thomas-st

9 ms·

31.
Comprehensive Experimental Analyses of Automotive Attack Surfaces(youtube.com)
2 points by thomas-st 13y ago|1 comments
32.
by thomas-st 13y ago
The thing that changed in 0.8 is that references are now stored as ObjectIds only instead of storing both the table name and the ObjectId (you can still get the old behavior by using dbref=True). However, you would still have to check wheth
33.
by thomas-st 13y ago
Regarding schematics: We actually developed a object validation library that's very similar to it. It's called cleancat. It comes with some MongoEngine-specific fields to validate references. It's best to look at the unit tes
34.
by thomas-st 13y ago
Thanks Dorian, we write our posts in Markdown and use simple static content generation: https://github.com/elasticsales/hack.close.io
35.
Introducing MongoMallard: A fast ORM based on MongoEngine(hack.close.io)
51 points by thomas-st 13y ago|13 comments
36.
Sales search: Writing a query parser/AST using Pyparsing+Elasticsearch (part 2)(blog.close.io)
8 points by thomas-st 13y ago|2 comments
37.
by thomas-st 13y ago
What is the specific problem with the top bar? It goes away for small window sizes.
38.
Sales search: Writing a query parser/AST using Pyparsing and ElasticSearch(blog.close.io)
17 points by thomas-st 13y ago|1 comments
39.
by thomas-st 14y ago
Is it possible that a (non-privileged) process could read data of a process that has previously terminated by looking at uninitialized memory and gain access to sensitive information that way?
40.
by thomas-st 14y ago
Thanks for noticing. Looks like a HN bug. I copy pasted the URL with the apostrophe.
41.
Shamir's Secret Sharing(en.wikipedia.org)
3 points by thomas-st 14y ago|2 comments
42.
by thomas-st 14y ago
"If you encrypt text within a note, we derive a 64-bit RC2 key from your passphrase and use this to encrypt the text. This is the longest symmetric key length permitted by US Export restrictions without going through a complex process to ga
43.
by thomas-st 14y ago
os.system("touch files/"+file) Oops. What if my file is called " && rm -rf ~"?
44.
by thomas-st 14y ago
My main problem with this is that Spotify utilizes the full upstream bandwidth, causing the latency to go up dramatically on connections where the upstream is limited. If they were just a little bit intelligent and limited the streaming to
45.
by thomas-st 14y ago
True, looks like it's important to use a C module if available: In [13]: from M2Crypto.EVP import pbkdf2 In [14]: %time pbkdf2('mypassword', open('/dev/urandom').read(16), 250000, 32) CPU times: user 1.16 s, sys: 0.02 s, total: 1.18 s Wall
46.
by thomas-st 14y ago
Are DMG passwords really going through 250,000 rounds of PBKDF2-HMAC-SHA1? I've been using the Python PBKDF2 module with fewer iterations as it takes over 18 seconds to hash a password with 250,000 iterations on my 2.7 GHz Core i5: In [1]:
47.
by thomas-st 14y ago
The Windows app is using Qt + CEF (Chromium Embedded), the Mac app is using Cocoa with a native WebView.
48.
Thoughts on default apps on iOS(thomasst.ch)
5 points by thomas-st 14y ago|1 comments
49.
by thomas-st 14y ago
Not only is it easier and doesn't require the use of an ID, it also allows you to click in the space between the checkbox and the label text.
50.
by thomas-st 14y ago
Just tried it out. This extension "highlights" the links in the most annoying way possible I've seen since the introduction of the blink tag :). Looks like it also could conflict with many sites if they use shortcuts. Are you using this ext
51.
by thomas-st 14y ago
Currently you have to hit tab three times to highlight the comments link, then press return. Not ideal, but should still be faster than having to use the mouse.
52.
by thomas-st 14y ago
It's the command key on the Mac and the control key on Windows. What OS are you using?
53.
by thomas-st 14y ago
It's faster and easier to use than Vimium for common use cases as there is no need to enter a two digit link code to open a link.
54.
by thomas-st 14y ago
Seems like it's illegal to use in California: http://www.dmv.ca.gov/pubs/vctop/d11/vc21968.htm
55.
Prevent cold boot attacks using TRESOR(www1.informatik.uni-erlangen.de)
29 points by thomas-st 14y ago|10 comments
56.
Hacking Mountain Lion: Bringing the old Web Inspector back(thomasst.ch)
5 points by thomas-st 14y ago|0 comments
57.
by thomas-st 14y ago
You get the pre-Lion behavior back. For TextEdit you additionally have to disable autosave so you don't get error messages: defaults write -app textedit AutosavingDelay -int 0
58.
by thomas-st 14y ago
defaults write -g ApplePersistence -bool no Problem solved.
59.
by thomas-st 14y ago
You should also notify any users who already signed up and stored their access token in the database.
60.
by thomas-st 14y ago
Revoke application access here: https://accounts.google.com/b/0/IssuedAuthSubTokens?hl=en

More ›