omgitstom

9 ms·

61.
by omgitstom 12y ago
I've actually seen this same issue in JWT libs before (August 2014) as well. I think one of the main issue is JWT is simple to implement, the specification seems to be unclear about how to treat unsecure JWTs (with the `none` alg). Fr
62.
by omgitstom 12y ago
Yea, it bothers me as well. Trusting blogs for security vulnerabilities spread across the internets isn't the model to be aiming for.
63.
by omgitstom 12y ago
It was, the thermal recoil force! It is either that, or back to the drawing board for a 3rd attempt at calculating gravity. Humans have sent a few satellites in deep space now, in a vacuum, away from matter. Thinking of the chameleon effec
64.
by omgitstom 12y ago
Scientific journals don't always contain articles, or papers. My understanding is being published on arxiv.org does not mean it is currently in a scientific journal. Being in a scientific journal does not mean it is on arxiv.org. But,
65.
by omgitstom 12y ago
Really confused about what they are attempting to test under the tabletop configuration. It seems like their hypothesis needs to be tested in the middle of space away from the gravitational force of the sun and earth. If your calculations
66.
by omgitstom 12y ago
They have removed the last piece of the hassle of shopping. Now you don't need to even get your computer out and search your past orders. In all honesty, I don't think I would use the buttons though. The API is the important pie
67.
by omgitstom 12y ago
bcrypt is only strong if their cost / work-factor is set correctly
68.
by omgitstom 12y ago
This! Even though I don't think this would have proactively helped this DDoS, but it can't be closer to the truth. CDNs hosting libraries / fonts / resources for the web are going to be targeted more and more, it is just
69.
by omgitstom 12y ago
I just worded this incorrectly. I'm sure Kevin is skilled. Being famous for hacking doesn't mean you are a skilled hacker. This is the way the article was phrased. Then they went on to say pen testing and have 100% finding vulne
70.
by omgitstom 12y ago
This article is interesting. He isn't world famous because of his skill, he was world famous because he was caught. Being famous does not make you a good hacker, the best hackers will never be known. I would be surprised if any pen t
71.
by omgitstom 12y ago
Why JSON in the url as query parameters? What benefit do you give you API caller? What benefits do you give browser / caller caching for GET? It really feels like they needed to get some content out for some reason, and just found some
72.
by omgitstom 12y ago
Maybe his flyers are biodegradable made from plant cellulose. You never know!
73.
by omgitstom 12y ago
I'm pretty sure this has been discovered years ago. Or at least my brain is convinced it was. Edit: Just saw the authors notes that this may have been found before... If anyone is curious, I found the one of the original reports on t
74.
by omgitstom 12y ago
"The drug, called aducanumab, appears to have met or exceeded Wall Street expectations in terms of how much the highest dose slowed cognitive decline. However, there was a high incidence of a particular side effect that might make it d
75.
by omgitstom 12y ago
Wow - blast from the past, I loved descent 1 and 2. I thought this was going to be a new / digital version of the board game descent though. Don't know which I would be more excited about.
76.
by omgitstom 12y ago
I've always had these assumptions: If you open an html email, you are being tracked. If you click on a link in an email, you are being tracked (plain text / html) Is there any email clients someone can recommend that force plain t
77.
by omgitstom 12y ago
Yea, that's why I put it in the comments. I'm surprised it didn't get down voted quicker. Edit: Point being that people might still want context even if HN frowns upon gawker
78.
by omgitstom 12y ago
http://gawker.com/ivy-league-admissions-are-a-sham-confessio...
79.
by omgitstom 12y ago
Thanks for the laugh, definitely know that feeling!
80.
by omgitstom 12y ago
This is an interesting downgrade attack for sure. The author didn't bring this up, but this will probably work around HSTS if you have your site set up and preloaded into the browsers HSTS list.
81.
by omgitstom 12y ago
As a follow up question, has anyone thought / worked through support both HTTP/1.1 and HTTP/2 simultaneously?
82.
by omgitstom 12y ago
I'm having a hard time understanding the argument. Let's say I have a site that uses best practices for HTTP/1.1, and loads within 2 seconds without caching. It sounds like the article saying that switching to HTTP/2 wi
83.
by omgitstom 12y ago
This is one of my biggest problems with the software industry. It isn't just the posts, but the tooling / utilities / frameworks / languages as well. If you are smart enough to improve something, there is no fame in co
84.
by omgitstom 12y ago
It would have been nice if he proposed something innovative moving forward, but this is a step back to RPC-structured APIs. After reading this though, I had to check to make sure it wasn't April 1st.
85.
by omgitstom 12y ago
Author here - let me know any questions. I'm happy to field them
86.
by omgitstom 12y ago
#putsonconspiracyhat Or someone knew the statement was made, understood his position, and he was took out to make it look like it was Putin
87.
Uber Says Security Breach May Have Compromised Driver Data(bloomberg.com)
1 points by omgitstom 12y ago|0 comments
88.
by omgitstom 12y ago
Nope, thought the same thing. I had an awesome Duke Nukem 3d site on geocities. It had gameplay tips, easter eggs, and tips and tricks on how to build your own maps and scripts for Duke Nukem. This may have been my first attempt at prog
89.
by omgitstom 12y ago
This article hits close to home. I spent a day at Oculus when they were evaluating my product (pre Facebook acquisition) and we were able to play with some of their prototype headsets. They had games, space sims, etc to check out. But the
90.
by omgitstom 12y ago
Man - this guy might have the best title I've seen in a while: Daniel Nazer Staff Attorney and the Mark Cuban Chair to Eliminate Stupid Patents Electronic Frontier Foundation daniel@eff.org

More ›