_wldu

11 ms·

91.
by _wldu 5y ago
I find it hard to believe that Huawei does not use version control. No company is perfect, but surely software developers (at a multinational company) with advanced degrees in CS and ECE are using version control.
92.
by _wldu 5y ago
It's a tunnel into your internal network. If nation states and/or cyber criminals do control most of tor, then you are opening your internal network to those groups.
93.
by _wldu 5y ago
That's sort of like having backdoor access to your internal network (similar to teredo). Others may use it to gain access to that network. If it's your home, that may be OK to you, but if it is an employer, you may want to obtain
94.
by _wldu 5y ago
Relevant blog post: https://www.go350.com/posts/now-they-have-2fa-problems/
95.
by _wldu 5y ago
Yes, and I believe they initially made this change in June 2017 (almost 5 years ago now). IT audit/compliance is typically 5 to 10 years behind best security practices and some standards are even slower to catch up.
96.
by _wldu 5y ago
Organizations may use ADK (additional decryption key) when they want to access what users are emailing to each other (for compliance/security reasons). It can be done with vendor provided software or manually. Here is a short descripti
97.
by _wldu 5y ago
Find a system or a piece of software, use it a lot (look at source code if you have it) and then ask yourself how you can break it. That's the key to becoming a great hacker. If you don't understand a piece of software (and I mean
98.
by _wldu 5y ago
I agree and anything above the OS layer can be written in Go or Java or C#. Lots of those devs out there to hire.
99.
by _wldu 5y ago
Yes. Mutual TLS. But that involves certificates, potentially CAs, dealing with certificate expirations and other PKI formalities. Any user can generate an Ed25519 key pair, base64 encode the public part of the key and register that with web
100.
by _wldu 5y ago
I'm currently experimenting with Ed25519 signatures in place of passwords for website authentication: Git repo: https://github.com/62726164/ed25519-login Test website: https://gen.go350.com/ I pla
101.
by _wldu 5y ago
Every time I call a plumber it's a least 600 USD. I have learned to do many things myself such as rebuild the innards of toilets, repair broken drain pipes, install sinks and new drain lines, but some things are too much for me (don&#x
102.
by _wldu 5y ago
George was the first graduate of the program.
103.
by _wldu 5y ago
Georgia Tech is consistently ranked a Top 10 CS program (worldwide) and their OMSCS program now accounts for 10% of all MSCS degrees issued. It costs about 6,000 to 7,000 USD total: "OMSCS started in January 2014 with 380 students. En
104.
by _wldu 5y ago
I believe that strong E2E encryption is critical to individual privacy, but I also believe that it doesn't really matter when most every nation state can compromise any phone at any time simply by knowing the phone number and sending a
105.
by _wldu 5y ago
A signature cannot be reused. It's only good for 60 seconds and once used may never be re-used because I do not allow that. Register for an account and try to submit the same signature more than once. I understand replay attacks. I don
106.
by _wldu 5y ago
No, but it would be trivial to implement that into existing ones. But since it's not a password, it doesn't seem like a good fit.
107.
by _wldu 5y ago
https://gen.go350.com/login https://github.com/62726164/ed25519-login I built a website that uses public Ed25519 keys for user authentication (rather than passwords). Users sign the current Unix Epoch
108.
by _wldu 5y ago
Go + Go + Sqlite
109.
by _wldu 5y ago
I think the focus is on accomplishing things. Even small things like you mentioned. If you make your bed first thing each morning and have a bad day, you will still come home to a well made bed (an accomplishment) that you can enjoy. Every
110.
by _wldu 5y ago
From the Github page, "I started this because I wanted to do C network programming" I think this is a poor choice (from a security perspective). It should be written in Go or rust. C programs (exposed to the network) are dangero
111.
by _wldu 5y ago
Exactly, sometimes these systems are purposely used to deny legitimate users. Sort of like OS account lockouts (too many failed attempts). What if their goal is to lock the users out?
112.
by _wldu 5y ago
Yes. Without an email or phone number there would be no way to do an account recovery, but perhaps some other clever solutions (allow some of your contacts to reset for you, or sign a message with your key, etc.) may be an option.
113.
by _wldu 5y ago
Yep. Me too. The network meta-data is always present (IP, src, dst, date, time, etc.). Law enforcement could use that to find criminal actors committing crimes on the app. But having such an app would allow law abiding individuals to commun
114.
by _wldu 5y ago
Is there a market for a secure messaging app (similar to Signal) that does not rely on personally identifying information (phone numbers and emails) or is that too fringe?
115.
by _wldu 5y ago
I hope they ship soon. I preordered Starlink and put down the deposit in Feb 2021. Still nothing.
116.
by _wldu 5y ago
A friend (who does not use an ad blocker) showed me something on a website a few weeks ago and I was shocked by the invasiveness and aggressive nature of the ads. I asked him how he was able to use the web like this and he said it was annoy
117.
by _wldu 5y ago
unordered_map is hash based. It's as fast as any other hash backed data structure. Hash performance is well defined and widely understood.
118.
by _wldu 5y ago
We cannot marginalize segments of our population based on race, nationality, religion, sex, etc. and expect to remain competitive. This is a basic truth of economics. And it's also wrong to do that to people in the first place. America
119.
by _wldu 5y ago
If you want to work as a computer scientist, then you have to understand algorithms. Leetcode is just algorithms. Most SW devs do not need to understand this. So long as SW devs realize simple things such as maps are faster for lookups (rat
120.
by _wldu 5y ago
Courts in the US give people 2nd, 3rd and sometimes 4th chances. This is especially true for younger people. They are still learning the ropes.

More ›