richo

17 ms·

31.
by richo 13y ago
I dunno man, fappyholidays.com ?
32.
by richo 13y ago
Merry Christmas, all.
33.
by richo 13y ago
Your patch.. fixes.. one of the issues. Kinda. I commented with a link to the CPRNG you should be using.
34.
by richo 13y ago
Pretty much immediately I found a bug in his session generation: https://github.com/davidmoreno/onion/blob/master/src/onion/s... The fact that in amongst the doc comment is "not really saf
35.
by richo 13y ago
You're assuming that the average HN is in a position to audit crypto code. We use well audited crypto primitives with formal proofs because they're known safe, or at least orders of magnitude safer than whatever these fools cooked
36.
by richo 13y ago
Amusingly, I went to a meetup with some feds the other day. Their statutory minimum to investigate is 5k, but they suggested it's worth getting in touch with them either way. If nothing else, it'll give them an excuse to say &quot
37.
by richo 13y ago
This alone should have blocked your launch. Crypto done right is innately pluggable, by virtue of being composable primitives. Between this and your "but we totes destroy ciphertext after T seconds" (which is just flat out untenna
38.
by richo 13y ago
"secure" I weep for all the claims this makes about security.
39.
by richo 13y ago
C++11 is actually really, /really/ nice. If you haven't already you should read up on it. I was hating c++ for vague reasons I couldn't place. I was wrong.
40.
by richo 13y ago
Would really love to see this with up to date data. Edit: Just saw the author explain why that won't happen.
41.
by richo 13y ago
In the US 3 years of work experience is good for 1 year of "uni". So 12 years industry experience is a 4 year bachelors degree for immigration purposes.
42.
by richo 13y ago
My understanding was that despite "permanently deleting" if you go back and sign up it'll all magically restore.
43.
by richo 13y ago
Given the username and the domain, I'm thinking not.
44.
by richo 13y ago
Oh, now I see what you're driving at. I'm still pretty stunned you weren't able to get in touch with them.
45.
by richo 13y ago
When I had issues I just put it through their "how was the ride" thing that pops up after every ride, and they sorted it for me that day.
46.
by richo 13y ago
Not strictly accurate, in the "Why would you want to do this" regard. Ages ago I was hacking linux onto an ARM soc that claimed to have memory it didn't (it wasn't aware of the display's DMA segment). It was near th
47.
by richo 13y ago
I don't know why he's trying to turn this into some deepseated thought about "knowing your boundaries". It seems to me like his whole point is that naively templating one language with another is a bad idea (is is). When
48.
by richo 13y ago
Did they actually do any kind of benchmark to see if it affects performance? The memory and parse time argument is invalid imo. Lexing a file with wildly abudant whitespace is going to take a delta longer that's insignificant compared
49.
by richo 13y ago
Because if you need to transfer someone who's in cuffs, you don't want to be pissfarting around exchanging keys. Thus most cuffs have the same key.
50.
by richo 13y ago
I hope we've learned a valuable lesson about deserting ops teams today.
51.
by richo 13y ago
I've been struggling to light up new ec2 instances via the API: <?xml version="1.0" encoding="UTF-8"?> <Response><Errors><Error><Code>Unavailable</Code><Message>The ser
52.
by richo 13y ago
Not sure what could be more relevant to devops than idiomatically updating state.
53.
by richo 13y ago
I typically respond fairly abruptly, asking where specifically they got my contact details. If they respond nicely, and with a plausible explaination I'll generally thank for them for their interest, but tell them I'm not interest
54.
by richo 13y ago
This is an absurd proposal, but given that the Rio won't let people running pubs in this years call for parties attach stuff to the walls (Can't find the link offhand, but it was in the submission info), I think it's safe to
55.
by richo 13y ago
https://news.ycombinator.com/item?id=6024094
56.
by richo 13y ago
Honestly, I doubt it. They had a legit enigma machine last year. It was cool. Their booth was busy because of it. That said, I doubt anyone interested in working for the NSA would be put off by this/the recent leaks, or that anyone who
57.
by richo 13y ago
It basically means that spot the fed will be more eventful this year.
58.
by richo 13y ago
It turns out that compression with TLS is hard.
59.
by richo 13y ago
I saw an awesome talk my mnot recently about http/2.0 for which I'm really excited. A large part of it was basically "Lessons we learned from SPDY" which is great, in the longterm. Personally I feel SPDY was a huge benef
60.
by richo 13y ago
You can, but then you've got to write this enormous block comment saying "I realise this looks wrong and broken, but ssl is also broken so don't change this constant", until some junior dev inevitably does anyway. Having

More ›