lixtra

58 ms·

601.
by lixtra 8y ago
Can please someone help to understand the meaning of snake in this context? The Chinese zodiac sign doesn’t appear to be extraordinarily difficult to deal with. Harry Potter‘s Snape would be a more interesting problem.
602.
by lixtra 8y ago
Ideally the server doesn’t need to remember the salt it sent to the client, so it should be signed together with a timestamp to avoid reuse. While you’re at it you can also add some hash puzzle to be solved by the client increasing difficul
603.
by lixtra 8y ago
> a security concern - if an untrusted user can affect what data is added to the table, it could cause a severe DoS Isn’t that a general problem [1] that is addressed with randomization of the input data before hashing? [1] https:/
604.
by lixtra 8y ago
Here is an argument about burn vs. bury: https://www.bbc.co.uk/news/amp/science-environment-43120041
605.
by lixtra 8y ago
> Vim is inefficient for editing I learned vim a bit more than 20 years ago and can tell you it’s a very efficient tool. Fair enough if I was doing most of my coding in a single language it might be worthwhile to learn a different IDE. Y
606.
by lixtra 8y ago
The number itself is not illegal. But maps that point to the specific digits to look are illegal.
607.
by lixtra 8y ago
It could be fifo and you would still be able to undo damage for some time.
608.
by lixtra 8y ago
Redhat open sourced rpm. SuSE adopted it because they saw the benefits.
609.
by lixtra 8y ago
Depending on the situation a write unsafe fast fix later maybe the more economic approach. Especially if the code is more exploratory, changes a lot and large parts will be finally discarded.
610.
by lixtra 8y ago
> wake up and poll a server Here the AppStore is the gatekeeper. OP is probably right, your website is the most reliable place to communicate with your customers.
611.
by lixtra 8y ago
Of course, if you fly to Paris for honeymoon they get access to you and can hold you responsible. Just like bankers coming to Las Vegas and being held responsible for aiding tax fraud overseas.
612.
by lixtra 8y ago
Spiegel.de also sometimes refuses to serve you content if you have DNT flag set which in theory would be a convenient way of getting rid of cookie banners.
613.
by lixtra 8y ago
You get the hashes you trust from the counterparty that you trust. I.e. your bank could print it everywhere. It’s not less obvious than just trusting your browser vendor. EDIT: Also note that in the presented approach you can still trust so
614.
by lixtra 8y ago
Maybe it’s my English. What probability do you assign to “seems likely”? Above 50% (the way I read it)? Or does it mean it’s a possible outcome among many others, all with very low probability?
615.
by lixtra 8y ago
> seems likely to be the root cause of these deaths. Given that investigation in both accidents is still ongoing and all we know is wild speculation your conclusion is premature even though it finally may turn out to be true.
616.
by lixtra 8y ago
The whole CA system is fundamentally broken. When you point a virgin browser to a new ssl endpoint the user should be presented with the certificate and a list of certificate chains that imply trust in the certificate. At that point you sho
617.
by lixtra 8y ago
> Then why would you license as CC? Your criticism should point to CC itself then. The reason to use it is that it takes a few bytes to express your license which would otherwise a lawyer to consult you. And on the other hand a potentia
618.
by lixtra 8y ago
So you still went with them after exposing their incompetence?
619.
by lixtra 8y ago
> Quit Open Source [...] If you burn out in an open source project it may just mean that you are bad at self management. I sometimes leave the office for a walk (without stopping the clock) if it becomes to stressful. Usually I come back
620.
by lixtra 8y ago
We all know cosmic rays and other stuff can flip bits. So your reads are only correct 99.99..9% of the time. Deciding how many nines you want is a trade off. Welcome to the real world.
621.
by lixtra 8y ago
Why? Most compilers give no guarantees in which order they lay out the data. I love deterministic processes as much as everyone. But randomized approaches have their advantages too. And if a compiler has reasons to randomize output e.g. for
622.
by lixtra 8y ago
As far as I understand your pages that applies only to the kernel, not the whole distribution. The Linux kernel is reproducible as well: https://tests.reproducible-builds.org/archlinux/archlinux.ht...
623.
by lixtra 8y ago
Which seems to happen here: https://news.ycombinator.com/item?id=19295836 -> http://sbjs.rocks/#/
624.
by lixtra 8y ago
In particular: “A user agent must not send a referrer header field in an unsecured HTTP request if the referring page was received with a secure protocol” https://tools.ietf.org/html/rfc7231#section-5.5.2
625.
by lixtra 8y ago
Thanks for the excellent link, discussed on HN a while ago [1]. For those that think an sslstriping proxy would solve it please remember that this would degrade the security for requests that really have to be encrypted. [1] https:/&#
626.
by lixtra 8y ago
If you connect remote communities with poor bandwidth http allows a shared cache behind the bandwidth bottleneck. And other caching scenarios.
627.
by lixtra 8y ago
Here, you can just disassemble the binary and it will be more readable than the code.
628.
by lixtra 8y ago
You can place an “edit” in front of your change and even link it to the comment that caused the change. That has the added benefit of giving credit. Of course not in front of each typo. Here: > Every major scientific theory ends up being
629.
by lixtra 8y ago
It’s kind of confusing if you adjust your article during a discussion whiteout marking it.
630.
by lixtra 8y ago
If you stop reading then you’ll live in a world where everyone shut up.

More ›