whatl3y

8 ms·

31.
Show HN: Nawdawg – delay your server's responses based on your disdain(github.com)
1 points by whatl3y 6y ago|0 comments
32.
Move Fast and Break Things(youtube.com)
1 points by whatl3y 6y ago|0 comments
33.
Show HN: Facemorph – Dead simple animated GIF creator of morphing faces(github.com)
3 points by whatl3y 6y ago|0 comments
34.
by whatl3y 6y ago
Couple of thoughts: 1. Although I agree it’s a problem, this isn’t new news I don’t believe. I don’t have good references to point to right this second, but I swear I hear almost monthly if not more often that most people couldn’t come up w
35.
by whatl3y 6y ago
It does look like they have a different, less “fatal” avenue to recover work related accounts[0], but I’d still be scared to host my FOSS repos there and make a mistake only to lose my account forever. [0] “What if this is a work account?“
36.
by whatl3y 6y ago
> I suspect that support cost also played into the decision. I respect this if it’s the case, but just say it, don’t hide behind a “best practice” security blanket when your true motive includes other factors. > If there is no way to
37.
by whatl3y 6y ago
> If you are caught where you are not able to provide your MFA token and without these backup methods, your account will be irrecoverable. This seems absurd. I vaguely remember another SaaS tool I used that had this policy, but I don’t u
38.
by whatl3y 6y ago
It’s not the same if you complete the amount with cents. 100.00$ can become 9100.00$ much easier than $100.00. I explicitly and carefully write out my tip and total with a dollar sign and cents and sometimes circle the total in an attempt t
39.
by whatl3y 6y ago
I've recently learned and ported a few projects from Javascript to TypeScript and I'll vouch that, so far, it is much better and easier to reason about my code and what it's doing. I also feel I need less test cases to adequa
40.
by whatl3y 6y ago
AWS CloudWatch logs is cheap and very easy to 1. integrate with existing loggers, 2. send logs to your desired log stream (and to send to multiple streams depending on if your in dev, testing, prod etc.) and 3. fetch/review via CLI or
41.
by whatl3y 6y ago
I have the same itch and keep scratching it almost daily. I can say scratching this itch over the last several years has absolutely been +EV overall. Maybe not in a “I made $XXXX in sales over the last month/year/whatever” kind of
42.
by whatl3y 6y ago
So this finds the country based on some cloudflare-populated info of an incoming request (which sounds like it solved OP’s problem which is good), but if you want to use MaxMind’s database to find the country of any public IP I built the
43.
by whatl3y 6y ago
Even if slightly unrealistic, I actually think the nicest part is the back of the napkin math and derivation of the numbers to give you context for how big a market is and what you’d need to attack to meet your goals. I do however have an i
44.
by whatl3y 6y ago
> Apply to a pool in your startup category, within 3 months of the valuation event. Most "valuation events" for startups are seed or series X fundraisers, no? So how could founders who bootstrap participate in this, if at all?
45.
by whatl3y 6y ago
I agree with your points and overall sentiment, I'm simply rebutting the initial statement in your parent comment, > crypto currencies are a good solution for one thing only: electronic currencies. You contradict yourself by stating
46.
by whatl3y 6y ago
> crypto currencies are a good solution for one thing only: electronic currencies. What is a better solution than building a tamper proof workflow in the blockchain? Examples include: 1. I sign a contract and the notary signs and uploads
47.
by whatl3y 6y ago
As a preface, I’m a white millennial who grew up in a southeast US middle class family. I’m completely aware my upbringing and experiences do not only not align with a large percentage of those in the US but probably even less than say 20%
48.
by whatl3y 6y ago
No, I know it's common to hallucinate or something similar during an episode but I felt completely lucid. It was just as if the motor cortex was disconnected temporarily from the other parts of my body (which I believe aligns with the
49.
by whatl3y 6y ago
I feel you missed the point (or maybe that the landing page for this tool should better communicate the value and when you should use it). If you're a relatively small company looking to use a plug-and-play SaaS product with a modest s
50.
by whatl3y 6y ago
Not exactly the same, but I've gone through sleep paralysis 4 or 5 times in the last 10 years and it remains one of the most terrifying things I've experienced. It happened upon waking up from a short nap, and always while I was o
51.
by whatl3y 6y ago
Completely fair points, thanks for taking the time to clarify your intent and meaning in your previous comments. I also understand and get the points about ignorance vs malice and it not mattering which is present wrt a security tool to be
52.
by whatl3y 6y ago
Thanks for the feedback! Will definitely take these two points back and make some changes give you and your child commenters’ notes.
53.
by whatl3y 6y ago
I removed the hash’s from the output and definitely love the feedback to support piping the password only to other tools. Will introduce something like this asap.
54.
by whatl3y 6y ago
Yes thank you for your initial comments, made some of your changes and published a new major version now using PBKDF2. Definitely am learning a lot along the way :)
55.
by whatl3y 6y ago
To anyone else who reads this I’ve made several changes to the code based on feedback presented in previous comments so far including using PBKDF2 for key derivation (actually well before jlgaddis’ comment here was posted which is unfortuna
56.
by whatl3y 6y ago
I’m interested why you would lose confidence in the tool simply because of that? I check it in because it contains the workspace settings I prefer in my dev env, there’s nothing sensitive in there and its nice to remain portable if I clone
57.
by whatl3y 6y ago
- Wow apologies you’re exactly right, I just converted this from JS to typescript and instead of making this variable null | undefined | string, i made it a string and added a default as a shortcut to get it released. Apologies for question
58.
by whatl3y 6y ago
This is what I should do :) I simply append the password to itself to get 32 bytes, but SHA256 is almost certainly the better/right way. Will add a PR this weekend.
59.
by whatl3y 6y ago
- for you first point, this is not true[0]. can you provide a reference? - for your second point, if you want to fork this repo and use another algo, go for it. if you install the package from npm and use it or clone and install from source
60.
by whatl3y 6y ago
That’s correct, in most envs exports go away when the session terminates. I guess prompting each command could work, but the UX for that would be awful. I feel like the main concern you’re pointing out “if someone gets hold of your master k

More ›