Steve Fan stevefan1999-personal

MD5 Collision with CRC32 Preimage

Here's the scenario: We want to craft two different messages with the same MD5 hash, and a specific CRC32 checksum, simultaneously.

In other words, we want an MD5 collision attack and a CRC32 preimage attack.

This might seem like a contrived scenario, but it's exactly the one I faced while producing my PNG hashquine (Yes OK maybe that's also a contrived scenario, cut me some slack).

On its own, a CRC32 preimage attack is trivial. You can craft a 4-byte suffix that gives any message a specific checksum, calculated using a closed-form expression (which I am too lazy to derive, not even with assistance from Z3). It's not an attack per-se, since CRC32 was never meant to be cryptograpically secure in the first place.

By looking that you are here you most likely use Cardboard/Banner/some other weird bukkit + Fabric project (or just someone linked to it).

Don't do it, it will cause more harm/instabilities to your server than good. But let's start at the beginning.

Few definitions before we start:

Bukkit - It means bukkit, spigot, paper and any forks of these,
Cardboard - mod by IsaiahPatton that tries to port bukkit ecosystem to fabric.
Banner - another mod trying to make plugins work with Fabric, similar to Cardboard.
Fabric - a Minecraft modding platform, includes Fabric Loader and Fabric API, everything written in this gist also applies to Quilt.
Mods - Mods designed for fabric and compatible platforms

Risk Assessment of GitHub Copilot

0xabad1dea, July 2021

this is a rough draft and may be updated with more examples

GitHub was kind enough to grant me swift access to the Copilot test phase despite me @'ing them several hundred times about ICE. I would like to examine it not in terms of productivity, but security. How risky is it to allow an AI to write some or all of your code?

Ultimately, a human being must take responsibility for every line of code that is committed. AI should not be used for "responsibility washing." However, Copilot is a tool, and workers need their tools to be reliable. A carpenter doesn't have to

资源

Windows XP/Server 2k3 Source master branch is meant to hold untouched source code for referencing. better to torrent then clone entire repo.

Best:

Think twice before abandoning Xorg. Wayland breaks everything!

Hence, if you are interested in existing applications to "just work" without the need for adjustments, then you may be better off avoiding Wayland.

Wayland solves no issues I have but breaks almost everything I need. Even the most basic, most simple things (like xkill) - in this case with no obvious replacement. And usually it stays broken, because the Wayland folks mostly seem to care about Automotive, Gnome, maybe KDE - and alienating everyone else (e.g., people using just an X11 window manager or something like GNUstep) in the process.

The Wayland project seems to operate like they were starting a greenfield project, whereas at the same time they try to position Wayland as "the X11 successor", which would clearly require a lot of thought about not breaking, or at least providing a smooth upgrade path for, existing software.

In fact, it is merely an incompatible alternative, and not e

At the beginning of 2030, I found this essay in my archives. From what I know today, I think it was very insightful at the moment of writing. And I feel it should be published because it can teach us, Rust developers, how to prevent that sad story from happening again.

What killed Haskell, could kill Rust, too

What killed Haskell, could kill Rust, too. Why would I even mention Haskell in this context? Well, Haskell and Rust are deeply related. Not because Rust is Haskell without HKTs. (Some of you know what that means, and the rest of you will wonder for a very long time). Much of the style of Rust is similar in many ways to the style of Haskell. In some sense Rust is a reincarnation of Haskell, with a little bit of C-ish like syntax, a very small amount.

Is Haskell dead?

云

IaaS指提供系统（可以自己选）或者储存空间之类的硬件，软件要自己手动装。PaaS提供语言环境和框架（可以自己选）。SaaS只能使用开发好的软件（卖软件本身，如税务会计、表格文字）。BaaS一般类似于非关系数据库，但各家不通用
云服务的特点：零前期成本&按需付费&弹性（类似于租，可随时多加、退掉；但没有残值）、高可用（放在机房中，不同AZ间水电隔离）

其他人的集合

https://education.github.com/pack GitHub学生包，需用教育邮箱验证。各种福利，可从DigitalOcean上手
https://github.com/ripienaar/free-for-dev 本文尽量不与此项目重复
https://free.zhelper.net/

	############ REPLACE app/models/enterprise_token.rb in the source code with this file! ################
	############ also be sure to RESTART OpenProject after replacing the file. ################
	############ it doesn't show that enterprise mode is enabled in the settings, but all ################
	############ enterprise mode features, such as KanBan boards, are enabled. ################
	#-- copyright
	# OpenProject is an open source project management software.
	# Copyright (C) 2012-2023 the OpenProject GmbH
	#
	# This program is free software; you can redistribute it and/or
	# modify it under the terms of the GNU General Public License version 3.

	use std::collections::HashMap;
	use std::fmt;
	use std::io;
	use std::num::ParseFloatError;
	use std::rc::Rc;

	/*
	Types
	*/

	So about 1.13. As we have been stating since the public release of 1.13,
	the Forge update is a time we are taking to re-write everything from the
	ground up. Not just Forge, but the entire toolchain, launcher, installer,
	and core of Forge is being rewritten. Every line of code is being inspected,
	and re-validated. This whole process takes a while. To give you (the reader)
	an idea of what has been done so far:

	ForgeGradle has been rewritten to support modern gradle versions, with better tools
	to be expandable and used for more than just setting up a Minecraft/Forge
	dependency project. It's also much cleaner and organized this time around