amenghra

70 ms·

901.
Ask HN: Are there any wrist watches which expose the raw accelerometer data?
2 points by amenghra 11y ago|0 comments
902.
by amenghra 11y ago
http://regexp.quaxio.com/ tries to act as a linter.
903.
by amenghra 11y ago
The intern -> F/T conversion usually comes with some kind of equity grant. It's not all black & white.
904.
by amenghra 11y ago
I posted about internet.org not supporting SSL/TLS two weeks ago, didn't get any upvotes: https://news.ycombinator.com/item?id=9493253 I'm really glad the EFF is making a broader audience aware of some of the
905.
iPad crash grounds dozens of American Airlines flights(nakedsecurity.sophos.com)
2 points by amenghra 11y ago|0 comments
906.
Kinetic Bombardement(en.m.wikipedia.org)
1 points by amenghra 11y ago|0 comments
907.
by amenghra 11y ago
Assign people a random team. Try to make sure each team has people with different skills, so that everyone can bring something to the table. Good internet connectivity.
908.
Awesome message sequence chart rendering tool(sverweij.github.io)
7 points by amenghra 11y ago|1 comments
909.
by amenghra 11y ago
http://tla2012.loria.fr/contributed/newcombe-slides.pdf is actually much more interesting.
910.
by amenghra 11y ago
There have been much better xkcd comics.
911.
How Amazon Web Services Uses Formal Methods [pdf](cacm.acm.org)
9 points by amenghra 11y ago|1 comments
912.
Extra credit(dailysciencefiction.com)
1 points by amenghra 11y ago|0 comments
913.
by amenghra 11y ago
Mobile operators in USA started to roll ipv6? ( http://www.internetsociety.org/deploy360/blog/2014/10/t-mobi... )
914.
by amenghra 11y ago
Facebook's cable is not their own dedicated cable but a shared resource: http://www.wired.com/2012/07/facebook-submarine/ Why do you think contributing to cables would imply they want to compete AWS? It&
915.
Open Source Security Bug Bounty(corner.squareup.com)
15 points by amenghra 11y ago|0 comments
916.
Philosophical quest for our biggest problems(ted.com)
1 points by amenghra 11y ago|2 comments
917.
by amenghra 11y ago
Want to come build the next great Android project? https://squareup.com/careers ;)
918.
Children teach robots to write better(chili.epfl.ch)
1 points by amenghra 11y ago|0 comments
919.
Google Chrome extension for automatic $0.01 donations to your favorite sites(mjethani.github.io)
4 points by amenghra 11y ago|0 comments
920.
Monthly puzzles(domino.research.ibm.com)
1 points by amenghra 11y ago|0 comments
921.
by amenghra 11y ago
Agree. This applies even more to the "clearing the snow" game mentioned at the end. The work to clear the snow repeats every time it snows and each player can remember what happened the previous time.
922.
Back to the roots: why cyber security needs more collective intelligence(medium.com)
1 points by amenghra 11y ago|0 comments
923.
Simplest command line password manager(github.com)
1 points by amenghra 11y ago|0 comments
924.
Internet.org doesn't support SSL/TLS (at least initially)(developers.facebook.com)
4 points by amenghra 11y ago|0 comments
925.
by amenghra 11y ago
Logged-out csrf is an issue if you are serving as an oauth provider. There might be other use cases that I haven't thought about. I would ere on the side of precaution and implement logged-out csrf. If you create a session for the logg
926.
Object destructuring assignment in JavaScript (proposal)(github.com)
2 points by amenghra 12y ago|0 comments
927.
by amenghra 12y ago
This is exactly what the parent suggests doing. Keep in mind that if you don't change the client's view of the token on every page load (using some kind of salt), you are potentially vulnerable to CRIME/BEAST.
928.
Ask HN: Why has security training for software engineers not evolved?
3 points by amenghra 12y ago|0 comments
929.
by amenghra 12y ago
Solely cookie based CSRF is the only way to do logged-out csrf. Once you are logged-in, you want to do session based to prevent a MITM-over-http from doing a CSRF on the https connection. HSTS partially prevents the MITM-over-http, but not
930.
by amenghra 12y ago
How do you bind the value stored on the server to the logged-in user? If it's a global value (same for all users), you aren't correctly protecting against CSRF. If it's tied to the logged-in user, storing a value is essential

More ›