gcommer

13 ms·

91.
by gcommer 10y ago
If you're willing to delve into the fun world of CRLs you can sorta do it. This isn't truly stateless of course, but for some design constraints it could be "practically" stateless since you're eliminating auth serv
92.
by gcommer 10y ago
I went through building a home network recently. I went into the project planning to build my own pfsense box, but after researching it I decided that I couldn't piece together a custom solution that would both fit my needs and beat an
93.
by gcommer 10y ago
The benchmarking scripts are in their repo: this line seems to answer your question: ("inferschema" was turned on, probably to make it an apples-to-apples comparison since static schemas is still on their TODO) https://
94.
by gcommer 10y ago
Alternatively he could've just read about prior NSA whistleblowers (like Binnie and others) who tried to blow the whistle on many of the same issues more quietly and instead of being able to keep fighting for the Constitution, they got
95.
by gcommer 11y ago
I use commit amends (`git commit -a`) for continually updating these pseudo-stash commits.
96.
by gcommer 11y ago
Wait, what? The 4 paragraphs you quoted seem to directly answer your question about how Powell and HRC acted differently ("Clinton never had such a desktop or a classified email account, according to the State Department.") Also,
97.
by gcommer 11y ago
I agree with your big picture, but I think point 1 is giving too much importance to HTML. You can have proper separation of M, V and C whether your HTML output is defined in a dedicated template file or in a .js file. At a high enough level
98.
by gcommer 11y ago
> Do you really use one editor for everything? Yes, at least whenever possible. > I think if I spent all day every day in one environment, I would get bored. The opposite perspective: It's extremely frustrating constantly switchi
99.
by gcommer 11y ago
FWIW, this hardcoded "prime" was only in use since 2015 (though before that, it was 512 bits)
100.
by gcommer 11y ago
Well, socat has a git repo at git://repo.or.cz/socat.git so you can see the history of the prime number. In particular, it was upgraded from a 512 bit prime to a 1024 bit "prime" in commit 281d1bd on Jan 23, 2015. N
101.
by gcommer 11y ago
> it works with W3C standards instead of going off on a tangent and hacking the DOM entirely While this sounds good on the surface (standards!) I think it is missing part the bigger picture. React, and more generally, the whole ecosystem
102.
by gcommer 11y ago
On the other hand, Facebook being built on PHP meant they eventually felt the need to dedicate significant engineering time into building their own PHP VM (HHVM) along with their own spin-off of the PHP language (Hack) to get it to work for
103.
by gcommer 11y ago
The root servers get large traffic spikes quite routinely, this event was simply an order of magnitude or more larger than any previous events (AFAIK). Also, it actually managed to DoS a few instances, by way of saturating their throughput-
104.
by gcommer 11y ago
It is, way too many ISPs still don't filter packets with obviously spoofed IP addresses. That said, even if the attackers in this event didn't spoof the IP address, they would almost certainly have still had a very wide distributi
105.
by gcommer 11y ago
I could care less about their being a third party--we already have that with the search bar (and it's been promised that Pocket integration was just a step towards a more general Reading list API, though I don't know how well that
106.
by gcommer 11y ago
This makes even less sense... I also assumed the Pocket integration was a paid placement, in which case I was fine having to spend the time removing the button and disabling it in about:config, since I saw it as a cost of actively developed
107.
by gcommer 12y ago
Assuming the attacker is indeed China: If the goal was only to block Greatfire for non-VPN users, then they could just use the GFW for that from the start. The use of a DDoS can only imply that China wants the site offline for everyone, eve
108.
by gcommer 12y ago
I've read multiple independent audits of the LastPass client (such as http://www.martinvigo.com/a-look-into-lastpass/ ) that haven't found any major issues, and for the issues they do find the LastPass team ha
109.
by gcommer 12y ago
I think that argument would affect many desktop password managers as well. Also, LastPass in particular supports a Firefox extension that works with Firefox mobile.
110.
by gcommer 12y ago
SSL interceptors are typically marketed for corporate use, where the company installs a Root CA certificate into it's employee's computers (the company owns the computers after all). Nothing illegal about a company modifying a com
111.
by gcommer 12y ago
More detailed information from erratasec: http://blog.erratasec.com/2015/02/extracting-superfish-certi... With HN discussion here: https://news.ycombinator.com/item?id=9074110
112.
by gcommer 12y ago
Any external DAC will eliminate this for you.
113.
by gcommer 12y ago
You are completely assuming that everyone who wants to program is intending to do so professionally, or that they won't be able to grow from a basic intro of "here is how to present your thoughts programmatically" and then co
114.
by gcommer 12y ago
Do note that the author is not a Professor teaching CS. If you click through the link in the first sentence of the post, this is the question he was trying to answer: "What's a good first programming language to teach my [son &#x2
115.
by gcommer 12y ago
In case anyone hasn't heard of it, Asm.JS is basically trying to turn JavaScript into a similar standard. Combine that with sourcemaps in browser debugger tools and we're really close. I've been using clojurescript recently,
116.
by gcommer 12y ago
Teaching intro programming courses with "parse a CSV file" or "implement a text based calculator" is outdated. Modern students have grown up with smart phones and are used to being able to click around and have the compu
117.
by gcommer 12y ago
I am not a lawyer, but as long as your local laws do not prohibit you from pinging a given IPv4 address, then I can't imagine any issues. Being technically legal doens't mean you won't step on some toes though. Everyone who r
118.
by gcommer 12y ago
I use NoScript and RequestPolicy for full white listing functionality in Firefox.
119.
by gcommer 12y ago
None of the images show the other side of the board, but unless every trace is visible, it will be difficult to non-destructively inspect. If its only a 2 layer board then this just means scratching off the white silkscreen, which wouldn&#x
120.
by gcommer 12y ago
The 60x cheaper benchmark is based on hardware costs, comparing 6 EC2 nodes (they say ~$20k worth of servers) vs a > $million Oracle server.

More ›