willscott

11 ms·

61.
by willscott 14y ago
A similar project hooks up GPG and Gmail: https://github.com/Mononofu/CryptoChrome
62.
by willscott 14y ago
I still haven't heard a cogent explanation of what this is supposed to do. "Do Not Track" sounds nice, but seems no easier to scope than the initial problem of excessive information collection. I think it's safe to say that I want companie
63.
by willscott 14y ago
It's worth noting that while this is becoming available in chrome now, the WebRTC APIs that both Chrome and Firefox are working on (and will likely start showing up in the 3-6 month time frame) is also likely to provide p2p message passing
64.
by willscott 14y ago
what are you trying to do with the api? RSS is a consumable format directly, and reader does export a (user-private) combined atom feed.
65.
by willscott 14y ago
It seems like a better candidate for a linux FUSE client would be the existing document list API. It works with oauth, and lets you interact with documents. The Drive API is a way to integrate new editor types into google docs.
66.
by willscott 14y ago
Why would this be preferable to an application cache manifest? http://www.html5rocks.com/en/tutorials/appcache/beginner/
67.
by willscott 14y ago
As a recent HMC grad: It's very much not free for everyone. Many of my classmates graduated with fairly hefty loans which will take many years to fully pay off. Olin is free for everyone, and there's a wave in the elite schools to set up p
68.
by willscott 15y ago
WPA does not only have 256 keys. The author decided to show that if he knew all but one character of his network password, he could bruteforce the missing character. To that end, he took all 256 possibilities for that character, and comput
69.
by willscott 15y ago
The video didn't show any evidence of data being transferred off of the phone, besides being logged to the USB logger. Is it possible that this is simply a tool to allow for USB debugging of the UI? Otherwise, are there details (how often,
70.
by willscott 15y ago
That wouldn't protect you in the scenario where someone had limited physical access to your machine. Edit per the response: I don't think this is a threat model that you would care about in theory, but it seems like a scenario that can come
71.
by willscott 15y ago
Seems pretty reasonable to expect it to be this code from the apache shindig library: http://svn.apache.org/repos/asf/shindig/trunk/features/src/m... From the file: This code implements a safer random() method that is seeded from screen w
72.
by willscott 15y ago
You can put people into as many circles as you want.
73.
by willscott 15y ago
It's really a shame this isn't XMPP. I don't get what the motivation is for having another closed system when they could have added interoperability with their desktop client + aol + gmail at a very minimal cost. Edit: I'm basing this on th
74.
by willscott 15y ago
That seems hard to believe. The buttons seem to show up fine on tech crunch and google search. It's difficult to imagine that Google has been 'slashdotted' due to serving up a javascript widget...
75.
by willscott 15y ago
The text of the article is poorly written - with a focus too much on conspiracy theory rather than on actual science. The linked article is from 2007, and only reports on preliminary research. There's a reason we have the scientific setup
76.
by willscott 15y ago
From the linked paper, the 'trick' here is for the attacker to improperly respond to a tcp connection initiated from the target. The standard handshake looks like: Syn -> <- Syn / Ack Syn -> The 'split handshake' looks like: Syn
77.
by willscott 15y ago
http://www.chromium.org/Home/chromium-security/brag-sheet Presumably flash is sandboxed within chrome, so it isn't susceptible to the same attack vectors as unsandboxed plugins. This presumably alleviates a lot of the security concerns fo
78.
by willscott 16y ago
The Gmail frontend is written in javascript using the closure library. http://code.google.com/closure/ You can look at the (compiled version) of the code by looking at the scripts tab of the chrome web inspecter. They're there :)
79.
by willscott 16y ago
The benefit to Google of the current mode is the ability to rapidly change the code pushed to your browser. If there was a open source release of the gmail client code, it would force google into maintaining an API for that code for the for
80.
by willscott 16y ago
The accelerometer interaction hooks into javascript via browser events. Here's the basic usage for chrome: (for firefox the event is MozOrientation, and values are radians rather than degrees) window.addEventListener('deviceorientation'
81.
by willscott 16y ago
The notifications are allowed to be full webpages - which can then communicate back to the parent window. (or extension) This will be a reasonable alternative to modal dialogs for chrome extensions initially, and eventually for web apps in
82.
by willscott 16y ago
While the thought that there's something in this book that is being censored is an appealing story, it's also a less than likely explanation. My guess is that the chinese publisher didn't want to pay royalties, and this was a convenient way
83.
by willscott 16y ago
Couldn't the CDN redirect to a closer node if DNS doesn't bring the user to an optimal pop? I'm pretty sure we're talking about an HTTP protocol so a 302 redirect ought to work, and it seems like that would give the CDN way more control tha
84.
by willscott 16y ago
I don't understand this at all. Is there any reasonable theory for how the choice of DNS changes download speed this dramatically? I can see it taking longer to resolve the ip address of the download server, but that should only be a one-ti
85.
by willscott 16y ago
The title is very misleading. The tie is for number impressions served to iOS versus android devices. Not the total web ad impressions, nor even ads served on the respective platforms, since Google is serving a significant number of ads on
86.
by willscott 16y ago
A big point that the article doesn't bring up is the ongoing upkeep costs that already exist even for smaller organizations. Even if the computers are all running windows 2000, the easiest way for most companies to license the software is
87.
by willscott 16y ago
Chromium is open source - which makes me suspicious of claims that the browser is nefariously tracking your every move without pointing to code. Here's a search for the 'client_id' that the author was afraid of: http://codesearch.google.co
88.
by willscott 16y ago
Presumably on the google website the script is loaded via an xmlhttp request which then strips the initial text and evals the rest. By added the initial throw 1; they prevent other sites from including the script, since it won't do anythin
89.
by willscott 16y ago
They were asking for english translations of words in various languages - hoping to determine the demographics of the workers solving the captchas.
90.
by willscott 16y ago
I went to a speech by savage earlier this fall. The point that I took away from it is that what captchas do is filter out the bad guys who haven't figured out a business model. On the klingon point: They theorized that the particular organ

More ›