rnovak

28 ms·

211.
by rnovak 11y ago
Yes. A valid hash function certainly can be defined as a F(n): N x N -> n % 100 But that certainly cannot be considered a reasonable hash function. A string is basically an array of bytes (or code-points, in case of UTF-8). To have any
212.
by rnovak 11y ago
I have two kind of nits with this logic, but I could totally be wrong, and you should feel absolutely free to correct me. I'm fairly positive that a unit of measure should _ never _ be variable, otherwise it's fairly pointless.
213.
by rnovak 11y ago
I was going to post exactly this. Our IT/Helpdesk/(whatever they want to be called this week) puts a custom image on to every machine we get, regardless of the brand, and I couldn't imagine doing anything else. For one, many
214.
by rnovak 11y ago
I'd personally suggest using a better IDE. It may be "expensive", but I've bought personal licenses for IntelliJ products a while ago, and renew yearly. It's a very small price to pay for productivity. Not to mentio
215.
by rnovak 11y ago
I read enough to know what the author was asserting (that finding candidates is harder than filtering candidates), and I stopped when I realized her supporting claims were ignorant. But people do this all the time. When people argue in
216.
by rnovak 11y ago
But they wont turn them away, and that's my problem with the article. I went to an absolute shit school (like, bottom 150 of world ranked schools) an I had interviews that lead to offers with Google, Facebook, Microsoft, Intel, among o
217.
by rnovak 11y ago
I went back and read the whole thing, still could have stopped after the first point, everything else is just a supporting argument. However I've read posts where you disagree with the same exact sentiment: credentials don't tell
218.
by rnovak 11y ago
In an article claiming that finding candidates is harder than filtering candidates, her first point ends by saying "hey, you could just crawl all the job sites for people who work for Google/Facebook and went to MIT". How
219.
by rnovak 11y ago
I'm really sorry, but I stopped reading when it was implied that the "good" engineers are the ones at Facebook/Google that went to MIT. If that's your idea of a necessary condition for "good" engineers, I
220.
by rnovak 11y ago
Aren't like 95%[0] of all cases settled before they even reach trial? To me it seems like that would indicate this logic isn't entirely flawed. [0] http://thelawdictionary.org/article/what-percentage-of-lawsu
221.
by rnovak 11y ago
I get that people will probably disagree, but she just seems to not make very good business decisions. Maybe I'm way off base, but I've read a bunch of well qualified lawyers say that juries are just plain unpredictable, and that
222.
by rnovak 11y ago
but AT&T isn't in trouble for enforcing QoS, they're in trouble for throttling connections down to dial-up speed after a usage cap. Even when read in the most beneficial light, no way can the word "unlimited" be inte
223.
by rnovak 11y ago
> not cool that your vm was promptly rebooted to apply fix Not sure where you got the "not cool" part, I believe the parent post just said "this happened", not "it sucks that this happened", I coul
224.
by rnovak 11y ago
I've seen the same thing, but I tried to account for it in the 10-15% of cases where I haven't had success. Once I notice that it's not really going well, I try to politely as possible suggest that maybe we adjourn, so as to
225.
by rnovak 11y ago
I'm not sure how asking someone who's going to be working in computer programming something about computer science is equal to asking someone who's going to be working in computer programming something about medicine. Those t
226.
by rnovak 11y ago
I don't necessarily agree though, I think if you can reason about a problem, you are infinitely more valuable than someone who memorizes problems and just applies them blindly. Correct me if I'm wrong, but a binary search tree is
227.
by rnovak 11y ago
No it wouldn't, it just would have been reported to the IRS. Not illegal, just reported for tax purposes
228.
by rnovak 11y ago
This may just be my graduating class, at my school, but when I graduated, there were 5 people (out of 34-ish) that weren't employed as they graduated. Every other person had interned/worked, and had a full-time position. But thi
229.
by rnovak 11y ago
Yeah, I whitelist IPs, and just drop all other packets, so I'm not really worried, but thanks for the advice, it's always good to get other peoples opinions on best practices.
230.
by rnovak 11y ago
oh yeah, sorry, I didn't mean to make it out like I was complaining. I log all blocked traffic, so I get data related to ports other than just SSH. I was more lamenting that people even want to attack my VPS, as there's really n
231.
by rnovak 11y ago
From what I could gather, is that because most port knocking examples use 3 port sequences, that boils down to 3 Unicode characters. Likening that to a password, I think he's saying putting a layer of security in front of SSH, protec
232.
by rnovak 11y ago
I am/was in the same situation as far as popularity goes with my desktop application (for OSX), and I personally went the route of not monetizing at all. To me, the knowledge gained through every feature I added and every bug I fixed i
233.
by rnovak 11y ago
That will not affect the behavior of bad tenants. I'll give a simple example. my aunt owns a house here in AZ, and one out in NY. Lives in each for 6 months out of the year (ish). When she's not there, she rents them out. About a
234.
by rnovak 11y ago
If someone who is renting nightly is noisy, what happens? They might get fined, told not to come back. What happens when the next nightly renter is noisy? That person gets fined/told not to come back. The punishment for one tenant acti
235.
by rnovak 12y ago
I might get down-voted for this, but I'm going to clarify my position a little. I'm not advocating for shutting-down anyone's discussion. What I, and probably others, are advocating for, is only putting in trust in proven c
236.
by rnovak 12y ago
It's worth it. And yes, I have done that, it's not a mystery, they all provide a API/ABI for interacting with them[1], such as OpenSSL's Engine API or PCKS#11. Edit: There's even a project to literally do this dir
237.
by rnovak 12y ago
Could not agree more. In fact, here is Bruce Schneier's quote[1]: Anyone can invent a security system that he himself cannot break. I've said this so often that Cory Doctorow has named it "Schneier's Law&q
238.
by rnovak 12y ago
Once you use Encryption, it's no longer pepper, it's encryption with weak key storage (hard-coded). At that point, genuinely, why not just follow best practices and store the key securely (e.g. using an HSM)?
239.
by rnovak 12y ago
Correct me if I'm wrong, but an algorithm is a set of steps, which this looks like to me salt = urandom(16) pepper = "oFMLjbFr2Bb3XR)aKKst@kBF}tHD9q" # or, getenv('PEPPER') hashed_pa
240.
by rnovak 12y ago
I cannot agree with this comment more than I do. Also, thank you for your service.

More ›