong mathematical basis for anonymous functions used in many languages. Then I wondered: what’s the simplest way…

Monogatari frame drops

There is a beatiful web page: Monogatari drops , and it’s a rare example of an acceptable use of page scroll for artistic purposes. The page is great, I like the concept, I like the art, I like monogatari series. But there is a problem: the page is slow. And we’re going to fix it. An optimized and fixed version of the page is available over here , and more details on the optimization process are…

How to draw oscilloscope lines with math and WebGL

When I saw oscilloscope music demos, they amazed and inspired me. Observing a clever use of interaction between sound and an electron beam is a unique experience. Some awesome oscilloscope music videos: Youscope , Oscillofun and Khrậng . However, I could not find any beautiful oscilloscope emulators. Lines produced by most emulators barely look like real oscilloscope lines at all. Because of that…

The Most Expensive Anti-Pattern

In this post, I’d like to talk about the most expensive programming anti-pattern I know: Manipulating structured data formats using string functions. I will be referring to it as “ printf anti-pattern ”. The cost When I call it “the most expensive” anti-pattern, it is not an empty claim. I counted vulnerabilities by type using data from cve.mitre.org , and I got this list of top vulnerability…

Speculations on security

m1el: “You cannot abstract security” m1el: “Security is not an interface” aitderceto: “Security cannot be instantiated” aitderceto: I’d like one security, please m1el: OOP is not a good tool to describe security

On white-box crypto

Usually, I don’t react strongly to articles that contain bullshit. But when I stumbled on an article that contained three false statements in the very first sentence, I simply could not leave it be. The first sentence of the article is: Program obfuscation is a breakthrough and trending field of cryptography. – valerini My post touches a lot of topics, and I’m not an expert in any of those. Strong…

Kare Kano DVDs

One day, I’ve stumbled upon Kare Kano anime, but after searching for rips for a while, I did not find a single DVDRip I would consider acceptable. So I thought: heeey, maybe I should rip the DVD myself? God, how wrong I was. In this post I’m going to write about the shit I found while working with Kare Kano DVDs. I’m writing this post not to be informative, but for myself to be done with this DVD.…