JackC

17 ms·

121.
by JackC 6y ago
The k-anonymity scheme used by the haveibeenpwned api seems like a good fit here.
122.
by JackC 6y ago
It does if you use a service's SMTP relay. For example, this header is from an email sent via Mailgun SMTP from Hetzner (digits replaced with ): Received: from hetzner-dc -ex - * (static. . . . .clients.your-server.de [
123.
by JackC 7y ago
In some cases, especially during development, local caching of responses can help reduce load. You can write a little wrapper that tries to return url contents from a local cache and then falls back to a live request.
124.
by JackC 7y ago
From the original blog post announcing Warp, I would have thought "yes, Warp is a VPN service" was the right answer: https://blog.cloudflare.com/1111-warp-better-vpn/ My understanding of that blog post is: *
125.
by JackC 7y ago
This article has a little more context: https://www.theverge.com/2020/3/26/21196446/yelp-gofundme-co... Some stuff that was weird about this rollout, from the Verge article: - opt-out process required se
126.
by JackC 7y ago
> I get it that JavaScript/Python etc... programmers who always had a garbage collector might have trouble. FWIW, as a JS/Python programmer I didn't run into borrow checker issues on my most recent Rust foray -- I think it
127.
by JackC 7y ago
I love the idea of fast Python profilers that don't require modified source code to run. One profiler I used recently which isn't mentioned in the readme is pyflame (developed at uber): https://pyflame.readthedocs.io&#x
128.
by JackC 7y ago
I saw Spirited Away on DVD, after digging up an old DVD player in a junk pile. I loved the first half, but didn't enjoy the second half where it started skipping and eventually stopped entirely -- the pauses and stutters set a very dif
129.
by JackC 7y ago
Harvard Library Innovation Lab | Web Developer | Cambridge, MA | Onsite, Full-time The Harvard Library Innovation Lab is hiring a lead developer for opencasebook.org, our free, Creative-Commons-licensed legal textbook publishing platform. A
130.
by JackC 7y ago
AFAIK the real problem in node is not number of packages in itself, but number of independent trust relationships implied by transitive dependencies. Basically how many separate people's integrity and security practices are you countin
131.
by JackC 7y ago
I really feel this when working in python. It feels like there are a million tools that each support 1/3 of the standard. E.g. I recently needed to convert raw OCR files to PDF -- place TIFs on each page without recompressing, place in
132.
by JackC 7y ago
Slightly different, but Adobe got me with an unintended annual renewal. For their annual plan billed monthly, there's no way to turn off autorenewal until the 12th month without losing access immediately and paying a penalty. They do s
133.
by JackC 7y ago
You could read "if x := y()" as "if x gets a truthy value from y()." For what it's worth, "x = y()" is one of the harder things for new programmers to translate to English in the first place -- it reads mo
134.
by JackC 7y ago
That's true, but it would also be true of a desktop app using an offline vault, and is also true of all the other desktop apps you run. The risk of someone running malicious code on your machine is a reason to use two factor auth, not
135.
by JackC 7y ago
> if they get breached, I'm fucked. This part is not true -- your data is encrypted with a randomly generated key that is kept locally. You could freely post the data they have all over the internet and it would be fine.
136.
by JackC 7y ago
Seems like it will to me. Here's an example using tabs for indent and spaces for alignment: https://repl.it/repls/SubduedLegalDisk
137.
by JackC 7y ago
Yeah, I got a 5-star helmet based on Virginia Tech's new ratings: https://www.helmet.beam.vt.edu/bicycle-helmet-ratings.html
138.
by JackC 7y ago
California is the farthest ahead in regulating them in the US. 28 MPH is the top speed for a "Class 3" bike, and is barred from some bike paths in California: https://currentebikes.com/ebike-classes-california&#x2F
139.
by JackC 7y ago
I'm not sure AWS costs are something you can do by remembering a few guidelines, rather than actually assigning an order-of-magnitude estimate to every billable thing and adding it all up. Like the one that bit me recently was a $0.05&
140.
by JackC 7y ago
I just bought an ebike last week. I ended up looking at bikes that were "ugly" (no attempt to hide what it is), cheap ($1250-$1500), and fast (class 3, up to 28 mph): https://www.aventon.com/products/aventon-p
141.
by JackC 7y ago
I love the idea of Workers! The catch I ran into last year was the 1MB limit for webpacked JS files. That puts many npm packages off limits -- I ended up doing some webpack magic to stub out subdependencies I didn't need from a package
142.
by JackC 7y ago
They're not accusing him of literal terrorism, no, but it's a legitimate angle to the story to point out that the state of Georgia is using way over the top language to oppose Malamud's attempts to help the people of Georgia.
143.
by JackC 7y ago
Does this have any implications for the urgency of replacing SHA-1 in git? I recently asked a question on the pip issue tracker[1] about whether it would make sense for pip to start accepting sha-1 git refspecs when running in --require-h
144.
by JackC 7y ago
Portability might also bring along with it easier reproducible builds? Right now I believe if you use wheels, you basically have to trust that the distributed binary matches the source code. I saw a case where a package was taken over by a
145.
by JackC 8y ago
This strategy makes you more susceptible to phishing, which is a much more common attack and requires vigilance to avoid. I think the reduced phishing vulnerability for browser extensions is worth it.
146.
by JackC 8y ago
I see the argument for simplicity, but I think it would be much more impactful to have a well-known URL for automated password changes. It's common to see advice to "change all your passwords" following incidents like Heartbl
147.
by JackC 8y ago
Right -- I'm looking for a white-paper level of detail somewhere behind the landing-page level of detail. What threats (internal and external) did you consider, what evidence convinced you they were addressed, and what acceptable risks
148.
by JackC 8y ago
I'm really excited about this idea, but I also think it isn't fully baked yet. I'm excited because VPNs are all about shifting trust: I'm no longer trusting Comcast not to sell my data, I'm now trusting SketchyVPN
149.
by JackC 8y ago
A useful term here is "Nakamoto consensus," which I think refers to the proof of X thing you're talking about -- consensus schemes that are resistant to sybil attacks among anonymous validators. And I think you're right
150.
by JackC 8y ago
The patent office is trying to build that, along with MIT: http://news.mit.edu/2018/mit-prior-art-archive-aims-improve-...

More ›