eneveu

24 ms·

181.
by eneveu 15y ago
I like Alex's concept of "sponge learning" and reducing "unknown unknowns". I've actually been doing this unconsciously for quite a while. Let's say there is a debate about the best VPS provider on the HN front page. I have no need for a VP
182.
by eneveu 15y ago
Same here. They seem to solve a problem I personally have. Currently, I use emails (sent from my phone) to "remember" what I owe people and what they owe me, but it's kind of annoying. I also thought about building an Android app, but I thi
183.
by eneveu 15y ago
For a list of the Google products that use GWT, there is this recent discussion in the GWT Google Group: http://groups.google.com/group/google-web-toolkit/browse_thr...
184.
by eneveu 15y ago
That's interesting. I've done my fair share of GWT development, and I didn't know about this, so I tried to find more info. I've searched through the GWT source code, and I found no mention of the closure library (closure tools / closure co
185.
by eneveu 15y ago
Regarding your question on the differences between bcrypt and iterated SHA-2, I think it's better if I link to comments by crypto / security experts: http://news.ycombinator.com/item?id=1091465 > the only argument i've heard is that
186.
by eneveu 15y ago
I just thought about another reason why bcrypt might be more useful for a web app than for hashing OS passwords: - when a webapp loses its user table, the devs will be responsible for compromising thousands of password (which user often re-
187.
by eneveu 15y ago
Wow, people from the Green Party really consider Google evil? I wonder what they would say, were Google not to invest in renewable energy, and in reducing energy consumption * ... I can see how some people might be concerned about privacy,
188.
by eneveu 15y ago
Google generates a lot of good will in the developer community: lots of open source projects, Google Summer of Code, free hardware at developer conferences, Google tech talks, hacker "jokes"... I don't know if this is a deliberate strategy,
189.
by eneveu 15y ago
Facebook indeed has similar features. But we should not simply compare features when comparing social platforms. Philippe Beaudoin made a very insightful post about this: "For a social platform, the implication of turning a feature into a
190.
Writing useful JavaScript applications in less than half the size of jQuery(blog.bolinfest.com)
1 points by eneveu 15y ago|0 comments
191.
by eneveu 15y ago
This is just the beginning... I bet we'll soon see Facebook's own "Circles" feature. As I wrote two days ago ( http://news.ycombinator.com/item?id=2707775 ), Paul Adams, previously social research lead in the Google UX team, left Google f
192.
by eneveu 15y ago
DISCLAIMER: I'm a web developer, not a cryptographer. I've had a passing interest in cryptography for the last few months, but I've never worked in the field. I learned about it by reading Cryptography Engineering (great book) and various
193.
by eneveu 15y ago
That's not what I said. Some amount of secrecy might better than none. But, you should not depend on it. If you use a "clever" scheme to store / generate your salt, you make your system more complex in an attempt to hide something that do
194.
by eneveu 15y ago
This. Also, tptacek made a few interesting comments about client-side cryptography: http://news.ycombinator.com/item?id=1755713 http://news.ycombinator.com/item?id=1756394 http://news.ycombinator.com/item?id=1001007 http://news.ycomb
195.
by eneveu 15y ago
Many developers need to read and understand this. It is far from mainstream knowledge... The other day, I saw the following post about password hashing in my RSS feed: http://isc.sans.org/diary.html?storyid=11110 - No mention of bcrypt (t
196.
by eneveu 15y ago
A friend invited me using this exact "loophole", and I used it to successfully invite a few friends. Google+ is spreading virally in my social network, despite Google's attempts to limit the number of users :)
197.
by eneveu 15y ago
PROTIP to invite your friends: Post something in your "feed", and "target" them, entering their email address. They will receive an email telling them about your post. When clicking the link to view the post, they will be prompted to regist
198.
by eneveu 15y ago
There may be some glitches, but I'm actually grateful for the ability to log into multiple accounts at the same time. I still remember, one year ago, the headaches of logging out / logging in all the time (or using an Incognito tab)... Goog
199.
by eneveu 15y ago
Paul Adams, the previous social research lead in the Google UX team, explained why context matters in this very interesting presentation (12 months old!): http://www.slideshare.net/padday/the-real-life-social-networ... (discussed at http
200.
by eneveu 15y ago
That's were relative URLs without a scheme come in handy, e.g. "//www.example.com/example_file.js" If the current page is served over https, it will load scripts using https. If it's served over http, it will use http. http://stackoverflow
201.
by eneveu 15y ago
I've also activated two-factor authentication, and I don't think the drawback he mentions are that problematic: This indeed increases security, but tends to be a bit cumbersome (I often have a depleted battery, for example, which could pre
202.
by eneveu 15y ago
I couldn't access the paper itself, but the excerpts are indeed interesting. Another disadvantage of using a Garbage collector, is that it's hard to predict when the JVM will "freeze" to collect garbage memory. This makes standard Java rela
203.
by eneveu 15y ago
When you use gcj, you lose the benefits of JIT compilation and other such optimizations. This is why gcj might be slower than Oracle's JVM / OpenJDK. But I can see how compiling a simple program with gcj could make it faster.
204.
by eneveu 15y ago
Java is indeed slow to start. So slow, in fact, that Maven created a "Maven Shell" project to avoid re-launching a JVM for each build: http://shell.sonatype.org/ More details: http://ericmiles.wordpress.com/2010/03/23/intro-to-maven-she.
205.
by eneveu 15y ago
Funny coincidence. I've just started reading "Daemon", the technotriller by Daniel Suarez. Great book so far (currently around page 130). I usually only read while commuting (2 hours / day), but this book is so exciting, I found myself read
206.
by eneveu 15y ago
I got into a debate on StackOverflow over bcrypt vs salted SHA1: http://stackoverflow.com/questions/3722780/do-any-security-e... I think I'm right in choosing bcrypt, but one interesting argument against it was that, being slower, it woul
207.
by eneveu 15y ago
I think Thomas was simplifying rainbow tables in his post, to make it more understandable. In practice, you wouldn't use all combination of alphanumerics. You would use a dictionary. This greatly restricts the search space. http://en.wik
208.
by eneveu 15y ago
What you are referring to is called "stretching". It's a lot better than a simple salted hash, but bcrypt would still be better. I'm no crypto expert, but I think this is due to the way bcrypt was designed, and their use of a pessimized Blo
209.
by eneveu 15y ago
Seems like you were hellbanned... More info at http://news.ycombinator.com/item?id=2619641 (especially ck2's comment and the responses)
210.
by eneveu 15y ago
Tell that to the business executives and the marketing departments :) I also prefer plain text, but I'd rather have useful tools to deal with the needs of the business, while offering plain-text as an option for people who prefer it.

More ›