Understanding hash length extension attacks

Here is a somewhat counterintuitive result (at least for me): supposethat you have the SHA1 hash of some value, SHA1(m) . If you know thelength of m, it is possible to work out the SHA1 hash of m, plussome magic, plus anything more of your choice. In the literature ,this is called an 'extension attack'. I think I understand why thisis so and basically why it has to be so, and now I'm going to


my new toy!




















Sony VAIO X
系列 - VPCX115LG
- highly recommended~

處理器技術 *1 Intel® Atom™處理器Z540 (1.86 GHz, 支援HT技術 *2 )
晶片Intel® System Controller Hub US15W 晶片
作業系統 Windows® 7 Professional 32-bit 英文版
繁體中文、簡體中文、阿拉伯文、泰文語言套裝
處理器

Rome, Italy - The Eternal City [Video]

Rome Italy, 2009 - A video to wrap up my time in the Eternal City (I'm heading home in two days!):


四年前

日子一日一日過去,有時候我們很容易會忘記了自己做過什麼事。

很少人會記得自己幾年前的某一天做過些什麼,我比較念舊,有些日子,總是難以忘記。

寫這幾行字時大概是晚上九點五十分,四年前這個時候,我在一個看台上

視野

多邊連結 改造社會
視文學雜誌為社會企業
(刊於星島)


也許有香港人不知道,香港的本土文學,素來是受兩岸三地以至國際肯定的。別說西西、董啟章等作家的著作常由台灣出版社出版,內地也有青年讀者對於黃碧雲、李碧華等

Why per-process (or per-user) memory resource limits are hard

A while back I wrote a little thing about process memory resourcelimits . Today I feel like elaborating on why this isa hard problem that people haven't solved yet.

Let's consider the simplest case possible: per-process RSS limits. Inthe abstract, this is simple; you keep track of how many physical pagesa process has in its page tables, and when a process that is at its RSSlimit wants to add a new page, it must first release its mapping foran existing one


請容許我有三分鐘,向你說個動人故事。

不要說三分鐘,平時三十秒的電視廣告,我們也會嫌長,這支廣告憑什麼?

可能,我們這些已經現實得有點可怕、看任何世事都只看到陰暗面的香港人,人情味愈沖愈淡,但,我希望你是少數的香港人。

看完這支廣告,大家都會


Drupal Development Environment on Mac OS X 10.6 - Multisite Capable

I've begun working a lot more with Drupal multisites, as doing so saves a lot of time in certain situations (usually, when you have a large group of sites that use the same kinds of Drupal modules, but need to have separate databases and front-end information.

One problem I've finally overcome is the use of actual domain host names for development (i.e. typing in dev.example.com instead of localhost to get to a site). This is important when doing multisite


Python modules should make visible their (fundamental) types

These days, many Python modules make a habit of being selective aboutwhat names they allow to be visible to the outside world; you onlyexpose the official, externally visible interfaces and so on.

This leads me to a thesis: all modules should make visible theirfundamental types, in the same way that the types module makes visible namesfor built-in types. Note that this doesn't reveal any previouslyinaccessible things; outside people could already just use your regularinterfaces to instantiate an instance of the type they


The (lack of) fighting in Kampfer (as of episode 4)

In the Author style of brief notes on things that I ran into elsewhere ( via Author , of course): I actuallyfind the current lack of fighting in Kampfer to be pretty realistic.

All of the Kampfers are theoretically ordinary highschool kids whobasically got drafted against their will. It feels entirely right thatthey are generally unenthusiastic about actually beating each otherup, or even theoretically killing each other, regardless of what theModerators may want them to do, and that they would much rather hang outand talk with each