damncabbage

9 ms·

31.
by damncabbage 12y ago
It's closed-source; we can't fix things like the crappy crypto (shared key), and can't spot backdoors or see what it's actually doing without a lot of effort.
32.
by damncabbage 12y ago
(There was no title for the post; please forgive my editorialising.) In short, if there's not enough seed data in the system PRNG (or whatever random subsystem is hooked up), it dumps in your private key in an attempt to increase entro
33.
OpenSSL feeds your private key to the system PRNG(opensslrampage.org)
7 points by damncabbage 12y ago|1 comments
34.
by damncabbage 12y ago
This Crowdtilt will fund a focussed crowdsourced security assessment (otherwise known as a bug bounty) on OpenSSL. ... Security crowdsourcing company Bugcrowd will organize a “sprint bounty;” coordinating and incentivising the
35.
Let's make sure Heartbleed doesn't happen again.(crowdtilt.com)
5 points by damncabbage 12y ago|2 comments
36.
by damncabbage 13y ago
Except Sally now suddenly has to retrain as a salesperson. And perhaps also try to beat out other people which already have sales experience to that sales job. This takes effort and may be achievable with a lot of gumption, sure, but now co
37.
by damncabbage 13y ago
So... Not for anyone with a significant other. Or a family. Or an aversion to spending all day and night with your co-workers.
38.
by damncabbage 13y ago
There's a pull request open here: https://github.com/Homebrew/homebrew/pull/26075 If you absolutely can't wait, you can run this to install it: $ brew install https://github.com/a
39.
by damncabbage 13y ago
I'd recommend http://en.wikipedia.org/wiki/Pirates_of_Silicon_Valley if you haven't seen it already. It covers both Jobs and Gates in the period where both Apple and Microsoft began (though I'd argue tha
40.
Model View Culture(modelviewculture.com)
3 points by damncabbage 13y ago|0 comments
41.
by damncabbage 13y ago
Well, not really. Consider the (very common) case of a PHP-based blog, forums or shop being hosted on shared hosting. The latter gets an upgrades, and the site explodes. (I say do it anyway. It's like IE6; give it a long grace period,
42.
by damncabbage 13y ago
One question I haven't managed to answer yet: what happens when a Bower-bundled component needs to use and image (or a font)? As far as I can tell, there's not asset-path() usage, and so the link breaks in production (where image
43.
by damncabbage 13y ago
Scroll down.
44.
Swiss to vote on linking bosses' pay to wage of office cleaner(reuters.com)
18 points by damncabbage 13y ago|21 comments
45.
by damncabbage 13y ago
SSNs, IPs and Phone Numbers get reused. People often have multiple email addresses. (Bonus: Yahoo! email addresses get reused too.)
46.
by damncabbage 13y ago
... while setting up huge MySQL installations with a dozen+ replicas ... If you're careful about your function calls, sure. Include a UUID() or SYSDATE() in your INSERT statements, and the replication goes to pieces as the fu
47.
by damncabbage 13y ago
There's a baseline level of competency I'm willing to work with. I've had to fight for basic things (like version control) over and over again, and I'm fed up to the point of not wanting to fight those wars again every t
48.
by damncabbage 13y ago
I enjoy reading The Onion. I thank you for your sacrifice. ;)
49.
by damncabbage 13y ago
p866: The level of indentation that seems to produce optimal results in comprehension is between 2 and 4 spaces; as the number of spaces increase, the comprehension level decreases. On the other hand, the sample program hard
50.
by damncabbage 13y ago
What happened between the 19th and the 28th? https://news.ycombinator.com/item?id=6638004 Hi Justin. To clarify, from what I understand, October 28 is the date MongoHQ detected this. They've provided us with t
51.
by damncabbage 13y ago
For the moment, yes; it's an employees' market right now. What I hate to think about is what happen when the pendulum starts swinging back. My partner is in print design, and most companies seem to put candidates through onerous a
52.
by damncabbage 13y ago
In the US, in some places, yes. The post's author is Australian, and is writing from that perspective. We have minimum legal notice periods from both sides (a week for the first year, evenutally going up to four weeks): http:/&#x
53.
by damncabbage 13y ago
I was with you up until port knocking. The problem with the implementations I've seen is that the daemons themselves can introduce vulnerabilities. Why bother compromising OpenSSH when the lesser-used port-knocking daemon is vulnerable
54.
by damncabbage 13y ago
My comment from the blog: Additional point: the candidate may not be able to work (paid) at another company for a week without breaking part of their contract, such as a "devotion" clause. (For example, something like a "the
55.
by damncabbage 13y ago
As far as I'm Rails doesn't use secure-flag cookies by default; you need to have something like this in config/initializers/session_store.rb: local_env = !(Rails.env.test? || Rails.env.development?) MyApp::Applicat
56.
by damncabbage 13y ago
When I click log out, I know I'm logging out on this browser but not other browsers. Different browsers get different sessions. ... it doesn't limit you from storing and checking things on the server-side. Corre
57.
by damncabbage 13y ago
Changing session store to a database or memory store won't fix it: a session id is still required on the client side, then your session is still hijacked because the attacker still gets the session id. The bug specific
58.
by damncabbage 13y ago
7 years of PHP projects: old, messy, legacy and new and fresh. I loathe PHP and never want to use it ever again. Most I've talked to in person (yes, plural of anecdote is not data, etc) hate PHP because they've had a wonderful f
59.
by damncabbage 13y ago
Thank you so very much for your efforts. We use Capistrano at Bigcommerce to deploy our apps and components, and it's saved us from an inevitable pile of shell scripts. :-)
60.
by damncabbage 13y ago
It's "Matz Is Nice And So We Are Nice", because MINASWAN is a joke on the Japanese word for "everyone" (minasan). The -swan is like a super-cutesy suffix honorific thing. ... And yeah, it sucks that it feels like it

More ›