y7

28 ms·

271.
by y7 10y ago
The problem with using iterated SHA2 for passwords is that GPU/FPGA/ASIC are orders of magnitude faster than the CPU-based "normal" usage. So while increasing the number of rounds makes it more difficult for an attacker,
272.
by y7 10y ago
Article from 2014, which looks at people engaging in digital book piracy not as thieves but as modern-day librarians or collectors, who are focused more on preservation than providing easy access to the materials. Mainly, the authors write
273.
by y7 10y ago
For me that just redirects to a search on google.com
274.
by y7 10y ago
I find it a bit ironic that after their very aggressive forced update practices [1][2], they're now gonna charge people for it. [1] http://www.cnet.com/news/microsoft-pays-woman-10000-over-for... [2] https:/
275.
by y7 10y ago
DuckDuckGo is a search engine, like Google/Bing. This is a tool that uses those search engines and then combines the results. It's useful because Google sometimes has way better search results (imho) than DuckDuckGo, and this site
276.
by y7 10y ago
Interesting project. I looked around a bit, and this is apparently a public installation of the open source project searx: https://github.com/asciimoo/searx It aggregates searches from other search engines. You can spe
277.
by y7 10y ago
What MacUpdate spam? Not using the Mac App Store gives you more control over your apps. It allows you to distribute apps to OSX machines without an internet connection, it allows you to rollback versions or choose not to update, etc.
278.
by y7 10y ago
Ideally every website or tab would have their own sandbox.
279.
by y7 10y ago
Long read (~36K words), but really worth it.
280.
by y7 10y ago
With the headphone jack on the bottom, this makes more sense anyway.
281.
by y7 10y ago
I found it interesting to read. Appelbaum is relatively well-known in tech circles, and I use HN to keep me updated on "what goes on in tech circles" -- whether that's gossip or new technological developments.
282.
by y7 10y ago
Courts aren't about truth finding, they're about establishing whether there's enough evidence that a specific crime was committed. Something like Nick Farr's story[1] is, if true, not against the law, but it does display
283.
by y7 10y ago
I don't think this is true. See https://www.torproject.org/docs/faq.html.en#AccessHiddenServ... any SOCKS4a capable browser should work.
284.
by y7 10y ago
It's one of the most common laptop brands. Specs are easily looked up, and even without looking it up this tells people it's a relatively new laptop, so specs are probably at least half decent.
285.
by y7 10y ago
Biometrics like TouchID work fine for authentication, but they don't work for encryption. Encryption requires a secret , and you can't really call your biometric features a secret (even besides that it probably won't be of h
286.
by y7 10y ago
Even if browsers didn't allow changing the clipboard, there's still this older problem: http://thejh.net/misc/website-terminal-copy-paste The solution is definitely to avoid pasting commands with newlines in
287.
by y7 10y ago
Assuming the random events are also based on how the game progresses, and not just from the starting seed (if they were, then at the start of the game you would be able to predict all random events for the entire game to come, which sounds
288.
by y7 10y ago
CloudFlare also makes it nearly impossible to surf the web these days using Tor without having Javascript enabled. Tor triggers the captchas, and they don't seem to be solvable without Javascript.
289.
by y7 10y ago
> But there was more to it than that. Hidden inside the repetitive floor plans and the daily schedules of these franchised businesses, Roofman had found the parameters of a kind of criminal Groundhog Day: a burglary that could be perform
290.
by y7 10y ago
This is where critical reading comes in.
291.
by y7 10y ago
I think client-side encryption covers it pretty well. https://en.wikipedia.org/wiki/Client-side_encryption
292.
by y7 10y ago
Have you looked at Master Password? http://masterpasswordapp.com/algorithm.html
293.
by y7 10y ago
I was slightly puzzled what they meant by "zero-knowledge encryption", but after looking around a bit it looks to be more of a buzzword than really related to zero-knowledge proofs (besides them using SRP for password validation).