mwpmaybe

13 ms·

121.
by mwpmaybe 10y ago
How long would it have taken to crack the secret on that same setup if HMAC-SHA256 had been used instead? What's the recommended minimum number of bytes for an HMAC secret when using SHA1? SHA256?
122.
by mwpmaybe 10y ago
Mine is Staff Sergeant Max Fightmaster, US Army. I'm also found of Rick Wagoner, former CEO of GM, and I often daydream of US Senator Sheldon Whitehouse becoming President.
123.
by mwpmaybe 10y ago
Generators are used to great effect in Ember thanks to the ember-concurrency[0] addon. It was far and away the most frequently talked-about topic at EmberConf last week. If you're interested, I'd highly recommend machty's tal
124.
by mwpmaybe 10y ago
> That being the case, why not just use the OS? And processes and shared libraries? That's essentially what a Linux container is: a process (that can fork) with its own shlib. If you have lots of processes that don't need to be
125.
by mwpmaybe 10y ago
This will do the trick: yarn global add ember-cli/ember-cli
126.
by mwpmaybe 10y ago
Glimmer.js may be more your speed!
127.
by mwpmaybe 10y ago
On one end of the spectrum, you have the 25 year old single dude who works for a big company. He pays $60 every two weeks for his PPO and doesn't understand what the big deal is. Can people really not afford $60 every two weeks? He vot
128.
by mwpmaybe 10y ago
Great post—and the title got a laugh out of this self-described "ancient" web developer—but interestingly, there's not much (any?) info in there about learning JavaScript/ECMAScript the language . It and the articles it
129.
Varnish Cache 5.1 repos now available(packagecloud.io)
1 points by mwpmaybe 10y ago|0 comments
130.
by mwpmaybe 10y ago
With set -o vi: <ESC> k cw zcat <ESC> A <SPACE> | <SPACE> less <CR> Very natural for any Vi user: go up a "line", change the first word, then append.
131.
by mwpmaybe 10y ago
Are you suggesting that there's no money in any open-sourced technology? Is there money in Linux?
132.
by mwpmaybe 10y ago
> I remember when I was learning Ruby, and everyone online was "Read that _why guide it's great!!" It was a mess. I couldn't learn anything from it at all. I had the same experience (started Rubying in late 2015). I h
133.
by mwpmaybe 10y ago
Thanks for your response. > 2. it doesn't, internal session class does and IMO most apps do not need expire claim. If you're generating a token to send to an SPA or native app, you can't rely on any other expiration mechan
134.
by mwpmaybe 10y ago
CSRF protection: * Use SameSite cookies (unfortunately, not yet supported by all browsers) * Don't accept application/x-www-form-urlencoded, multipart/form-data, or text/plain at your endpoints, or * Use CSRF tokens if y
135.
by mwpmaybe 10y ago
This drives me nuts. To expand on your point, there are a number of separate, debatable design decisions that seem to get conflated all the time: * Transport: how the session ID or token is shipped between clients and servers (authorization
136.
by mwpmaybe 10y ago
* MessageVerifier defaults to SHA1. That hasn't been a good default for a few years now. * It doesn't support expiry as a claim; you have to check it against the current time manually, and factor in leeway if you want that. Becaus
137.
by mwpmaybe 10y ago
> The approach I use is to have a 'use once' refresh token (long timeout) and a security token (short time out) and JTIs to hold a list of logged out/invalid (refresh token used twice) security token IDs. Here's what
138.
by mwpmaybe 10y ago
Probably not. If the Pg instance is replicated, as indicated above, it'll be challenging to keep the Memcached copy in sync. In other words, you can't just use the caching feature of your ORM, you'll need another piece.
139.
by mwpmaybe 10y ago
> For package management, I think npm is on par with bundler NPM is non-deterministic and doesn't have lockfiles, so it's a bit of a stretch to say it's on par with Bundler. Yarn solves both those problems for JavaScript p
140.
by mwpmaybe 10y ago
As an interesting anecdatum, I've noticed that when I binge-sleep, i.e. for more than 8.5 hours, I feel depressed.
141.
by mwpmaybe 10y ago
I just started doing this a few weeks ago, along with counting calories during my "feeding" window (which I actually try to restrict to six hours). So far so good. I find I'm actually more successful at counting calories on t
142.
by mwpmaybe 10y ago
For those of you who might be fooled into thinking this is about things like SystemD and Docker—it's not!
143.
by mwpmaybe 10y ago
Also... Linux. Not macOS.
144.
by mwpmaybe 10y ago
I am not a doctor. Here are some thoughts (addressed to both you and the GP): I have a hietal hernia[0] that causes reflux and dyspepsia (trouble swallowing) and mimics these heart symptoms: shortness of breath, arrhythmia, chest pain, and
145.
by mwpmaybe 10y ago
You don't need a custom kernel to run Docker on Linode. Just change the storage driver to overlay (as you do in this stack script) and you're good to go. Otherwise this is a very nice script. I typically install the vim-nox packag
146.
Git 2.12 Release Notes(raw.githubusercontent.com)
1 points by mwpmaybe 10y ago|0 comments
147.
by mwpmaybe 10y ago
Sure. A lot of people were against it after it started, especially when it began to go south. That's not what we're talking about. We're talking about statements like this: "[H]ad I been in Congress at the time of the in
148.
by mwpmaybe 10y ago
"I was totally against the war in Iraq." — Donald Trump on NBC News in 2016[0] That's a lie, and one he's repeated often. Wishy-washy, hesitant support for a thing is not the same as being totally against a thing. His as
149.
by mwpmaybe 10y ago
Start here: http://www.politifact.com/personalities/donald-trump/stateme... How about: * Lying about his past opposition to the Iraq war * Lying about Russia only hacking the DNC (they hacked the RNC too, or at le
150.
by mwpmaybe 10y ago
Undiagnosed what?

More ›