BoppreH

36 ms·

511.
by BoppreH 6y ago
I exported my data this week, and was given the option of either many zip files (default) or a single 7z file. I downloaded the 7z without any problems.
512.
by BoppreH 6y ago
Obligatory appreciation post for dang. Swift invisible action when facing bad faith actors; sporadic public call outs for quick attitude correction; and consistent helpful presence like multi-page reminders and clarifications on the inner w
513.
by BoppreH 6y ago
General search is ruined, but image and product search contains very few items about the repository and comments.
514.
by BoppreH 6y ago
> most of the fruit is still on the tree Case in point: image search for "shirt without stripes": https://github.com/elsamuko/Shirt-without-Stripes HN comments: https://news.ycombinator.com&#x2F
515.
by BoppreH 6y ago
Zebras All the Way Down - Bryan Cantrill, Uptime 2017 http://www.youtube.com/watch?v=fE2KDzZaxvE&t=35m40s
516.
by BoppreH 6y ago
Unfortunate name, "cu" it's the most well known slang for "anus" in Brazil (population: 200+ million). "Libcu++" is sure to cause snickering.
517.
by BoppreH 6y ago
Because that's not how Unix time is defined. The leap second hack is hardcoded into it: Unix time is [...] the number of seconds that have elapsed since the Unix epoch, minus leap seconds . - Wikipedia If you are on Mars you'll h
518.
by BoppreH 6y ago
There is a very good reason to eventually abandon it: leap seconds. Unix time goes back one second whenever there is a leap second on Earth. It's extremely weird and IMHO completely ruins the purpose of a timestamp, but it's a com
519.
by BoppreH 6y ago
Funny seeing this here, I just switched to Vivaldi yesterday because of this. I really wanted to use mouse gestures and Vim-like controls again, and the WebExtension version of those addons is not nearly reliable enough. The problem seems t
520.
by BoppreH 7y ago
We are working on a security SaaS for small startups with more than just code and configuration scanning. We saw that many startups struggled with implementing security checklists and compliance requirements, often resulting in “check the b
521.
Show HN: Security Compliance SaaS for Startups(siroccosecurity.com)
4 points by BoppreH 7y ago|1 comments
522.
by BoppreH 7y ago
> You're supposed to keep offline backup keys. Any sort of synchronization feature adds a ton of attack surface. I find that a terrible design decision, because now every website has to implement their own backup code flow. PayPal,
523.
by BoppreH 7y ago
The problem is that many users think they are using E2E, because that's what Telegram advertises. Those people needed security, and looked for it, and are now vulnerable. Besides, security and privacy should be the default. It's
524.
by BoppreH 7y ago
At least WhatsApp has End to End encryption by default. I would be surprised if more than 1% of Telegram communications were similarly secure. I also find the constant mention of the vulns being "backdoors" disingenuous. I'm
525.
by BoppreH 7y ago
I meant "byte array" as in "this is a bunch of binary data you should not look into". Like people already do with images. You wouldn't remove a byte from the middle of a JPEG file, and you shouldn't do it with
526.
by BoppreH 7y ago
That's a good point, these problems are not easy to solve. But they should be solved. For example, the user types "7" into the UI control. The UI control knows it's supposed to hold a number, so it has methods that retur
527.
by BoppreH 7y ago
Please, go forth and spread the word. Drop me an email (on my profile) if you want ideas. I don't have a blog yet, but I already have a draft for a post titled "Strings are evil". There's a lot wrong with the current way
528.
by BoppreH 7y ago
That's a good heuristic, but you are still left with spoofing using 100% Cyrillic, and even old school approaches like "app1e.com" (1 instead of l). When you consider distracted users, or people with bad eyesight, you are bac
529.
by BoppreH 7y ago
Space-wise, yes, but the size of our user-entered strings is rarely a concern. On the other hand, UTF-16 is often mixed with UCS-2, which is not really Unicode, and lulls developers into a false sense of security by almost never needing t
530.
by BoppreH 7y ago
It's not just Unicode weirdness, it's the whole concept of string operations. Examples: 1) Naive CSV libraries that break when given a field containing a comma itself. Same for injections. 2) Indexing things by strings (file names
531.
by BoppreH 7y ago
String matching is inherently fuzzy. I haven't tested it, but I think a dropdown box to select your account would be best. This would also help with other normalizations (accents, spaces), and even typos if user enumeration is not a pr
532.
by BoppreH 7y ago
There are exceptions, of course. Fuzzy search is one of them. Image editing software and programming language parsers are another two. And what's the problem of letting the user type a URL? You take the resulting string (given to you b
533.
by BoppreH 7y ago
The problem is now deeply entrenched, so I don't have perfect answers. But here are my guesses: > Who (process-wise) is responsible for converting bytes to pixels? The operating system, with minor exceptions (word processors, for ex
534.
by BoppreH 7y ago
I love Unicode, but I'm more and more coming to the conclusion that strings are evil and should be treated as opaque byte arrays, whose only available operation is rendering into a bounded area. I now see any other string operation as
535.
by BoppreH 7y ago
I think you are looking for the functional square root operation: https://en.wikipedia.org/wiki/Functional_square_root In mathematics, a functional square root (sometimes called a half iterate) is a square root o
536.
by BoppreH 7y ago
Sounds like Mozilla is applying the concepts they developed for their C/C++ debugger, rr ( https://rr-project.org ).
537.
by BoppreH 7y ago
I don't remember where I first saw it, but the best definition of "understanding" I've seen is "being able to encode and compress". For example, imagine a system that has as input the picture of a human face in
538.
by BoppreH 7y ago
Every few days this Tumblr post comes to my mind: https://yudkowsky.tumblr.com/post/185387711470/bunjywunjy-ye... bunjywunjy: > yesterday for April Fool’s my workplace had > a short training article on recog
539.
by BoppreH 7y ago
I've done research on this, and I'm working on a SQRL alternative. The solution we came up with is an optional browser addon. Websites tag their QR codes as 2FA codes via HTML, the addon captures it and validates against the expec
540.
by BoppreH 8y ago
Not sure what you mean about "sonhar em/com". In this case em" is used to depict the medium, while "com" regards the subject. For example, "sonhar em alemão" means "to dream in German" (e.g.

More ›