bulatb

29 ms·

271.
by bulatb 10y ago
Oops. The article mentioned fronting your servers with a proxy that strips the HPKP header. Not perfect, but it's something.
272.
by bulatb 10y ago
I think "opt out" means opting out of being able to be pinned, not just choosing not to pin. Instead of pinning a certificate, you might pin "This domain will not be pinning a certificate before $date."
273.
by bulatb 10y ago
Is there a way to mitigate the risk of automated PKP ransom attacks without just pinning yourself before they find you? My impression after reading this is that the mere existence of HPKP (as implemented) forces you to either use it or be r
274.
by bulatb 10y ago
What happens if a client gets assigned a new IP that isn't in the server's whitelist? How do they connect?
275.
by bulatb 10y ago
"In My Not So Humble Opinion." They switched some letters around.
276.
by bulatb 11y ago
Did you mean to comment in the fast food automation thread? https://news.ycombinator.com/item?id=11304628
277.
by bulatb 11y ago
Have you looked at trampolines/continuation passing?
278.
by bulatb 11y ago
Many people who claim to be skeptics are pseudoskeptics : people who arrive at skeptical positions by nonskeptical means. https://en.wikipedia.org/wiki/Pseudoskepticism#Truzzi
279.
by bulatb 11y ago
On mobile there's a giant "HR quiz" thing taking up the screen and masquerading as the content. Scroll down to see the infographic.
280.
by bulatb 11y ago
In English: If a widget factory costs F and makes a widget for W dollars, how much will it cost to build N widgets? If you have a budget of B dollars and you need to build N widgets, how much can your process cost per widget? If y
281.
by bulatb 11y ago
The thing I really want to see is how a good authentication and authorization system works, for both the user-facing services and interservice calls. I've looked around a bit and never found a resource that addresses that important pro
282.
by bulatb 11y ago
The propagation "speed" is the effect of clients honoring the records' TTLs. Clients and intermediate servers are responsible for pulling updates to whatever records they believe are stale; the DNS itself just sits there serv
283.
by bulatb 12y ago
It's hard to be professional if no one wants or values it but you. The word your manager would use is "obstinate." If they have not internalized the consequences of the risks they're asking their subordinates to take, th
284.
by bulatb 12y ago
The "business meeting" use case pictured doesn't make a lot of sense. The copy at the bottom says the stick itself is a computer, not a video receiver, so there'd have to be a keyboard/mouse/controller of som
285.
Tesla banned from direct sales in Michigan(roadandtrack.com)
3 points by bulatb 12y ago|0 comments
286.
by bulatb 12y ago
I've had the Droid Maxx for about a year now. I watch documentaries on YouTube, stream music over LTE and WiFi, and use Facebook/Quora/Imgur/Hacker News throughout the day and never think about the battery. I charge it m
287.
by bulatb 12y ago
It's hypothesized that syphilis was carried back to Europe by returning sailors. It doesn't work like smallpox, but it caused a major problem for hundreds of years.
288.
by bulatb 12y ago
Those statements aren't correct. A ShellShock exploit has two steps: 1. Attacker somehow gets to set an environment variable. Since CGI converts HTTP headers to env vars (Host: -> HTTP_HOST, etc), a CGI-enabled server is an easy way
289.
by bulatb 12y ago
Or clone with https.
290.
by bulatb 13y ago
Ctrl+Shift+P and type a language name to set it manually.
291.
by bulatb 13y ago
The fact that people need to study for their interviews is evidence that interviews are broken.
292.
by bulatb 13y ago
The problem is these interviews aren't brainstorms. They're exams, where you don't even know the range of topics in advance. No matter much interviewers claim it's just a conversation, the reality is they have standard q
293.
by bulatb 13y ago
My understanding is the DOJ has closed their case. There won't be any prosecutions.
294.
by bulatb 13y ago
> We want the OS to grab the mouse from their hand for their own good. Solutions which protect the user from cat_videos.exe can also "protect" them from subversive_essay.pdf (or competitor.com). It's maybe not that pract
295.
by bulatb 13y ago
The (2013) on this headline makes it.
296.
by bulatb 13y ago
They're the same per hour, but the absolute amount of money is still different. If you value 40 extra hours less than 60k, and you can somehow stay productive, there's no reason not to take the job that pays more money.
297.
by bulatb 13y ago
Grammar nits: "A NDA" should say "an NDA." The ellipsis should be three dots, and there shouldn't be a space before it.
298.
by bulatb 13y ago
I suspect the jobs that tick ~2's boxes are more likely to be jobs where managers see programmers as cogs in a machine. You don't have leverage if they don't believe they can't replace you, even if they can't. And i
299.
by bulatb 13y ago
My hypothesis: * Companies don't have a good idea what they want or need * Which leads to awful, tone-deaf, nonpredictive interviews * And every startup founded is a net loss in filled jobs, which means hiring intensifies while people
300.
by bulatb 13y ago
One thing I've learned from jsPerf is that this sort of micro-tuning tends to be particularly fruitless in JavaScript. Even if a tweak increases speed consistently across the target browsers, there's no telling which will optimize

More ›