alinajaf

14 ms·

91.
by alinajaf 13y ago
Author here. A good place to start (mentioned in the article). http://www.matasano.com/articles/crypto-challenges/ Never met any of them in real life, but they seem like good people to me. I've actually used knowledge I picked up from tho
92.
by alinajaf 13y ago
> btw: isn't the scheme you posted vulnerable to replay attacks too? Much easier than the timing attack. Yep, probably. In fact now that I look at it definitely, I should have gone with that instead! I forget who said this but basically
93.
by alinajaf 13y ago
Hi, author here, I'm glad you found it useful! > I didnt know for example that you can basically extend an MD5ed string and keep the original MD5 value Thank tptacek for that knowledge, I think I picked it that up in a talk he did that'
94.
by alinajaf 13y ago
Hi, author here. I would have liked to have made useful suggestions, but having made so many errors with cryptography in the past, I don't really feel qualified to do so. I do however recommend getting in touch with tptacek and co and doing
95.
by alinajaf 13y ago
It is. Bug them on twitter and they'll invite you to the beta.
96.
You are dangerously bad at cryptography(happybearsoftware.com)
268 points by alinajaf 13y ago|167 comments
97.
Why automated tools won't help you write secure code(happybearsoftware.com)
1 points by alinajaf 13y ago|0 comments
98.
How quickly check for basic access control vulnerabilities in Rails applications(happybearsoftware.com)
1 points by alinajaf 13y ago|0 comments
99.
by alinajaf 13y ago
> Any time data is sent to your site, check it for injection attacks or password guessing. That's two classes of exploit out of a very, very long list. The set of things that could possibly be wrong with software that reads HTTP request
100.
by alinajaf 13y ago
> I didn't get this part though. What would be a better alternative? To clarify: I'm not saying that static assets behind an edge cache is not performant, just saying that a dynamically generated site behind an edge cache is effectively
101.
by alinajaf 13y ago
I don't think you're an idiot, it's more likely that you were just unaware of cloudfront or perhaps CDNs in general. S3 is for storing files, Cloudfront is for serving cached versions of them really quickly out of edge locations (i.e. the c
102.
by alinajaf 13y ago
> This is smart, I usually use the precompile with upload to S3 via asset_sync gem I used to do the same until cloudfront rolled out custom origins. > Since Heroku will precompile by default, what do you do to disable it. I misspoke
103.
by alinajaf 13y ago
> I think S3 is a great origin server for static assets Pro-tip: If you're using Rails, just create a distribution with your app as the origin server and in production.rb, set your asset host to your distributions host. You get the asse
104.
by alinajaf 13y ago
> (their average IQ is 100, for God's sake!) Their average IQ is 100 by definition. If everyone got twice as smart overnight, the average IQ would still be 100.
105.
by alinajaf 13y ago
Very well, you get your wish: A war with North Korea is bad times for pretty much everyone involved. Seoul bombed into the dust, thousands of refugees crossing the Chinese border and a potential for a proxy war between the U.S. and (China/R
106.
by alinajaf 13y ago
> But imagine, America coming in to NK, in the name of liberalizing the people, and causing more death, famine, and stuff in the process, which is not avoidable. Ugh, this dichotomy of America as world police vs. cultures it doesn't rea
107.
by alinajaf 13y ago
I'm not quite sure how that answers DLays points. Care to elaborate? He/she was pointing out that people the children, and childrens children of people who are deemed enemies of the state are not free to live how they want.
108.
by alinajaf 13y ago
For a minute there I thought you were talking about Kim Jong-un, but it turns out he's 28.
109.
by alinajaf 13y ago
If only 10% of one of the accounts of the concentration camp escapees is true, then NK is in the same cluster as Syria and Congo in terms of treatment of its people. Its reasonable to assume that the right to not have your malnourished six
110.
by alinajaf 13y ago
FYI it looks like you've fixed the update controller (as per the gist), but I can still: * See other peoples rewards (just go to /rewards/whatever-id), not that big a deal, unless you want to keep them private. * Go to the edit form of any
111.
by alinajaf 13y ago
Seconded! Using current_user.rewards.find(...) is a good stopgap if you're not keen on going as far as using cancan. This won't take care of the parameter whitelisting for you though.
112.
by alinajaf 13y ago
Hi Jason, Great work! The website has a great feel to it and it seems like a good first project to get out in the open. Definitely looks/works a gazillion times better than my first website! There's an issue I'd like to point out that I've
113.
by alinajaf 13y ago
Pertinent Bruce Schneier quote: Anyone can invent a security system that he himself cannot break. I've said this so often that Cory Doctorow has named it "Schneier's Law": When someone hands you a security system and says, "I believe this i
114.
by alinajaf 13y ago
> Your employer (reasonably) has an expectation that you will give them 100% during at least 9-5 hours and also be available for overtime periods on occasion. If you're consulting you can set expectations on how much time you give to cl
115.
by alinajaf 13y ago
Microconf was indeed a tour de force. If you're serious about making the transition to products for your primary income, go.
116.
by alinajaf 13y ago
Probably a good a place as any to start: http://www.matasano.com/articles/crypto-challenges/
117.
by alinajaf 13y ago
I'd fall under your definition of 'anti-theistic' and I'm still not entirely sure what happens after death. I'm perfectly happy not knowing though.
118.
by alinajaf 13y ago
I think you'll find that after attending one or two sessions of BJJ its not as crazy or sexually charged as you're assuming it is.
119.
by alinajaf 13y ago
If you liked this, you will love Greg Egans Diaspora .
120.
by alinajaf 13y ago
With kids, client work and generally having a life, I'm getting about one or two hours a week tops to work through them. If I were working on them full time I'm confident I could get as far as I am now (mostly finished the third set) in abo

More ›