snowwolf

27 ms·

211.
by snowwolf 10y ago
True, that would be an extra bonus if Heroku started allowing replication to non Heroku instances, but as long as they support logical replication to a Heroku Follower instance then you can upgrade to new major versions with near zero downt
212.
by snowwolf 10y ago
Please can the Postgres team put some major focus on completing logical replication [1]. It's the missing piece to making upgrading across major versions painless and quick on large databases so that we can take advantage of all these
213.
by snowwolf 10y ago
"Please also note that Point will share in any increase in property value due to remodeling changes you might make." And they don't contribute to any property maintenance costs. Nice. So they get to take part in full asset ap
214.
by snowwolf 10y ago
I prefer to do email suggestion rather than validation - The only validation I have is that it should contain an @. And then use something like http://getmailcheck.org/ to suggest spelling corrections for common domains. We
215.
by snowwolf 10y ago
> What on earth are you on about? You can have the most secure/hardened email server on the planet but if I can change your mx record at your dns provider it will do you no good. And there are multiple attacks against DNS that don&#
216.
by snowwolf 10y ago
So you're running your own DNS server then too right? A hardened email server doesn't prevent a targeted attacker from just redirecting your mx records (as happened to OP). > but I don't trust Google, Github, Facebook et a
217.
by snowwolf 10y ago
> with a little extra attention, I can secure my system without 2FA and achieve comparable security How? Lets play devils advocate here and pretend your email is compromised (account takeover or redirect). What have you done on any of th
218.
by snowwolf 10y ago
In an organisation on github you can see all members who don't have 2FA (indicated by a red !) - https://github.com/orgs/<org-name>/people No way to mandate 2FA yet though.
219.
by snowwolf 10y ago
> The OP's mess could have been avoided if he'd ... you know ... systematically chosen secure passwords. In this exact scenario that is true but in general, not necessarily. He could of had a very secure password on his dns pro
220.
by snowwolf 10y ago
How does vesting solve that? Which would you rather have (giving a simple example of 1% options vested over 4 years) - 0.25% in 4 different companies or 1% in 1? This is essentially the argument against 10 year exercise windows - it allows
221.
by snowwolf 10y ago
I understand where the 10 year exercise period came from and I can understand the arguments against it. A solution I haven't seen put forward is a compromise between the common 90 day window and the 10 year window, which is to have an
222.
by snowwolf 10y ago
"A degree just gives you knowledge in a specific area, and does not make anyone more intelligent just by having it." I've always felt the most beneficial part of higher education isn't the knowledge gained but the way yo
223.
by snowwolf 10y ago
"... delivered on time and within budget ..." So for a project of this scale and timeline, they managed to use up exactly all the budget... (I assume it would say under/over budget if it was a significant amount off). What ar
224.
by snowwolf 10y ago
My phone is always more accessible in my pocket than a card in my wallet, so it's easier to use.
225.
by snowwolf 10y ago
You can use it for a Monday-Sunday travelcard https://tfl.gov.uk/fares-and-payments/contactless/what-is-ca...
226.
by snowwolf 11y ago
Are you sure you're roaming? Or did you buy a pay-as-you-go local SIM? I'm unaware of any provider who actually discounts texts/calls while roaming. Three in the UK charge you the same price in some European countries but tha
227.
by snowwolf 11y ago
There is roaming in the EU, but it's not cheap - but that is changing very soon https://ec.europa.eu/digital-single-market/en/roaming-tariff... At which point you can just get your anonymous SIM from any EU c
228.
by snowwolf 11y ago
> 4. With thissaid, we've used this as a learning example and additional training has been provided to the individual involved This is not the correct solution. What's to prevent the next new person from making the same mistake
229.
by snowwolf 11y ago
Could high turnover in infancy stage startups be addressed by instead of giving 10 years from grant date you give 'time employed' from leaving date? Better than the current 90 days but still gives incentive to stay with a company
230.
by snowwolf 11y ago
From the article: "Somewhere along the way an account with a large and conservative following retweeted it, an action that flooded my notifications page" The point being that even if you are trying to use twitter as a social netwo
231.
by snowwolf 11y ago
> I can say random stuff on Twitter because I have ~300 followers—even if every single one of them tweeted at me, it wouldn't matter. Until someone with 100K followers retweets one of your tweets that is maybe contentious. And then
232.
by snowwolf 11y ago
I still don't understand why tech media (and the rest of the industry) are still not calling out these silly valuations for what they are - marketing spin. With term sheets the way they are with liquidity preferences if I as a VC inves
233.
by snowwolf 11y ago
I'd image they'd just block access to anyone connecting from a Datacenter/Cloud Provider, using a dataset like this one https://github.com/client9/ipcat . I'm sure there are more complete paid for da
234.
by snowwolf 11y ago
And my point is the opposite Developing the tests is an iterative process that refines your understanding of the problem and the correct solution, and only once you've done that do you know enough to write appropriate code.
235.
by snowwolf 11y ago
Anecdotal, but I've always found that if you can't write the test first it's a good indication that you probably don't yet have a good enough understanding of the problem you are trying to solve. Regarding the rest of th
236.
by snowwolf 11y ago
The ideas and models are interesting from a systems thinking perspective and it is certainly true that local optimisations can have unintended systems consequences, but unfortunately it doesn't model reality when it comes to London. Th
237.
by snowwolf 11y ago
They did actually change the title [1] - It was misleading before, and in fact the heading of the article still is - "How we cracked millions of Ashley Madison bcrypt hashes efficiently" - impliying they are able to crack bcrypt e
238.
by snowwolf 11y ago
They generated login tokens using md5 hashes of strings that included the password. This is rolling your own encryption.
239.
by snowwolf 11y ago
The title of the article should really be changed to "How we cracked millions of Ashley Madison passwords by bypassing their strong bcrypt hashes because they thought they were clever" but that's less clickbaity Also, never e
240.
by snowwolf 11y ago
Is that the point though? To be more productive? I'd be more interested to know if you were at least equally as productive and more importantly happier? I would think it's about improving your work/life balance and long term

More ›