Znafon

10 ms·

61.
by Znafon 6y ago
You could also use convergent encryption ( https://www.vaultproject.io/docs/secrets/transit#convergent-... ) to do this with only one field.
62.
by Znafon 6y ago
The BeyondCorp paper explicitly mentions that the device state is taken into consideration when giving access to a user, i.e. that the device is identified and controlled, not just the user. It seems to me like it is an important part in th
63.
by Znafon 6y ago
>You can easily extend Landau's notation to multiple variables [...] O(k log n) Yes, but the parent wrote O(n, 1) not O(n * 1). Does O(k, log n) exists? > Sorry, that's not how you would use or define multi-variable Big-O no
64.
by Znafon 6y ago
Yes, isVowel regardless of its implementation has all its input of fixed size, both the array and the one element to look for. In that case, wouldn't any implementation be O(1) regardless of whether they use an array, linked list, hash
65.
by Znafon 6y ago
I've never seen Landau's notation with two variables, I don't think it exists. At best you could say it is O(n)*O(1) which is formally equivalent to O(n).
66.
by Znafon 6y ago
This is pedantic, you are purposely using an unreasonable interpretation of "it's actually O(n)". Any function taking just a char would be O(1) since it only has 256 values n can take, discussing their complexity would be mea
67.
by Znafon 6y ago
Just have a form over HTTPS that store it somewhere in your Vault so that you can move it where appropriate later and add the instructions for power users that want to use PGP before sending it on the page. It will be convenient and secure
68.
by Znafon 6y ago
None of the voters had their vote counted to another candidate here but the result is wrong. This voting scheme is just broken.
69.
by Znafon 6y ago
It doesn't work: let's take 4 people and they vote for two choices "1" or "2". I cheat when I give people their random numbers: A gets 5, B gets 5, C gets 7, D gets 11. Now they all cast their vote: A -> 1 B
70.
by Znafon 6y ago
What is a unique, random, sequential prime and how do you actually vote?
71.
by Znafon 6y ago
> Computing intensive, no. Code that is doing a CPU intensive computation but makes no system calls will never release the GIL. Any code that does not involve Python objects can release the GIL, no matter whether it makes system call or
72.
by Znafon 6y ago
The first one is not really ambiguous: if you work at a hedge fund and received satellite images from your employer trading using this information is insider trading because you were supposed to do your job and do it for your employer. If y
73.
by Znafon 6y ago
> doing that means the GIL doesn't get released so that thread will prevent any further network I/O while it's running, the same as would happen in an async framework if a worker did a lot of CPU work. So Python doesn&#x27
74.
by Znafon 6y ago
You are correct, async will only help for long-running network calls, which happens when calling another service or querying a database. When doing a long computation the CPU is not idle so there is no free compute power to use for somethin
75.
by Znafon 6y ago
You can do recursion in YAML, and it ends badly: https://en.wikipedia.org/wiki/Billion_laughs_attack#Variatio...
76.
by Znafon 6y ago
This is a very sensible approach. One pro of having the checks automated instead of just having the developers check carefully their changes is that onboarding a new developer is easier, you will spend less time on very small and specific d
77.
by Znafon 6y ago
> I suppose guaranteed completion matters if you are running untrusted code, but wouldn't sandboxing solve that? Are there any other guarantees that sandboxing wouldn't solve? There is more benefits than just that, by restricti
78.
by Znafon 6y ago
> Why are so few configuration languages not backed by a real language? In many cases, not having a full featured language is helpful as you have some additional guarantees that comes with a non Turing complete language like guaranteed c
79.
by Znafon 6y ago
You would still have to do it with reproducible builds. It's only reproducible if you have the same code. If you change something there is no reasons to get the same result, a bit like you would expect with a hash, it is deterministic,
80.
by Znafon 6y ago
SEEKING WORK Location: Remote or Paris, France I'm a senior Python developer and DevOps with experience building higly available infrastructure, Python web application or machine learning project. I'm an Open-Source contributor, w
81.
by Znafon 6y ago
The discrete logarithm is the inverse operation of exponentiation and modulo. Being able to find a discrete logarithm quickly would break RSA.
82.
by Znafon 6y ago
I'm sorry you had to go through this. I'm not offended, I'm pointing out how the situation differs. If doctors gives inaccurate information, it's an important problem that needs to be discussed. > the doctors said his
83.
by Znafon 6y ago
> What's the point of getting more months of life, if you can't do anything? I sympathise with the way you feel, but here he did not refused treatment to better live the time he had left but chose "alternative medicines&q
84.
by Znafon 6y ago
I think only tags should be signed, Torvalds has a good discussion about signing commits vs signing tags at http://git.661346.n2.nabble.com/GPG-signing-for-git-commit-t...
85.
by Znafon 6y ago
They have a useful list of feature that you can look at: https://www.algolia.com/products/search/ It's basically a service that you can use so users can search objects in your database, a bit like Google but
86.
by Znafon 6y ago
If you MITM and the user agent send an HTTP request for ec2.shop it does not matter whether the webserver supports HTTP or not, you can send a fake HTTP response either way.
87.
by Znafon 6y ago
> For many applications "slow" logouts are enough Why? I understand it might be acceptable for the next "Uber for Cats" SaaS but if you protect an account that is actually important, not being able to revoke an access
88.
by Znafon 6y ago
At least those are well known, no common web framework will save password in clear text, and there is comprehensive literature on how to use SQL and many well written ORMs that will make it very hard to shoot yourself in the foot. For JWT,
89.
HashiConf Digital Is Live(hashiconf.com)
2 points by Znafon 6y ago|0 comments
90.
by Znafon 6y ago
Regarding 1, I don't think you need Enterprise to have HA, I'm pretty sure it comes with Vault OSS. You may be thinking about Vault Disaster Recovery which makes one cluster fail to another one, but HA is in OSS.

More ›