Kalium

64 ms·

721.
by Kalium 6y ago
> How exactly is asking for my password to be hashed "reinventing password hashing and salting"? Seems like the opposite, no? You've already started to add new things, like a TOTP-ish element, to stymie replays. Then the
722.
by Kalium 6y ago
An excellent question! One reflecting true wisdom. The answer is that you never have true certainty. What you get is smaller error bars with each set of tools and tests until you find the error bars and effort involved both acceptable.
723.
by Kalium 6y ago
What are unit tests, linters, SAST tools, and more all for? Naively, it seems to me that we swim in a great sea of tools to verify that we do, in fact, know what we're doing.
724.
by Kalium 6y ago
> Then just add a time sensitive seed to it? I don't think it is equivalent to leaking plaintext. It can't be used to guess passwords on other websites. You're reinventing password hashing and salting. Further, there&#x27
725.
by Kalium 6y ago
> This made me reflect on whether good language design should limit expressiveness of code? There's a magic to a sonnet that isn't found in blank verse. Limitations can do a lot to improve writing.
726.
by Kalium 6y ago
Information security is not a matter of secure or not-secure. Throughout history, it has always been a matter of available resources and risk management. Failing to consider security in terms of resources and risk leads to moments like this
727.
by Kalium 6y ago
It became a major headache for me when I saw multiple teams of developers trip over the same blind spots. Gluing together libraries works best when you're enough of a domain expert to understand every aspect. When you're writing p
728.
by Kalium 6y ago
If memory serves, the Golden Sun games gave you a choice of three different levels of detail of data transfer via password.
729.
by Kalium 6y ago
> At the same time Clojure people do have a tendency to paper over the cracks quite a lot, at least some of which must be cognitive dissonance. An executive I previously worked with commented one day "Every small language's fol
730.
by Kalium 6y ago
> Also worked in ad tech. There were some types of customers that cared about performance, but the largest were typically agencies and all they cared about was spending the budget they were given. Large companies call it "brand&quot
731.
by Kalium 6y ago
> Pretty much all lint rules have false positives so this isn't a good yardstick. Can it potentially cause harm when you do it and is there's no beneficial reason to do it? If yes to both then it's an ideal candidate for a
732.
by Kalium 6y ago
> Have you ever worked on a federal contract? The compensation really is not poor, unless you’re comparing it to say FAANG compensation, which is not really normal. They make as much, if not more, than current market rates. Yes. It was
733.
by Kalium 6y ago
I suspect that in many fields, funding acts as a fertility drug for researchers. The opportunities to fund research are, accordingly, pretty much always going to outstrip any amount of funding that could be provided. If that's the case
734.
by Kalium 6y ago
This is a great comparison! With physical security, you need to trust that the lock designers and manufacturers didn't make material mistakes. It is impossible to check for the layman and extremely hard even for experts. You can watch
735.
by Kalium 6y ago
I'm honestly not sure what effective policy kneecapped by developers you're talking about. Can you help me understand? I don't think any of the things I mentioned were set up or advanced by developers to kneecap effective pol
736.
by Kalium 6y ago
Millions for defense, not one cent for tribute. Funny how that makes sense again. It even occurs to me that like Tripoli of old, a lot of these "bulletproof" locations have a significant chunk of their economies based around this
737.
by Kalium 6y ago
I think there's a strong incentive for a lot of small-business people and software engineers alike to wholly blame attackers. If it's the attackers fault, you don't have to wonder if your insurance is good enough. You don&#x2
738.
by Kalium 6y ago
I'm telling you that you have before you a rare and wonderful opportunity to partake of highly informational resources provided to you. It is not often in life that questions are so readily answered by neatly presented, authoritative,
739.
by Kalium 6y ago
If the cost of living in a place as people actually live is below what a federal poverty formula set in 1963 says it is, then the rate will overreport. If it is above that line, the rate will underreport. In both cases, a number based aroun
740.
by Kalium 6y ago
According to the Census Bureau the poverty rate of New Mexico or Mississippi drops by more than three percent when you factor in cost of living, household unit sizes, poverty alleviation programs, and other things. With that in mind, the an
741.
by Kalium 6y ago
YMMV. It's been my experience that customs agents the world over are accustomed to dealing with very tired people.
742.
by Kalium 6y ago
The US Census threshold-based poverty rate does OK at country-level aggregates, but it flatters high-cost/high-income places and exaggerates the problems of low-cost/low-income places. We might be better served by using the Census
743.
by Kalium 6y ago
You're absolutely right, it doesn't seem difficult at all. That said, have you ever had stage fright? It's pretty common. Practice often seems to melt away when an actual performance is at hand. With that in mind, it's p
744.
by Kalium 6y ago
This is the kind of thing a company does when something becomes a financial and legal liability.
745.
by Kalium 6y ago
I, personally, hesitate to characterize the lived experiences with policy choices of other polities as FUD. I understand that this is a deeply personal choice, and as such some might differ.
746.
by Kalium 6y ago
Do you think it's perhaps worth looking at places that have tried wealth taxes? I think it possible that there might be some lessons to be learned from the well-intentioned and sincerely tried efforts of others. Perhaps our basic assum
747.
by Kalium 6y ago
You're absolutely right - a property tax is a type of wealth tax. I completely agree, which is why I attempted to differentiate between a general-purpose tax on all wealth in any form and a tax on real property. Please accept my humble
748.
by Kalium 6y ago
Wealth taxes in general are challenging to execute. Property taxes are much easier, as well as deal with the extra issues brought on by land ownership that cash-equivalent wealth does not.
749.
by Kalium 6y ago
I believe that that's such a good idea that SF already agrees with you, has for years, and put it into practice long ago. The people who labor on public housing construction projects in SF are rarely city employees directly and general
750.
by Kalium 6y ago
The hospital administrators insisted. He made what was clearly a mistake in letting them use his name after giving $70 million to the hospital his wife did her residency at. Benioff Hospital would be unaffected, but only because it's i

More ›