kej

70 ms·

751.
by kej 11y ago
> The only obstacle to NSA running amok through the data is having to say "please" to the telecom companies first. The obstacle to the NSA running amok is that this bill drastically reduces what's covered by a specific sel
752.
by kej 11y ago
Assuming you have typical HN leanings, this bill is a qualified good thing. It ends the NSA bulk metadata collection, but keeps less controversial things like roving wiretaps.
753.
by kej 11y ago
Since I browse, search, and watch videos on my phone, they have a decent amount of that information. But where Google will correlate all of that data in order to show me advertisements, Verizon will modify my traffic to make me more trackab
754.
by kej 11y ago
I was creeped out at first, but then I realized that Verizon already has all the same data, and I trust Google way more than I trust Verizon.
755.
by kej 11y ago
>Unlike a traditional IDE, each tool is self contained and can be used on its own. Neat tools, but this is literally the opposite of an IDE.
756.
by kej 11y ago
It will gradually catch all registrars as they renew their ICANN accreditation.
757.
by kej 11y ago
The technical previews have offered an upgrade option, but that's not guarantee it will be included in the final version. Either way, it's almost always better to do a full reinstall for a major version like this.
758.
by kej 12y ago
>Seems like it would still be easiest to just get comfortable writing and reading in the style gofmt produces. That's the entire point of gofmt. Like many of Go's design choices, it's there to subtly (or not so subtly) enc
759.
by kej 12y ago
Probably overkill, but you could get a similar effect with a high resolution projector aimed at the map. Light up certain spots with color, and leave the rest black.
760.
by kej 12y ago
I like this puzzle because it's the same train of thought as this old joke: Three logicians walk into a bar. The bartender asks "Do you each want a drink?" The first logician says "I don't know." The second say
761.
by kej 12y ago
A self-signed cert says "I claim to be example.com", while a signed cert says "I claim to be example.com and I previously convinced someone else that I was example.com, too." It's certainly not perfect, but it is a
762.
by kej 12y ago
How do you check the difference between your self-signed cert for your site and my self-signed cert for your site?
763.
by kej 12y ago
Windows XP doesn't support SNI, which means browsers that depend on the OS for SSL/TLS can't handle those sites.
764.
by kej 12y ago
The fun part is that there will be new things to learn about how numbers work after a single day and after a decade.
765.
by kej 12y ago
That would be Governor John Hickenlooper, http://www.colorado.gov/governor/
766.
by kej 12y ago
It's interesting what a short window there is for some of these ideas.
767.
by kej 12y ago
The main problem (barring some fancy and probably patented new techniques) is that whatever gets sent over the wire from the client is a de facto cleartext password. If your system does the hashing client side and then stores that, an attac
768.
by kej 12y ago
You want to assume that the attacker has the implementation details, but not the associated secret. Assume that the attacker has a stolen copy of the login database with usernames and hashed passwords, and a copy of the login code (preten
769.
by kej 12y ago
>For the Raspberry Pi server we decided to write some Python using Tornado and instead of using an HTTP like API - HTTP and APIs built on it using REST etc are in my opinion often used too often when plain old sockets will do the job! -
770.
by kej 12y ago
Wikipedia suggests the English-reading Chinese population is in the hundreds of millions (much higher than the English- speaking Chinese population), and I would guess that group overlaps quite a bit with Baidu users.
771.
by kej 12y ago
Wouldn't this argument preclude using anything new, ever? Don't use C++14 until all of your code is converted to use it. Don't touch ES6 until you throw out your legacy JavaScript. Some of these programs haven't been upd
772.
by kej 12y ago
The problem isn't extended characters in your Python script, it's how your Python script handles extended character data . Scripts written in Python 2 that ignore the existence of Unicode won't always do the right thing when
773.
by kej 12y ago
You can use base 64 with a URL-safe alphabet, as specified in RFC 4648: http://tools.ietf.org/html/rfc4648#page-7
774.
by kej 12y ago
That still leaves the problem of sending internal data to outside parties. The accountants may be fine with the programming help, IT certainly shouldn't be.
775.
by kej 12y ago
It wouldn't matter if this was covered or not. Their license is saying that you can use their stuff as long as you don't question any of their patents.
776.
by kej 12y ago
Why would the state want to take on the complexity of dealing with the situation you described, just to encourage "currency competition"?
777.
by kej 12y ago
There's a great chapter about Feynman's role in the investigation in Surely You're Joking, Mr. Feynman . It gives some insight into the process of investigating something like this that isn't always apparent in the repo
778.
by kej 12y ago
It would be nice to be able to remove entries from the recently accessed key phrase list, and maybe there should be an option when creating a text to not let it be stored in the history, so it has to be typed in each time.
779.
by kej 12y ago
Oh, I definitely do. I was just trying to say that Verisign could already do a similar attack even without DANE. As controllers of .com they could easily redirect example.com to an evil server, and as a root CA they could give the evil serv
780.
by kej 12y ago
Verisign controls .com and is on pretty much every root CA list, so they can do what you describe today, no DANE required.

More ›