tbrowbdidnso

6 ms·

1.
by tbrowbdidnso 10y ago
I agree. Who runs arbitrary code in a JVM these days? We have real hardware based virtual machines now, making this irrelevant. Back in the day Java JVM was the best way to run untrusted code close to native speed. That hasn't been the
2.
by tbrowbdidnso 10y ago
Yeah same here, can somebody find us a pirate bay link?
3.
by tbrowbdidnso 10y ago
For the love of God it's not the traffic its lack of public transport. Once you hit a certain density CARS_DONT_WORK . Having lived in NYC, visiting LA was a joke. The first thing I did after my first cab ride from the airport was look
4.
by tbrowbdidnso 10y ago
What we seem to be running into, is that any strategy based on trusting some sites and not others breaks when very large groups of sites have opposite opinions. Depending on your starting set you will end up with wildly diverging trust scor
5.
by tbrowbdidnso 10y ago
Seen the pictures of guys in boats floating out in the kamiokande? I always thought it was the coolest looking experiment. I was really sad when all the bulbs broke years back :'(
6.
by tbrowbdidnso 10y ago
Are they? This news saddens me greatly.
7.
by tbrowbdidnso 10y ago
Fake news is just a new version of spam sites. They mostly exist to make money or enforce an agenda. People figured out that Google's algorithms could tell when things were generally factually false, unless those things were recent new
8.
by tbrowbdidnso 10y ago
Does that change anything I said? All this marketing doesn't seem to lead to anything tangible unlike similar releases from other big companies. It's just fluff. I'm aware the IBM does consulting and that's possibly the
9.
by tbrowbdidnso 10y ago
https://www.google.com/amp/s/nakedsecurity.sophos.com/2015/0... Not the FBI per se, but it shows that someone is clearly attempting to compromise TOR users. Also there's been whispers about it forev
10.
by tbrowbdidnso 10y ago
If anyone had one it would be Google :)
11.
by tbrowbdidnso 10y ago
Can somebody tell me something cool IBM actually does for real besides run softlayer? I'm so tired of endless waves of marketing bullshit with no substance. At least when most companies announce something it's a tangible product I
12.
by tbrowbdidnso 10y ago
You can see from this that google considers text earlier in the page more important. This page is odd because the false answer is presented first, so google fails to see it. It could tell that the form of the sentence was an answer to the q
13.
by tbrowbdidnso 10y ago
I'm no wizard, but in writing blog articles I've found ways to fool Google into believing me. The problem with their algorithms.... is that all that statistics in the world can't help you when you're listening to a guy t
14.
by tbrowbdidnso 10y ago
You should remember that the early cloud unicorns are getting super low rates for their name clout as well. Their discounts are passed as extra costs to everyone else. So while it may be worthwhile if you're huge enough to get a big di
15.
by tbrowbdidnso 10y ago
I believe the truth is somewhere in the middle. The hype will eventually die down and we'll see some kind of equilibrium. I've been experimenting with "cloud over" where I only use cloud servers for spare capacity. With
16.
by tbrowbdidnso 10y ago
Google ran on desktop computers for a long time. If anything, the cloud is less reliable than individual machines once were. You have no control over when or why one of your VM's goes down, and there's nothing you can do but wait
17.
by tbrowbdidnso 10y ago
I know it's a controversial opinion. And probably not even true in a lot of cases... but I'm glad it sounds like I'm out in left field. The echo chamber needs a devil's advocate and sometimes the resulting discussion get
18.
by tbrowbdidnso 10y ago
Possibly outgoing bandwidth. These costs are directly proportional to traffic and regularly 20-30x the unmetered rate for a colocated box
19.
by tbrowbdidnso 10y ago
Running on rented hardware is the equivalent of a traditional product company renting all of their factories. Almost any company of reasonable size will want vertical integration of their supply chain and web companies are no different. Usi
20.
by tbrowbdidnso 10y ago
There is nothing hard about running hardware. The current VM trend gives you bare metal access. the only difference is you have to plug in your machines, and you get to look at them every once in a while. Really, what software dev hasn&#x27
21.
by tbrowbdidnso 10y ago
So everyone says the cloud is the future. I get it. But is this the truth, or what all the tech giants want people to believe? Don your foil hats for a moment and listen to me. All the original internet companies run their own hardware. The
22.
by tbrowbdidnso 10y ago
What? I've never run a parallel op on the GPU but I do on my CPU multiple times a day. GPU acceleration besides games is still extremely rare. You're grasping straws here. You're also missing that even on chrome the js and la
23.
by tbrowbdidnso 10y ago
I never understood this logic. Investors want unicorns but it's not like they're going to hate you for only giving them a 5x ROI. Most startups either fail or become small businesses. Investors are giving you money to fund a busin
24.
by tbrowbdidnso 10y ago
I will never take startup advice from investors. They care about your company and their money, not you. Of course they're going to tell you not to worry about giving more of the company away, they don't care who owns it. More mone
25.
by tbrowbdidnso 10y ago
You can mix the hash with a salt that the attacker doesn't and cannot ever know. This is pretty standard and prevents the leak of timing from revealing anything about the hash. The only time this fails is if your hash function is broke
26.
by tbrowbdidnso 10y ago
If you want to avoid timing attacks on the username and pw isn't the easiest way to just hash them as if they're both passwords? (at least on initial login). Since the hashes are cryptographically secure you can't infer any t
27.
by tbrowbdidnso 10y ago
Also keep in mind that even the mighty Google has some rusty and pointy internal tools. There's no reason to mention any crappy things in a book about good practices ;).
28.
by tbrowbdidnso 10y ago
He resigned on his own terms. I know executives pull that crap all the time to avoid getting "fired" but the fact is he quit voluntarily
29.
by tbrowbdidnso 10y ago
The author is mistaken about the side channel existing. In the most common case of login and token generation it just doesn't. With logins you compare the hashed password to a stored hash. The author mentions that you can tell how much
30.
by tbrowbdidnso 10y ago
The TLS negotiation is mutual. Both endpoints tell each other what they support and they agree on a protocol that's mutually supported. If merely advertising 1.3 while still advertising older versions causes blue coat to break, it has

More ›