thirsteh

67 ms·

571.
by thirsteh 14y ago
Very cool. Thanks.
572.
by thirsteh 14y ago
Go right till you see a down arrow, go down until you can't go down further, then go right, and repeat. It's silly and unnecessary, yes, but not that hard.
573.
by thirsteh 14y ago
Fair enough. Can you turn off the gc/explicitly free everything? If not, then e.g. Go provides the same kind of memory management, i.e. controlling the layout of objects in memory. It would probably be helpful to define what I mean by memor
574.
by thirsteh 14y ago
Many languages provide memory safety. None of them--none in popular use, anyway--have manual memory management. Granted, most applications that are written in C today don't actually need manual memory management.
575.
Implementing fixes for the Lucky Thirteen attack on TLS CBC(imperialviolet.org)
8 points by thirsteh 14y ago|0 comments
576.
by thirsteh 14y ago
By this logic, every company that provides any kind of storage mechanism for users has to be brought down.
577.
Deconstruction of Pinkie Pie's 64-bit Chrome exploit(scarybeastsecurity.blogspot.se)
122 points by thirsteh 14y ago|33 comments
578.
Why Functional Programming Matters Summarized [pdf](xfront.com)
1 points by thirsteh 14y ago|0 comments
579.
by thirsteh 14y ago
or NaCl
580.
by thirsteh 14y ago
Yeah, I am not very optimistic about the primitives being used correctly, or any kind of safety in face of e.g. XSS. At least you can read from /dev/urandom...
581.
by thirsteh 14y ago
It's coming: http://www.w3.org/TR/WebCryptoAPI/
582.
by thirsteh 14y ago
Related: http://erlangonxen.org/
583.
by thirsteh 14y ago
Yeah, don't get me wrong. People who have nothing to add can go disappear.
584.
by thirsteh 14y ago
There's something to be said about encouraging people to use crypto software that might not be well-written, though. To me, it's fine to write whatever you want in any language you want, but if you write an application and market it as "com
585.
by thirsteh 14y ago
Really enjoyed the interview. A small side note: http://i.imgur.com/nUfqDsF.png I was confused for a second--couldn't remember what link I had opened--and only accidentally noticed the scrollbar. (1366x768 resolution.)
586.
by thirsteh 14y ago
Yes. I'm glad something's happening to prevent recurrences, but I hate that it was necessary at all. It's more than likely that no politician would have cared at all if he hadn't killed himself and that had caused a large amount of PR/publi
587.
by thirsteh 14y ago
Nobody gave a shit until he killed himself. It's kind of disgusting that that was necessary.
588.
by thirsteh 14y ago
It's not true. And yes, for equivalent bits of security, you need much larger keys with the RSA algorithm. The main reason it's not used for much beyond key-exchange is that it's thus exponentially slower.
589.
by thirsteh 14y ago
Indeed. This is the Web Crypto API. It includes access to a CSPRNG: http://www.w3.org/TR/WebCryptoAPI/
590.
by thirsteh 14y ago
> Why run Windows when every thing except for corporate servers can be done on Android or Linux? So.. everything?
591.
by thirsteh 14y ago
Same with OpenDNS, Google Public DNS, DNSMadeEasy, etc.
592.
by thirsteh 14y ago
That and "What Do You Care What Other People Think?': Further Adventures of a Curious Character." Some of the best books I've read.
593.
by thirsteh 14y ago
Encrypting files at rest means nothing if the data and keys aren't separate. It's just compliance/PR fluff.
594.
by thirsteh 14y ago
That's how Facebook Ads worked/works.
595.
by thirsteh 14y ago
Use a password manager. Random, unique passwords for every site, and one long master passphrase that is stretched by the password manager. With random, unique passwords, resource-intensive server-side hashing provides no benefit. We are doi
596.
by thirsteh 14y ago
Lawrence Lessig calls it "a critically important change that would do incredible good": http://www.reddit.com/r/technology/comments/16njr9/im_rep_zo...
597.
by thirsteh 14y ago
Try not to take offense from things so easily. I linked Ken's paper because it's related. His conclusion is that it doesn't matter how smart the users or maintainers are if somebody wants to install a clever bug. Smart and clever people can
598.
by thirsteh 14y ago
http://cm.bell-labs.com/who/ken/trust.html
599.
by thirsteh 14y ago
This is not true. Aaron Swartz is being charged for distributing non-free content that he happened to obtain that way. You make it sound like he's being charged with a felony for scraping free content.
600.
by thirsteh 14y ago
tl;dr: "we remark that all 3 languages provide easy-to-use, high-level and efﬁcient support for parallelism. Haskell has an edge in its rich libraries and aggressive optimisation. Through laziness, top-level parallelism can be speciﬁed in a

More ›