Shoothe

9 ms·

31.
by Shoothe 9y ago
I'd definitely read more about how to do it properly. For example I wonder how CAs (e.g. Let's Encrypt) secure their infrastructure.
32.
by Shoothe 9y ago
> Tooling improvements For me that's the biggest issue currently with Rust. Type inference via "let" only makes it harder as I can't really know what type a certain variable or expression is without carefully tracking
33.
by Shoothe 9y ago
Not in this case. The author is just working on tool for a competing protocol (XMPP).
34.
by Shoothe 9y ago
> I would like to see an alternate history where Slack is built entirely on XMPP, with plenty of extensions to support all the customisations for every feature they have now. Writing and maintaining a protocol and a client and a server i
35.
by Shoothe 9y ago
You could build the sign off phases as part of the deployment pipeline so that each change automatically requests sign-offs from seniors and resumes when they are given. Of course if your management is actively against CD that could be hard
36.
by Shoothe 9y ago
Jez Humble's Lean Enterprise book was one of the best quality content I read. Highly recommend!
37.
by Shoothe 9y ago
They are probably using it underneath. Webcrypto by itself is just a set of primitives, you need a higher level abstractions to do anything useful in real world.
38.
by Shoothe 9y ago
The problem with NIST curves (vs ed25519) is the choice of parameters (it is not clear why they have such and such values) and the implementation edge cases. You already know it but maybe someone else will find it interesting: https:/
39.
by Shoothe 9y ago
> Many cryptographers and organizations, including the US Government, have recommended for a long time that people migrate from older "big prime cryptography" based cryptosystems to ECC based cryptosystems for increased securit
40.
by Shoothe 9y ago
If this article impressed you check out Shape Detection API that can scan barcodes, QR codes etc. in less than 26 lines and works in Chrome for Android without any external apps: https://wicg.github.io/shape-detection-api&#x
41.
by Shoothe 9y ago
Excellent guide, something that I'll need in near future. I wonder why the author chose hyper instead of iron though...
42.
by Shoothe 9y ago
Good riddance. Their XMPP gateway was extremely basic, frequently dropped messages. Why pretend it's working when it's clearly not? Here's the compliance ranking: https://conversations.im/compliance/
43.
by Shoothe 9y ago
I've worked with Macaroons (writing custom tools and libraries) and Macaroons are definitely more complex than JWTs. Don't be fooled with one signature algorithm, there are more things hidden under the surface (e.g.validation of a
44.
by Shoothe 9y ago
Git Appraise uses notes to store code review data: https://github.com/google/git-appraise
45.
by Shoothe 9y ago
> Firefox barely supports U2F. Haha it's funny you put it this way because actually it's Firefox that implements FIDO U2F standard correctly and Chrome is not. Chrome uses low level API to communicate with their built in extens
46.
by Shoothe 9y ago
It's surprising that this works. Last time I checked WebUSB the device would have to have a descriptor allowing its use via web page effectively white listing what can be used on the web.
47.
by Shoothe 9y ago
> Chrome on Android using either a OTG cable for a U2F USB key Which key did you use? I tried Yubikey 4 (via OTG cable) and 4C (directly) and the U2F flow with Authenticator did not work (just like the key would not be recognized for U2F
48.
by Shoothe 9y ago
Could you provide a link to your startup's page? I'd like to check this out.
49.
by Shoothe 9y ago
I also experienced White Screens of AMP Death where only the AMP header was visible, not the page content. For what it's worth the white screen loaded pretty fast :)
50.
by Shoothe 9y ago
Async/await is the do-notation for Promises and generators can be re-purposed as do-notation for any other monad, see e.g. https://curiosity-driven.org/monads-in-javascript#do
51.
by Shoothe 9y ago
I don't see any evidence in the link you posted. And it's interesting that you bring Samsung that for 3 years issued patches every single month for my old Note 4. You may not get latest and greatest Android version immediately (mi
52.
by Shoothe 9y ago
> Everywhere else, all you need to transfer money is the name of the bank, account holder and account number. Actually here only the IBAN account number is required (and it's used everywhere). Bank is inferred from that and it'
53.
by Shoothe 9y ago
I wonder how many more of this flops will it take for some security experts to stop recommending iPhone over Android...
54.
by Shoothe 9y ago
I don't see download option on my TV running Android. Is this only for PC? On the other hand video files work seamlessly (there is MX Player for Android TV). Sure, there is extra hassle for getting them in the first place but Netflix s
55.
by Shoothe 9y ago
> Netflix figured this out a decade ago, and I wonder how many people have ever "given up" on Netflix to go torrent a show? I can't imagine it's a lot. I did as Netflix had continuous problems with keeping high qualit
56.
by Shoothe 9y ago
On iOS use https://chatsecure.org For me not relying on a centralized solution ran by a company funded largely by the US government is good enough reason. Especially that as I've demonstrated you can have the same level of
57.
by Shoothe 9y ago
> I really hate this attitude in our circles Maybe I wasn't clear. My point is that it is Google's attitude right now. If a product is not "a unicorn" they instead rush to something else (Talk->Hangouts->Allo) o
58.
by Shoothe 9y ago
Remember to install some essential plug-ins (OMEMO, HTTP Upload, URL image preview, etc.) for the best experience :)
59.
by Shoothe 9y ago
Sadly that's also my thoughts about Google. When previously they were open and leading the innovation now they are just blindly copying competition in hope of somehow making it big. Twitter? Google Buzz... Didn't work. Facebook? G
60.
by Shoothe 9y ago
I can relate to this. Google's services became less and less useful over time. I even replaced Hangouts with self-hosted XMPP server while previously I thought custom would mean a lot of trouble. After a while test driving it I migrate

More ›