Sephr

80 ms·

871.
by Sephr 12y ago
Here's a timing side channel attack in JavaScript that implements navigator.hardwareConcurrency: http://wg.oftn.org/projects/core-estimator/demo/
872.
by Sephr 12y ago
Of course, but when all you have to verify that a change is by the copyright holder/project owner is a signature, the whole situation becomes very murky. The only authenticity test that I can think of is to actively distribute a fork o
873.
by Sephr 12y ago
Interestingly enough, they also changed the TrueCrypt license. -TrueCrypt License Version 3.0 +TrueCrypt License Version 3.1 This lead me to think about the legal implications of changing a software license using stolen signing
874.
by Sephr 12y ago
It has SIMD: https://developer.chrome.com/native-client/reference/pnacl-c...
875.
by Sephr 12y ago
An example of integrating this API with a loading UI is at http://danielsadventure.info/html5fractal/
876.
Show HN: navigator.hardwareConcurrency polyfill that helps you scale parallel JS(wg.oftn.org)
4 points by Sephr 12y ago|1 comments
877.
by Sephr 12y ago
PNaCl's LLVM IR is machine independent and can be used standalone without Chrome.
878.
by Sephr 12y ago
The main benefit of e-ink is that the display only needs to be powered when you change the content. This enables you to greatly conserve battery life much more than the active displays on that Razer keyboard allow (if it was wireless). From
879.
by Sephr 12y ago
What's stopping us from making something like http://www.yankodesign.com/2013/01/29/best-keyboard-ever/ ? Samsung came out with a phone in 2010 with an e-ink keyboard (Samsung Zeal). Are there any un
880.
by Sephr 13y ago
I'm getting NXDOMAIN on the www link. Change it to the bare domain.
881.
by Sephr 13y ago
jelly~ buzz
882.
by Sephr 13y ago
You are equating false negatives to harmful information, when in reality it is the same as simply not taking the 23andMe test. The only thing 23andme enables you to do is act sooner on things they get right, and any false negatives are irre
883.
by Sephr 13y ago
Obviously 23andMe results are not a diagnosis from your physician. You should use 23andMe in conjunction with a real physician. For example, I used 23andMe back in 2010 and it told me I had a high risk for a certain genetic condition which
884.
by Sephr 13y ago
These little exercises that "were not possible 5 years ago" were released... about 5 years ago.
885.
by Sephr 13y ago
Why not use a local datastore on the user's browser, like IndexedDB? I see no reason at all to install this and send my data to your external datastore when the same can be accomplished locally.
886.
by Sephr 13y ago
Requiring a dot breaks your form for people using bare TLD email or people using an IPv6 address instead of a domain.
887.
by Sephr 13y ago
I strongly disagree with placing Minecraft as the #1 Rift experience. In Half-Life 2, aiming and looking are entirely discrete but in Minecrift (Rift extension for Minecraft), looking and aiming are bound together and you can't even ai
888.
by Sephr 13y ago
To mitigate the new detect visited vectors, browsers could render everything as unvisited and then asynchronously render a 'visited' overlay (in a separate framebuffer) at a later time. SVG filters will have to be processed twice
889.
by Sephr 13y ago
The demo failed on Ian Goldberg's real email address, n@ai. TLDs work just like every other domain name in DNS.
890.
by Sephr 13y ago
> When I got my cert from COMODO as outlined above the file was saved from the web browser to my downloads file. This struck me as odd. Does this mean they could have copy of my cert? There are client-side APIs (e.g. Blob+<a download&
891.
by Sephr 13y ago
Unencrypted HTTP is already open to MITM attacks. What I proposed was using self-signed certificates in conjunction with certificate pinning, which means that as long as your first connection to a website isn't MITMed, later connection
892.
by Sephr 13y ago
You still can't self-sign certificates and rely on certificate pinning for transport security without domain verification. With all of the security concerns people have with governments logging all unencrypted internet traffic, I was h
893.
by Sephr 13y ago
#oftn on freenode is a great open source programming channel.
894.
by Sephr 13y ago
I have just committed a bunch of improvements that should greatly increase the accuracy. Could you please try running the demo again?
895.
by Sephr 13y ago
Don't encode entities, just use the DOM (append text nodes).
896.
by Sephr 14y ago
That is a lot of if statements just to get some directly adjacent unicode characters, which can easily be generated with some simple math. This solution may be a little terse (96 bytes; I wrote it for the 140bytes golfing challenge), but it
897.
by Sephr 14y ago
It's gigabytes, not gigabits.
898.
by Sephr 14y ago
Just because a font has "loaded" does not mean it's ready to be used. This very problem makes it hard to load @font-face fonts on demand in <canvas> apps as there is a certain amount of time you must wait for the font to actually lo
899.
by Sephr 14y ago
For the part with typing for your watch and glasses, I think MYO + ASETNIOP, enabling typing on any surface (such as discreetly on your thighs) with zero interface, will be much more practical.
900.
by Sephr 14y ago
n@ai (Ian Goldberg's real, valid email address) is rejected by this by your minlength and by the subdomain requirement. You're better off just checking for an @ and leaving the rest to your smtp library.

More ›