tveita

77 ms·

751.
by tveita 13y ago
What about the studies Jay Porter links to in his blog posts? https://www.hotelschool.cornell.edu/research/chr/pubs/tools/... http://tippingresearch.com/uploads/managing_tips.pdf
752.
by tveita 13y ago
I found his blog posts to be well-argued and sourced. I think they stand on their own even if his restaurants weren't ultimately successful.
753.
by tveita 13y ago
I'm saying that it's invalid to measure mainstream economics by looking at major crises and asking "how many of these did they foresee". A meaningful analysis would have to consider whether they foresaw and prevented a
754.
by tveita 13y ago
> As a a team, economists failed to preview every single financial crisis. That's a bit of a fallacy, because economists are not just passive observers of the economy. If there is broad agreement that something is wrong, they can re
755.
by tveita 13y ago
> The vulnerabilities could also allow remote code execution on a server system running IIS, if that server allows processing ASP.NET pages and an attacker succeeds in uploading a specially crafted ASP.NET page to that server and executi
756.
by tveita 13y ago
In Python 3.4's pathlib, you can concatenate two paths by dividing one path with the other. I guess you could torture @ for similar purposes in an email library or something.
757.
by tveita 13y ago
It would make sense to have a standardised protocol, so you could just enter a URL, username and password. That way any provider could offer it as a service without custom support in each router. I think RFC 2136 may support this, but it&#x
758.
by tveita 13y ago
Right, in random oracle proofs you assume that values are random, and then you replace them with something that no one can distinguish from random. Then you consider it broken when someone finds a distinguisher requiring three exabytes of o
759.
by tveita 13y ago
Well, no, my concern is still to tell people to stay away from Keybase.io, or if they have to use it, to not upload their private key even though it seems to encourage you to, or if they have to upload their key, to use a really strong pass
760.
by tveita 13y ago
So when you say "if k is 256 random bytes" it's a flat out lie? e: if k really was 256 random bytes, or bits even, it would mostly be an unnecessary complication. But that's a completely opposite situation from a key der
761.
by tveita 13y ago
And in mathematics, because you can't name everything after Euler. (ref. http://en.wikipedia.org/wiki/List_of_things_named_after_Leon... )
762.
by tveita 13y ago
They did not plan to make it 128 bits. The standard output sizes have always been 224/256/384/512 as specified in the competition. For an ideal secure hash function with 256-bit output it takes ~ 2^128 operations to find a co
763.
by tveita 13y ago
My impression is that Facebook mostly write their stand-alone services in Java or C++, and are using PHP only where they're "stuck" with it due to a large existing code base. Do you think Hack is a good language to start a ne
764.
by tveita 13y ago
And this is a good explanation of the motivation behind the design, and how it is used in practice: http://engineering.linkedin.com/distributed-systems/log-what...
765.
by tveita 13y ago
Then I don't understand the point you're trying to make. You have argued that people should always use /dev/urandom, as opposed to the common understanding that /dev/random is safer to use if you need high qual
766.
by tveita 13y ago
That's great. You list a total of zero (0) security issues that have been caused by using /dev/random instead of /dev/urandom for long-lived keys.
767.
by tveita 13y ago
What security problems, exactly? In most settings, a dos attack is an inconvenience. A key compromise a disaster, always. e: dos, not ddos.
768.
by tveita 13y ago
http://www.money-rates.com/research-center/best-savings-acco... Interest rates are very low right now, but you appear to be off by a order of magnitude.
769.
by tveita 13y ago
PyCharm will read simple type annotations like def get_error_message(error_code: int) -> string: ... and use them for autocompletion hints and type warnings.
770.
by tveita 13y ago
I read it all, don't be a jerk. When you're writing a program for generic use, you can't trust the underlying system to be set up above and beyond a stock install. If you want to use seeding as a workaround, it should be done
771.
by tveita 13y ago
How about the very post I replied to? > the bug that is Linux's willingness to give you output from an unseeded RNG So there you have it. But don't worry, no one uses this "Linux" thing, certainly not in embedded syst
772.
by tveita 13y ago
You can call it a bug or design flaw if you'd like, but this behaviour is documented, well known, and it's how every single Linux system operates. urandom simply isn't guaranteed to be random enough for cryptographic keys. Mi
773.
by tveita 13y ago
It's pretty dubious that he says "I hit on the idea of identifying proper names in the text", like it was a novel idea. One recent attempt: same method, drastically different results: http://cms.herbalgram.org&#x2F
774.
by tveita 13y ago
> after N+6 blocks, it is vanishingly unlikely that a transaction in block N will be removed from history by block N being replaced by a totally new chain At least as long as people aren't using the selfish mining strategy. If one o
775.
by tveita 13y ago
If I may ask, which exchange are you currently using, and what did your audit show?
776.
by tveita 13y ago
I doubt many people really want to copy/paste a piece of AGPL 3 licensed code into their website. Is people "stealing" this code really that much of a concern?
777.
by tveita 13y ago
For what it's worth, I see no ads in the search right now, and a Wikipedia blurb saying "Tyrone B. Hayes is an American biologist at University of California, Berkeley. He is known for his research demonstrating that the herbicide
778.
by tveita 13y ago
The Google play store already has "top developer" and "editor's choice" badges that show up in search results. About your screenshot - maybe I'm missing something, but where in the results is the official Faceb
779.
by tveita 13y ago
I think it's mostly in HHVM, which is publicly available. It's not documented, but you can see it in the tests. E.g., https://github.com/facebook/hhvm/blob/master/hphp/test/quick...
780.
by tveita 13y ago
I'm not aware that any economists say that having less money is better than having more money, everything else being equal. Many economists say that austerity measures like cutting infrastructure spending and public health care hurts t

More ›