ecesena

32 ms·

391.
by ecesena 6y ago
Check out HackerOne or BugCrowd. Companies have programs with details on what’s allowed vs not, responsibly report and optionally share findings after they’re fixed.
392.
by ecesena 6y ago
I'd recommend this talk to start: https://www.ted.com/talks/eva_galperin_what_you_need_to_know...
393.
by ecesena 6y ago
I'd also add: let us find it. For example, at least link it in your profile, if you don't want to share in the post.
394.
by ecesena 6y ago
This repo has 3 open boards based on STM32 to make your own security key: https://github.com/solokeys/solo-hw It could be useful to take inspiration and build your own, with a working example in mind. From a "proc
395.
by ecesena 6y ago
My only recommendation, or "be aware of" if you prefer, is to be ready to enable 2FA, i.e. give your phone number to Apple. I have a friend who's insisting not to do that and his life is miserable. Too many of the Apple basic
396.
by ecesena 6y ago
I think the PhD is the only one that either you do it now or never. So, if you’re interested, I’d go for that. Google will send you email offers for the rest of your life, so I’d keep it last in my list. You can also replace Google with man
397.
by ecesena 6y ago
You have to distinguish between resident keys and non-resident keys (that I'll just call "normal keys"). Resident keys are stored on the device, so today you can only have a limited number of RKs. This said it's a temp l
398.
by ecesena 6y ago
FIDO2 supports password-less and username-less authentication, both as a single factor, i.e. no passwords. Password-less is like 2FA but without the first factor. You type in your username, next you use the security key. Username-less is do
399.
by ecesena 6y ago
I worked with both Kickstarter and Crowd Supply, and I have to say that the latter can help you significantly. Cashflow is certainly an issue. In our 1st KS we definitely did significant discounts. Thankfully we remained profitable, but wha
400.
by ecesena 6y ago
https://github.com/mmccaff/PlacesToPostYourStartup
401.
by ecesena 6y ago
In 2y, when your project will be successful, how successful the launch is will be irrelevant. Write a blog post, short, with the key things that will make it evergreen. Use good keywords in the title. Then don’t worry to much about a big la
402.
Ask HN: Privacy Policy / ToS Generator
1 points by ecesena 6y ago|1 comments
403.
by ecesena 6y ago
At least, redirect to linkedin/twitter/github. Quick&dirty but easy to maintain.
404.
by ecesena 6y ago
Other than AWS as in other comments, another solution can be Firebase. You get user authn + hosting, most likely for free. For theme I've been happy with Landkit ( https://landkit.goodthemes.co ). It's a bit heavy but yo
405.
by ecesena 6y ago
Correct. All browsers now support FIDO2, former U2F, e.g. via USB (or NFC on mobile phones). Browser and security keys implement one side of the protocol called CTAP (client to authenticator protocol). Then, browsers expose WebAuthn to web
406.
by ecesena 6y ago
Security keys protect against phishing, in addition to account takeover. Say you click on a link that looks like Google but it's not. You enter your credentials -> these are now in possession of the attacker. If you have 2FA enabled
407.
by ecesena 6y ago
> 222 nm UVC LEDs are cheap enough To my knowledge they don't exist yet. Do you know of any manufacturer that produces them?
408.
by ecesena 6y ago
Highly recommended TED talk: https://www.ted.com/talks/david_brenner_a_new_weapon_in_the_... And the longer interview: https://www.ted.com/talks/david_brenner_can_light_stop_the_c...
409.
by ecesena 6y ago
You can share your wifi config from the phone to the device, but my phone is connected to 5GHz and not 2.4, so that doesn't work. I then have to connect my phone to the 2.4 and then forget the network. It's just an unnecessary ste
410.
by ecesena 6y ago
How's the environment inside the liquid? I'm curious, for example, if you could have a fish living in levitating water?
411.
by ecesena 6y ago
Not an issue per se, it’s just that the cost goes up pretty quickly... imagine you want to build your own fleet of 10-20 devices.
412.
by ecesena 6y ago
What's the latest on a cheap, small board where you can run linux, with BLE & WiFi 2.4/5GHz? Rpi Zero W and the corresponding Banana Pi M2 Zero meet all criteria except the 5GHz. Beside these, I have a really hard time finding
413.
by ecesena 6y ago
This is true for every piece of software, isn't it!? You can have 2 identical websites, one checks your username+password for real, the other always logs you in. Or even better, one stores bcrypted passwords, then other cleartext ones.
414.
by ecesena 6y ago
Captchas move a problem from one party to another. Service has a problem with bots, it adds a captcha, now the problem is on the legitimate users to prove they're not bots. Like any technology, captcha has been invented at some point.
415.
Statement on Modernization of the Accredited Investor Definition(sec.gov)
1 points by ecesena 6y ago|0 comments
416.
DiceKeys – a physical mechanism for creating and storing a 192-bit key(schneier.com)
1 points by ecesena 6y ago|0 comments
417.
DiceKeys – How 25 Dice in a Box Solve the Secure Password Conundrum(forbes.com)
1 points by ecesena 6y ago|0 comments
418.
by ecesena 6y ago
https://hubspot.com
419.
by ecesena 6y ago
Great list, I'm glad to see the number of options increasing. This reminded me of one of my projects, http://hasgluten.com , kind of forgotten but still up & running on github pages since I learned react 6y ago. Code is
420.
by ecesena 6y ago
I don't know about that - https://jimjefferies.com/podcast

More ›