elithrar

25 ms·

211.
by elithrar 9y ago
OAK <-> LGW on Norwegian during October was ~$650, which is about the same as Virgin Atlantic. Some of the fare prices to Europe are very cheap, but not always.
212.
by elithrar 9y ago
It's important to note that "HMAC-SHA-1" is an entirely different construction compared to SHA-1. It is a HMAC that happens to use SHA-1 internally, and it uses it in a way that means it does not yet share weaknesses with SHA
213.
by elithrar 9y ago
Have you looked at http://bluebirdjs.com/docs/api/promise.map.html - which allows you to control the concurrency of Promises easily?
214.
by elithrar 9y ago
a) what is that as a fraction of the total RTT in "real world" conditions (not localhost) b) with session tickets configured, do you see this increase consistently for the same client? c) would your users find it acceptable to hav
215.
by elithrar 9y ago
You're both half-right: the "standard" App Engine environment is "Python 2.7 only", via the link you just gave. The newer, flexible env (with less bullt-ins) does 3.x too.
216.
by elithrar 10y ago
You're exaggerating, right? Chrome isn't perfect, but pushing automatic updates, ongoing security improvements and UX (mixed content restrictions, marking plain HTTP "not secure", etc) are just two of the very user-frien
217.
by elithrar 10y ago
Not bad, but I found this questionable: > The other Password Hashing Competition finalists (Catena, Lyra2, Makwa, and yescrypt) These were promoted above PBKDF2; algorithms with few implementations. PBKDF2-HMAC-SHA-512 with sufficient it
218.
by elithrar 10y ago
Are you sure? Here's a real example: you can work as an electrician on a mine site here in Australia on a fly-in, fly-out ("FIFO") basis. Typical rosters are 11/3 (days on/off), 2/1 (weeks on/off), etc. Yo
219.
by elithrar 10y ago
If you go so far as to maintain a revocation store that is checked on each request, you might as well just use that same store for full-blown server-side sessions. By your measure, 1GB can store a lot of tokens in memory: 32B tokens + that
220.
by elithrar 10y ago
http://www.seriouseats.com/2015/09/pressure-cooker-recipes.h... is a great resource. The Texas chili is incredible: it's about ~10 mins of prep (saute beef; prep chilis), 30 mins under pressure and ~10 mins t
221.
From Vim to Visual Studio Code(elithrar.github.io)
3 points by elithrar 10y ago|0 comments
222.
by elithrar 10y ago
> I have a Nano I'm about to set up the same way and just leave it in my primary laptop permanently. Do I misunderstand the purpose of a Yubikey/U2F device here? Is not leaving it plugged in permanently effectively reducing the
223.
by elithrar 10y ago
Not escaping by default seems like a misfeature.
224.
by elithrar 10y ago
And even that presumes you want to actually encrypt data to the client: many (most) JWT users are just signing tokens, which makes an alternative to JWTs even simpler. token = data:expiry:hmac(key, data+expiry) is super simple in most l
225.
by elithrar 10y ago
(And doesn't support HTTP/2, so pick your poison)
226.
by elithrar 10y ago
> I basically got 0 value out it, considering I'm young and healthy I would not have to pay much for insurance, you're mostly footing the bill for the pensioners. Wait, what? What if you are diagnosed with a major illness? Are
227.
by elithrar 10y ago
> Privacy and security (and, secondarily, a full physical keyboard) was Blackberry's key differentiator before they lost to the touchscreen-enabled iPhone app ecosystem. Was it? Blackberry often co-operated to provide governments wi
228.
by elithrar 10y ago
> I have an (original) X100 and my only complaint is I wish it had more knobs and buttons A little OT: I held onto my X100 until the X100T landed because a better physical interface was a big deal to me: better buttons, the Q menu, the b
229.
by elithrar 10y ago
Monitoring? Updates? Shipping WAL logs and knowing a rollback will work when you need it?
230.
by elithrar 10y ago
Plus: lazy loading certs and the appropriate key management infrastructure to support it.
231.
by elithrar 10y ago
> You can invoice the company. It's not a big deal. Nonononono. You're hired as an employee. There is a legal and ethical agreement for them to pay you at the intervals agreed upon in your contract. There are no ifs or buts abo
232.
by elithrar 10y ago
I picked up Vue a couple of weeks ago for a small dashboard project where client-side makes total sense: consuming JSON from HTTP APIs. I'd previously played with Ember (good, but not using Ember Data feels punishing), looked at Riot (
233.
by elithrar 10y ago
> Vue version updates are tremendous time sinks. API thrashing was common from the original 0.x.x releases to 1.0.0 I didn't have to endure this, although pre-1.0 API breakage goes with the territory (of pre-1.0 software...). The 2.
234.
by elithrar 10y ago
> but let's not act like it's for serious photography. I (strongly) disagree. There is some incredible work on Instagram from (many) thousands of 'amateur' and professional photographers alike. "Serious photograp
235.
by elithrar 10y ago
> If you are at a construction site and a chain breaks and a beam falls on you, despite the best efforts of engineers to design the chain to hoist that load and the best practices of the foundry to forge the chain, that is an accident. I
236.
by elithrar 10y ago
> I know! That's why I am asking. I have found surprisingly difficult to find a package that does this. scrypt, with an output length that suits your use-case? (as Filippo points out) Note: I wrote https://github.com&#x2F
237.
by elithrar 10y ago
I don't think the Nest cameras (or others like them) are marketed at the same people who want* to set up their own VLANs, install software onto old laptops, and find a bespoke way to monitor the whole thing remotely. * Want meaning &#x
238.
by elithrar 10y ago
Nice write-up. Did you also look at Pin Payments ( https://pin.net.au/ )? Based out of Melbourne, IIRC.
239.
by elithrar 10y ago
Pat missed one bit: you need to head to about:config and set "security.tls.version.max" to 4.
240.
by elithrar 10y ago
> If that is indeed the case, I imagine it would make better sense to leave Touch ID disabled, unlike what this article suggests. It entirely depends on your threat model. If you are at hacker or tech conferences, TouchID is far better a

More ›