osteele

19 ms·

121.
by osteele 9y ago
What you say is true of actual 2FA, which only adds security. (Unless, maybe, you take into account risk compensation[1], which is probably magnified when SMS 2FA is less secure than users think.) However, SMS “2FA” is often used to mean SM
122.
by osteele 9y ago
Optogenetic biometrics peg Proof of Self to blockchains mined on nanodrones.
123.
by osteele 9y ago
Last week I looked at a couple of hosted data services whose free tier didn’t give access to a query log. This is pretty common for hobbyist projects. This means this logging has to be implemented at the app layer. The developer has to pay
124.
by osteele 9y ago
Like Math CAPTCHA, only deeper and with more subject matter versions? One of the math forums (Cut the Knot?) had something like this, that actually required (I think) calculus. Reputation systems such as HN itself are another approach. Thes
125.
by osteele 9y ago
You can short crypto on Cboe and CME. A few minutes on the internet will reveal other means for shorting crypto.
126.
by osteele 9y ago
> The main ledger and smart contracts should be separated, everyone smart contract is public, why?? You might find Blockstack interesting. (I don’t have a connection. I’ve just started to explore this space, and have some of those same q
127.
by osteele 9y ago
I’ve noticed this with Tesla, too. I imagine that if people could take short or long positions* in programming languages and technologies, it would be difficult to find the current quality of reviews and discussion around those topics. I’ve
128.
by osteele 9y ago
Once an address has been doxxed, you've got a lead on any address used in a common transaction. It doesn't conclusively unmask these other addresses, so whether this counts as “really that difficult” depends on your investigative
129.
by osteele 9y ago
HTML that makes use of an API or content delivery service won't work if that service is unavailable. DNS-based service discovery is centralized, and so are most services themselves (at the level of the operating organization, even if t
130.
by osteele 9y ago
It's interesting to compare this with HN karma. Karma is similarly inflationary, for the same reason: HN would incentivize a very different kind of dialogue if you only gained karma that someone else lost. The difference of course is t
131.
by osteele 9y ago
> Disclaimer: I've read nothing about project based learning, I only recognise it as a concept that has emerged in my own personal learning strategies as I am sure it has in many others. You may not have read anything about it, but
132.
by osteele 9y ago
PBL works best in the presence of learning objectives, such that the project has domain deliverables, but is also explicitly designed to lead to learning outcomes. (In a team project, these objectives are mostly defined at the level of the
133.
by osteele 9y ago
The stories were inspirations and conversation-starters for many of the people I know in AI.
134.
by osteele 9y ago
I'm talking about High Sierra, and apps loaded from App Store or non-store download links. For example, System Preferences > Security & Privacy > Privacy > Accessibility lists (among others) “Backup & Sync from Google”
135.
by osteele 9y ago
I submit that the macOS interface leads to a reasonable expectation of greater security than an old-school executable running in the 90's or 00's, because macOS requires that the user explicitly grant permission to access so many
136.
by osteele 9y ago
Thanks for you effort. I prefer Mac app store apps, when they're at parity with non-store releases, because there's fewer licenses to install and manage (even if they all go in my password manager), and because I can upgrade all t
137.
by osteele 9y ago
HomeKit was announced in June 2014, and released September 2014. Thread was developed at Nest. The Thread Group was announced July 2014, far into HomeKit's R&D cycle. There wasn't much, or obvious, commercial support for f
138.
by osteele 9y ago
Apple's playbook is to launch with APIs for internal use and then, frequently, open them. Examples include iOS support for third-party apps, third-party access to a number of watchOS 2.0 APIs, and third-party access to iOS APIs such NF
139.
by osteele 9y ago
Related: Paul Graham's “The Top of My Todo List” http://www.paulgraham.com/todo.html “A palliative care nurse called Bronnie Ware made a list of the biggest regrets of the dying. […] “I would like to avoid making these
140.
by osteele 9y ago
Use distinct browsers (or profiles) for browsing web-of-documents, and using apps hosted on the web-as-application-distribution-platform. They're each (for many of us) legitimate uses, but have different requirements and threat models.
141.
by osteele 9y ago
If you're interested in ReasonML, you may also be interested in Elm http://elm-lang.org/ . Coming from JavaScript / React / Redux / Flow, ReasonML initially looked more familiar, but I still found Elm eas
142.
by osteele 9y ago
Someday maybe the web will catch up with: “Memorized secrets SHALL be at least 8 characters in length if chosen by the subscriber. Memorized secrets chosen randomly by the CSP or verifier SHALL be at least 6 characters in length and MAY be
143.
by osteele 9y ago
Shamir's Secret Sharing (SSS)[1] is a technique for doing this. SSS solves a harder problem than (my understanding of) RAID parity: that it requires not just k out of i pieces (your N and M+N) to assemble a secret, but also that no few
144.
by osteele 9y ago
Related: placebo buttons https://en.wikipedia.org/wiki/Placebo_button
145.
by osteele 9y ago
It was pretty hard to do viz on the web 13 years ago. In 2006 I made a web tool to turn regular expressions into NFAs and DFAs and animate their states as you typed. It took a lot of code (drawing and animating along beziers, AJAX to a serv
146.
by osteele 9y ago
I recently discover Poi https://poi.js.org/ . It’s built on top of webpack. If your issues with webpack are configuration complexity, not speed, then Poi may be appealing to you.
147.
by osteele 9y ago
https://support.apple.com/en-us/HT201220 has a section for “Security and privacy researchers”. The process is to send mail to product-security@apple.com, optionally encrypted by Apple Product Security's PGP key. A
148.
by osteele 9y ago
The original “Skia” was the development name for QuickDraw GX[1]. (I don’t know why the Wikipedia page doesn’t say that any more.) Cary Clark, who now works at said “elusive Google engineering office”, was the mastermind behind that Skia. T
149.
by osteele 9y ago
Many U.S. retail establishments near* the Canadian border treat Canadian quarters as equivalent to U.S. quarters—accepting them at a 25¢ value, including them as change if they got into the till. The US:CAD rate is only 4:5, not the 1:6 BTH
150.
by osteele 9y ago
If you are not already self-medicating or a whiner, #4 is a sub case of #1.

More ›