elithrar

29 ms·

241.
by elithrar 10y ago
> The first two steps took about 6 months and the final step about a year. That's quite lengthy (by the book): the LCA usually has a two-week turnaround. A nice perk is that it's also 'free' for the employer (there is
242.
by elithrar 10y ago
Vue reminds me of Ember, but with a few years worth of advantages: less legacy code, learnt from React's model, and more stable APIs over time. Progressively enhancing your site with Vue also seems a lot more straightforward.
243.
by elithrar 10y ago
1Password, at least, does not offer a 'remember master password' feature. I also configure it to auto-lock and auto-clear the clipboard on aggressive timeouts (I suspect other password managers allow for this too)
244.
Managing syscall Overhead with Go's crypto/rand(blog.sgmansfield.com)
1 points by elithrar 10y ago|0 comments
245.
by elithrar 10y ago
Focusing on the "50% planning" comment is wrong, and it's likely an exaggeration. What you should be asking is evidence of Swiss public works projects meeting time & budget constraints vs. projects in other countries, whi
246.
by elithrar 10y ago
I use this for some OSS projects I help maintain (symlinks in Dropbox, actual dirs on my GOPATH, etc.). The use-case for me is syncing between my laptop & desktop without having to remember to git pull everything before a flight/tr
247.
by elithrar 10y ago
Ethanol is about 70% of the energy density of Jet A-1: https://en.m.wikipedia.org/wiki/Energy_density
248.
by elithrar 11y ago
Distros backport security releases: e.g. Ubuntu 12.04 LTS (still supported) has nginx 1.1.19 ( http://packages.ubuntu.com/precise/nginx-full ).
249.
by elithrar 11y ago
I disagree—the guide is Beego centric, and Beego does some peculiar things[1]. I feel like I'm ragging on someone's hard work here, but I take web security seriously, and I want to make sure frameworks (which are attractive to new
250.
by elithrar 11y ago
Great to hear (I'd love to test; coming from Australia, the lack of chip+PIN here is worrisome! Final would cure a lot of that for me)
251.
by elithrar 11y ago
gorilla/sessions (for which I became a maintainer last year) has Redis/BoltDB/Postgres/etc. backends: the cookie stores an opaque ID, and all the data is in the server side store (allowing you forced expiration, etc). Co
252.
by elithrar 11y ago
A fix is unlikely—I raised an issue on this over a year ago and my recommendations were rebutted: https://github.com/astaxie/build-web-application-with-golang... Web apps/services should use gorilla/sessions[
253.
by elithrar 11y ago
It looks like that to me. I loved Final's ad (done by Sandwich Video) but they've been in "closed beta" for a long while.
254.
by elithrar 11y ago
You should reach out with a bug report: they're pretty responsive. Note that iOS will disconnect the VPN when the phone goes to sleep, however in iOS9+ you can force all traffic over the VPN (unlike earlier versions). The best feature
255.
by elithrar 11y ago
> iPhone data shouldn't be encrypted on the basis of a 4-digit PIN. It should have a much longer password that's entered at startup. As the iOS security documentation details, iOS uses a KDF to generate secure keys rather than
256.
by elithrar 11y ago
gRPC is great, but Instagram's client apps are web-based (using React now), and consuming protobuf in JavaScript is unlikely to be faster (and definitely not as convenient) vs. JSON. Given the limited resources of a lot of Android devi
257.
by elithrar 11y ago
> We saw app-wide impressions across all mobile platforms increase by 0.7%, and likes increase by 0.4%. This was driven by increases of impressions on all surfaces – for instance, “Explore Photos” impressions increased over 3%, and user
258.
by elithrar 11y ago
JSON is easier (faster) to parse on their client apps.
259.
by elithrar 11y ago
Avira is what we use (at a very security-conscious org), and it's been unobtrusive.
260.
by elithrar 11y ago
The cost to "make good" the sea floor is much cheaper than the cost to "make good" sidewalks, roadways, lobby community groups and pay contractors to pull fibre. Plus the cost to BP is likely worth it for the reliability
261.
by elithrar 11y ago
Note that they've said "soon" for a while, so don't hold your breath on this!
262.
by elithrar 11y ago
As of Go 1.5 (1.6, released last week, makes further improvements): > The "stop the world" phase of the collector will almost always be under 10 milliseconds and usually much less. https://golang.org/doc/go
263.
Vapor: a type-safe web framework for Swift(github.com)
200 points by elithrar 11y ago|70 comments
264.
Cisco ASA/Firewall CVE(tools.cisco.com)
3 points by elithrar 11y ago|0 comments
265.
by elithrar 11y ago
In most cases it should stay low too: your browser should retain a keep-alive to the web server, so you're not throwing away the connection. Future requests will auto-resolve due to caching of the 301.
266.
by elithrar 11y ago
> I've worked a sysadmin for more than 10 years now, and never realized that it's not possible to CNAME the domain root. It's good to keep in mind, but in most cases there are other workarounds. The common approach is call
267.
by elithrar 11y ago
Note that it's a web app using NW.js (like Electron) to turn it into a 'desktop' app. (Which I'm personally OK with for applications like this, where native gains may not be as big)
268.
by elithrar 11y ago
As of Go 1.6 the concurrent map access will also forcibly crash the program: https://tip.golang.org/doc/go1.6#runtime
269.
by elithrar 11y ago
`go build -a` rebuilds all packages (i.e. those already cached under $GOPATH/pkg/ or /vendor). Alternatively you can just rm -rf your `$GOPATH/pkg` directory.
270.
by elithrar 11y ago
> Looking at the argument though, even if it is a honeypot blowing it is a one-shot deal. One shot? Backdoor and reconstruct in parallel.

More ›