ZoFreX

111 ms·

961.
by ZoFreX 14y ago
This really shows up how much of our security is theatre - if people can get into the wheel well of a flight landing at Heathrow there's very little stopping someone putting a bomb there. Yet legitimate, paying travellers have to jump throu
962.
by ZoFreX 14y ago
I think it is the same, if (and correct me if I'm wrong here) this is the first time we've observed room temperature superconductivity of any kind? It would mean that a hypothesized phenomenon has been confirmed as possible, and more import
963.
by ZoFreX 14y ago
Absolutely! I really liked that this article didn't over-hype it and made the limitations and caveats very clear. While it's extremely far from usable, if we know of even one instance where this phenomenon occurs, we can try to figure out
964.
Room Temperature Superconductivity Found in Graphite Grains(technologyreview.com)
177 points by ZoFreX 14y ago|68 comments
965.
by ZoFreX 14y ago
That's a lookup table, not a rainbow table, strictly speaking.
966.
by ZoFreX 14y ago
Well, no. But if someone said "CodeIgniter sucks" and the counter-argument was "No it doesn't, there's this great framework called Symphony" you'd probably take issue with that, no?
967.
by ZoFreX 14y ago
You could also ask the same question about server-side templating: Why do we string-interpolate rather than manipulate the DOM? DOM manipulation is more robust and far, far more secure (you can auto-escape variables as you know their actual
968.
by ZoFreX 14y ago
> it turns out that characters on the left occur 58.73% of the time, and those on the right 41.3% of the time. This is certainly not helped by the fact that the right side has 11 letters to the left’s 15 Actually, if you ignore the lett
969.
by ZoFreX 14y ago
I agree a lot with this but it contains its own absolutely huge non-sequitur: How on earth is Cramp an example of damn simple websockets in Rails? It's Ruby, not Rails. It's also probably worth mentioning that it literally only works with T
970.
by ZoFreX 14y ago
I think it would actually make more sense for the sha256 to be in the headers for setting it. It seems a bit weird for a property on a link tag pointing at a file to determine what we think the hash of that file is (not to mention quite un-
971.
by ZoFreX 14y ago
> If you're using the same salt for everything, you've very nearly defeated the purpose of using a salt. I'm aware - it's hardly a rare use-case though (sadly).
972.
by ZoFreX 14y ago
My habits with iDoneThis are a little inverted compared to this. The last thing I do each day is reply to my "what did you do today?" email (seriously the last thing - I get into bed, reply to that email, and then sleep). I find the thought
973.
by ZoFreX 14y ago
Correct me if I'm wrong but couldn't you construct rainbow tables for any hash function which takes a single input (including salted SHA, if the salt is the same for all passwords)? Of course, you'd need a seriously large set of passwords o
974.
by ZoFreX 14y ago
I think crypto is possibly the best example in all of software development and/or computer science of how dangerous "unknown unknowns" are, and how a little knowledge is a dangerous thing (although threads are a serious competitor for the l
975.
by ZoFreX 14y ago
Oops, I misread your comment quite heavily. Apologies for the extremely redundant follow-up!
976.
by ZoFreX 14y ago
Note to anyone that doesn't do much crypto: You have to compress before encrypting, compressing after encrypting has no effect. (Reason: because encrypted data is [should be] indistinguishable from random data, and random data does not co
977.
by ZoFreX 14y ago
If you were using AAC (or anything else that's more advanced than MP3) a 3MB file would actually be listenable for a short song. A 150MB FLAC file would be about 20-30 minutes long (based on a typical bitrate of 700-1000 kilobits per second
978.
by ZoFreX 14y ago
Because creating something in Maya doesn't equate to designing a product?
979.
by ZoFreX 14y ago
Regarding point 2, the ports system works a little bit differently to typical package managers, and easily accomodates running customised versions of the software you need. Another difference between FreeBSD and (most) Linux distros is the
980.
by ZoFreX 14y ago
Some people do take the piss a little with their coding task requests, but an hour isn't too bad. I do appreciate when someone is willing to look at code I've written beforehand, though - at the end of the day, even if you're being quite fo
981.
by ZoFreX 14y ago
My dad didn't understand why his (admittedly quite old) laptop really struggles on some websites. For most of his usage - buying tickets, checking emails - it suffices just fine, but a badly coded flash advert can bring the entire machine t
982.
by ZoFreX 14y ago
This is a very short-sighted response in my opinion. They've been finding zero-days in a wide variety of software, so if you are a target, not running Windows isn't going to help you much. I don't think any part of this is scary because, le
983.
by ZoFreX 14y ago
I don't think responsible disclosure applies to deliberate, already-public protocol decisions.
984.
by ZoFreX 14y ago
So what? Unless you're sitting on a secret-until-now extension to CSS that fixes the issues with CSS and is available in all major browsers, then we need these "workarounds" (like SASS and LESS). Or are you proposing that since it is "broke
985.
by ZoFreX 14y ago
> If there is a whole to run arbitrary commands from `spiped`, you're stuffed. Oh, duh, of course. Forget what I said before. Unless you're running spiped in a separate VM or jail.
986.
by ZoFreX 14y ago
> [I ask myself] "If today were the last day of my life, would I want to do what I am about to do today?" And whenever the answer has been "No" for too many days in a row, I know I need to change something. Really? If today were the las
987.
by ZoFreX 14y ago
Worst case scenario, there's an exploit that punches through spiped. Now you can connect to SSH in the usual manner. As far as I can see, in the absolute worst case scenario, you end up in an equivalent position to not running spiped at all
988.
by ZoFreX 14y ago
My thoughts on "people don't scroll" (or rather, Art Lebedev's thoughts): http://www.artlebedev.com/mandership/130/
989.
by ZoFreX 14y ago
They are working on it - the feature exists, but isn't currently exposed through the GUI configuration as it has some issues. You can go to "about:config" and enable the option "plugins.click_to_play" if you want to see it. I disabled it as
990.
by ZoFreX 14y ago
Next time you see your GP ask what their typical workload involves. I doubt the remote doctor would even be needed in 90% of cases!

More ›