regecks

37 ms·

301.
by regecks 13y ago
I've been using a pubcookie module ( http://www.vitki.net/book/page/pubcookie-module-nginx ) to do authentication across multiple subdomains (x.example.org, y.example.org, z.example.org). The idea being, you on
302.
by regecks 13y ago
There are bug bounties for OpenSSL. 1. https://hackerone.com/openssl 2. https://www.google.com/about/appsecurity/patch-rewards/
303.
by regecks 13y ago
Take a look at github.com/drone/drone for an upcoming CI platform built around Docker. It's totally open source, but you can use the hosted version at drone.io as well.
304.
by regecks 13y ago
If you logged in (as in, typed your username and password) in to the site during the time the exploit has been disclosed and the site has been vulnerable, I would change your password. Otherwise, insist that the site owners invalidate all e
305.
by regecks 13y ago
Ask whoever wrote your client software to rebuild it with a new version of OpenSSL. Or, if its open source, try relink it yourself. I guess through some convoluted MITM attack, somebody could (for example) try and exploit your email client,
306.
by regecks 13y ago
I use XPrivacy ( https://play.google.com/store/apps/details?id=biz.bokhorst.x... ). With it, I have extremely fine-grained access control to a wide variety of "system calls", including access to contacts,
307.
by regecks 13y ago
It seems silly that Chromium and Firefox now have separate HSTS lists (though Firefox's was seeded using the Chromium list [1]). At the moment, these lists appear to be b) tied to specific browsers 2) tied to specific releases of those
308.
by regecks 13y ago
The 0 refers to which Google Apps/Gmail user session you want to open. For example, 0 gives me my personal Google account, 1 gives me my work account. I guess h stands for html. I find this interface to be slower/all-round worse t
309.
by regecks 13y ago
Try gopkg.in - http://godoc.org/gopkg.in/docs.v1 as a tool-less solution to dependency versioning I like it because it follows semver (i.e. you can only select the major version), which hopefully will make repo authors
310.
by regecks 13y ago
If you have problems with your ISP hijacking DNS traffic, consider something like http://www.opendns.com/technology/dnscrypt . They could stick hijack/block the traffic to the end server, but I suppose at that poin
311.
by regecks 13y ago
Go provides very adequate profiling tools for debugging this type of problem. http://blog.golang.org/profiling-go-programs FWIW, I did `ab -n 1million -c 100` with your program on Windows/amd64 and memory grew from fro
312.
by regecks 13y ago
> nginx supports it Well, one hopes. nginx is still on SPDY/2 which browser vendors are already preparing to remove support for ... https://groups.google.com/forum/#!topic/spdy-dev/XDudMZSq3e4 So hoor
313.
by regecks 13y ago
While using gocraft/web I've slowly come to the realization that it would be very convenient if the Context already knew about the Request and Response (without me having to pass web.ResponseWriter everywhere).
314.
by regecks 13y ago
Wow, felt a little sick when I saw how detailed and accurate it was. Effect of having an Android phone with all the Google location bells and whistles turned on? Would be nice if I could get the location services features without a comprehe
315.
by regecks 13y ago
There are some initial benchmarks here: http://serverbear.com/10151/google-compute-engine
316.
by regecks 13y ago
https://www.ssllabs.com/ssltest/analyze.html?d=markopolojarv... Intermediate certificate isn't sent by the server, which might be the issue.
317.
by regecks 13y ago
Network just came back a second ago, and promptly disappeared again.
318.
by regecks 13y ago
Sounds like something that could be crowd-funded - pay some contributor's salary for a while to write the docs :).
319.
by regecks 13y ago
The desktop experience is pretty close to being "there", but the lack of iTunes or any viable alternative (for syncing) is a bit of a show-stopper if you own an Apple device ... Apparently this is due to Apple making it technicall
320.
by regecks 13y ago
There are certainly providers that have networks you can hide behind which can filter+absorb DDoS traffic for you.
321.
by regecks 13y ago
> Too bad CentOS is still stuck on TLS 1.0 and apparently will be for quite some time Perhaps on a vanilla install, but it is not impossible or even difficult to build OpenSSL 1.0.1e+ for RHEL(s). Either build yourself or use Avixo[1]. G
322.
by regecks 13y ago
Well, my reflex response is yes. Transport security seems like an odd thing to call a feature for a feed reader. Of course it's possible that it's a brutal cost multiplier for them - I'd be interested to know.
323.
by regecks 13y ago
Me too. I'd love to use Heroku/AppFog/whatever but there always seems to be a snag (no websockets, no UDP traffic, bleh). Might have to try Nodejitsu one of these days but the pricing kind of pains me when I think about how m
324.
by regecks 13y ago
It should handle the case where the authorisation is denied, as currently the oauth.io server spits out an unfriendly Invalid format
325.
by regecks 13y ago
Yes, this is pretty freaking cool. Hopefully it works on Windows too, which is my main OS when I'm working with Go. It seems Windows is a second class citizen when it comes to some of the toolchain (pprof is kinda broken, I can't
326.
by regecks 13y ago
I believe you also need an ABN to begin charging live customers.
327.
by regecks 13y ago
Even with the $50 fee it is still much, much cheaper and easier than anything else available here in Australia (which is basically to get eWay + a merchant account). I am very that excited this came through and am doubly grateful for the $9
328.
by regecks 14y ago
Well, the official statement re: the passphrase is: > @Eivind – our private key is stored only in encrypted format. The passphrase is not guessable, sufficiently long and complex, not based on dictionary words, and not stored anywhere b
329.
by regecks 14y ago
Channel now unmoderated. Edit: HTP came in and trolled (pretending to be ex-Linode), re-moderated.
330.
by regecks 14y ago
Can you elaborate on why you think it is cheaper? It's always appeared to me that you pay a hefty premium for compute resources on AWS (at least compared to Linode).

More ›