tsally

39 ms·

271.
by tsally 17y ago
I have a thought. How about next time the military just flies one of these things down to Defcon and lets people have a go. The hackers get a cool toy to play with a for a day and the military gets a free fairly sophisticated penetration
272.
by tsally 17y ago
Did plurk sue a poor PhD student who downloaded 30 songs and win a judgement against them for almost $700,000? There's a right way and a wrong way to handle copyright infringement. http://arstechnica.com/tech-policy/news/2009/07/o-tenenba
273.
by tsally 17y ago
The "honesty" comment wasn't directed to you, but it's obvious why you would think it was. Sorry. Given your history of quality and logical posts, I pretty much knew the comment wasn't directed towards me. I just wanted to go on record t
274.
by tsally 17y ago
The first link makes the assumption that the ability to email a user's password means the passwords are in plain text. There is such as thing as secure two-way encryption. Using symmetric encryption to encrypt passwords in a database woul
275.
by tsally 17y ago
There is a difference between storing plaintext passwords and actually losing them, and as much as I hate to give someone a pass on insecure password storage (it is, apparently, all I ever talk about here), you have to be intellectually ho
276.
by tsally 17y ago
Here's the sample code they give in that chapter: def self.encrypted_password(password, salt) string_to_hash = password + "wibble" + salt # 'wibble' makes it harder to guess Digest::SHA1.hexdigest(string_to_has
277.
by tsally 17y ago
It happened (storing in plaintext, not losing the actual passwords): http://www.jgc.org/blog/2009/05/can-you-trust-37signals-with... We've covered 37signals poor approach to security before: http://news.ycombinator.com/item?id=804257 It
278.
by tsally 17y ago
Yeah, I agree with you. I didn't get into it in the article because I was trying to be succinct, but you're right. It's a solid piece and it's important to be succinct, but I think in this case your succinctness might cause some readers t
279.
by tsally 17y ago
You already do donate to the border guard; it's your tax money paying his/her salary. More importantly, I don't think blindly taking the government's side on any issue is a good thing. I'd much rather have everyone default to believing the
280.
by tsally 17y ago
There's a huge difference between copying some CSS and ripping an entire design. In the programming world, it's the difference between copying a C header file to do bit manipulation and stealing an entire program.
281.
by tsally 17y ago
Shameful. The cofounder has spoken at TED to boot. You'd think that type of person would know better.
282.
by tsally 17y ago
In case you'd like to play it offline: http://dl.dropbox.com/u/223699/slime.flv.zip
283.
by tsally 17y ago
Christmas/Holiday gifts seem like the obvious choice. I would definitely buy a poster for my brother with the rules of shotgun on it (if it was funny). Not sure if you can put it together in time.
284.
by tsally 17y ago
I hope you're all pleased you jumped on the bandwagon. Here are his actual words from the video: Judgement matters... If you have something that you don't want anyone to know, maybe you shouldn't be doing it in the first place... If you r
285.
by tsally 17y ago
It's not broken, it just could be better. The same could be said for any voting system that exists today on the web. The reason why no one has quite solved it yet is because the solution is not obvious. It may very well be that the curre
286.
by tsally 17y ago
This has been posted and killed once already: http://news.ycombinator.com/item?id=972583
287.
by tsally 17y ago
Dynamically scalable applications are only a small subset of the massive number of things that have fallen under the umbrella of "cloud computing". The definition cloud computing is sufficiently vague that phrases like "single chip cloud c
288.
by tsally 17y ago
Here's an announcement from a different company for a 64 core processor from 2007. http://arstechnica.com/hardware/news/2007/08/MIT-startup-rai...
289.
by tsally 17y ago
The title of the video is "single-chip cloud computing". At least it's buzzword compliant.
290.
by tsally 17y ago
A very successful quant did an AMA (ask me anything) on Reddit a while back. There's a lot of content there, but totally worth the read. If I remember right his background was a masters in math from MIT. http://www.reddit.com/r/IAmA/comm
291.
by tsally 17y ago
My understanding is that in the US, passwords fall under the 5th amendment. Here's an example where a subpoena ordering the defendant to enter in a password was quashed: http://www.eff.org/files/Boucher.pdf
292.
by tsally 17y ago
You should put your hosting company website in your profile. Personally, when a user on HN says something intelligent, I like to check out their company.
293.
by tsally 17y ago
the raid had probably completely nothing to do with the hackerspace and everything with their hosts. If that's true, than the warrant would have been limited in scope. Clearly it wasn't since the police seized everything. You can be sur
294.
by tsally 17y ago
I think you might be misunderstanding what a cutaway lock is. A cutaway lock is a normal lock with portions of the casing made out of transparent material or removed entirely. Their specific function is to practice lock picking. And bl
295.
by tsally 17y ago
Step one: Realize that even though it looks pretty, a small font size can cause your writing to be unreadable. Even in full screen, the font is still half a point too small for extended reading.
296.
by tsally 17y ago
An hour ago they reported on their Twitter account that the SWAT team was coming in: http://twitter.com/ucbprotest/status/5906053463 Looks just they just had another status update, so I'm not sure what happened with that.
297.
by tsally 17y ago
Even if different data are being generated, the compression is still predictable. There must be something in the gzip header indicating the level of compression (to ensure that the correct decompression algorithm is used). Point being, th
298.
by tsally 17y ago
Compression schemes have to be predictable when run on the same data. Otherwise decompression wouldn't work. If signature detection actually is more difficult on compressed data, it's not because the compression is unpredictable.
299.
by tsally 17y ago
I think you'll find that programming ability and vision go hand in hand. So when you talk about "brilliant people ... who truly think the two outcomes on the right are the only possibilities", by definition they are unlikely to exist in si
300.
by tsally 17y ago
Whys Poignant Guide to Ruby is an excellent, gentle introduction to Ruby. If it fits your personality that is. Have a look and decide for yourself. http://www.scribd.com/doc/2236084/Whys-Poignant-Guide-to-Rub... Remember that Rails is j

More ›