angry_octet

175 ms·

1. 1861.▲
   by angry_octet 8y ago

   Extra requirements: - Not trusting one company/hosting provider (like keybase/AWS). - Works for periodically or totally offline signing and verification. - Not be an ephemeral record (like a tweet) or undated. - Not require memori
2. 1862.▲
   by angry_octet 8y ago

   I take this to mean: apart from the barnacles on GPG, could there be a system which does what GPG does for software development (signing), without the non-functioning web-of-trust of GPG, or the hierarchical system of x509 signing? Somethin
3. 1863.▲
   by angry_octet 8y ago

   Agree, the acronym shouldn't need to be dereferenced. The thing you plug in / swipe is a card --> call it a card. If you want someone to enter a number, say number. So "CAC card" is (label="CAC", object type
4. 1864.▲
   by angry_octet 8y ago

   And it will remain mandated for a decade or two.
5. 1865.▲
   by angry_octet 8y ago

   It makes just as much sense as 'secret questions' for account unlock but it is dubious for login or continuous validation -- how many times have I used another person's keyboard, or them mine, while working on a set of slides
6. 1866.▲
   by angry_octet 8y ago

   Diabolical.
7. 1867.▲
   by angry_octet 8y ago

   Yes, it sounds like it might have higher throughput and lower latency when nothing is contending and it isn't touching every shard per transaction. When those conditions are not met it suffers, possibly pathologically.
8. 1868.▲
   by angry_octet 8y ago

   How can it possibly know which is the correct version if it doesn't know what other workers have processed?
9. 1869.▲
   by angry_octet 8y ago

   Hmm, rollback means changing the state to one earlier in time. Sometimes that means reapplying data from the log to achieve a consistent state. After the log is applied there is no evidence of the failure. What you describe, with correcting
10. 1870.▲
    by angry_octet 8y ago

    It sounds like it commits in the foreground, but it can fail due to contention -- in which case nothing happens. So the client might have to retry indefinitely, absent some extra complexity for gaining exclusive access (a lock). It would st
11. 1871.▲
    by angry_octet 8y ago

    How is it guaranteed that a transaction will make progress? It sounds like every (initial state -> a,b,c,d),(initial state = a,b,c,d; modified state -> a,B,C,d) can be aborted by another transaction? Is there some queuing system for t
12. 1872.▲
    by angry_octet 8y ago

    Who doesn't?! Don't you feel a bit ... dirty?
13. 1873.▲
    by angry_octet 8y ago

    I can flag articles, but not comments. I'm not sure if this is just me of course, but given comments appeared marked as [flagged] it seems so. Inflation in kerma required for flagging? The rules are rather opaque. I'm fine with bi
14. 1874.▲
    by angry_octet 8y ago

    Phase 1 - Criminals and people of all types would use imported iPhones. - To counter this the carriers would have to use IMEI filters to only allow approved phones. - Intl visitors would have to get a local handset (probably not such a dram
15. 1875.▲
    by angry_octet 8y ago

    I was applying for graduate school a while ago and the application form says: GitHub link to your programming portfolio. Portfolio? I don't have a portfolio. My work is jealously guarded by the people who paid for it. I've been ab
16. 1876.▲
    by angry_octet 8y ago

    A way to diff would be amazing. Textual diff (these formulas changed) and visual (ie highlighting block formula differences).
17. 1877.▲
    by angry_octet 8y ago

    You're right, a dashboard is a project for when you don't know if they can do anything useful. I think the fault is actually the split between IT (a support function) and the product group, which often doesn't have/isn&#
18. 1878.▲
    by angry_octet 8y ago

    Get the battery replacement from Apple. Still free in Australia due to consumer Law guarantees.
19. 1879.▲
    by angry_octet 8y ago

    There is a significant cohort of users who flag this type of article. As there is no way for them to say why they dislike it, I doubt we will ever be certain. Obviously it isn't technical or scientific, it is anecdotal, perhaps valid r
20. 1880.▲
    by angry_octet 8y ago

    While it would be easy to classify your comment as thoughtless racism, being HN I will call it being naive about statistics. The FBI stats may well say 'x% of burglaries are committed by black males', which might represent a rate
21. 1881.▲
    by angry_octet 8y ago

    It's a bit spooky, but it's fine.
22. 1882.▲
    by angry_octet 8y ago

    Yeah, reading books written by people whose politics you disagree with is bad! While many will disagree with the take that capitalism & prosperity is incompatible with counteracting climate change, she does identify some real problems w
23. 1883.▲
    by angry_octet 8y ago

    The hash method (SHA1 iterated 4096 times) is quite secure for this purpose. Even md4 would be fine. Of course, lots of Bitcoin ASICs are designed to compute SHA256 fast, but they are very fixed function and lacking the bandwidth to a CPU t
24. 1884.▲
    by angry_octet 8y ago

    https://www.sans.org/course/advanced-incident-response-threa... https://brettshavers.com/brett-s-blog/entry/digital-forensic...
25. 1885.▲
    by angry_octet 8y ago

    Also I should have pointed out that GPUs crunch WPA2 pretty quick these days too, it is best to use a really long passphrase. There are too many ISP supplied systems with a default password like "9K141U". It definitely seems like
26. 1886.▲
    by angry_octet 8y ago

    This is a textbook case where of amateur sleuthing is a bad idea. We're not all Tsutomu Shimomura. If there is a criminal (or civil) case, there has been no chain of custody. If you find something like this, don't even touch it, g
27. 1887.▲
    by angry_octet 8y ago

    Your friend should read more on WPA2: https://null-byte.wonderhowto.com/how-to/hack-wi-fi-cracking... SSID unique data is hashed into the password. If you use a very common name there will be a precomputed rainbow tabl
28. 1888.▲
    by angry_octet 8y ago

    IP addresses tend to have a relatively long lived association with a subscriber, often weeks. So an app which communicates out the wifi names naturally reveals the IP address (unless there is carrier NAT, i.e. on mobile, in Russia). So with
29. 1889.▲
    by angry_octet 8y ago

    When you live in a culture that used to worship the sun and many friends and relatives have died and or been scarred by skin cancer, you lose tolerance for people pooh poohing UV exposure. Blatantly misrepresenting advice as he does (saying
30. 1890.▲
    by angry_octet 8y ago

    This is worse than pseudo science, it is complete mumbo jumbo, totally misrepesenting and misquoting sources. To think that the author has been selected as an MIT Science Journalism fellow is truly mind boggling. https://ksj.mit.