Hacker Timesnew | past | comments | ask | show | jobs | submit | golem_de's commentslogin

I don't know why you set the MTU to a lower value... What I do know, is that I've set it to 65535; my machine now transmits 64KB instead of just 1.5KB (per packet)... Can you imagine what would happen if I set this to UInt32.MaxValue...?


As to why one would set the MTU low, see http://blog.geeky-boy.com/2015/10/windows-corrupting-udp-dat...

I also made a long-winded answer to your question submitted to the blog, if you're interested.


Its generally a terrible idea to increase UDP MTU. There's no reliable reassembly in UDP. If you miss a single packet (out of say 1000) then all are simply discarded silently.

In fact, some versions of Linux didn't do UDP reassembly properly until a year ago (was a topic here on HN). Reordered UDP wasn't dealt with properly if I recall.

There are routers that drop UDP for any reason or no reason. And so on. So UDP is the red-headed stepchild of protocols, with little testing going on and lots of issues.

I recommend putting a protocol on top of any UDP transfer you code, and never increasing the MTU.


Man, you know, it's just a packet, not 1.500, but 65.535 bytes. There could be 4.294.967.295 bytes!!! :-)

For basically everything TCP is used. UDP is just used by DNS and they usually weight 100 - 200 bytes.

Look into your wireshark!


The UDP packet, and what goes out on the wire, are different things. IP-over-Ethernet for instance does not send out data in units larger than 1500 bytes; often smaller over WiFi. So UDP packets larger than 1500 bytes will be divided up, and reassembled on the receive end.


https://bazaar.launchpad.net/~mailman-coders/mailman/3.0/vie... Line 56: _password = Column('password', Unicode)


From the text:

"To answer the question that at least a few dozen of you are looking for: Mailman 3 will not, by default, send you a monthly reminder that includes your password in plain text. In fact, it can't; Mailman 3 hashes passwords before storing them."


Most of the way I'm reminded that a list I'm on uses Mailman is that it mails me my password in plain text every month.

So, it's unfortunate, but it's nothing new.


As I understand it from the write-up (and a brief look at the source seems to confirm that), Mailman 3.0 does encrypt passwords by default and does not mail them out any longer.

It is stored in unicode because that's what passlib hash algorithms return, not because there's an underlying plaintext representation.


It hashes password.

Encrypting them indicates there's a way to decrypt them. Hashing, by definition, is not possible (not practical, really).


If there are better mailing list software, what are they?


Sorry, I couldn't resist. Look on that 'user' table! Does anyone have a copy of lists.mozilla.org? hehe


Can you help me understand the issue you see here?


[deleted]


> But the code you are pointing out is not using hashing(&salting) at all, I'm confused.

That's just the storage backend. Encryption is not handled at this layer, but at (e.g.):

https://bazaar.launchpad.net/~mailman-coders/mailman/3.0/vie...


2. "Show HN" shouldn't be a place to introduce startups and other "real world" projects.

Let's face it, a typical HN user is a programmer wanting to read something technical.

He will not take time to understand/appreciate your non-technical startup. What you can get at most is a snarky comment, but almost all will just ignore it.


It's awesome, how much you can write about an iframe


Does Microsoft also remove the Firefox and Chrome certificates?


did you ever google for fartscroll?


I say just mailman.

Anyone from Mozilla, EcmaScript, GnuPG and thelike here? Don't miss your monthly "password reminder" mail...

P.S. Just save ONLY a salted hash. Hash functions are designed to be one-way, so no one but you can re-store your password. EVER.


I filed a bug and it was closed waiting for mailman 3 to ship :-/


wait on microsoft, what they make out of roslyn and singularity/midori


You should also have a look on fartscroll: http://theonion.github.io/fartscroll.js/


As always learning by doing is the best, look at this old school website: http://www.japheth.de/index.html Aside of it's manual, he also recommends the (partially free) book http://www.phatcode.net/res/223/files/html/toc.html


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: