richardjs

9 ms·

31.
Older Macbook webcams can be remotely activated without any sign(boingboing.net)
2 points by richardjs 13y ago|1 comments
32.
by richardjs 13y ago
Also, fix the copyright line at the bottom, unless the company's name really is "Your Company". And the privacy policy "link" isn't a link. In other news, I'm seriously craving salsa now, so that aspect of
33.
by richardjs 13y ago
There is an automated backup system that you have to enable for a droplet, that creates a snapshot every few days. It's a clear part of a droplet's control panel. They began charging for it in July 2013. The price is 20% of the dr
34.
by richardjs 13y ago
>By the way, am I not, accidentally, at a site called "Hacker News"? The parent's point wasn't that Apple was trying to lock out the standard HN reader, or that an HN reader shouldn't try to repair the device. Hi
35.
by richardjs 13y ago
Also, bundled developer tools can be nice when you're trying to debug an issue on a user's machine. It's a small thing, but it's nice to not make them install some plugin.
36.
by richardjs 13y ago
With the traditional username/password system, you have to remember a unique, secure password for each site--or else you use a password manager, which involves more steps as well. He's also mentioned that this could be adapted int
37.
by richardjs 13y ago
Yeah, that's a concern of mine too. Looking deeper at the description, looks like he describes a passphrase-like "local password" on the "The user's view of the application" page [1]. Hopefully that would addre
38.
by richardjs 13y ago
Sure, if you're using an appeal to authority as part of the argument in favor of the protocol. Hopefully we're relying more on logical analysis of the protocol than we are on the proposer's authority, in any security context.
39.
by richardjs 13y ago
He described a local password (basically a passphrase) on the "The user's view of the application" page[1]. [1] https://www.grc.com/sqrl/userview.htm
40.
by richardjs 13y ago
Not to use a debate cliché, but isn't this a ridiculously shameless ad hominem? He's published the protocol and disavowed any intellectual property claim to it. Let's focus on critiquing the protocol.
41.
by richardjs 13y ago
It's not really a password manager--there's no shared secrets. The site identifies you by a public key. For authentication, it gives you a nonce, and you sign it with the corresponding private key. All the secrets are kept on your
42.
by richardjs 13y ago
That's a question I have. One potential answer is that it moves authentication out-of-band, in case there's a keylogger or other malicious mechanism of the machine you're using. Also, it removes the need to remember a separat
43.
SQRL - Replacement for usernames and passwords(grc.com)
205 points by richardjs 13y ago|131 comments
44.
by richardjs 13y ago
Fair enough. You have to be careful taking this argument too far, though, or you end up saying something like no other browser besides IE should be developed, because it increases the attack surface. Ultimately, individual users have to tak
45.
by richardjs 13y ago
Sure, and not browsing the Web at all is even safer. But it's nice to see developments that make insecure technologies more secure.
46.
by richardjs 13y ago
Is there a difference between the two? I assumed that without the "with", the file would still be closed once the loop was exited (and thus the reference to the file is dropped), but I'm open to the possibility that I'm
47.
by richardjs 13y ago
Is it non-idiomatic to do "for [line] in [file object]"? I use "for line in open('file')" all the time, for similar reasons as presented in the article. "for line in sys.stdin" is basically the same p
48.
by richardjs 13y ago
Super Mario 64 DS had an interesting feature where you could put your left thumb on the touch screen and use it like a joystick. The neutral zone would be wherever you put your thumb down, and a little diagram would appear on the touch scre
49.
by richardjs 13y ago
Site's broken. Clearly there is one hedgehog in space, as illustrated by the site.
50.
by richardjs 13y ago
Exactly what I was hoping for. Thanks!
51.
by richardjs 13y ago
Also related to the ads, does anyone have some marketing distillation of why they always use the words "weird trick"? Weird trick for weight loss, weird trick for language learning, etc.
52.
by richardjs 13y ago
Good point. On the other hand, many people have hand-waved the issues by saying "it's just metadata" in the sense that Schneier is describing. While Obama and the NSA might not have dismissed it that way, many people have, an
53.
by richardjs 13y ago
He's sleeping right now. Try again in twelve days.
54.
by richardjs 13y ago
PEP 8 goes on to give the rational: "Limiting the required editor window width makes it possible to have several files open side-by-side, and works well when using code review tools that present the two versions in adjacent columns.&qu
55.
by richardjs 13y ago
I wondered the same thing regarding them requesting private keys a while ago. If they could break the ciphers, why would they need the keys?
56.
by richardjs 13y ago
I don't think it's nitpicking. It's the difference between the standard way web forms work and Gmail overriding a known behavior to do something else. That said, after you hit tab, you'll probably type a word and hit space, which will then
57.
by richardjs 14y ago
Part of me wonders if Edison wasn't concerned so much with the actual answers to the questions as how an applicant went about answering the questions, and how the applicant reacted in the face of the test. Or perhaps he cared about some que
58.
by richardjs 14y ago
True, but there are other kinds of images--paintings, sketches, drawings on a cave wall. We've been putting things on walls for a long time.
59.
by richardjs 14y ago
Legal documents are easy to misinterpret. It's a shame this is the case. Isn't it part of the point of legal documents to be hard to misinterpret? Isn't that supposed to be why they use such stiff language?
60.
by richardjs 14y ago
Would it be viable to let users opt-in to selling their photos, with users and Instagram splitting the money? That seems to be a system that would appeal to both sides.

More ›