rancor

6 ms·

31.
by rancor 13y ago
I made no criticisms of how you responded to individual issues raised by the audit, and in fact it's encouraging to see many of the long-standing contact authorization issues finally being addressed as well as what I would generally co
32.
by rancor 13y ago
I read the blog post reacting to this batch of audit results quite carefully, in point of fact. In general, when I read vendor responses to such devastating findings, I'm looking for a concrete plan to improve the threat modeling and d
33.
by rancor 13y ago
And I agree, that's a bare minimum warning for all such software. I appreciate your efforts to make strong crypto more accessible to the general public. That being said, you and I both know that people are using Cryptocat in dangerous
34.
by rancor 13y ago
I'd also add as a TextSecure user that I assumed both of those scenarios were plausibly insecure until the recent release with secure group messengering. They're pretty open about the weak points in the application generally speak
35.
by rancor 13y ago
This point cannot be emphasized enough. In the extreme case, which Cryptocat marketing materials have employed, secure communications software is life safety critical on a level similar to medical or aviation software. As such, the admit-yo
36.
by rancor 13y ago
When I saw one of the main CryptoCat developers present in 2012, I came away with the impression that nobody on the core team understood crypto, security, or software engineering. This audit is another rock on the mountain of evidence I&#x2
37.
by rancor 13y ago
Every Ruby developer on the planet thanks you for this. Lengthy `gem install` cycles are one of the less fun things about the Ruby ecosystem.
38.
4K Ultra High Definition Media Player VLC for Mac OS X available (libde265.org)
2 points by rancor 13y ago|0 comments
39.
by rancor 13y ago
Thanks, that's super helpful. A great writeup, by the way.
40.
by rancor 13y ago
There has not to my knowledge. As a CouchDB user I'm definitely interested in the results, but it's not clear to me what cluster configuration to test.
41.
Libde265 HEVC – H.265 High Efficiency Video Coding(libde265.org)
2 points by rancor 13y ago|0 comments
42.
by rancor 13y ago
That was my first thought as well, glad to see that Joel is on the same page. After writing a fair amount of Go recently, I've come to believe that usage of explicit error returns only appears to increase code density. In reality, it e
43.
by rancor 13y ago
When I saw this was on the 37signals blog, I reflexively expected a post by DHH, and now my funny bone is disappointed. Snark aside, any trick you can use to place the humanity of the other person you're interacting with in the forefro
44.
by rancor 13y ago
IMO, the existance of code to configure more then one production-like environment is an anti-pattern. The remedy is using configuration management (Chef/Puppet/whatever) to put the correct environment specific configuration into p
45.
by rancor 13y ago
In my opinion, it revolves around the idea that Capital in the Marxist sense intrinsically represents a restriction on the liberty of others. In a moderate sense, this mostly means that the accumulation of Capital can and should be restrict
46.
by rancor 14y ago
I tend to use a key per machine for ease of revocation, so yes.