Firehed

38 ms·

331.
by Firehed 14y ago
First, get 1Password or something similar. Second, the mixed case alphanumeric definitely aids against brute force attacks, particularly in the case of an online attack (for an offline attack, there are probably hundreds of thousands of att
332.
by Firehed 14y ago
They're often used by support agents as a workaround for giving them your password (which the entire world has been diligently trained not to do, right?). They're also often case-insensitive and ignore punctuation, and while it's quite easy
333.
by Firehed 14y ago
And a knowledgeable developer would do that automatically. It's not a user's job to know to do this, and it's not a developer's job to train users to know this. You need security turned on by default, end of discussion. Is HN a site with se
334.
by Firehed 15y ago
There's nothing terribly special about the application, other than the fact that it now exists. Dustin had a problem and solved it. That the solution is relatively easy to copy doesn't change that it went from an unsolved problem to a solve
335.
by Firehed 15y ago
I didn't associated the post with software patents at all - it's quite a good analogy. The point was that copying someone's work is relatively easy if you have a solid starting point (screenshots of a design, description of the algoritm, e
336.
by Firehed 15y ago
He's correct in that if you've selected bcrypt for key derivation, there's a good chance you could be doing things better (for one, its output is only 184 bits long; insufficient for AES256) where PBKDF2 works in a way where you can customi
337.
by Firehed 15y ago
I do development work on the 11" MBA (4GB RAM, i7). We run VMs all day long, and you can definitely feel the lack of RAM in this scenario. For day to day use it's fantastic and I love the portability, but I really wish it were available w
338.
by Firehed 15y ago
What data are you trying to protect? There are a number of different approaches to this, all of which vary by what you're trying to achieve. You can encrypt certain fields generating an encryption key based on non-encrypted data in the row
339.
by Firehed 15y ago
It's not so much requirements changing as simply the timeframe for implementation. As I work at WePay (with the author of the post), I can at least comment on our specific growth needs: * UI. As your customer base grows (along with your com
340.
by Firehed 15y ago
Yes, but it's purpose isn't to resize on the fly as you change your browser window. It's to have one set of HTML that reflows to your device correctly depending on the viewport width. I just checked it on an iPhone 4 and iPad (both portrai
341.
by Firehed 16y ago
I'm at SHDH as well (hi!). There's definitely a mix here, but I think part of that is because of the venue. The only reason I'm on HN right now is that I'm waiting for a screen scraper to finish, which is terribly slow on the wifi here. I
342.
by Firehed 16y ago
Thanks for catching that. We've spent the last week moving into a new office and it must have slipped by as we were getting everything reconfigured. It's been locked down again.
343.
by Firehed 16y ago
It's a matter of setting up VPNs and IP-restricting where you can SSH in from. You can also set up port knocking and other SSH-related security measures. It depends how much convenience you're willing to trade for security.