kevincox

33 ms·

661.
by kevincox 2y ago
I ran into this. I'm trying to set up an account on wise.com. The way they want me to set up my bank for direct deposit is to type my banks password into their site! I asked support if there was any other way to do this (for example th
662.
by kevincox 2y ago
The freedom that text provides is not a blessing and a curse. Even small things like adding "paragraph break" lines in a run of code can make it more readable. Of course you can encode a limited number of these "style" f
663.
by kevincox 2y ago
I believe that JVM bytecode is too low level for a source format. At the very least you would need to preserve some form of comments. Also I think JVM locals lose their names during compilation.
664.
by kevincox 2y ago
I'm unlikely to. But the Apache 2.0 source is here. Seems like it should still fairly easy to convert as all of the work happens in a content script. https://github.com/kevincox/youtube-e2l/
665.
by kevincox 2y ago
Back in the day I had a Firefox extension that would replace all YouTube embeds with a thumbnail that when clicked would just open YouTube. I originally wrote it because my phone didn't have flash and flash embeds were common. But it w
666.
by kevincox 2y ago
A MAC address is only 48 bits and some of the bits are restricted. It is well within the range of brute force to reverse all of the hashes.
667.
by kevincox 2y ago
This seems like saying "Synonyms are a big reason that humans fall short." Part of what makes AI interesting is that it can understand a huge number of differently phrased data. It seems like different token encodings would only b
668.
by kevincox 2y ago
Generating IDs on the client can be very useful for offline-first systems. But you need to check for conflicts and permissions on the server (or be sure to keep the IDs secret which I wouldn't recommend).
669.
by kevincox 2y ago
It helps but isn't perfect. The attacker can't just pick up the secret. With a passkey they would need to trick you into touching it to authenticate them. Probably by timing it when you think you are about to do a regular authenti
670.
by kevincox 2y ago
No, I also have my passwords synced to me desktop. my phone is usually in a different room when I am on my desktop.
671.
by kevincox 2y ago
"everyone has it" and it is "good enough" at preventing large scale attacks like credential stuffing from data breaches. Most online services aren't so worried about a small number of users being SIM-swapped. They a
672.
by kevincox 2y ago
You don't need to worry about a collision in a UUIDv4 that you created on your server. But I have seen a surprising number of applications that took a UUID generated client side and basically upserted it. Allowing taking over resources
673.
by kevincox 2y ago
It's a nice idea. I've had to manually transcribe error messages many times. Also if I never see a screenshot of a console again it will be too soon.
674.
by kevincox 2y ago
There is one footgun with many tools like this. If you add a new source to an existing combined feed all of the items in that feed will immediately appear as new items. What you typically want is for new items for the source feed to show up
675.
by kevincox 2y ago
The runtime gain is probably near zero. But there are a handful of advantages. 1. Smaller images. This reduces storage cost, pull time, setup time and can potentially allow more active images to be cached on your nodes. 2. Less installed me
676.
Virtual Escape; Real Reward: Introducing Google's KvmCTF(security.googleblog.com)
3 points by kevincox 2y ago|1 comments
677.
by kevincox 2y ago
Yup. Intend to assume that any game with remote interaction is completely insecure. It is best to run Steam and all games in some sort of sandbox. Flatpak is probably a helpful start. While containers aren't a strong security boundary
678.
by kevincox 2y ago
Due to the need for perfect synchronization all users need to be using the exact same version. Mods can also break between versions. It is therefore very common for public servers to stick on one version for extended periods of time. It is
679.
by kevincox 2y ago
There is such thing. There are three main ways for work to be public domain. - Expiry of copyright. - Explicit dedicated to the public domain by the copyright holder. - Non-copyrightable work (such as computer or animal generated work).
680.
by kevincox 2y ago
The problem isn't any one calculation. It is when you update a cell that causes many, many cells to need to recompute. > be server side and my machine simply views a local window, and calculations happen locally if feasible with loc
681.
by kevincox 2y ago
This is why using a password manager with browser integration is critical. If the password doesn't auto-fill something is wrong.
682.
by kevincox 2y ago
If you ask me they should also be forced to sell Windows Media Player separately. Although I may be ok with no requiring them to port it to OSes other than Windows. But you should at least be able to gaze at the bytes without buying Windows
683.
by kevincox 2y ago
I've used Firefox on Linux to regularly attend multi-hour meetings for the last at least 5 years without issues from multiple devices and it has always worked smoothly for me. The only issue I have had is that in the last year sometime
684.
by kevincox 2y ago
It can be a point in your favour but also something that you are asked to avoid. You both showed good knowledge and default choices and showed that you can implement a simple algorithm from scratch. Both are valuable points about your skill
685.
by kevincox 2y ago
Yup. I always use Set and Map over objects. They just contain way fewer surprises and the APIs actually work as you would expect. I only use Objects for "struct" like objects with a known set of keys that are used by name. It is a
686.
by kevincox 2y ago
I doubt most sites are aware of the problems that Cloudflare causes. - Lots of blogs (often product features and whatnot) that I would read and share with interested friends are broken because Cloudflare blocks their RSS feed. These compani
687.
by kevincox 2y ago
There is minimal effort. If the queue has room the packet gets forwarded. If the situation is any more difficult than that the effort ends and the packet is dropped.
688.
by kevincox 2y ago
Unlimited fares should be extra easy with a QR code. Just put a signed expiration date. If course duplication is probably a bigger risk for these tickets as they case be simply locked to one use server side.
689.
by kevincox 2y ago
You can fail open. The QR code contained a signed ticket ID and expiry. You locally validate the signature and expiry and remotely attempt to validate reuse. If the remote validation is slow or fails just accept the ticket and log it.
690.
by kevincox 2y ago
> The problem is, they can be just as easily cloned But you can only clone a ticket who's ID you use. So you can buy a ticket and clone it, but what have you achieved? It is still validated "on the backend" once you use ei

More ›