valverde

5 ms·

1.
by valverde 8y ago
It's a custom-built chip according to https://atap.google.com/soli/
2.
by valverde 10y ago
The signal has to make its way to a speaker in analog form, eventually. In a way, analog output will always be supported.
3.
by valverde 11y ago
Ah, sorry, I misread your comment. Indeed, a browser that doesn't respect cross-domain restrictions is a poorly written browser. My point still stands, though: the point of cookieless domains is not security, but bandwidth. And there a
4.
by valverde 11y ago
There are many high profile websites that use the cookieless domain approach: Google, Facebook, and Reddit off the top of my head. I wouldn't say they are poorly written - it's more of a design decision to have cookies in the top-
5.
by valverde 11y ago
It's not about the security of the cookies, it's about the bandwidth you save by having a separate domain for static content, because the client does not have to transmit the cookies for each request.
6.
by valverde 11y ago
Because WhatsApp uses your phone book as the only way to interact with its contact list. You can't add someone to directly to your WhatsApp contact list. It could probably access it less often by only sending deltas, but that would mea
7.
by valverde 12y ago
Yes. Much like many consumer projectors.
8.
by valverde 12y ago
They have been doing that for a while. https://news.ycombinator.com/item?id=7037575
9.
by valverde 13y ago
Tap and hold your Wi-Fi network, then select "Modify network". The proxy options are under the advanced options.
10.
by valverde 13y ago
Making it impossible is impossible. They might make it more difficult.
11.
by valverde 13y ago
Thanks! I added that to the article.
12.
by valverde 13y ago
I had Facebook installed while investigating for this article, and could not identify a similar behavior. Google, on the other hand, did the exact same thing, but I remember explicitly agreeing to that.
13.
by valverde 13y ago
Thank you for the feedback. That was my original intention, but seeing the constant location updates from Foursquare while writing the article surprised me (admittedly not too much).
14.
by valverde 13y ago
Interesting. I created a test account just to be sure I hadn't accidentally opted in before and, sure enough, it was enabled.
15.
Foursquare constantly tracking users' locations(blog.valverde.me)
79 points by valverde 13y ago|46 comments
16.
by valverde 13y ago
I recognize this as a possibility and I would definitely take it down if the bank requested it. On the other hand, if anything, I exposed that they did a good job. They could have rolled out their own crypto, or some flawed form of code gen
17.
by valverde 13y ago
This specific token is time-based, so a clone would not be detected. On the other hand, counter-based tokens as you described them do exist, and it would indeed be simple to detect if one of those was cloned. I wouldn't even call this
18.
How I reverse engineered my bank's security token(valverde.me)
311 points by valverde 13y ago|63 comments
19.
by valverde 13y ago
Don't forget bandwidth costs. I could get about 100mbps to an external server. At $0.12/GB, 100mbps * 35 minutes = 25GB = $3. Most clicks won't cost you this much, but you should definitely keep an eye on this. Maybe set a ba
20.
by valverde 14y ago
It seems to be appropriate.
21.
by valverde 15y ago
"Why do pirates have a better experience than customers?" This pretty much sums it up. I couldn't agree more.
22.
by valverde 15y ago
Please don't e-mail me my own password in plaintext when I sign up. Other than that, looks pretty promising :)
23.
by valverde 16y ago
Ah, the clbuttic mistake.
24.
by valverde 16y ago
Take a look here: http://en.wikipedia.org/wiki/Fork_bomb#Examples
25.
by valverde 16y ago
This probably means that jailbroken iPhones will be banned from GameCenter soon. Too bad.
26.
by valverde 16y ago
I tried to use some of the more advanced OpenGL stuff, but in the end I used the standard P3D canvas (which is part of Processing's core). I used the "Video" library to make a video out of the animation, and Maxmind's Java library for geolo
27.
by valverde 16y ago
This brings up a more interesting question: how would you provide encrypted free Internet access in a coffee shop? Giving out passwords to customers is the most common approach, but there must be a way to provide encrypted access without a
28.
by valverde 16y ago
Clickable: http://www.youtube.com/watch?v=S4ehmI2YVdQ
29.
Show HN: Network geographic activity visualization, made with Processing
2 points by valverde 16y ago|4 comments
30.
by valverde 16y ago
Step 5 does more harm than good, IMHO. In most LAMP scenarios, you don't want your MySQL server to be facing the public. The default, on the other hand, is pretty secure, and I recommend it (unless you have a really good reason to do otherw

More ›