er4hn

28 ms·

301.
by er4hn 5y ago
Fun for VLC, a series of sharp edges for openssl
302.
by er4hn 5y ago
Not related to the post, but the owner of this blog also makes small CS zines that act as cheat sheets for common tools: https://wizardzines.com/ . They're small and cute and make good tech stocking stuffers.
303.
by er4hn 5y ago
To be followed up by "WhatsApp" rebranding to "What's Facebook" and "Oculus" to "Facebook Live 360".
304.
by er4hn 5y ago
Oh wonderful. Can I finally have something to explain non trivial Nix expressions to me? Love the ideas behind Nix, loathe the syntax.
305.
by er4hn 5y ago
The date of the commit is metadata which can be pushed later than it was made or even altered. If you look around you can find cute tools to alter your repo history and have the github commit history graph act as a pixelated billboard.
306.
by er4hn 5y ago
Starlink satalites know where they are serving, geographically. Wouldn't they just comply with local laws or risk having their ability to do business in that region disrupted?
307.
by er4hn 5y ago
Telegram, as I understand it, can access your messages when stored in their Cloud[1]. They just make a choice to not provide the content of those to anyone. [1] - https://telegram.org/privacy#4-1-storing-data
308.
by er4hn 5y ago
Inertia and other standards are a big force here. The NIST standards recommending this (SP 800-63B I believe, under "memorized secrets") came out in around 2017, many years after large companies had settled on prior standards. Pri
309.
by er4hn 5y ago
On the plus side, it also gave you plausible deniability it really was you if you wanted to do something illegal or unethical.
310.
by er4hn 5y ago
> Has this ever happened? Unfortunately this has: https://www.wired.com/2015/12/researchers-solve-the-juniper-... While the full results were not released, it was pretty clear that a rogue commit happened to th
311.
by er4hn 5y ago
It's really neat that ssh keys can be used for signing commits, but I'm not a big fan of this. When auditing a source repository you want to see how commits are signed over time. In other words you have a key X which is valid at t
312.
by er4hn 5y ago
> also being a parent in tech allows people to deal much better with the toddler tantrums/playground fights that seem to be common in this industry. An insight that comes from a place of being forced to be more mature yourself. Well
313.
by er4hn 5y ago
I think the problem is that the dislike count itself is too aggregated. What you really want is to know if people similar to yourself like / dislike certain content. This is very similar to the problems where YouTube fits you into filt
314.
by er4hn 5y ago
Thanks for the rec. Their music has a pretty laid back vibe. I think the categories overall capture a lot of categories. It would be nice to see parks and what you can do in them (i.e. basketball court, kids play structure, hiking trails, e
315.
by er4hn 5y ago
> Gather more upvotes from every viewer using best-practice microservices. Pretty sure this just told me the secret to securing HN Karma.
316.
by er4hn 5y ago
The NSA does a lot of things, many of them in opposition to other internal departments. The problem is that you don't know the agenda of each team there, sometimes for decades.
317.
by er4hn 5y ago
Congrats! It's amazing to finish an MVP. What event will you be going to now that you surfaced it in your app? I clicked around a little... I notice that Los Angeles, when you choose Meetups, displays events in other places like Norwal
318.
by er4hn 5y ago
I'd say that this is closer to when "the cloud" came about. No one was quite sure what it was, but everyone wanted in. To quote (some) of Larry Ellisons famous statements about it: "The interesting thing about cloud comp
319.
by er4hn 5y ago
It's a concern for private industry as well. The solarwinds and other recent supply chain attack involved injecting additional code into a build environment. Reproducible builds could have been done in multiple places as an auditing me
320.
by er4hn 5y ago
I'd love if you could elaborate on your thoughts for 3. Is it a problem of not being feature complete in unpopular parts of the stdlib?
321.
by er4hn 5y ago
Funny enough, this was a source of much criticism for OpenSSL as well, at least in the 1.0x series.
322.
by er4hn 5y ago
> In person, we automatically recognize and modulate such situations; even when we find someone's views abhorrent, we're more willing to take into account their different background, realize they're not working with the sa
323.
by er4hn 5y ago
I'd argue that is a benefit. Imagine if people took Twitter and the Twitverse less seriously
324.
by er4hn 5y ago
Taking the chance to plug my favorite: Heat Signature. It's by the same author as Gunpoint and is best described as "procedurally generated Hotline Miami in space". Each "round"of action is typically 3 minutes or le
325.
by er4hn 5y ago
Does anyone have any suggestions for a physical token that they can use for both WebAuthN and gpg signatures? Would be great to hear stories from people who have put the equipment "through its paces" so to say :)
326.
by er4hn 5y ago
> Um, WTF? Can you flesh this out at all? Ha, sure. Let's say that you have a very-basic NoSql schema for a chat app: chat_app/person/<person id>/msgs/<chat documents> so for each <person id> yo
327.
by er4hn 5y ago
I feel like I'm missing something in this article. Several of the points just don't make any sense to me. * Their point about how you can just rewrite relational queries manually and not lose any performance does not seem true the
328.
by er4hn 5y ago
One of the use cases for RxDb is "local first" data. Rather than spend time doing roundtrips to a remote server for each piece of data, store the database locally on the client and keep the local/remote in sync.
329.
by er4hn 5y ago
I don't necessarily trust the NSA, things like DUAL EC DRBG are an excellent reason why. However the govt standards for cryptography to use are known as FIPS 140. These standards are made by NIST, which has the NSA either heavily own o
330.
by er4hn 5y ago
That's because wireguard uses non FIPS 140 compliant algorithms. What would be really interesting is if the NSA told us their thoughts on the wireguard algos.

More ›