nknighthb

45 ms·

391.
by nknighthb 12y ago
Preferably even the smallest company would have at least a designated "security guy", even if they don't spend most of their time directly on security issues. If there are two, there's your "security team". Rea
392.
by nknighthb 12y ago
A more general form of tutorial review/correction site would be more interesting. Actually, a browser add-on to load commentary/annotations for known tutorials on the fly might be nice. All sorts of practical problems that would h
393.
by nknighthb 12y ago
Missing step: Asymmetric encryption of off-site backups with passphrase-protected private keys kept offline.
394.
by nknighthb 12y ago
Unable to reproduce on a 2.6GHz Core i7. It's slower than the viewer in Chrome, to be sure, but not to the degree you describe. https://drive.google.com/file/d/0B0Ne3vac3uJuOTB0Y2owLVN3MzQ
395.
by nknighthb 12y ago
I would be happier if experimentation had been left to the lightweight environments. The past ~ten years of GNOME and KDE "innovation" has led to a place where I'm not able to use Linux as a desktop -- I can't get work d
396.
by nknighthb 12y ago
Akamai stands to be either acquired by or crushed under the boot of the oligopoly. They're a big fat target. The ISPs will squeeze them for ridiculous fees, or just plain cut them off, while pushing content providers toward their own C
397.
by nknighthb 12y ago
I've been using it for a couple months now. If your job involves any meaningful amount of HTTP-related work, it's worth a lot more than $20. If $20 is too much, you're badly underpaid. Even colleagues of mine in Taiwan, who m
398.
by nknighthb 12y ago
Adobe, Valve, game companies in general, Akamai, Salesforce. By all rights, Cisco, Juniper, Foundry, etc. should be on there, since neutrality means more business for them, but they can't piss off their biggest customers. It's an
399.
by nknighthb 12y ago
Very, very sure. I can pay far, far less than AWS and Microsoft charge for bandwidth in any US datacenter managing my own equipment. Meanwhile, HN-darling Digital Ocean charges their VPS customers just $0.02/GB on overage. That's
400.
by nknighthb 12y ago
The US is huge and diverse. Many of our states are larger than many European countries. California's population is about the same as Poland's, New York's is a bit bigger than the Netherlands/about the same as Romania. Bu
401.
by nknighthb 12y ago
That's fine. Since the problem isn't last-mile, but interconnection, the per-GB cost is miniscule. I'll estimate $0.025/GB, but that's way too high, just to avoid getting to the point where one might realistically q
402.
by nknighthb 12y ago
US securities law is about what level of transparency is required of publicly-traded companies. It doesn't try to dictate how a corporation is run, only what information it is required to disclose. Share classes with different voting r
403.
by nknighthb 12y ago
No. You cannot. Rent is usually paid by check, though poorer people who may not have bank accounts of any kind often use cash, too. Large-scale landlords (corporations renting many units) sometimes take credit cards or be able to setup auto
404.
by nknighthb 13y ago
Says the person arguing with said guy. Did you have a point other than that you think you're better-qualified to judge how I use my time than I am?
405.
by nknighthb 13y ago
The trope is universal and deeply embedded in American society. It is not surprising that someone apparently from the UK would not realize this. It is surprising that a non-American is so eager to force their own cultural context onto an Am
406.
by nknighthb 13y ago
I did read it, after it was helpfully posted elsewhere. I wish I hadn't. Not surprisingly, it wasn't worth my time.
407.
by nknighthb 13y ago
This is why I disagree with many things PHK says. Like you, he pays a great deal of attention to how he wishes things had turned out, instead of figuring out how to make what we have better. Get browsers to act in the way you want, then we&
408.
by nknighthb 13y ago
> have you never heard the phrase "pay peanuts, get monkeys"? No. I'm familiar with the idiom of "peanuts" meaning little money, monkeys have never been mentioned. In the modern American cultural context, monke
409.
by nknighthb 13y ago
I really have no idea what this crap about Tumblr is. I don't use it, and I don't really know anyone who does. When I click a link to it, it's almost always a cute animal picture or a piece of art that has no relation to any
410.
by nknighthb 13y ago
PHK says many things I disagree with. You can't make browsers simply treat self-signed certificates the same as plain HTTP. You still have to warn the user that their desire for a secure connection (conveyed by their request to retriev
411.
by nknighthb 13y ago
The author brought race into it by comparing human beings to monkeys, a common racist trope. If your only defense for someone calling people sub-humans is "but it might not be racist!", you need to think hard about what you'r
412.
by nknighthb 13y ago
I have no idea where you'd get the idea that the answer is "no". The answer is emphatically yes.
413.
by nknighthb 13y ago
If someone has passive access to snoop, the odds they can perpetrate an active attack are so close to 100% as to make the distinction immaterial. Encryption without authentication accomplishes nothing. Worse, self-signed certificates train
414.
by nknighthb 13y ago
It's not mortal terror, it's declining to enable someone who uses racially-charged language to attack their fellow human beings while configuring their server in a way that anyone competent to evaluate OpenSSL's merits in the
415.
by nknighthb 13y ago
I'm going to assume "monkeys" is a poor translation from another language. Maybe it's supposed to say "OpenSSL is written by fuzzy hackers". It's impossible to tell without accepting a self-signed certific
416.
by nknighthb 13y ago
I look forward to reading the hilarious threads that will be spawned when you take to linux-kernel, freebsd-hackers, openbsd-misc, etc. and inform them they should be developing their kernels in Haskell. Functional programming's unpopu
417.
by nknighthb 13y ago
The right way to defend a company is not by contradicting their own marketing.
418.
by nknighthb 13y ago
I'm not sure what you imagine when you say "modern computer running a modern OS". Does this not include anything but desktop PCs and laptops? Because phones and tablets have some rather nasty memory limits for applications to
419.
by nknighthb 13y ago
I haven't used hackerone myself, so this is just based on limited observation, but it looks to me like it was automatically disclosed one month after the reporter made the request. Otherwise, I believe it would have said something like
420.
by nknighthb 13y ago
Under no circumstances are RFC-compliant UUIDs of any version as secure as a properly-generated 128-bit (or more) key. Even version 4 and 5 UUIDs necessarily have non-random bits. Furthermore, although the RFC makes a half-hearted attempt

More ›