ryan-c

79 ms·

841.
by ryan-c 12y ago
I'm pretty sure my marginal rate for power is 35c/kWh here in the bay area. I think PG&E may have special rate plans for EV charging though. Edit: Oh, this is handy: http://www.pge.com/cgi-bin/pevcalculato
842.
by ryan-c 12y ago
Title is misleading, the action taken prevents all US companies from selling them a wide range of technology products.
843.
by ryan-c 12y ago
Can we get a title change? It's misleading. > ... Uncle Sam has put this supercomputer centre, together with National University of Defense Technology in Changsha, the system’s creators, and Tianjin centre, among others, on so a so-
844.
by ryan-c 12y ago
> Wildcards are explicitly banned by browsers and CAs when making the EV requirements: otherwise you get .company.com being used for bankofamerica.com.company.com like what happened with DV certificates. Name validation is supposed to,
845.
by ryan-c 12y ago
I've found that CAs sometimes actually do require the country to be present for some reason. Anyway, in case it it useful to someone, here's a one-liner to generate a key and CSR: DOMAIN=example.com sh -c 'openssl req -
846.
by ryan-c 12y ago
This was first posted on hackernews here: https://news.ycombinator.com/item?id=232192 It's about seven years old now, and is showing its age in a few places. The version control like seems most in need of updating now
847.
by ryan-c 12y ago
FYI, there are mod kits for sodastream machines to connect them to large CO2 tanks. I installed one on mine recently, love it so far.
848.
by ryan-c 12y ago
This FAQ was posted in the comments of a previous posting: https://webcache.googleusercontent.com/search?q=cache:http:/...
849.
by ryan-c 12y ago
What if the brain could be replaced incrementally with synthetic neurons using some sort of nanotech? Is it the same mind when it's done? This is a variant of the old Ship of Theseus paradox[0]. Another question - can the "program
850.
by ryan-c 12y ago
There are a bunch of USB device classes with generic drivers that will work even with an unrecognized VID/PID. Mass Storage and HID (keyboard/mouse) are the most common ones. I have only experimented a little, but it seems that un
851.
by ryan-c 12y ago
Right. What I meant was that I don't think it was vulnerable to a meet-in-the-middle attack (which makes it trivial to crack) on purpose.
852.
by ryan-c 12y ago
Are you sure about that? I'm more familiar with oclhashcat, and it certainly can't keep the GPU busy with a pure dictionary attack. It'll feed the GPU with a dictionary, then apply rules on GPU to generate variants.
853.
by ryan-c 12y ago
> (The same thing happened for the DVD encryption. Someone asked an engineer for encryption. The engineer just happened to have made it easy to bruteforce the key, negating the entire point of the encryption.) The DVD Content Scramble Sy
854.
by ryan-c 12y ago
From http://manpages.ubuntu.com/manpages/trusty/man5/crypttab.5.h... The second field, source device, describes either the block special device or file that contains the encrypted data. Instead of g
855.
by ryan-c 12y ago
LUKS supports encryption of block devices. Linux has robust support for using regular files as block devices via the loopback driver, so you can have a file as an encrypted container just fine.
856.
by ryan-c 12y ago
https://scotthelme.co.uk/hpkp-http-public-key-pinning/ Chrome also preloads HPKP information for many sites. It's interesting to note that certificates signed by a locally installed CA (e.g. an org's MitM pro
857.
by ryan-c 12y ago
A lot of password hashing APIs have two calls - one where you provide the password (and possibly work factor) and it returns a hash that includes a randomly generated salt, and another where you pass in the hash (which includes the salt and
858.
by ryan-c 12y ago
Cryptocurrency mining ASICs cannot be used for password cracking because they are not designed to hash arbitrary strings, and do not support arbitrary scrypt parameterization. They are designed to take in a block template of some sort, and
859.
by ryan-c 12y ago
I don't think that's a "better argument". I think it's a second, also good, argument that I didn't repeat because it's been mentioned by several other people. Your argument is about protecting trivial pass
860.
by ryan-c 12y ago
If you have a high cost and low cost hash, someone getting the password database can just crack against the low cost hash. Even if the low cost hash is short so that it frequently returns a false okay (say a nice round number like 1/25
861.
by ryan-c 12y ago
I believe HTTP basic auth checks the username and password on every request. It's pretty rarely used these days though.
862.
by ryan-c 12y ago
This article says salting hashes is only useful against rainbow tables. That does not make sense to me. Say you have a password database with 10,000 users in it. You want to see if any of them used "Passw0rd$". Without salt, you c
863.
by ryan-c 12y ago
The best way is to ask them - my experience has been that people tend to be fairly comfortable discussing per share prices. I used to work at Palantir. If I want to know what my shares are worth, GSV (which is publicly traded) owns Palantir
864.
by ryan-c 12y ago
I'm curious why you say that. I found it very impressive from a technical standpoint.
865.
by ryan-c 12y ago
No judge commentary (I'm a little disappointed, I was hoping someone would comment on the constant I used), but most of the entries are documented. I put my own entry on github last week for easier reading: https://github.co
866.
by ryan-c 12y ago
Google search for the article - click the first link to get past the paywall. https://www.google.com/search?q=U.S.+Coding+Website+GitHub+H...
867.
by ryan-c 12y ago
Is it possible to get the source bits back from the password?
868.
by ryan-c 12y ago
If Google stored their domain info in a blockchain how would anyone know what identifier actually belonged to Google? The last time I brought this up you admitted there was no good solution yet, has that changed?
869.
by ryan-c 12y ago
In the US, the difference between "fair market value" and exercise price is subject to AMT. The short explanation is that if you exercise ISOs, you need to calculate your tax under AMT rules (which consider the spread taxable inco
870.
by ryan-c 12y ago
Define "legitimate reasons". One reason someone might be interested is that my billing information would not be available in case of a compromise of the billing system (which happens). Also, nobody can social engineer information

More ›