elchief

73 ms·

811.
by elchief 12y ago
It can help in the following scenarios: 1. Hacker steals db but does not compromise web servers (because the hmac pepper key lives on the web servers and not in the db) 2. Hacker can run SQL Injection via web server, but cannot otherwise ac
812.
by elchief 12y ago
PHP default is 10 if that helps
813.
by elchief 12y ago
6500 bcrypt(5) hashes/second with custom FPGA: http://ieeexplore.ieee.org/xpl/login.jsp?tp=&arnumber=703252...
814.
Postgres 9.5 feature: Foreign Tables now part of Inheritance Trees(michael.otacoo.com)
2 points by elchief 12y ago|0 comments
815.
by elchief 12y ago
Read the article. "Rognlie points out that almost all of the increase in the value of capital over Piketty’s timeline comes from land"
816.
by elchief 12y ago
It's the most common vulnerability. https://www.owasp.org/index.php/Top_10_2013-A1-Injection
817.
by elchief 12y ago
Assuming (no evidence, it's just very common) that this was a SQL Injection, here are some ways to protect yourself: * Use http://en.wikipedia.org/wiki/Database_activity_monitoring . If you don't list users on
818.
by elchief 12y ago
You can't say the rich have lots of land, then complain about not taking depreciation into account. Land doesn't depreciate. This guy is just searching for reasons to dismiss Picketty. Edit: If you didn't read the article: &q
819.
by elchief 12y ago
I totally agree. It's too bad a compromise. If you want Google to crawl your site it should be server-generated HTML. If you want apps, make actual desktop/mobile applications.
820.
by elchief 12y ago
PCMCIA = People Can't Memorize Computer Industry Acronyms
821.
by elchief 12y ago
And don't forget to write your Postgres stored functions in JavaScript with PLV8
822.
by elchief 12y ago
smlar extension for pg "Simple Recommender System" section: http://www.sai.msu.su/~megera/postgres/talks/pgcon-2012.pdf http://railsware.com/blog/2012/05/10/effec
823.
by elchief 12y ago
We had one of these kinda bugs. If you uninstalled our software it deleted a major chunk of your Windows registry, crippling your computer. It was a one character error in our script. The first ticket read "Uninstalling [Product] destr
824.
by elchief 12y ago
Thanks for this! Useful to know what not to do in prod.
825.
by elchief 12y ago
They don't even have to. The NSA will spy on Canadians and then ship CSE the data.
826.
by elchief 12y ago
And indexes are faster in 9.4 . See also the smlar extension (by one of the text search authors). Let's you do TFIDF I'd kill for BM25 and Solr style filters though...
827.
by elchief 12y ago
Is there more to the indexing than MAC-ing the values ?
828.
by elchief 12y ago
So the database itself doesn't have much to do with encryption, except that it can help w indexing.
829.
by elchief 12y ago
Database encryption doesn't make a whole lot of sense to me. Proper row and column security, and using real database user authentication (not one single, pooled web server user) is real security. A db on its own box, in its own network
830.
by elchief 12y ago
Whiny ass comments so far. Bravo Microsoft!
831.
by elchief 12y ago
Are we talking about their cool HTTP 503/522 error page?
832.
by elchief 12y ago
The MS SQL Server is on a different, older, cheaper machine. The PostgreSQL one is faster because it's newer and we had budget for it. We also have two different database teams (actually more, it's a large company): IT controls th
833.
by elchief 12y ago
We have PG on a powerful box (256GB RAM, SSDs, 5000 core GPU), and use FDWs to import data from other databases for analysis. For example, our main data warehouse is on MS SQL Server, but not super fast, so we use a FDW to grab data from th
834.
by elchief 12y ago
Because poo
835.
by elchief 12y ago
Censorship of things you find offensive is not a great answer.
836.
by elchief 12y ago
Why do people use NetBSD over OpenBSD? Serious question.
837.
by elchief 12y ago
Please see "Recommended Configurations" in https://wiki.mozilla.org/Security/Server_Side_TLS to see which cipher suite you should be using on your server. Above also shows how to configure most common web ser
838.
by elchief 12y ago
I was hoping the top answer to the first question would be "Send 14300 emails daily for a week"
839.
by elchief 12y ago
100% of what I've read online about the net neutrality debate was disallowing differential charges, but now it's magically about the last mile?
840.
by elchief 12y ago
If you want an air gapped machine I guess you better buy the parts separately, from different sources, via anonymous intermediaries.

More ›