ryan-c

32 ms·

361.
by ryan-c 9y ago
My understanding is that contract code is a "library" of sorts, that was imported or called by parity multisig wallets.
362.
by ryan-c 9y ago
The person who wrote this EIP works for Parity. If we're going to be fixing shit like this, can we also restore funds to the poor guy who got robbed of 41k ether? https://medium.com/taptrust/frozen-the-story-of-the
363.
by ryan-c 9y ago
The trick is that they want the application to be able to see what the original destination IP and port were. I'm not sure if a pf redirect preserves that information.
364.
by ryan-c 9y ago
> one ring to rule them all > may the force be with you > call me ishmael These are all in my password cracking dictionary.
365.
by ryan-c 9y ago
Copy/paste the link, do not click.
366.
by ryan-c 9y ago
Can we get work factor/parameter recommendations for scrypt, pbkdf2, bcrypt and argon2?
367.
by ryan-c 9y ago
5000 iterations of PBKDF2 is very low. I'd use at least 100,000. Benchmark it, but that should be reasonable even on mobile provided you're caching the keys.
368.
by ryan-c 9y ago
IPSec has a boatload of possible configurations, many of which are not secure. It's kind of a tire fire.
369.
by ryan-c 9y ago
You can bypass these routers with an 801.1x MitM attack. You basically put it behind your Linux router and bridge only the EAPoL frames, then do DHCP from your own router. I posted some details about this on DSLReports[1]. I have been using
370.
by ryan-c 9y ago
http://www.drrichdentistry.com/contact-us < Let them know that they've mistakenly hired some blackhat seo people.
371.
by ryan-c 9y ago
Oh, this looks cool. I was looking into building something with a respeaker not too long ago. How does your business model work that you're letting people DIY for free?
372.
by ryan-c 9y ago
...negative thirty percent?
373.
by ryan-c 9y ago
Adrian identified as bisexual, not gay. https://www.quora.com/If-youre-bisexual-and-coming-out-could...
374.
by ryan-c 9y ago
Are you implying that LinkedIn isn't creepy?
375.
by ryan-c 9y ago
My read of this is that embedding a tweet is not copyright infringement, rather the issue is that the tweet in question, was itself, infringing a work. This is still a bad ruling, of course.
376.
by ryan-c 9y ago
> OK, so now if Bitmain develops an ASIC they just won't tell anyone about it. "Moving forward, developers will seek to protect the network’s ASIC resistance by slightly modifying its PoW algorithm at every scheduled hard fork,
377.
by ryan-c 9y ago
Generally greylisting is supposed to let future emails through once it establishes that a server will re-send. It should be possible to detect greylisting and warn the user. "Your email provider temporarily rejected our email to you. W
378.
by ryan-c 9y ago
If the server requires me to send it the md5 of my password (for example), it still has to store something to validate the password, which can then be cracked.
379.
by ryan-c 9y ago
You would still offer a "password reset" feature. Tell them to write it down or keep it in a password manager, and provide links. Maybe call it an access code rather than a password to avoid "don't write down your passwo
380.
by ryan-c 9y ago
That's fine. Storing passwords in plaintext is the problem. It could be displayed as selectable/copyable but not visible text by default with a "reveal" button to prevent shoulder surfing.
381.
by ryan-c 9y ago
How many people are going to memorize something like this? fvtwt gvltv wlbth wgwdh njfnn
382.
by ryan-c 9y ago
Did you ever use StartSSL? They did TLS client auth and it was surprisingly terrible.
383.
by ryan-c 9y ago
> That pretty much requires you to use something like 1password That's the point. > you don't know any of your passwords so you cannot even log onto any of your accounts to change them Nearly every service allows email-based
384.
by ryan-c 9y ago
I think "magic login links" are fine for most services. Doing 2FA with that is not feasible though, unless you want to argue that receiving the email counts as "something you know" or that "something you have plus s
385.
by ryan-c 9y ago
My (probably unpopular) opinion is that passwords should be randomly generated by the service, and not possible to change to a user-selected value. If you allow people to choose their own passwords, the vast majority will reuse them, and th
386.
by ryan-c 9y ago
I applied for "port 43" access to GoDaddy's normal whois records (still "domains by proxy" if private registration) this week. They require you to sign a very short contract stating what you're using it for and
387.
by ryan-c 9y ago
Yes, I did. It was clean as far as I could tell. It was not just Microsoft, I also had issues with Yahoo, AOL and some others. The block I'm in is listed in some RBL called "spamgrouper"[1] but as far as I can tell nobody pay
388.
by ryan-c 9y ago
I just went through the pain of switching to a new IP for my mail server a few months ago. All major providers except Google were putting my messages in the spam folder by default despite me getting myself whitelisted in DNSWL and having pr
389.
by ryan-c 9y ago
> These myths are popular, in my experience they are not true. I am speaking from personal experience. I've run my own mail server for about 15 years. A few months I had to publicly complain on twitter about Microsoft blocking my em
390.
by ryan-c 9y ago
> You don't need an email provider, you can just set up a mail server on your own computer. Not really. It's not possible to send mail from a dynamic IP at all, and there is a lot of technical minutia to not get thrown in the s

More ›