dchest

71 ms·

421.
by dchest 7y ago
That's a lot of work for a sessions replacement... http://cryto.net/~joepie91/blog/2016/06/19/stop-using-jwt-fo...
422.
by dchest 7y ago
I just tried, it works well (Chrome/Android on a 5.5"-something screen).
423.
by dchest 7y ago
https://stackoverflow.com/a/554134/311196
424.
by dchest 7y ago
Actually, using timestamps for all dates is a bit like using floats for currency. For many cases it doesn't matter, but you lose information.
425.
by dchest 7y ago
Something to remember about the security of concatenated hashes: https://crypto.stackexchange.com/a/63543/291
426.
by dchest 7y ago
BLAKE3 was released a month ago! The decision for new hash in git was made about two years ago. BLAKE2 was considered, though. SHA-256 is fine. The biggest problem is switching to it...
427.
by dchest 7y ago
Or just use sha1.Sum https://golang.org/pkg/crypto/sha1/#Sum
428.
by dchest 7y ago
Pininfarina is a famous Italian company that designs cars for manufacturers.
429.
by dchest 7y ago
The interface is the same, but arc4random_buf is a user-space CSPRNG. The analog of zx_cprng_draw is getentropy(2): http://man.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/... except zx_cprng_draw ki
430.
by dchest 7y ago
- It won't fail if there's no /dev/random device mounted (e.g. in chroot) - It won't fail if there are no file descriptors available - No error handling needed: the call always succeeds and random bytes are always r
431.
by dchest 7y ago
There's a proposed law in Russia that will fine people for using foreign satellite internet. Also, how do you think people will get iPhones, smuggling?
432.
by dchest 7y ago
Discussed yesterday: https://news.ycombinator.com/item?id=21805464
433.
by dchest 7y ago
To everyone who replied to this question: no need to speculate on this, the IPA is Exhibit A https://regmedia.co.uk/2019/12/10/apple_v_gerard_williams.pd... (William's lawyers claim the IPA is void: htt
434.
by dchest 7y ago
Yes, Arm designs not only instruction set, but also processors, which mentioned vendors then put into their SoCs or base their modified designs on. Here's a list of affected processors: https://developer.arm.com/support
435.
by dchest 7y ago
Or there's no point and it's just a consequence of turning numbered lists into <ol>.
436.
by dchest 7y ago
I don't want any advertising in the software I buy.
437.
by dchest 7y ago
Apple is not as invasive as Microsoft, but macOS has this preference: https://imgur.com/a/VhQec0O "Advertising in Apple Apps: View the information used by Apple to deliver more relevant ads to you in Apple News, S
438.
by dchest 7y ago
Some info: https://www.wikitribune.com/wt/news/article/101868/ https://www.ft.com/content/9956ff9c-0622-11ea-a984-fbbacad9e...
439.
by dchest 7y ago
FYI, WhatsApp added end-to-end encryption after Facebook acquisition.
440.
by dchest 7y ago
It's better to call it self-publishing, not vanity press (a gatekeeping term).
441.
by dchest 7y ago
Except in this article it's mentioned that a quiz from a 2017 book includes them.
442.
by dchest 7y ago
Apple constantly deprecates and removes APIs and features. Some significant examples that require rewriting and retesting a lot of code: Objective-C garbage collection, QTKit, WebView. Dealing with all that in many cases takes more resource
443.
by dchest 7y ago
What about paying for compatibility with the latest macOS? Of course, no user would like to pay for that, but the reality of Apple universe is that developers have to spend a lot of time fixing compatibility issues caused by Apple.
444.
by dchest 7y ago
http://www.facesofopensource.com/eric-raymond/
445.
by dchest 7y ago
Optimizing how?
446.
by dchest 7y ago
Here's a list of Bluetooth security problems according to NIST: https://twitter.com/dchest/status/952981861080461312 (full PDF: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nists
447.
by dchest 7y ago
What do you mean they are not aware of it? Selecting language AND country is the first action when setting up an iPhone. (Can't argue with the second point.)
448.
by dchest 7y ago
There is zh_US in Apple universe: on iOS/Mac language identifier depends on Language (zh) and Region settings (US). So, if you set Traditional Chinese for language and United States for region ( https://developer.apple.com&#x
449.
by dchest 7y ago
Nope, [[NSLocale currentLocale] countryCode] returns Region country code from settings. The same code is also used for language region, so you can end up with something like zh_US.
450.
by dchest 7y ago
Older versions are full of known vulnerabilities.

More ›