drakaal

20 ms·

151.
by drakaal 13y ago
Really? How about because my database server could be something like DynamoDB that I don't own. Why would the execution and the Data server have the same vulnerabilities. The whole reason to have two servers is so that you can say. &q
152.
by drakaal 13y ago
Bcrypt offers no increase in security, and can add huge delays in your sign-on, user creation, and open you up to computational attacks by doing repeated sign-ins. My "Goofy" scheme is based on the practices which Microsoft, Linke
153.
by drakaal 13y ago
You misunderstand. You shouldn't have the password in memory. The password should basically never exist beyond the fractional second that you are validating it.
154.
by drakaal 13y ago
"Source" or "Execution". Your Database isn't on the machine executing the code. A breach of your Data should not be a breach of your code.
155.
by drakaal 13y ago
A calculated value means you need source to figure it out. Only PHP and JS/Node scripters assume that their source isn't safe in an attack. The rest of us assume that our compiled code is safe. (Over generalization, but if people
156.
by drakaal 13y ago
If the fact that a field might change some where else in your code is a "maintainability" issue, you have bigger issues and shouldn't be doing anything with passwords. Private User Data should not be changed by many things. T
157.
by drakaal 13y ago
Even if Facebook was a scam... You don't put $600k in before you know what you get out of every dollar you put in. This is why you outsource your SEO/SEM/ Social Marketing. (To someone reputable who is results driven/inc
158.
by drakaal 13y ago
I just added a comment basically saying the same thing. But you should use data that you would have that an attacker would not. First and Last Name as stored in your system, User ID (like 128912) and User Creation date are good choices. The
159.
by drakaal 13y ago
This isn't "Doing it right". A. Your Salt should ALWAYS include a feature you have to store anyway about the user that would be unique to your service. Use multiple if you need to. This applies no matter what Hash mechanism y
160.
by drakaal 13y ago
Keep telling your self that. Hackers rarely build things that scale to the size Google needs. A failure for Google has 10 Million signups the first day. The Product managers are what count in building a new product. Hackers are rarely good
161.
by drakaal 13y ago
I picked those examples because both are looking at those as features not as core to their business. Google is trying to make Social a core of their business. Facebook is building a search engine. They are very proud of their "natural
162.
by drakaal 13y ago
The premise that they missed the boat is wrong. They built a leaky boat because their core competence is in a different field. Google didn't "Miss the boat" they just never studied Nautical Science. Google is very good at thi
163.
by drakaal 13y ago
What a load of bull. Let me tell you a story about John Sculley. Former CEO of Apple ( http://en.wikipedia.org/wiki/John_Sculley ) I met John 4 times. He contributed to a charity that I was working with. I didn't
164.
by drakaal 13y ago
I have thought about pulling stake and going to another country because of the privacy (or lack there of) issues in the US. The growing number of police brutality incidents aren't helping either. Clearly the Fed believes that they can
165.
Why More Americans Are Renouncing U.S. Citizenship(npr.org)
4 points by drakaal 13y ago|2 comments
166.
North Dakota town is the most expensive place to rent an apartment in the US(theverge.com)
1 points by drakaal 13y ago|0 comments
167.
by drakaal 13y ago
a. How is that onlive thing working out? b. Remember Digital Fountain? How'd that work out. The guy sells snake oil. I don't get why press keep buying it.
168.
Hiding in plain sight: a story about a sneaky banking Trojan(blog.malwarebytes.org)
2 points by drakaal 13y ago|0 comments
169.
by drakaal 13y ago
This isn't new. It has been known that you can do this for a long while. Doing so however will get you permanently banned from the Google Play store. It can get you black listed from Adsense. Not worth the risks unless you are an app d
170.
by drakaal 13y ago
I am betting on voice. I don't think you should be looking at a screen while driving. Http://plexinlp.com is building an eyes off interface for cars (and other things) to me the ui should work while looking at it or via voice
171.
ATT reveals number of NSA demands in first-ever transparency report(gigaom.com)
1 points by drakaal 13y ago|1 comments
172.
by drakaal 13y ago
This is a much better Noun Phrase / Entity extractor. https://www.mashape.com/stremor/noun-entity-extraction-noun-... We don't rely on CoreNLP, or NLTK, we have our own sentence disambiguation, and our own pa
173.
by drakaal 13y ago
If you don't debate the merits of your work you aren't working on something big enough. When I worked on h.264 and VC1, I knew what I was doing would do two things. By Making it cheaper and easier to create and distribute video th
174.
by drakaal 13y ago
They won't pass 100% of it on in the US, but in Rural America which tends to be served by small ISPs not having technical support could lower the costs such that there would be some margin in a market that larger companies wouldn'
175.
by drakaal 13y ago
I am working on Natural Language Processing. I am a bad person. My stated goal is to make it so you never have to call a company (like expedia) and talk to someone in a foreign country (Like the Philippines). I have a very nice demo of doin
176.
by drakaal 13y ago
TLDR Version: It would take years to check the computer's math. Extending the method to check for yet higher discrepancies would produce proofs that are simply too long to be checked by humans. So, can a proof really be accepted if no
177.
Wikipedia-size maths proof too big for humans to check(newscientist.com)
1 points by drakaal 13y ago|1 comments
178.
by drakaal 13y ago
From 2007, this is a better article on the same topic. Sorry it is a PDF, it wasn't easy to find an online version. http://match.pmf.kg.ac.rs/electronic_versions/Match59/n3/mat... "Our results show
179.
by drakaal 13y ago
If you want mostly free hosting I built this a long time ago. http://www.cdninabox.com/ it mirrors any site with caching using Google Edge cache. Because it will handle URL Re-Writes you can host on any host in a subdirecto
180.
by drakaal 13y ago
I think you have to have certain conditions for nootropics to really do anything. I take Aniracetam and it makes a big difference in my life. I take a LOT less than most people, and the thing I notice is that I don't have songs stuck i

More ›