BoppreH

49 ms·

601.
by BoppreH 11y ago
Unless an all seeing, trusted Mind steps in and vouches for it. NSA for notary?
602.
by BoppreH 11y ago
> I can't imagine a C version of Rails executing YAML as code This is the crux of the matter, so please take a moment to reflect on why you believe that. Ruby code is used in much more dynamic environments; environments that would
603.
by BoppreH 11y ago
> Repeat after me: there is no silver bullet! There is no single silver bullet, but there exists silver bullets for a variety of problems. When was the last time you saw a pure Python or pure Java code segfaulting from invalid memory acc
604.
by BoppreH 11y ago
> I hope more christian developers get involved According to the Business Insider article[1], Trevor McKendrick is atheist: Though McKendrick doesn't have to think about money, his booming Bible-selling business does have him
605.
by BoppreH 11y ago
Communities were front and center in Orkut, Google's old social network. For some reason it only made success in a few countries, but absolutely dominated in those (Brazil predominantly). This literally feels like a rollback to their o
606.
by BoppreH 11y ago
Because the null hypotheses are supported by our current understanding of physics, which has a ton of evidence for. Our prior for this type of study should not be not "50/50", but rather "all of physics so far vs thi
607.
by BoppreH 11y ago
Unless noted, I assume posts come from companies and comments from individuals. This has large impacts in trustworthiness and skepticism level. I believe my position is common, and why undisclosed company comments are frowned upon.
608.
by BoppreH 11y ago
Are you sure that happens in practice? Unless you have an Extended Validation certificate, which verifies the company name, I'm not aware of any requirement against fraudulent uses, or precedent of certificates revoked because of that.
609.
by BoppreH 11y ago
Users still have trouble understanding what HTTPS entails. I work with security and most lay-people think it ensures the site is somehow trustworthy. "Why are you typing your password on faceb00k.com?" "It has a green padlock
610.
by BoppreH 11y ago
Just three days ago The New York Times published a piece about immortality through cryonics: http://www.nytimes.com/2015/09/13/us/cancer-immortality-cryo... Now BBC publishes an anti-aging piece. They fe
611.
by BoppreH 11y ago
If you are interested in this, also check out https://ninite.com . Nowadays with adware-including installers and phony download links, any solution to the packaging problem in Windows is welcome.
612.
by BoppreH 11y ago
Is this related to the recent Github For Windows redesign? It used to be a great product, but the last version made some really odd UI changes and the whole thing became 10x slower. Github For Windows used to be as important to my workflow
613.
by BoppreH 11y ago
I'm trying to turn this option off, but the entire control panel freezes when I click the relevant checkbox. Windows 10 so far seems good, but what a bunch of terrible launch decisions.
614.
by BoppreH 11y ago
Selling user's bandwidth is shady, but consistent with VPN usage (i.e. traffic routing). You can present it as "hey, that's our actual business model, we just forgot to tell you guys" and maybe get away with it. But th
615.
by BoppreH 11y ago
I had no idea Watson was being used for recipes. It reminded me of the genetic algorithm recipes from xkcd ( https://xkcd.com/720/ ). I wonder what else can Watson suggest. Vacations? Clothes? Gadgets? ... Dates? This ha
616.
by BoppreH 11y ago
I agree completely. But it's an improvement, which shows how bad the current state is, and strictly better than relying on just standardization or caution. (By the way, if you still think it's broken, I'm ball to improve it.
617.
by BoppreH 11y ago
If the "check" protocol works like this, yes, we have a problem. But I think there are two very distinct types of "signatures" here: binding statements and proofs of possession. Because the client nonce was explicitly ad
618.
by BoppreH 11y ago
That's a very cool attack. However, the client can sign R and R^N together, which I think defeats it. I didn't describe it as such because I was afraid "S(R+R^N)" may cause some confusion, and I ran some numbers and foun
619.
by BoppreH 11y ago
I totally overlooked that, thank you for pointing out. Thankfully the fix is simple. I've updated the original post.
620.
by BoppreH 11y ago
Like this? Server: server_nonce Client: random_key + sign(hmac(server_nonce, random_key)) That's a nice alternative. Though generating random data and XOR'ing is as known and as primitive as you can get, and none of i
621.
by BoppreH 11y ago
If Alice doesn't validate the identity of the server, that's absolutely a legitimate attack. But building a secure channel is out of scope and assumed solved here. The problem is how can Alice authenticate to Bob without exposing
622.
by BoppreH 11y ago
Care to provide an example? And keep in mind this is not a complete authentication protocol. I'm just proposing a small change to fix the signing-not-random-nonce problem, so I assume the rest of the protocol context is kept. Barring s
623.
by BoppreH 11y ago
That's a fairly big problem I hadn't read about before, with great writing. But I don't think the proposed solutions are realistic. [...] all those web sites must use exactly the same format for authentication challeng
624.
by BoppreH 11y ago
Try this exercise: change the first line into the second, with the cursor starting at the caret. Do it slowly and pay attention to each key you touch. lineTo((10, 35), (20, 15)) ^ lineTo((20, 15), (10, 35)) Maybe you had t
625.
by BoppreH 11y ago
Interesting research, specially because it has a lower learning curve. I see it as a halfway between fully structured and fully textual. The large screenshot[0] is a textbook example of structured editor, but the cursor moves around as if i
626.
by BoppreH 11y ago
I haven't opened it yet for two reasons: 1) Premature open-sourcing complicates commercial projects, and a man gotta eat. 2) Because it would be a first, any flaws in the implementation will be assigned to the concept of structured edi
627.
by BoppreH 11y ago
Thank you, and you're absolutely correct. I think a side-by-side video comparison would work even better, because it's not immediately clear how much time is spent moving commas around, playing with whitespace or hunting parenthe
628.
by BoppreH 11y ago
I've been working on a Structured Code Editor for a couple of years: https://i.imgur.com/wvcduDk.png (in the picture above "string" is selected, and "find" is slightly highlighted because its on the
629.
by BoppreH 12y ago
Do you keep a backup of your list of Facebook friends, your HN posts and "saved stories"?
630.
by BoppreH 12y ago
I fail to see how my list of song titles infringes copyright and requires immediate deletion.

More ›