Quiark

13 ms·

151.
by Quiark 9y ago
I also like how they are adopting existing standards (planned interoperability with uPort) instead of a NIH syndrome.
152.
by Quiark 10y ago
Browser crypto is really problematic. For one, the client is downloading the crypto JS implementation (almost) every time they are using the app. Server compromised? crypto.js is rendered useless. HTTPS certificate compromised? crypto.js is
153.
by Quiark 10y ago
So you don't access your gmail from the phone?
154.
by Quiark 10y ago
No, dom0 is right. You are spending 2sec computing the result in browser JavaScript. The attacker will throw JS out of the window and spend 0.01sec in hand-optimized C++ or OpenCL code. You gain no security.
155.
by Quiark 10y ago
Some companies MitM the traffic (installing their cert on all computers) so there's that.
156.
by Quiark 10y ago
I read it was Accenture. In any case, it's ridiculous. Although I do understand that customers (who don't know any better) are asking for it. btw. the proper way to do editable data is to write a smart contract that will control h
157.
by Quiark 10y ago
You're talking about and assuming only a PoW blockchain but there are other consensus technologies such as Practical Byzantine Fault Tolerance which are actually older than Satoshi's PoW.
158.
by Quiark 10y ago
Yes, I think there is definitely value in hand-curated lists. Just look at the popularity of the awesome-XYZ repos on github
159.
by Quiark 10y ago
Except when the user sees the author's public key for the first time and downloads it from the same site. Key distribution sucks ....
160.
by Quiark 10y ago
If you only try the passwords that people are likely to use then... Yes
161.
by Quiark 10y ago
Haha, funny enough our company did this as well - we had lots of legacy C++ code using COM and wanted to port to Linux. It was not that hard after all.
162.
by Quiark 10y ago
Do it while swimming. I found it works pretty well. And Don't stress about not doing it every day for exactly 20 mins.
163.
by Quiark 10y ago
Be careful about browser integration https://github.com/pfn/keepasshttp/issues/258
164.
by Quiark 10y ago
I heard some horror stories about working in Japan. The country is absolutely astonishing when you visit as a tourist but enduring the rigid traditional culture as a worker is a completely different story.
165.
by Quiark 10y ago
The UI is pretty bad but the commands are extremely powerful. It has commands and plugins to help you find deadlock, list out all system locks in a process, who owns them, layouts of data structures and lots more.
166.
by Quiark 10y ago
I never got this to work properly.
167.
by Quiark 10y ago
Some services run as threads in a shared process (svchost) to save some ram because windows has many services. You can see them using Process Explorer from sysinternals.
168.
by Quiark 10y ago
But the situation being compared is 'metadata' vs 'metadata + content'
169.
by Quiark 10y ago
I've been collecting a similar little list as well, here it is on my blog: http://blog.rplasil.name/2016/06/my-list-of-high-quality-onl... Welcome any other (high-quality) additions!
170.
by Quiark 10y ago
WhatsApp has (proper) end-to-end encryption which is IMO a big win over Hangouts.
171.
by Quiark 10y ago
It doesn't work everywhere, 3rd party libraries would have trouble for sure and I think I had some issues even with Windows or some highe-level Microsoft API too.
172.
by Quiark 11y ago
Assuming that Microsoft _ever_ becomes relevant again.
173.
by Quiark 11y ago
IPFS Just read through the design, it's very simple and extremely modular. It learns the lessons from previous related systems and applies them in the new system.
174.
by Quiark 11y ago
To me, as a SW engineer, the mitigation against the padding oracle attack in SSLv2 (pretend its correct and generate random PMS) seems like a very bad hack. Is there some better, more modern way to protect against bad input that eliminates
175.
by Quiark 11y ago
Makes me wonder if LastPass uses CS PRNG for that :D
176.
by Quiark 11y ago
Some warnings: don't use Android clipboard for passwords - AFAIK apps can get notifications when clipboard changes. Don't enable remote connections to the KeepassHttp browser integration: there's a gaping hole https:/&#
177.
by Quiark 11y ago
This kind of popups is exactly the psychological manipulation that vendors use to make you feel good about using their products. Same for "cleanup" apps which show a satisfying progress bar of how your device is "cleaned of a
178.
by Quiark 11y ago
How do you run the bots if you don't self-host them?
179.
by Quiark 11y ago
You can use the runas command to run something as a different user. Or one of the sysinternals utilities. Haven't used it much personally though.
180.
by Quiark 11y ago
They are calling this the 'scalability problem' and are researching it as well. I think the general idea is to divide the blockchain into shards with some links in between.

More ›