ecesena

20 ms·

211.
Vulnerabilities discovered and patched in legacy MPC algorithm(fireblocks.com)
2 points by ecesena 5y ago|0 comments
212.
by ecesena 5y ago
My likely oversimplified take: - Apache2 for things you're building - Apache2, MIT (permissive licenses) for things you build upon and you're going to distribute (including all frontend) - *, ideally avoiding licenses that explici
213.
by ecesena 5y ago
> Could it not show the next code [...] ? Codes are typically valid for 3-5min [...] just use the current code even if it seems expired
214.
by ecesena 5y ago
Codes are typically valid for 3-5min even if the display only shows 1min. This is to avoid issues with time discrepancy on client/server, and doesn't really make a big difference in terms of security, feel free to try it out. So,
215.
by ecesena 5y ago
This is awesome! I went through the analogous Italian process. We just wanted to sell a dozen solokeys to my university, but university are now required to go through an official process. It's been so incredibly painful that just the t
216.
by ecesena 5y ago
I also purchased Landkit, but eventually found it very heavy. I then essentially remade it on top of Fresh [1]. Code is here if anyone needs it [2]. [1] https://github.com/cssninjaStudio/fresh [2] https://gi
217.
by ecesena 5y ago
Any idea how hard would the equivalent be on a mac?
218.
by ecesena 5y ago
Security alerts for example? https://github.com/dropbox/securitybot
219.
by ecesena 5y ago
Just an idea, some founders may have good karma already/know HN audience enough. Maybe these should be rewarded with a Launch HN, unedited or little edited.
220.
by ecesena 5y ago
I'm a fan of Kafka for streaming systems, so I'd recommend to fetch data via api, add it to kafka and then consume from kafka to monitor the price + fire alerts (assuming you don't really need a real-time system with very low
221.
by ecesena 5y ago
To the user that clicks only once, there's little value to show a random initial image and compute the corresponding result. You should prob just always show the same image and cache the result, so the site can always load. Or random
222.
by ecesena 5y ago
Great, thank you
223.
by ecesena 5y ago
I started a new project with monorepo, but soon the number grew when I had to share smaller private sub-projects with smaller teams. I wish there was a way to only share a directory or so. On the monorepo, I learned a couple interesting thi
224.
by ecesena 5y ago
Check out MoFi, podcast and newsletter by Kevin Rose. It covers a lot of projects and use cases: https://modern.finance
225.
by ecesena 5y ago
Did I say something incorrect? (I noticed downvotes.) I was trying to say that Bitcoin doesn't handle "merge". If 2 chains diverge at some point for whatever reason (in this case a firewall) then the nodes have the incentive
226.
by ecesena 5y ago
No. The bigger chain will be kept, the other one discarded. There’s no such thing as parallel chains and merge. This said if you had n btc before firewall, you’ll still have n btc when it reopens. (note that, as other said, such a firewall
227.
by ecesena 5y ago
Remove the cookie consent popups. Or, if we're talking about the ground work, specs the cookies such that browsers must implement the cookie consent and therefore sites can't build it in js.
228.
by ecesena 5y ago
See "pASSWORD tYPOS and How to Correct Them Securely" by Dropbox: https://ieeexplore.ieee.org/abstract/document/7546536 We also implemented it at Pinterest, I think it's a pretty good idea for a few
229.
by ecesena 5y ago
To expand on 3), if you really need it, make sure your rule works with Chrome/Safari autogenerated passwords.
230.
by ecesena 5y ago
Cool list, my fav is "9. Log in with email, not username", that can be achieved with: <input type="email" autocomplete="username email" required ...> and if you also have username: <input type="us
231.
by ecesena 5y ago
See the FAQ "Can I post a job ad?", it's a sort of ad reserved to YC companies. https://news.ycombinator.com/newsfaq.html
232.
by ecesena 5y ago
For exercise, I started running 1mi/day almost 4y ago now. Having a clear tracking helps me with consistency and pushing when I'm behind. For coffee and wine I'm certainly on the "addicted" spectrum if you were to m
233.
by ecesena 5y ago
If it's a web saas, we're building Saasform [1] with your use case in mind. One relevant example is launching your MVP as a serverless API (e.g. on Firebase) + react/vue front end. Just iterate on your core product and featur
234.
by ecesena 5y ago
I'm in Sicily for 40d, remote working and learning kitesurf and windsurf. Kitesurf is really nice but you need to account for a few lessons before you can even stand on the board and prob a few more before you can rent on your own. In
235.
Secure Sessions in JavaScript(hackernoon.com)
1 points by ecesena 5y ago|0 comments
236.
by ecesena 5y ago
I'm a fan of Fastify too, but express-session has 4M downloads/mo. Enough to be worried, I think, and to merit a fork.
237.
by ecesena 5y ago
Author here. We forked express-session to use JWT as session tokens and improve security [1, 2], notably: - Prevent session fixation (e.g., when a user logs in a new token is emitted) - Guarantee that destroyed sessions can't be re-sav
238.
Show HN: Express-Session-JWT(npmjs.com)
3 points by ecesena 5y ago|3 comments
239.
by ecesena 5y ago
If your plan is to experiment a lot w/ website, landing, other sites and blogs then probably investing into something like wordpress will pay out eventually. Or hosted solutions like squarespace/wix. For landing/micro sites s
240.
by ecesena 5y ago
Join also https://www.startupschool.org

More ›