thirsteh

25 ms·

211.
by thirsteh 13y ago
What is that ending?
212.
by thirsteh 13y ago
Yeah. Stop being such pervs, independent news outlets!
213.
by thirsteh 13y ago
"Won't you think of the children" indeed.
214.
by thirsteh 13y ago
"I just wanted to tell you good luck--we're all counting on you."
215.
by thirsteh 13y ago
I agree with you, but change SQLite to MongoDB and you have a significant share of the "next big startups," at least.
216.
by thirsteh 13y ago
I may be cynical, but I think we're only just now entering a world of hurt where home automation system providers learn about information security the hard way. Also, pretty funny: http://i.imgur.com/ouoxxoZ.png
217.
by thirsteh 13y ago
Only in America is a tax increase equated (without any further investigation) to depressing the economy, and a tax break (once again without investigation) equated with letting the peacock that is the economy fly free.
218.
by thirsteh 13y ago
Let's not make this like reddit where there's scores of people who have nothing to do but complain about something they've already seen. If it's interesting, it's interesting. If it's not worthy of being seen a
219.
by thirsteh 13y ago
Ahh, hipsters.
220.
by thirsteh 13y ago
That isn't how you do it?
221.
by thirsteh 13y ago
Did they previously have client-side validation of the self-signed certificate, and now they changed it to "accept any cert signed by a root CA"? If so, why in the world would they do that? Maybe I'm being hopelessly optimist
222.
by thirsteh 13y ago
But it is pretty amusing.
223.
by thirsteh 13y ago
That's a pretty moronic way of looking at it.
224.
by thirsteh 13y ago
I love it! So many companies have made it a massive pain to use password managers, and thus unique, random and strong passwords for individual sites, all in the name of "security," using that property. I wish all browsers/pas
225.
by thirsteh 13y ago
> Sublime Text has a pretty decent API. I wonder in what aspects Atom's extensibility is going to be different/better. It clearly is. It has Node.js support. (/s)
226.
by thirsteh 13y ago
> "IP theft" is pretty much impossible to achieve. You're thinking of infringement. Nope, I'm really thinking of theft. And it's quite possible to achieve. In fact, it happens quite often; it's just hard to
227.
by thirsteh 13y ago
Oh, sure, but it's contingent on him being in the U.S. (Same for a company.) It is Mexico's decision to "extradite" him. Similarly, Brazil could convict me of whatever it wanted if I went there. Then it just becomes a di
228.
by thirsteh 13y ago
That's all well and good, but Mt. Gox likely won't conduct any more business in NY. It gets even more problematic if they don't actually operate any legal entity in the U.S. The U.S. may enforce its laws upon U.S. entities, b
229.
by thirsteh 13y ago
> As for OS X release, I'm sure they released it as fast as they could. It has nothing to do with releasing along with FaceTime integration, and everything to do with 10.9.2. was already going through the GM process, and it was fast
230.
by thirsteh 13y ago
Then we Danes would like our ice cube bags back, please.
231.
by thirsteh 13y ago
No. There's absolutely a gain. A big one, too. The main reason it isn't done today is not that it isn't useful, but that it's too slow to run e.g. bcrypt on the client without native browser APIs. WebCrypto will change t
232.
by thirsteh 13y ago
We are just talking about scrambling the password. You would still be using e.g. SSL/TLS or TLS-SRP for the transport. There's nothing "useless" about it.
233.
by thirsteh 13y ago
To your last point about regexes: I think the general idea is to discourage their use, at least as a default. It is so easy to use them in Perl that they are used way too much, e.g. when you could do a regular (and faster) string search.
234.
by thirsteh 13y ago
Well, to be fair, you can't entirely rule that out...
235.
by thirsteh 13y ago
Why do you think it's useless? Not transmitting the password in plain text is clearly a win, and you can do whatever checks you need on the client side just as easily. (If a user wants to fool whatever checks you have, they can do that
236.
by thirsteh 13y ago
You might want to add "with a high number of iterations or work factor," at least. PBKDF2-HMAC-SHA-256 is just as useless as 2xSHA-256 if you just do one iteration.
237.
by thirsteh 13y ago
This is all terrible advice. Please stop giving it.
238.
by thirsteh 13y ago
Don't question the power of the cloud!
239.
by thirsteh 13y ago
Line 631 in the second column for anyone wondering.
240.
by thirsteh 13y ago
It would be nice if massive meant "more secure," but the real relationship is not between an organization's size and its security, rather it's about how much that organization tries to minimize, or displace, risk. Very l

More ›