zeroxfe

41 ms·

211.
by zeroxfe 6y ago
That's not what they're saying. The point is that common block-encryption modes are exploitable, and many of these exploits can be mitigated with message authentication (or by using authenticated block modes, like AES-GCM.)
212.
by zeroxfe 6y ago
> Let's say I have auto accident and I'm liable for million dollars. The likelihood of such event is low. Such event probably would result in bankruptcy, but it's not much worse, then constantly paying extra for insurance.
213.
by zeroxfe 6y ago
This is exactly why I love Cloud Run! Combined with Firestore, it's all I need for most things I build.
214.
by zeroxfe 6y ago
> Go is not a simple language to learn correctly . I mean, can't that be said for any language? I've worked with a lot of languages over the decades, and find Go extremely refreshing in it's simplicity. Kubernetes is an
215.
by zeroxfe 6y ago
I think the team is doing an excellent job with carefully and methodically evolving the language.
216.
by zeroxfe 6y ago
Nobody does that -- it makes absolutely no business sense to a service provider. If you want your $50 million back, you buy insurance. :-) The best you can get from vendors/service providers are SLAs, where damages are meant to be mild
217.
by zeroxfe 6y ago
Key exchange on its own is susceptible to an MITM attack, which is why you use it along with certs / digital signatures.
218.
by zeroxfe 6y ago
It's really easy to get blocks of phone numbers these days, especially with the proliferation of VoIP providers. You don't need to hold on to these numbers for more than a day.
219.
by zeroxfe 6y ago
This disregards the power imbalance -- lots of employees (especially junior ones) are not comfortable being so firm with their managers.
220.
by zeroxfe 6y ago
Never heard of it, but I'll take a look. Thanks for the pointer. :-)
221.
by zeroxfe 6y ago
I usually have a shell script called 'deploy.sh' that does a bunch of git, test, deploy stuff. So part of my development workflow is calling "deploy dev", "deploy staging", and/or "deploy prod" t
222.
by zeroxfe 6y ago
- Version control - Unit testing - Leak detectors (for languages like C/C++) - Race detectors - Auto-formatting (eslint, gofmt) - A solid editor (prev: vim, now: vscode) - One-step deployment scripts/automation (even for small pro
223.
by zeroxfe 6y ago
1984 -- my all-time fav book. I've read it more than 10 times, because it's a beautiful dystopian love story that moves me like no other.
224.
by zeroxfe 6y ago
They say "tend to have less economic growth", not "always have less economic growth".
225.
by zeroxfe 6y ago
That may be a great philosophical argument, but in the eyes of the law (which is what we're discussing here), IA was giving away someone else's property, so it really can't be considered a charitable act. Even setting aside t
226.
by zeroxfe 6y ago
Sure: - The timing attacks were the most surprising to me -- particularly because how easy they were to exploit once you collected enough statistics. - Finding the seed / predicting upcoming random numbers from popular PRNGs by reconst
227.
by zeroxfe 6y ago
Thanks, I agree with almost all of this. I didn't mean to imply that Cryptopals is how you become a cryptographer, just that it's a fantastic way to get down and dirty with cryptography, and learn a ton. These challenges are not e
228.
by zeroxfe 6y ago
I've been working through the Cryptopals Crypto challenges ( https://cryptopals.com ) over the last month-and-a-half (almost done with Set 6), and they've been extremely educational. Attacks that I thought were just &quo
229.
by zeroxfe 6y ago
You might enjoy this app I recently wrote: https://pitchy.ninja to assist you in your journey.
230.
by zeroxfe 6y ago
Ah, gotcha -- I was thinking of the timestamp comparison method. (Agreed about the other case.)
231.
by zeroxfe 6y ago
> The Clock interface also exposes functions like time.After(), which should in my opinion never be used in production code, as they don't support efficient cancelation. Can you expand on this? I find time.After super useful for tim
232.
by zeroxfe 6y ago
Thanks for doing this. I stumbled upon one of your previous videos a while ago and really liked it. I'm super indebted to YouTubers like yourself that take the time to distill and explain complex topics, papers, and new research.
233.
by zeroxfe 6y ago
I stumbled on this side-effect entirely accidentally, so I don't know. But you can start by going to youtube and looking for some daily vocal exercises.
234.
by zeroxfe 6y ago
I've been prone to long persistent coughs and colds ever since I was a kid (I'm in my 40s now)... until about two years ago... when I started diligently vocal training 30 - 60 mins a day. It's crazy how much of a positive eff
235.
VexTab Tutorial: Add guitar tabs to your web pages(vexflow.com)
1 points by zeroxfe 6y ago|0 comments
236.
by zeroxfe 6y ago
It's very hard to express all the nuances of real music and tonality in MIDI -- so generating raw audio side-steps all the limitations of a MIDI intermediary, and IMO, the results are absolutely phenomenal! (BTW, there are lots of AI m
237.
by zeroxfe 6y ago
GP specified in scientific discourse . It's fine to discuss non-scientific ideas -- just don't call it out as science.
238.
by zeroxfe 6y ago
OP was not saying anything about intelligence or claiming to be highly intelligent. It was a personal (and very interesting, IMO) anecdote on their experience with math text books.
239.
by zeroxfe 7y ago
My morning routine: make the best goddamned coffee on the face of this earth, and savour every sip. Until the kids wake up.
240.
by zeroxfe 7y ago
Isn't the JS version just: function f(x, ...args) { return g(x, ...args); } Or did you mean forwarding object fields? function f(x, params) { return g(x, {foo: 1, ...params}); }

More ›