ryebit

11 ms·

1. 61.▲
   by ryebit 9y ago

   Not an expert, but from what I understand, many of these attacks rely on being able to make LOTS of attempts (on order of thousands/millions). Any factor which doesn't correlate directly to the username & password inputs shou
2. 62.▲
   by ryebit 9y ago

   If I remember how they worked (last did stripe integration a ways back), the script instruments your form's submit event to do an (ajax if possible) POST to stripe's server, which processes everything, and returns back a (merchant
3. 63.▲
   by ryebit 9y ago

   Git really needs something on par with Mercurial's TortoiseHg - it actually manages to express all the edge cases in a natural fashion, and lets you jump from cmd line to gui and back with ease (it's more of a cmdline tool tha
4. 64.▲
   by ryebit 10y ago

   Luckily, we don't deal with patient records or related PHI; which lowered concerns to the "BAA is sufficient" level. If I was running an EMR or such, I'd want the servers in a colo, with gated physical access, and contra
5. 65.▲
   by ryebit 10y ago

   Re the hack. It was a while back, but was troubling. However, they're willing to sign HIPAA Business Associate Agreements, which for my company's purpose mitigates those concerns... they're willing to be on the hook for hos
6. 66.▲
   Passlib 1.7 (python password hashing library) adds TOTP and Argon2 support(passlib.readthedocs.io)

   2 points by ryebit 10y ago|0 comments