Firehed

19 ms·

151.
by Firehed 14y ago
I can't see your email (I think it has to be in about) but you can reach me at my username at gmail.
152.
by Firehed 14y ago
Guy who brought up several of the concerns in yesterday's thread here - and I'm in the same situation. Actually, I went so far as to download the app just to see if I could crack the backups I was criticizing (i.e., are they actually using
153.
by Firehed 14y ago
Sure, but there's absolutely no way to differentiate between self signed SSL cert and a MITM attack.
154.
by Firehed 14y ago
Ok, please don't take this the wrong way, but you guys don't seem to know enough about security to be running this kind of service. Being able to access your MFA token from multiple devices defeats the purpose of it being a second factor (s
155.
by Firehed 14y ago
How are you encrypting the backups? You recommend a passcode of at least 8 characters, which is only 64 bits. Are you at least running it through some sort of key strengthening algorithm like PBKDF2 to generate the actual encryption key?
156.
by Firehed 14y ago
I think it was a sham either way (without legislation, there's really no reason for anyone to adhere to the requests, and as users we have little to no way of knowing if our requests are being fulfilled), but MS screwed the pooch here by co
157.
by Firehed 14y ago
> And it's always a good test to validate your logic with extreme cases. It helps - if a logic suddenly breaks by increasing the 'intensity' of the subject, then there's something wrong in it. I would suggest avoiding doing so publicly.
158.
by Firehed 14y ago
That's a totally separate issue, with completely valid security concerns (although sounds like an implementation issue that should be rethought). It very much duplicates the core functionality of Safari, just as Google Voice does for the Ph
159.
by Firehed 14y ago
Remind us how snarky zealotry tells Apple to stop (ab)using the patent system. If that's the problem you have with them, I think the world would be improved if you directed your energy at patent reform. And comparing IP litigation to murde
160.
by Firehed 14y ago
It's darn close but not perfect on my 5. Although when I typed in a POI it actually found what I was looking for, so I say that makes up for being short maybe 1-2FPS (I used to say Apple Maps was reasonably decent until searching for "logan
161.
by Firehed 14y ago
Ok... but what you described about how traditional investment works is how Kickstarter tells their project-runners to operate. My point was that KS and traditional investment should operate in more or less the same way, especially regarding
162.
by Firehed 14y ago
Isn't that a seed round? I don't see why crowdfunding should be any different than more formal investors here.
163.
by Firehed 14y ago
So after a period, you're required to issue a refund. The issue is that you cannot always issue a refund after $period, where $period ranges anywhere from 60-180+ days depending on dozens of different factors (three or four different banks,
164.
by Firehed 14y ago
Should be fun to see what happens when you get them to automatically blacklist their own sites... ;)
165.
by Firehed 14y ago
I think that largely depends on who's maintaining the official repo. See what happened when oh-my-zsh got careless in testing pull requests: https://github.com/robbyrussell/oh-my-zsh/pull/1395/files#L1... everyone who got the update (tons
166.
by Firehed 14y ago
I completely agree, and really wonder about their algorithms in general (there's a reason I keep my news feed sorted by most recent, rather than top stories). It completely missed my trip to South America over the summer, yet very prominent
167.
by Firehed 14y ago
> (There are those who aren't aware that Mbits/second is the "SI" sense of "Mega, and think that there are not 1048576 bits/second in a Mbit/second, but, we'll leave that for another day) To be fair, that 2.4% KB/KiB delta isn't terribl
168.
by Firehed 14y ago
Unfortunately if it's the first semi-working code sample in a Google result, it will still end up in production somewhere no matter how crappy it is and how many warning labels are put on it.
169.
by Firehed 14y ago
Prepping for the end of the world next Friday ;)
170.
by Firehed 14y ago
Ah, very cool - did not know that existed. Thanks!
171.
by Firehed 14y ago
I think you missed my point: phones can be stolen. If you watch me type in my passcode by looking over my shoulder on the train (knowledge factor is now compromised), then steal the thing and run off as the train is departing, then you have
172.
by Firehed 14y ago
If you control the client device, it's not really suitable as a second factor in a two-factor authentication system. To elaborate: on a PIN debit payment, for example, there are two factors - something you have (the debit card) and somethin
173.
by Firehed 14y ago
Where is MFA support on Facebook? That's something I'd like to enable...
174.
by Firehed 14y ago
> In my opinion, a programmer must write a good code. And leave the testing to the QA. Aside from the "not my problem" vibe that gives off, I strongly disagree. QA is helpful for covering weird user interactions and writing tests agains
175.
by Firehed 14y ago
How many issues do you think may be hidden by mocking out the database layer? It's easy to write bad data due to a subtle bug in a query builder for example and then write garbage into the database. Mocking would make that significantly har
176.
by Firehed 14y ago
There's also a habit in web development of not testing with assistive technologies. I'm certainly personally guilty. Of course, few people test their site's appearance through colorblindness simulators and other things that reproduce how a
177.
by Firehed 14y ago
He makes an important point though: security researchers have been used by vendors as part of trying to go through the traditional process of responsible disclosure. It could easily come off as blackmail[1]. Simply disclosing to the public
178.
by Firehed 14y ago
What's the difference? The cost to Google is presumably the same, except that the user count might have been between two and ten-ish instead of one. And now they can't upsell those businesses to paid accounts anymore. Established businesses
179.
by Firehed 14y ago
Google just removed their own ability to convert free customers to paid ones as they grew. Switching cost of email is extremely high, so a startup in this space could easily charge more than $50/yr/user once they're already in. Granted the
180.
by Firehed 14y ago
Is adding a question mark after a headline still an acceptable way of avoiding doing any actual journalism? (Hint: seems so) I expect better from 30-year-old publications.

More ›