Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
daeken
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
87 ms
·
811.
▲
by
daeken
13y ago
Sorry to hear you're having so many troubles. Is this happening on the Paypal side or the EventBee side? Also, if you email me at cody.brocious@gmail.com we can discuss other possibilities for payment or troubleshooting.
812.
▲
by
daeken
13y ago
That's really quite odd -- I wonder what's going on. Have you tried another browser? I'm still seeing payments coming in, so everything should be fine.
813.
▲
by
daeken
13y ago
There is, yes -- 40 seats. Currently ~25 seats left.
814.
▲
by
daeken
13y ago
If you follow me on twitter (@daeken) or subscribe to the RSS feed on my blog, you'll get updates as they come out. If this all goes well, there will likely be another run starting in Q1 2014.
815.
▲
by
daeken
13y ago
Given that this is the discounted price (for the first run), I'm not planning a student discount for this iteration. Future runs may have one though.
816.
▲
by
daeken
13y ago
Looks like the early bird package is indeed sold out, though two tickets are currently pending payment, so someone might just be sitting on them. I'll update if I find otherwise.
817.
▲
by
daeken
13y ago
Failing the course would entail not doing scoring well on exams (read: not finding good bugs). You can retake the course in following runs, but I don't have a discount planned at this point. If you keep up with the course work and as
818.
▲
by
daeken
13y ago
It looks like that's the case. I only see 8 sales (out of the 10 total) but I believe that the tickets are being held pending payment. I'll update if I find out otherwise. Hope to see you in class!
819.
▲
by
daeken
13y ago
I'm hoping to do this 2-3 times a year, if I can get enough interest and nail down the material. Mind you, the price will be going up past this "beta" run.
820.
▲
by
daeken
13y ago
It's something I may consider for future runs, but I'm not planning that for the first iteration. I think the real value in this is being able to work through this material and have hands-on instruction when you need it, much as
821.
▲
by
daeken
13y ago
No, it's not -- this is a brand new course. However, I personally will put my weight behind anyone who completes this course successfully, as it will put them in a prime position for many positions; I have no doubt that they will be p
822.
▲
by
daeken
13y ago
Yes, absolutely. Recorded stream as well as logs of the IRC channel. Missing the live stream isn't a big deal if you keep on top of the course work and ask questions. Participating in the forums will also help you keep on top of thi
823.
▲
by
daeken
13y ago
Absolutely, good call! Edit: Put up a simple launch page here: http://course.daeken.com/
824.
▲
Breaker 101: An intensive online web security course
(daeken.com)
286 points
by
daeken
13y ago
|
112 comments
825.
▲
by
daeken
13y ago
I personally am not a fan of used cars (I don't see it as being much better ideologically than theft, since the people who made the car are not getting compensated on resales which provide an identical experience to one that you get br
826.
▲
by
daeken
13y ago
Client-side crypto in JS has value if and only if the following conditions are all met: 1) The application receives no HTML, CSS, Javascript, or code interpreted by plugins from a server in the same context (e.g. not an iframe) as the c
827.
▲
by
daeken
13y ago
This is everything that is wrong with cryptography and privacy. Simply put, if your data is important enough to use cryptography on it, why would you want to use crypto that is broken by design ? The whole point of a well-designed, well-i
828.
▲
by
daeken
13y ago
Awesome, glad to hear it!
829.
▲
by
daeken
13y ago
But if you need to trust the server (and you do), then the client-side encryption is 100% pointless. You might as well encrypt on the server with safe, sane, battle-hardened code. At the end of the day, XSS, rogue hosts, etc can own this e
830.
▲
by
daeken
13y ago
Good on you for having a list of known weaknesses, but here's the one that really makes this completely unsafe: The server dictates what's run on the page, and thus can access the plaintext data in any way it sees fit. The trust
831.
▲
by
daeken
13y ago
Well no, the demo is removing the green screen but only in the shaders. As I said, this really isn't a big deal, but it does add complexity.
832.
▲
by
daeken
13y ago
You still need to remove the green-screen. This either means an expensive process on the CPU side, or pushing the frame to the GPU to remove it with a shader and then using RTT and rendering that or reading the framebuffer and drawing that
833.
▲
by
daeken
13y ago
Oh, yes! My apologies. I'm talking about the original video here: http://www.youtube.com/watch?v=12zJw9varYE
834.
▲
by
daeken
13y ago
Yes, you do need to process from beginning to end. If you look at the original video, you see that each frame builds on the one before it, which builds on the one before that. Remember, the buffer is never cleared -- it's just overwritten
835.
▲
by
daeken
13y ago
Each frame has the greenscreen turned into a fully transparent pixel, then gets blitted onto a buffer containing all of the existing buffer's data. That means that for each frame, you're building on the data from every frame that came befo
836.
▲
by
daeken
13y ago
Well no, because each frame builds on all the frames before it. Either way, seeking is still broken unless you run through all the frames up to that point.
837.
▲
by
daeken
13y ago
It is actually slightly more complicated. The existing effects work in GLSL and are just transforming single frames of video. For that effect to work, you need the previous buffer states; this means that seeking will cause the image to be
838.
▲
by
daeken
13y ago
Yes. Absolutely, absolutely, yes. What I want more than anything else: to feel normal. Even if it's just for 10 minutes while we're bitching about how bad some new album is, or playing a game. I won't say that's universal, but in my cas
839.
▲
by
daeken
13y ago
Jesus christ, yes. This is why many people suffering from mental illness don't talk about their problems: they end up feeling worse because their friends either try to "fix" them, or they end up comforting the friend, or both. It's always
840.
▲
by
daeken
13y ago
I'm not wealthy or well-connected, but I'm "coming out" about mental illness myself. I've talked about it at length on HN (e.g. https://news.ycombinator.com/item?id=2043019 ), but I'm working on a blog post now that talks about this in de
More ›