est

40 ms·

721.
by est 2y ago
> It's disappointing to see GitHub calling it a feature instead of a bug git is a "distributed" version control software afterall. It means a peer can't control everything.
722.
by est 2y ago
> The regulation requires controls lobbied by the same security company
723.
by est 2y ago
ahh, I remember someone on HN commented that screenshot is the defacto standard of "hypermedia"
724.
by est 2y ago
GraphQL is painful. I am thinking some SQL but with more access control would be better.
725.
by est 2y ago
> your incorrect statements about it, and rather than admit the mistake Hey man you don't have to be so aggressive. I was asking a question "is it secure?" or "are there any pitfalls?" If it's not secure the
726.
by est 2y ago
ahh yes. The wordpad.exe shipped with every Windows. I wonder why not make improvements upon that.
727.
by est 2y ago
Deps in CPython are more about .so/.dll problem, not much can be done since stuff happens outside python itself.
728.
by est 2y ago
IIRC there was a writepad.exe, no?
729.
by est 2y ago
I recommend Rye because of its python bianries (credit to Indygreg). What a time saver!
730.
by est 2y ago
yeah this is the reason I don't understand the "lite-youtube-embed" project. A simple one-liner would be much better.
731.
by est 2y ago
there's a difference between: 1. hack into any account then call it a win 2. hack into a specific target account for a win idk man. Maybe for some systems #1 is important. The goal is to replace passwords. So TOTP is is about as secure
732.
by est 2y ago
> Your suggested countermeasure does not do anything to change those odds. Actually it does change. Even if you hit the exact correct TOTP code, the system still deny your login because of throttle rules and you can't tell on the cl
733.
by est 2y ago
> a 1 in 1 million chance of guessing right That's assuming there's no throttle of login requests and all authentication were made under one minute against one single user.
734.
by est 2y ago
OK I kinda get what author is trying to say here. In the first screenshot, "were the Project Managers technical", the asker means "does the PMs understand technical details" Then the author argues that marketing, sales,
735.
by est 2y ago
it's about same chance of trying to login all usernames with password 123456 no? An easy counter-measure would be blocking consecutive TOTP logins of the same or similar codes.
736.
by est 2y ago
offtopic, is it secure to design a login that only requires username+TOTP? This elimilates passwords altogether, but are there any pitfalls?
737.
by est 2y ago
> Professor Woan used a technique called Bayesian analysis, which uses probability to quantify uncertainty based on incomplete data, to calculate the likely number of holes in the mechanism using the positions of the surviving holes and
738.
by est 2y ago
> parallel downloads, retries, following redirects There's aria2
739.
by est 2y ago
> serves everything from a .gzip file Could this make you feel better?
740.
by est 2y ago
first time I've heard of harfbuzz. So we could expect latex.ttf very soon?
741.
by est 2y ago
SPA shouldn't be used for content heavy web pages anyway. SPAs today especially React were basically like Facebook's engineers decided to write js/css/html in the style of php.
742.
by est 2y ago
encryption was expensive in GSM days. People seem to forget that dedicated TLS acceleration hardware was a thing not long ago.
743.
by est 2y ago
off topic, is there any UI framework like htmx where you don't need a huge pile of npm to work with? Is bootstrap still the go-to option?
744.
by est 2y ago
Looks like an alternate way of ORM with http handling. Where's the next-gen part?
745.
by est 2y ago
> The shells in my paper consist of a thin inner layer of positive mass and a thin outer layer of negative mass; the total mass of both layers—which is all one could measure, mass-wise—is exactly zero, but when a star lies on this shell
746.
by est 2y ago
no penalize, just forward the tty to a honeypot and waste the attacker's time. Any login would pass, but you have to figure out if the shell is real.
747.
by est 2y ago
That's so cool, I wonder if this can be pulled off on web pages? Non fixed width font would fail all over the places with quirks of css.
748.
by est 2y ago
today's e-ink displays could provide some sort of color, can anyone tweak the color for coding friendly so we can use it in editor or terminal? Just 8 colors would be sufficient for most programming tasks.
749.
by est 2y ago
google.com gave me a 302 and stripped the udm=14 part. Is this intentional?
750.
by est 2y ago
Looks like we also need an aggregation standard for this. Maybe bsky or something?

More ›