BoppreH

48 ms·

541.
by BoppreH 8y ago
Reminds me of http://www.telescopictext.com/ , where instead of a single slide users can click on sections that they want more details on. I used the concept myself a few years ago to create my Pathfinder character sheet (
542.
by BoppreH 8y ago
I personally think it's a great idea. Much better than having a code base with mixed camelCase and snake_case because a library didn't follow the language convention. I've seen people write wrappers just to fix casing.
543.
by BoppreH 8y ago
This is a very simple language and I don't intend to work on it long-time. I prefer to think of it as a donation to the language designer.
544.
by BoppreH 8y ago
It's now available, just waiting for merge: https://github.com/dylanbeattie/rockstar/pull/27 On a completely unrelated note, I have to reevaluate my life choices.
545.
by BoppreH 8y ago
I created the missing interpreter! https://github.com/dylanbeattie/rockstar/pull/27 It's hackish and hard to read and full of bugs, but it can run FizzBuzz, so Rockstar is a real language now. If the pul
546.
by BoppreH 8y ago
How about using your smartphone's gyroscope to show the artifical horizon on the screen itself? For example using https://richtr.github.io/Artificial-Horizon/ as background for text. If somebody that experiences m
547.
by BoppreH 8y ago
Meta comment: there's a very active subreddit for finding lost information, https://www.reddit.com/r/tipofmytongue/ .
548.
by BoppreH 8y ago
Would that be "Stressing The Elements"[1], an unofficial guide of what connections are considered "illegal" because they are unstable or stress the parts? [1] http://bramlambrecht.com/tmp/jamieberard
549.
by BoppreH 8y ago
For more abstract inventions, see also https://www.reddit.com/r/CrazyIdeas/
550.
by BoppreH 8y ago
As a security person, would I be happier if everyone switched from password+email to FIDO+email? Certainly. But FIDO has more competition than that. Since it's not backwards compatible with most existing systems, we have to choose whic
551.
by BoppreH 8y ago
Good point. I think these specific problems were somewhat solved by other protocols, such as SQRL, but you are absolutely right, FIDO + email is much better than password + email.
552.
by BoppreH 8y ago
Because the current way sucks. 99% of the websites (I have accounts on) rely on my email for recovery and revocation. But my inbox is not an impenetrable fortress, it's a communication channel; every device I own has access to it, and
553.
by BoppreH 8y ago
You have to make sure the attacker cannot revoke your key first. If the backup code is unrevokable, then it is indeed a nice solution, albeit a high-friction one if you are doing safe backups for each new account.
554.
by BoppreH 8y ago
Did they improve the stories for recovery ("I lost my device") and revocation ("my device has been stolen")? As far as I knew you had to buy 2 devices to have a chance of recovery, and Fido 1 explicitly said "revoca
555.
by BoppreH 9y ago
I find it interesting it's time per gram . Does it have a scale inside? Combined with the easy-to-understand knobs, this does sound much better.
556.
by BoppreH 9y ago
> If you've lost the database, you've lost accountability for all user actions anyways. Not sure I understand why. Is it because the (hashed) passwords are there too, or did you have an attack against the API keys in mind? Just
557.
by BoppreH 9y ago
I would think that hashing the API keys for storage, like a password, is worth it. It's extremely cheap in both development and CPU time because you can just use SHA-256 (high entropy is sufficient to deter brute force), and avoids una
558.
by BoppreH 9y ago
Adding 2FA is as much work as adding a really good authentication protocol, with much better usability and security. But we don't have discussions like this very often, therefore we don't have a consensus on which solution is the
559.
by BoppreH 9y ago
I wasn't aware of it. It's still OTP, so many of my points from the other comment apply: https://news.ycombinator.com/item?id=15818474 Still, it might be a nice incremental improvement.
560.
by BoppreH 9y ago
I left it out because this is a separate rant. Cliff notes: - Backup is per-website. Every new registration requires you to e.g. print a slip of paper and store it in your safe/friend's house/secret drawer. - Each website has
561.
by BoppreH 9y ago
The stuff on that page is old, and I don't find it all that damning. Gibson is a character indeed, and I disagree with some of his stuff (e.g. writing security code in assembly and posting screenshots online in lieu of open source), bu
562.
by BoppreH 9y ago
I'm not against enabling two-factor on a website that only supports login+password. I use GMail with two-factor, for example. What I'm against is people treating "username + password + two-factor" as some high bar of sec
563.
by BoppreH 9y ago
I've been crusading against two factor auth for a while now, including being against email as recovery/revocation fallback. - SMS is insecure, both from a protocol and from a social engineering point of view. Google Authenticator
564.
by BoppreH 9y ago
I think that's just an artifact of how currying is usually specified. Imagine a language with no automatic currying, but the special name "_" makes the function partially applied: "let addFiveToEach = map addFive _"
565.
by BoppreH 9y ago
Not sure why you were downvoted. The comment below mine, about "bit" being used as "piece", was my first thought too. But then the author contrasts with a quote using the actual entropy definition of a bit. And chunking
566.
by BoppreH 9y ago
To preempt the inevitable discussion of which version to use, please refer to the amazing FAQ created by Eevee: https://eev.ee/blog/2016/07/31/python-faq-why-should-i-use-p... As a library writer, I cann
567.
by BoppreH 9y ago
Brazilian here, currently attending the Brazilian Symposium on Computer Security, and today's speakers include the people behind this proposed national ID (it's not widespread yet). If you have any questions I can relay it to them
568.
by BoppreH 9y ago
I used eaglemode as my main file manager for a long time. I know the poster before me says it's not practical, but I had a great experience. Zooming in nested folders is cool, but the features most useful in day-to-day life were: - Zoo
569.
by BoppreH 9y ago
Javascript is too dynamic to have a safe subset. For example, using only the six characters ()+ []! you can write arbitrary code. The main culprits are the weak typing, permissive attribute access, and large runtime environment with lots of
570.
by BoppreH 9y ago
This is also clear on rhythm games like Stepmania. Here's a random video from a keyboard user: https://youtu.be/TWiMnENdcyY?t=56 At this speed the player is reacting (and hitting with correct timing) about ten notes (a

More ›