elithrar

32 ms·

301.
by elithrar 11y ago
> Hmm, still in the exploratory-hacking phase. Rewrote various parts of what Gorilla provides for learning purposes, plan to switch to Gorilla. Good pick. The gorilla toolkit is definitely flexible. I typically use a mix of gorilla (cont
302.
by elithrar 11y ago
> It doesn’t have to. In a properly built city, the rail will end up less than 500m from your destination, and you can walk the rest. Part of the problem in 2015 is that unless there was planning for rail from the start, the cost to buil
303.
by elithrar 11y ago
Does this work with Inbox (as in, clicking on the notification opens the Inbox UI, not Gmail)?
304.
Vulnerabilities in Wickr Secure Messaging App(labs.asteriskinfosec.com.au)
2 points by elithrar 11y ago|0 comments
305.
by elithrar 11y ago
> One would think that a tarp would use less material and be easier to manufacture than the equivalent number of plastic balls. How do you suspend the tarp? What about when it rains on the tarp, increasing its weight substantially? Repai
306.
by elithrar 11y ago
> - Did they supply user:pass@ in URL? If so, stop, and yell at them for putting usernames and passwords into a random site on the Internet. FWIW, browsers don't send the user:pass in the URL - they automatically marshal it into the
307.
by elithrar 11y ago
> While that's true, I think the discussion in that issue has gone more towards HTTPS support for custom domains. A huge number of those "+1 for HTTPS on custom domains" don't seem to understand/appreciate the di
308.
by elithrar 11y ago
> SHA2 + salt + pepper is sufficient Not even close. The attempts/sec you can run against SHA-2 vs. the attempts/sec you can run against bcrypt or scrypt are an order of magnitude apart. You should not use anything less than
309.
by elithrar 11y ago
> If shopkeepers buy and sell armor, for example, it makes no sense for them to refuse to buy legendary armor. The game does (to an extent) give shopkeepers a limited pool of money to "buy" from you with. You could address this
310.
by elithrar 11y ago
I've always thought Macaw ( http://macaw.co/ ) to come very close to this.
311.
by elithrar 11y ago
> If it was easier to move this power from remote regions to population centers with lower losses Loss isn't really the motivating factor though: at about 330kV transmission losses are < 3%[1]. Building transmission towers, the l
312.
by elithrar 11y ago
Have you looked into HAProxy? Health checks, SSL termination and a reasonable configuration DSL: https://www.digitalocean.com/community/tutorials/an-introduc...
313.
by elithrar 11y ago
> and the undersea cables (more inhospitable than the remote desert) are far, far higher bandwidth Terrestrial cables are likely harder to lay: you have to worry about land access—national parks, native title, private land—and the W.A. o
314.
by elithrar 11y ago
> quite likely they would think poorly of me for serving them. Mandrill sets open tracking to 'off' by default[1] and no doubt Sendgrid, et. al make it optional as well. Same goes for link tracking. (I use Mandrill for emailin
315.
by elithrar 11y ago
If you're okay with OAuth providers then https://github.com/markbates/goth gives you the capability to handle more than just Google accounts. Otherwise, you're right in that there doesn't exist a 'd
316.
by elithrar 11y ago
That'd be https://gridstylesheets.org/ (and its alternatives)
317.
by elithrar 11y ago
Refer here: http://codegangsta.io/blog/2014/05/19/my-thoughts-on-martini... The "short" version is that Martini did a lot of 'magic' stuff with run-time reflection. This made it reall
318.
by elithrar 11y ago
> Proper permissioning can stop it even being possible. 100% this. A little OT, but my standard Postgres backup procedure is streaming via WAL-E to S3. The user WAL-E runs as cannot delete versions. Any attempt to overwrite base backups
319.
by elithrar 11y ago
No doubt part of it was trying to "have it all". They wanted radios that could act as VSAT terminals (for field to base comms), data terminals (for which P25 is poorly suited) and for operational voice with fallback (UHF, VHF, HF)
320.
by elithrar 11y ago
Similar to Cloak's ( https://www.getcloak.com/ ) "OverCloak" feature that blocks all outgoing connections until the VPN connects. I use it religiously when traveling since airport WiFi is often a huge risk.
321.
by elithrar 11y ago
> No matter how scientifically sound the solution, "dump it all in the ocean" simply can't happen. Headline: "State Government to dump contaminated water from nuclear plant in ocean" Quote: "There may potent
322.
by elithrar 11y ago
Go's crypto/openpgp package ( http://golang.org/x/crypto/openpgp ) is probably one of the closest "full" implementations, although it's a library and not a CLI binary.
323.
by elithrar 11y ago
> Also, you don't need to sign or encrypt the cookie if it's just a securely random session_id. You should authenticate it anyway, to prevent someone from trying to brute force ID generation (and therefore masquerading as anoth
324.
by elithrar 11y ago
> That means all of your session data, including if the user is authenticated and even which user it is, is sent to the browser and back to the server on the next (and subsequent) request(s). This is an interesting concept, but IMHO, rat
325.
by elithrar 11y ago
> I can't speak for Cloudflare, but I would guess that they want these changes to be merged upstream. If that happens, the benefit is that consumers of the stdlib crypto API will get increased security and performance for free in a
326.
by elithrar 11y ago
> I'm surprised his battery life is so short (5-6 hours). I have the base model MacBook and I easily get 8 hours. To go as low as 5 hours, I'd have to keep CPU usage at 100% and run the screen at max brightness. If he's a
327.
by elithrar 11y ago
No idea why you have been down-voted: it's a good point. having one AC brick with two plugs (USB-C, USB A) would be helpful for charging both the laptop and a phone simultaneously. Right now you can't do that due to the single por
328.
by elithrar 11y ago
> The default Django CSRF protection is based on a hidden field, not cookies. This is not true. The default Django CSRF protection uses cookies for the session store[1] > What I don't get is how is it possible to do CSRF with coo
329.
by elithrar 12y ago
> By the way, did you know that Marvel and DC jointly owns a trademark to the word "super-hero" and no other company can use it unless licensed? Source? http://tmsearch.uspto.gov/bin/showfield?f=toc&sta
330.
by elithrar 12y ago
My understanding is that statutory damages in Australia can't (don't?) reach the stratospheric "$5000 per song" amounts that legislation in the US allows for, which makes the endeavour less profitable. I'm not sure

More ›