thusoy

4 ms·

1.
Commit of the week – 2020 week 9(thusoy.com)
2 points by thusoy 7y ago|0 comments
2.
Laim: A Mail Transformer(thusoy.com)
2 points by thusoy 7y ago|0 comments
3.
Log sampling with Papertrail(medium.com)
2 points by thusoy 8y ago|0 comments
4.
Resistance-era password storage(thusoy.com)
3 points by thusoy 9y ago|0 comments
5.
by thusoy 9y ago
I recommend Weekend Reading by Assaf Arkin to everyone, covers several topics from design and front-end to security, tooling and peopleware. More than just a collection of links, includes a bit of commentary which makes it feel much more pe
6.
by thusoy 10y ago
Yes, self-signed certificates without a CA is MitM-prone, but that's the only thing Heroku enables. You're only given a username and password and have to do with whatever configuration they've done, thus the problems.
7.
by thusoy 10y ago
Thanks, glad you liked it!
8.
by thusoy 10y ago
OP here. That's entirely correct, Postgres deployed correctly is secure against a MitM, but since Heroku has not issued a trust root, they are not. Edited to add: As a user of Heroku Postgres you can't configure Postgres correctly
9.
MitM-ing Postgres(thusoy.com)
119 points by thusoy 10y ago|14 comments
10.
by thusoy 10y ago
I think the word you're looking for is key stretching. https://en.wikipedia.org/wiki/Key_stretching
11.
by thusoy 11y ago
This close enough? https://teespring.com/human-chaos-monkey
12.
by thusoy 11y ago
For anyone that feel they might fall under the same category (I do!), represent: https://teespring.com/human-chaos-monkey
13.
by thusoy 11y ago
Sadly, it doesn't. I was hoping for this as well, so I tested it, and it turns out that the user agent of the two browsers are identical . EME: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox&#x2
14.
by thusoy 12y ago
I would guess so, yes. You can never prove that something is random, merely that it behaves randomly "enough". There are lots of testsuites[1][2] you can run that will test that a generator is uniform and doesn't follow any p
15.
by thusoy 12y ago
The easiest version is the most portable and easy to read in this case: os.urandom(20) Saves you from having to manage files at all, and works cross-platform.