weddpros

22 ms·

241.
by weddpros 9y ago
Imagine you don't want a single person to control everything in your country (dictator), and you don't want a single person to control your currency. Against dictators, we have democracy. Against a centrally controlled currency, t
242.
by weddpros 9y ago
There's no pyramid scheme. It's a hyped asset, to say the least, but there's no pyramid. Like a hyped startup, it doesn't do much yet, but it is promising, so people buy it. It may be "worth" much or zero in th
243.
by weddpros 9y ago
My bad, I was probably a bit aggressive and didn't read through. Thank you for correcting a few points. However, I'm still convinced that calling Promises "memory unsafe" is largely incorrect: - if it wasn't for the
244.
by weddpros 9y ago
His code is creating an infinite promise chain. Did the author really expect it would not eat all his memory and crash? If the author had written the same code with callbacks, a stack overflow would have been thrown. So misunderstanding of
245.
by weddpros 9y ago
"Buffers that don’t specify their length" Most if not all webapp security problems come from an attack of servers, not clients... It's just one of these assertions that throw a dark shadow on the whole article. But "Flux
246.
by weddpros 9y ago
When I learnt about it, I thought "Facebook wants to kill patent laws" which I believe is a good thing. What if Facebook starts a foundation where every member makes the same kind of agreement. "Sue one of us over patents, we
247.
by weddpros 9y ago
Don't you think it's easier for the government to hack its own code than someone else's ?
248.
by weddpros 9y ago
I sure hope it will be restricted to public services... I was reacting to other comments on HN
249.
by weddpros 9y ago
Why it's a privacy nightmare: you delegate authentication to an oauth service. You trust it to check the authenticity of the login/password. The code is open source, but it doesn't mean login.gov runs exactly this code. Now
250.
by weddpros 9y ago
"that certainly makes it even more obvious": that's what I meant... easy mass surveillance
251.
by weddpros 9y ago
In these days of containers, wouldn't it allow a government to coerce a container-hosting company into using an unsecure kernel? Such a kernel would see all traffic, unencrypted... or did I miss something?
252.
by weddpros 9y ago
"If we're talking about America's youth": 1 & 3 (to a lesser degree) are not about youth, but about elders... because young people don't need as much healthcare and their life expectancy isn't a problem unt
253.
by weddpros 9y ago
Most firms DO invest (lots of) money into security for their customers, bounty programs were not invented by Zerodium. Brokers like Zerodium will inflate the price of 0 days, for sure. Maybe this will be an incentive for 0 days researchers
254.
by weddpros 9y ago
Do you believe a company buying and selling insider info would be allowed? It's an amazing business idea! - people with insider info can use that info to get rich but without insider trading - targets of insider info can be coerced int
255.
by weddpros 9y ago
Say a company buys and sells insider trading information... Would it be legal? So why is buying/selling 0 days OK? Both are selling information that will be used wrongly in the wrong hands, the kind of information you don't want
256.
by weddpros 9y ago
I wouldn't be where I am today, living the dream life on a sunny island, if I didn't have a stroke at 33 at lost my dad at 36. Lucky me! That's exactly the same bias as in this article. "Luck" is only a post-hoc i
257.
by weddpros 9y ago
Thanks! I did submit a Show HN, but I only got 1 or 2 upvotes and a few visitors... Go figure, this comment had more success! As for charging or monetizing one way or another, I'm still thinking of the best way. It's not easy when
258.
by weddpros 9y ago
It's good to hear! Feel free to use it and tell me if you have any suggestions, or anything really
259.
by weddpros 9y ago
I built https://sslping.com/ to help monitor website TLS/SSL security and certificates. It has 300 users and checks almost 7000 servers every day for TLS problems. It's a little like SSLlabs server test, only much
260.
by weddpros 9y ago
"we should be able to measure the negative impact, no?", or "how to get fired from Google in 20s" ... as the memo just proved ... Management could have put him in charge of gathering and analyzing data to prove or dispro
261.
by weddpros 9y ago
An internal memo isn't really the same as "publicly criticizing the company".
262.
by weddpros 9y ago
The problem is Google fired this guy for distributing WRONG information. Wrong is the important word here. If the information is right, it completely changes the case, and the guy was fired for Wrong reasons. I hope he'll sue and win h
263.
by weddpros 9y ago
done... https://tlsproxy.com/new-proxy-support/ Please tell me how it works for you if you try it!
264.
by weddpros 9y ago
I must have read a bit too fast... I'd never heard of it actually, I just knew about X-Forwarded-For for HTTP but I didn't know of a TCP compatible protocol. I've read the RFC, it's easy enough to implement the v1, I&#x2
265.
by weddpros 9y ago
By proxy, do you mean https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt ? this looks very new... (I thought you were talking about X-Forwarded-For) Yes, it's using the TLS-SNI challenge (throug
266.
by weddpros 9y ago
OCSP stapling isn't supported yet by Go as far as I can tell, but I'll implement PROXY for HTTP proxying (not for TCP proxying of course)... And yes, it's using SNI which is now largely supported, but I think I can add an opt
267.
by weddpros 9y ago
forward secrecy: fixed cipher order weak ciphers: 3DES is not weak only a bit less strong, fixed anyway I'm still working on making TLSproxy better. A little encouragement will help ;-) Now 'A' with SSLLabs, with 0 configurat
268.
by weddpros 9y ago
..author here... I'm very well aware of the restrictions of TLSproxy, but there are 2 kinds of people: those who take the time to setup TLS properly and know how, and those who just skip TLS. As the author of sslping.com, so I know ver
269.
Show HN: TLSproxy – automatic Let's Encrypt proxy(github.com)
4 points by weddpros 9y ago|11 comments
270.
by weddpros 9y ago
Glad if you're happy with your life, but don't be sorry for me, I'm very happy with mine. Also, thinking about what unconditional love may be, and reading a bit about it, doesn't entice me to change my mind (it's ve

More ›