kevinr

16 ms·

121.
by kevinr 12y ago
Nice!
122.
by kevinr 12y ago
They are using the existing key distribution infrastructure -- the whole point is that they'll go fetch keys for you from a selection of HKP servers if they don't have one on theirs with a verified e-mail address.
123.
by kevinr 12y ago
The key discovery part seems unobjectionable, and vastly cleaner than what keybase.io does. Looking at their design for key sync[0], though, maybe I'm just dense, but I swear I read the article, and I still can't tell -- what&#x27
124.
by kevinr 12y ago
Well, and there's the availability concern -- if it's a critical or time-sensitive message, sending it to the right address with the wrong encryption key is the same as the message getting dropped in transit, which is hazardous. H
125.
by kevinr 12y ago
http://www.cvedetails.com/vulnerability-list/vendor_id-45/pr... That's 12 just in one of the more popular Java web frameworks. RCE is possible in any language.
126.
Teen Entrepreneurship Center Building Its Own Makerspace(kickstarter.com)
2 points by kevinr 12y ago|0 comments
127.
by kevinr 12y ago
Any software where adversary-controlled input can set environment variables which then execs bash is affected. mod_cgi is just really easy to exploit.
128.
by kevinr 12y ago
Many people don't realize they use CGI scripts, but a lot of people are going to discover they do today.
129.
by kevinr 12y ago
And don't put #!/bin/bash at the top of your scripts. And don't shell out in eg. Perl, or PHP, or Python, through bash. Or just take a patched bash.
130.
by kevinr 13y ago
Licensing issues, primarily. See https://news.ycombinator.com/item?id=7581509
131.
by kevinr 13y ago
As Andy tweeted, we built that particular patch to keep unencrypted secrets off disk -- it actually was intended to provide tangible security benefit, it wasn't just paranoia: https://twitter.com/csoandy/status&#x2
132.
by kevinr 13y ago
This is something I've wanted for a long time -- Peecho with sane US pricing and distribution would be great. The front page says "Create on demand books and flyers," though, and I don't see any binding options listed e
133.
by kevinr 14y ago
So, when you say it's "fully client-side code" -- what that looks to me to mean is not that it's not talking to a server somewhere, but that it's talking to Firebase's servers rather than my servers. Is that correct?
134.
by kevinr 14y ago
No mention of the "oh, you're a contractor, so we don't have to withhold taxes" scam? Then the article is seriously incomplete.
135.
by kevinr 14y ago
Hmm. Just thinking out loud here. What seems to be working for Pandemonium, just down the street, is event and community space -- for them it's board and collectible card games. For Porter Square Books, it's some combination of having a c
136.
Boston company is Kickstarting an open-source, open-hardware touch table(pcworld.com)
1 points by kevinr 14y ago|0 comments
137.
This app lets you create 3D models out of snapshots - pirate fabs soon to come?(pcworld.com)
4 points by kevinr 14y ago|0 comments
138.
by kevinr 14y ago
Yes.
139.
by kevinr 15y ago
Having gone to MIT, gotten burned out, and gotten better... Yeah, that about sums it up.
140.
by kevinr 16y ago
As someone who is leaving my current job in large part because it forces me to work in a godawful web-based IDE, I think you need to think really, really hard about your motivations here. What problem does an IDE webapp solve which can't
141.
Reptyr: move an already-running process into screen (better than screenify)(blog.nelhage.com)
55 points by kevinr 16y ago|8 comments
142.
by kevinr 16y ago
I bounced off findmybuzz immediately because you asked for an e-mail address before I had any idea what I was going to get in return. The screenshots help, but not enough -- I want to put in some business I care about, get sample results b