tjohns

93 ms·

961.
by tjohns 13y ago
There are some minor caveats, but nothing really worth worrying about. Most browsers accept StartCom certs these days, so that's not a concern unless you're supporting ancient systems. The big difference is in how much validation
962.
by tjohns 13y ago
If you live in California (and probably many other states) and have a drivers license, or if you've ever crossed a US border and aren't a US citizen, then the government already has your fingerprints. Frankly, if a government agen
963.
by tjohns 13y ago
They already announced there were plans to build a hosted version back when this was on Kickstarter. So, domain aside, that is supposed to eventually happen.
964.
by tjohns 13y ago
This is outside my area of expertise, but I've heard that there's a keepalive timeout for open sockets set by the cell carriers. (Again, don't know the details.) So, there is a small cost to keep a TCP connection open, in ord
965.
by tjohns 13y ago
I suppose you could use the Java-to-JS bridge, if you're using WebView inside a native app. However, there's not really any "mobile-friendly" push solution available as part of HTML5 right now. I wish there was. There&#x
966.
by tjohns 13y ago
GCM is the recommended solution for anything that's trying to "push" data to Android: http://developer.android.com/google/gcm/index.html We (Android) usually don't recommend developers try to i
967.
by tjohns 13y ago
Foreground prefetching aside, there are controls that let users disable background data prefetching/syncing. In fact, it's even one of the buttons on the standard "power control" widget. While the screen is definitely a
968.
by tjohns 13y ago
Would you prefer hardware manufacturers not to contribute drivers? And that these companies fork the kernel without providing anything back? That's not very much in the spirit of openness. (Regardless, I'm not even sure how number
969.
by tjohns 13y ago
That's a fair point. The lower level stuff and NDEF format is well standardized. The higher level operations are not nearly as well standardised right now, even more so when you're dealing with large files, which will require a ha
970.
by tjohns 13y ago
I can think of one big case: Many NFC tags are used as QR codes. Encrypting this doesn't really get you anything, since it's public information that's being broadcast freely to anyone anyway. On the flip side, adding the extr
971.
by tjohns 13y ago
Bluetooth pairing via NFC is starting to appear in a few devices. Off the top of my head, Monoprice has a bluetooth audio receiver that has this feature, as does a Parrott's bluetooth headphones.
972.
by tjohns 13y ago
NFC supports encryption, which solves the eavesdropping and unauthorized modification problems. It's done at the card level as an optional feature, since not all applications need encryption. MIFARE DESFire comes to mind as one of the
973.
by tjohns 13y ago
Yup, it's just an ordinary mylar antistatic bag. Pretty much any computer repair store will give them to you for free if you ask, too.
974.
by tjohns 13y ago
Here in the bay area, they give you a mylar/antistatic bag with new FasTrak transponders for precisely this purpose. Put the transponder in the bag, nobody can read it. (Also useful if you're using the new FasTrak-enabled carpool
975.
by tjohns 13y ago
Technically, CHP can give you a ticket if you use the FasTrak lanes without a FasTrack transponder, even though their computer system has no problems billing your account by license plate. I've heard of it happening online, but never s
976.
by tjohns 13y ago
Do you have a citation for that claim about WPS and home users? While it certainly could be the crowd I hang out with (not all of which are techies, mind you), but I've never met anyone who uses WPS.
977.
by tjohns 13y ago
Holding shift when you click compose is also a good one to know about. (Opens the compose dialog in a new, dedicated window.)
978.
by tjohns 13y ago
Some registrars require you to send in a hardcopy request, along various forms of ID, in order to clear these flags. I know mine (PairNIC) does. It's not unspoofable, but it is an time consuming extra step that involves a human on the
979.
by tjohns 13y ago
If they're releasing something that they could reasonably expect the NSA to be able to crack, there's a non-zero chance other governments would be able to read it as well. That's not really "responsible disclosure"
980.
by tjohns 13y ago
According to Wikipedia, NSLs used to prohibit you from disclosing their existence from anyone, including your lawyer. This was changed in 2006: "On March 9, 2006 the USA PATRIOT Improvement and Reauthorization Act was signed into law..
981.
by tjohns 13y ago
To be specific, since I spent a lot of time on that bug... Older versions of Android's SecureRandom could return the same value if (a) you were manually seeding SecureRandom and (b) no prior crypto operations were performed on that Sec
982.
by tjohns 13y ago
Update: There's also a lighter-weight API for "hosted" Chrome apps that don't require all the features of a full "packaged" app, which would work too. https://developers.google.com/chrome/a
983.
by tjohns 13y ago
Ditto for Chrome/CrOS, please: http://developer.chrome.com/apps/about_apps.html Also, please consider adding this to the Chrome Web Store so I can install it on my Chromebook. :)
984.
by tjohns 13y ago
Looks just as great on desktop as it does on mobile. Good job. I really love this trend of having a scrolling ListView as a sidebar in web apps, similar to what many tablet apps are doing. The ones that come to mind: Gmail Offline, Quartz,
985.
by tjohns 13y ago
The restaurant might not be open. Or I might be at work. Or it could just be a busy night, and I want to see what's available without having to make multiple calls. On top of that, I get a record of the transaction via email. If I call
986.
by tjohns 13y ago
This is why HTTPS certificate pinning exists. Having a standardized way of requesting a pin would be a very good thing right now. (See: HPKP and TACK)
987.
by tjohns 13y ago
Yes, you can do precisely that. As posted above, the setup instructions show options for either connecting to a TV's USB port or using a USB wall charger: http://cdn2.sbnation.com/entry_photo_images/8651957/20
988.
by tjohns 13y ago
RAID is not a backup solution. If your filesystem is corrupted in software (or you just mistype and delete something important), it will happily replicate the damage across all of your drives. Personally I feel recommending RAID to home u
989.
by tjohns 13y ago
This was precisely my thought. If it's happening even on a local staging server, it's highly likely that this is being caused by a third-party dependency somewhere in your site. I'd start by looking at any JS libraries you&#x
990.
by tjohns 13y ago
You're both talking about two different topics... The location of the "supernodes" (on client machines, or in a datacenter) is separate from whether encrypted traffic can be read by a third party. Using a totally decentralize

More ›