hdhzy

30 ms·

241.
by hdhzy 9y ago
I wonder what's the energy consumption of an average credit card transaction (including keeping the infrastructure, charge backs etc.)...
242.
by hdhzy 9y ago
Ha, Spec#... Good old times... It has interesting static design by contract constructs as well as tracking resource ownership (via [Claims] attribute) 13 years before Rust! [0] Yeah, I know it's mostly apples to oranges but with Bartok
243.
by hdhzy 9y ago
Yes, my point is that we're just throwing anecdotes here, picking examples that suit the augment. It's not proven than one model is better than the other, otherwise we'd all just use the best one and that's all. > you
244.
by hdhzy 9y ago
Well we are comparing apples and oranges here because this small open source repo most certainly have less people looking at it than Intel have engineers working on ME.
245.
by hdhzy 9y ago
Roy Fielding himself had an interesting interview [0] where versioning a REST API was one of the topics (spoilers: version is not in the url nor headers). [0]: https://www.infoq.com/articles/roy-fielding-on-versioning&#
246.
by hdhzy 9y ago
Currently? Lack of multiprocess tabs [0] and native U2F (available though third party addon, not on Android). Personally I also like how Google deals with Symantec issues. [0]: https://developer.mozilla.org/en-US/Firefo
247.
by hdhzy 9y ago
OSS is no silver bullet - you still have to do your due diligence to have secure system. OSS just gives you an option to "fix it yourself". Just recently I was reading a library and stumbled upon this interesting crypto tidbit [0]
248.
by hdhzy 9y ago
After years of using Chrome I tried Firefox just to try something different and to my surprise it's 90% as good as Chrome and even surpasses it in certain areas: - address bar history is better, Chrome wants you to google everything, n
249.
by hdhzy 9y ago
> There is 4096 bit support with Yubikey 4 which unfortunately isn't offered with NFC. Yes, but OTG adapters work pretty well here or one can use Yubikey 4C if the phone has USB-C input.
250.
by hdhzy 9y ago
> You can use something called Openkeychain on Android. It uses NFC Yubikeys for both PGP and SSH. Okay, but open-keychain does not provide GUI to just sign or authenticate a user (you can sign as part of encryption process) so I was won
251.
by hdhzy 9y ago
> U2F via NFC is a great way to authenticate on Android Unfortunately as far as I know only Yubikey NEO and Fidesmo card support it with Fidesmo being practically not usable. From https://www.fidesmo.com/nfc-u2f-android&#
252.
by hdhzy 9y ago
How do you authenticate through NFC PGP on Android? Is that something specific to your company or is there a public app that you're using?
253.
by hdhzy 9y ago
Sadly there is no NFC token that supports 4096 bit RSA keys (I'm not even talking about EC keys). Fidesmo also has support for PGP/U2F over NFC.
254.
by hdhzy 9y ago
This looks very polished. If only every MVP had such a good UX/design. Personally my calendar with contact notes work pretty well so I won't be using Monica but it was a pleasure trying it out.
255.
by hdhzy 9y ago
Out of curiosity: what kind of automation? Signing artifacts?
256.
by hdhzy 9y ago
Pass [0] is also incredibly useful. Also Facebook and many Bitcoin exchanges can PGP encrypt sent emails. [0]: https://www.passwordstore.org/
257.
by hdhzy 9y ago
Yep, this discussion about DNSSEC happens here from time to time usually with the same arguments. Once Chrome even supported DANE certs for domains but deprecated it for I think performance reasons: > Some years ago now, Chrome did an ex
258.
by hdhzy 9y ago
And that, ladies and gentlemen, is why DNSSEC is a really terrible idea... That's what tptacek would've said, I guess. But seriously, having such a weak security for something so fundamental as name server scares me out.
259.
by hdhzy 9y ago
Blockchain's function is only to prevent double spend. Note that addresses are just a virtual term, in reality when you send money to an address you are setting up a "lock" (predicate) that can be unlocked only by a private k
260.
by hdhzy 9y ago
Very cool. This could be used to implement offline wallet with minimal amount of third party code. One issue I'd like to point is I wish the author used proper random generated private key. Examples on the internet have a nasty habits
261.
by hdhzy 9y ago
Oh yes, exactly! I wonder why for of was not mentioned in the article...
262.
by hdhzy 9y ago
Both of them are really good :)
263.
by hdhzy 9y ago
Well if you're comparing for loop to reduce or map in JavaScript then for will always win as it is a built in language construct and reduce involves costly callbacks. Interesting that the difference is only 7% on my Chrome for Android
264.
by hdhzy 9y ago
JSON-LD is RDF. Or rather is what RDF would look like if it was serialized in JSON instead of XML. If you look from the Semantic Web angle JSON-LD is just a serialization format, like e.g. Turtle, but using JSON as JSON is popular nowadays.
265.
by hdhzy 9y ago
Domain displayed is no real protection, actually its weakness is what drives phishing. But the link you provided contains some interesting info: > How SQRL changes things > When using SQRL, users do not identify and authenticate thems
266.
by hdhzy 9y ago
> who, as part of a company's security team, had set up a system that continually attacked the hashes of every employee's Active Directory passwords. On the other hand of you are not part of the security team something like t
267.
by hdhzy 9y ago
I think the classic book from Dr LaBerge [0] is quite good (although dated). Lucid dreaming itself is a researched subject and there are a lot of material on that but the simplest techniques as keeping a dream journal (writing what you drea
268.
by hdhzy 9y ago
Was it a double blind controlled study? But seriously, I don't see a link to the paper...
269.
by hdhzy 9y ago
> As one concrete example, Netscape's SSL implementation was originally shipped in two versions - the 'secure' US version, and a severely compromised international download version, due to export controls on the encryption
270.
One-time pad(en.wikipedia.org)
2 points by hdhzy 9y ago|0 comments

More ›