Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
jbri
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
42 ms
·
211.
▲
by
jbri
15y ago
Rather than "powered flight", it might be better to talk about "heavier-than-air flight". If you used this concept to create a shell around a neutrally bouyant blimp, then you could (in theory) move it through the air without at all disturb
212.
▲
by
jbri
15y ago
The issue is that once your users figure out the system, they'll always "forget" what their password was once it's getting around to expiring.
213.
▲
by
jbri
15y ago
The universe is (as far as we know) far larger than that. The thing is that it's literally impossible for us to interact with the parts of it outside one particular sphere. Additionally, the universe is not expanding from one point - every
214.
▲
by
jbri
15y ago
Which is why, as I mentioned, you don't store the biometrics . You don't even send them to the remote service. Hash + Salt on the client, submit the result. Unique salt for each remote service, and you can change it for a particular remote
215.
▲
by
jbri
15y ago
Actually, while the write itself is generally atomic, most systems don't guarantee that the entire increment operation is (for performance reasons). And since abort still needs to work even without locks and on every platform...
216.
▲
by
jbri
15y ago
The real security benefit, I guess, is that people don't need to remember any passwords. The biggest weakness of password schemes is that most people choose weak passwords that they can remember, rather than strong passwords. If you could
217.
▲
by
jbri
15y ago
Ideally, you wouldn't store the iris fingerprint itself - that's just as bad as storing a cleartext password today. Rather, a good solution would involve deriving a (site-specific) token from the fingerprint and handing it off to the remote
218.
▲
by
jbri
15y ago
The fact it's not "just another game" is part of the point, really.
219.
▲
by
jbri
15y ago
It doesn't. If you write anything to the non-hidden volume while you don't have the hidden volume mounted, you risk overwriting part of the hidden volume.
220.
▲
by
jbri
15y ago
Incidentally, I could make a very effective denial-of-service attack by putting a high-voltage battery inside what appears to be a USB stick. And no software is going to protect you from the results of massively overvolting sensitive electr
221.
▲
by
jbri
15y ago
And what if you've plugged in a USB keyboard at the same time as that drive? And that USB keyboard has said "hey yes I want to run the software on this drive"?
222.
▲
by
jbri
15y ago
When you're dealing with a malicious attacker, you can't assume that they're playing by the rules. All an attacker would have to do is find the ID of a device that you have used in the past.
223.
▲
by
jbri
15y ago
It's somewhat sad to see the shuttles go, especially without a replacement immediately to hand. Though hopefully the end up the shuttle program will pave the way for a manned launch vehicle that can get us out of LEO.
224.
▲
by
jbri
15y ago
The comment I was responding to: > How is this different than us dollars in cash ? Electronic forms of currency are not "cash".
225.
▲
by
jbri
15y ago
Bitcoin doesn't require you to transfer a piece of physical property to whoever you want to give it to.
226.
▲
by
jbri
15y ago
Where else would you store the salt? If you're storing it in a place more secure than where you're storing the password hashes, why not store the password hashes there in the first place?
227.
▲
by
jbri
15y ago
scan is similar to fold - except instead of the result being the final value, it's a list of all the intermediate values up to the final one (if it exists - scanl is productive and can handle infinite lists just fine). So the first fibonacc
228.
▲
by
jbri
15y ago
My personal favourite Haskell one-liner is using scan for the fibonacci sequence: fibs = 1 : scanl (+) 1 fibs
229.
▲
by
jbri
15y ago
Often you get things like images that have had text added to them (e.g. I often use tineye to find the original source image that someone has added a caption to), which means that the thumbnails will differ to some degree.
230.
▲
by
jbri
15y ago
Ironically, the vast majority of "improvements" listed in the post (everything except using scasd) are algorithmic ones that are in fact doable in a compiled language. And even special machine instructions seem quite achievable with a pat
231.
▲
by
jbri
15y ago
Personally, I would expect the opposite - the optimizer doing a lot of work on optimization passes that have minimal effect on one particular architecture. Remember that the optimizer is working on a generic intermediate form - as long as t
232.
▲
by
jbri
15y ago
> still the question is, what exactly qualifies as "personal information", many seemingly irrelevant things can be used to identify you, login ip addresses, session ids, login frequency, Its a term with holes the size of Montana. "Per
233.
▲
by
jbri
15y ago
> Length of data store: under what circumstances is what data stored, performance data, explict user data, all data, some subset of personal information, access logs, and for how long? Note that everything in the article is about pers
234.
▲
by
jbri
15y ago
I honestly don't see how "length of time data is stored", "whether or not data is sold to third parties", "whether or not data is shared with advertisers", and "whether or not data is shared with law enforcement when not legally required" l
235.
▲
by
jbri
15y ago
> and it doesn't only happen to idiots who stuff their drives with porn. Instead, it only happens to people who don't keep their browser up to date so that it's actually vulnerable to drive-by downloads. Right?
236.
▲
by
jbri
15y ago
It's not a proper balance unless it has provisions to dissuade those who misuse the process. "Lol our bad" and putting it back up, with no compensation for that downtime or penalty for false accusations doesn't actually do anything.
237.
▲
by
jbri
15y ago
Suggestion: Allow contributors to automatically donate their earnings to a charity. Much easier for minor contributors than collecting their individual payout and donating it themselves, probably more efficient for the charity as well (sinc
238.
▲
by
jbri
15y ago
Deciding whether to use "a" or "an" should be made based on the first sound of the next word as spoken, not on the first letter as written.
239.
▲
by
jbri
15y ago
The author makes the quote: > Whenever you find yourself starting a sentence with, "I don't want people to pirate my game, so I am going to ..." you are very close to making a big mistake. Which is absolutely 100% correct. Because you
240.
▲
by
jbri
15y ago
What about taking money from those who haven't earned it and giving it to those who need it?
More ›