diafygi

90 ms·

1. 781.▲
   by diafygi 12y ago

   Is there an equivalent term to "vote with your wallet", only for jobs?
2. 782.▲
   by diafygi 12y ago

   I'm super excited to see improvements in the built-in App Manager in Firefox's developer tools. Hopefully it becomes a novice-friendly IDE that allows you to quickly start a new app, add some dependencies (jQuery, tweetNaCl, etc.)
3. 783.▲
   by diafygi 12y ago

   I speculate that Android is starting to worry about Firefox OS, so they are starting to address the ultra cheap smartphone market. However, I'm bullish on Firefox OS winning this market simply because it will always be able to undercut
4. 784.▲
   by diafygi 12y ago

   I would think in this instance that this is not just a Google opinion. It is now becoming a Best Practice[1]. [1] - http://tools.ietf.org/html/rfc7258
5. 785.▲
   by diafygi 12y ago

   Nice! Which CA are you using?
6. 786.▲
   by diafygi 12y ago

   Good. Also, I recently poked the bear on the chromium and mozilla dev security mailing lists, and they started discussing ways to push https in the browser UI. Hopefully this momentum continues! https://groups.google.com/a&#
7. 787.▲
   by diafygi 12y ago

   What about a kickstarter to subsidize SSL costs? Or how about one to buy a root CA and make it free?
8. 788.▲
   by diafygi 12y ago

   The goal of TweetNaCl is to make an auditable crypto library, and this is a JavaScript port of the original C library. Its goal is not to offer every cipher or algorthim, but its small size allows it to be easily included in unhosted apps l
9. 789.▲
   by diafygi 12y ago

   Austin does. Also, feeder roads along highways are a great Texas feature, too.
10. 790.▲
    by diafygi 12y ago

    Currently on the front page is an article[1] about Russian malware pen testing for SQL injection. Your attack surface increases dramatically when you have valid session cookies. A good example of this is reddit, that is not https for logged
11. 791.▲
    by diafygi 12y ago

    Alternative? Non-https is really harmful to users who browse via open wifi.
12. 792.▲
    by diafygi 12y ago

    There is so much open wifi nowadays that non-https should really start to be considered harmful. A large portion of website visitors are probably connecting via Starbucks, airport wifi, etc., which means their session cookies are basically
13. 793.▲
    by diafygi 12y ago

    https://prod01-cdn02.cdn.firstlook.org/wp-uploads/sites/1/20... ¯\(ツ)/¯
14. 794.▲
    by diafygi 12y ago

    I've just updated with reproduction steps[1]. The problem appears to be with disabling third party cookies (even though the session cookie is first party). Can you please verify? [1] - https://bugzilla.mozilla.org/show_
15. 795.▲
    by diafygi 12y ago

    It seems this post was nuked off the front page. Isn't it typical for mods to comment on why posts are nuked?
16. 796.▲
    by diafygi 12y ago

    I love using Firefox Developer Tools, but there's a really annoying bug[1] (been around since 2002!) that prevents Django sites from working properly with the Debugger. It's really the only thing that is preventing me from switchi
17. 797.▲
    by diafygi 12y ago

    I asked these questions on a previous thread but didn't get any answers. I'm seriously interested in actual responses (i.e. these aren't rhetorical). ----- If you use AWS, is all the data (S3, EC2 filesystems, RDS data+backup
18. 798.▲
    by diafygi 12y ago

    I work in solar in California, and energy storage + solar is seen as the next evolution of solar projects. They are much better at combatting utility demand charges, which are likely to become commonplace.
19. 799.▲
    How solar energy storage could make Tesla much more than an automaker(qz.com)

    3 points by diafygi 12y ago|1 comments
20. 800.▲
    by diafygi 12y ago

    So where is the line on the governments position? If you use AWS, is all the data (S3, EC2 filesystems, RDS data+backups, etc.) now a business record of Amazon? What about renting dedicated servers at your local datacenter? You're basi
21. 801.▲
    by diafygi 12y ago

    > Economic losses to US businesses due to lost sales and declining customer trust. Whenever I have a discussion with friends on this topic, this is what I focus on. For many people, safety has a higher political priority than privacy. Ho
22. 802.▲
    Show HN: MyLock Easy Encryption(diafygi.github.io)

    1 points by diafygi 12y ago|0 comments
23. 803.▲
    by diafygi 12y ago

    Would high helium prices prevent this nowadays?
24. 804.▲
    by diafygi 12y ago

    Definitely not ready for prime time, but it works with links now (see the example link in the video description). However, it probably wouldn't be very useful for people in prison because it requires each party to have a dropbox accoun
25. 805.▲
    by diafygi 12y ago

    http://youtu.be/WTPimUSIWbI Attorney client privilege is one of the biggest fallouts from mass surveillance. Earlier this year there was a legal hackathon at Mozilla where I tried to make a product to help that.
26. 806.▲
    by diafygi 12y ago

    Is there a bug report for this? I'm curious to see if I can reproduce.
27. 807.▲
    by diafygi 12y ago

    How about my proposed salting change? This would thwart a one-table attack. https://github.com/kaepora/miniLock/pull/14
28. 808.▲
    by diafygi 12y ago

    Actually, that's exactly what I proposed in my pull request[1], but it got rejected :( [1] - https://github.com/kaepora/miniLock/pull/14
29. 809.▲
    by diafygi 12y ago

    Alright, what do you propose? As I said, dealing with keyfiles is HARD for the lay-user.
30. 810.▲
    by diafygi 12y ago

    Yes, and it clearly stated in the demo[1]. The key feature that this approach is trying to accomplish is allowing the user to not have to store anything beyond a password. Keeping track of a keyfile is HARD for a lay-user, so miniLock is tr