plywoodtrees

8 ms·

31.
by plywoodtrees 13y ago
The salt is typically stored in the password db, alongside the salted hash. If Adobe has taken that approach, the intruders would have all the salts, but they would not be able to do this attack of seeing how many people use the same passwo
32.
by plywoodtrees 13y ago
It doesn't make your password for any particular site any harder to guess. It does avoid reuse, without needing to sync or otherwise remember N distinct passwords, which is worthwhile. Reuse is the main reason why theft of password dbs
33.
by plywoodtrees 13y ago
Adobe do cloud photo storage, I believe keyed off the same account. That could be highly sensitive data. People may have created their account and password for low value stuff and then started storing photos. Your general point is of course
34.
by plywoodtrees 13y ago
You have a yellow pages?
35.
by plywoodtrees 13y ago
As far as I can see GOOG has never split?
36.
by plywoodtrees 13y ago
I get one ad there. The first organic result is the Sony homepage. The second is the wikipedia page. Seems pretty reasonable.
37.
by plywoodtrees 13y ago
The organic results are a list of sofa vendors, each with pretty boring text descriptions like "we offer great sofas at great prices and with up to 4 years interest free credit available, there has never been a better time to buy! ‎Fab
38.
by plywoodtrees 13y ago
At the end of the day, you're still an animal whose main business is eating, pooping, and reproducing. It turns out there's a lot of scope for creativity and joy while keeping the organism alive.
39.
by plywoodtrees 13y ago
Why? Maybe that was just what your friend found most interesting at that time.
40.
by plywoodtrees 13y ago
A few reasons: - Many 20% projects are not things that would not be easily monetizable: open source work, non-technical things, improvements to infrastructure. - If the idea is very speculative, exploring it while still getting paid a hands
41.
by plywoodtrees 13y ago
This doesn't match my experience as a Googler. I do 20% projects, and my manager has a 20% project. It helps keep things fresh and interesting and I get exposure to more of the vast ecosystem of Google stuff than I would see in my main
42.
by plywoodtrees 13y ago
This description may lead you to imagine software counting how many lines someone changes or how many hours of the day someone is typing. That would be pretty depressing, but I don't think Google does that. Their performance measuremen
43.
by plywoodtrees 13y ago
> engineering is more than writing code, and senior-levels of engineering even more so. Google's higher engineering ladder rungs are defined more by scope of influence than the excellence or profusion of individual code. At higher l
44.
by plywoodtrees 13y ago
gcc, for the sake of wanting to make it hard to call it from proprietary front-ends, is architecturally tangled. (See http://comments.gmane.org/gmane.comp.gcc.devel/59296 - the "new methods" mentioned there n
45.
by plywoodtrees 13y ago
The kickstarter page doesn't explain why those things are all worthwhile, or why one system will solve all of them. If they want to raise a moderately large amount of money they probably need to speak to more than just people who alrea
46.
The design of Google's software-defined WAN and home-made switches(cseweb.ucsd.edu)
6 points by plywoodtrees 13y ago|0 comments
47.
by plywoodtrees 13y ago
And I wonder what hashing approach Ubuntu SSO uses?
48.
by plywoodtrees 13y ago
'Visions of a fully homomorphic cryptosystem have been dancing in cryptographers' heads for thirty years. I never expected to see one. It will be years before a sufficient number of cryptographers examine the algorithm that we can
49.
by plywoodtrees 13y ago
No, not true. There are government and non-government attacks. Even if we assume cloud services are more vulnerable to government snooping, we need to also consider that many more companies and individuals suffer more damage from regular cr
50.
by plywoodtrees 13y ago
You can use things like Duplicity which locally encrypt backups and then store them to arbitrary cloud services. The problem is, if the data is opaque to the cloud service, it is very hard for it to do anything other than passively store an
51.
by plywoodtrees 13y ago
Extracting and sending it manually seems incompatible with the idea that they're doing this on a really massive scale. Also, forwarding all of everybody's gmail would be a lot of data transiting the network. Unexpected traffic eq
52.
by plywoodtrees 13y ago
I would also like an open standard but I had to laugh at the final sentence of the EFF statement: > To be clear, even the earlier [off-the-record] setting was far from perfect from a privacy perspective: disabling chat history only kept
53.
by plywoodtrees 14y ago
Fuse backed by a local filesystem is a different proposition to Fuse backed by a network service. There's nothing about running filesystem code through Fuse that makes it inherently more risky. However, accessing a filesystem over the net
54.
by plywoodtrees 14y ago
Canonical's first cloud filesystem for Ubuntu One used Fuse, then it was later rewritten away from it, and became much more reliable. Correlation, or causation? It's complicated. But part of the attraction for Drive, Dropbox, and Ubuntu On
55.
by plywoodtrees 14y ago
Actually, gmail keeps your spam for 30 days. If it's so low-value that it was recognized as spam and I didn't go looking for it for 30 days, the odds are high that I'll never want to see it again.
56.
by plywoodtrees 14y ago
Conceptual cartoony view of how a data centre works: http://www.google.com/green/storyofsend
57.
by plywoodtrees 14y ago
Reports (eg "In the Plex") have said she reviewed every UI change, above a fairly low bar. For instance, multiple meetings about exactly which shade of blue to use for various controls. Some people say she brought a valuable discipline and
58.
by plywoodtrees 14y ago
Google went from zero to making a large amount of computer hardware in a decade, partly through using the large existing contract manufacturing chain. The auto industry is not entirely different: Bosch, Rotax, ZF, etc would all design and b
59.
by plywoodtrees 14y ago
I doubt that car insurance is dominated by fixed costs - istr payout rates are over 70%. Even if the number of policy holders falls by half (which is unlikely to happen in a decade) premiums shouldn't skyrocket. More robot cars on the road
60.
by plywoodtrees 14y ago
They can recognise road edges visually. Best-guess routing to off-map destinations. Cars can feed back trip data to improve the map database.

More ›