Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
zxcvbn4038
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
121 ms
·
1081.
▲
by
zxcvbn4038
8y ago
I worked at Tumblr up until the Verizon merger so this story drew my interest. Most of the people who work there are too young to remember Betamax but that sounds like the direction things are going. Good news is that the government of Turk
1082.
▲
by
zxcvbn4038
8y ago
Woohoo! My urge-zero key stopped working mysteriously and I wasn’t happy about that but I’ll give them another chance.
1083.
▲
by
zxcvbn4038
9y ago
Now that is a question only a true engineer would ask. (If you didn't ask the same question then demote yourself down to "Computer Nerd")
1084.
▲
by
zxcvbn4038
9y ago
That is absolutely true - even if you are lucky enough to have a charge removed from your criminal record, everything on your arrest record will outlive you. Thats a problem since today every little thing gets you arrested - your average sc
1085.
▲
by
zxcvbn4038
9y ago
Anyone with an existing credit relationship with you can still do soft inqueries so it’s not complete but (on paper) it does prevent them from selling your name to others. However if you look even closer these companies have other databases
1086.
▲
by
zxcvbn4038
9y ago
SQLite only allows one writer at a time, so depending on your access pattern that might be an issue, but if your site is getting a million requests a day then your only processing an average of 11.5 requests per second, and what percentage
1087.
▲
by
zxcvbn4038
9y ago
I disagree, U2F is relatively easy to implement once you understand it, I've contributed to several open source implementations and eventually wrote one of my own.
1088.
▲
by
zxcvbn4038
9y ago
Very cool, but it looks like everybody is doing their own thing, no interoperability. =(
1089.
▲
by
zxcvbn4038
9y ago
I'm still digesting the documentation but it looks like it would be susceptible to replay attacks also. But if all the web transactions were happening over TLS with PFS, and everyone is validating certificates, I think that would be go
1090.
▲
by
zxcvbn4038
9y ago
Just the other day I wrote an Oauth login feature in Go for fun. Facebook banned my account three days later for "suspicious" activity. Twitter banned my account in 48 seconds - I didn't even have a chance to setup an Oauth t
1091.
▲
by
zxcvbn4038
9y ago
I'm surprised they haven't gained wider adoption, their competitors charge yearly fees for their tokens, and in many cases you become dependent on their infrastructure to use them. U2F is a one time investment as long as the token
1092.
▲
by
zxcvbn4038
9y ago
I've wondered why Yubico is the only u2f device manufacturer that has released a root certificate which validates the attestation certificates that the keys provide - maybe it is to discourage their use so they can't be locked out
1093.
▲
by
zxcvbn4038
9y ago
I hate to answer my own question but it appears the author died in 2011: https://www.woot.com/blog/post/pouring-the-digital-forty-rip... http://metatalk.metafilter.com/20519/Ryland-Sanders-has
1094.
▲
by
zxcvbn4038
9y ago
This is going to be great - what are Yahoo!, Citibank, and everyone else who has declared war on VOIP by refusing to send SMS or voice auths to them going to do now that the third largest carrier in the US is all VOIP? Its a rhetorical ques
1095.
▲
by
zxcvbn4038
9y ago
Very nice! I have many fond memories of the After Dark screen savers - my favorite was from the "Twisted" collection had featured a silhouette of a big city apartment building with crazy stuff happening in the windows. There was a
1096.
▲
by
zxcvbn4038
9y ago
The whole site was protected by robots.txt unfortunately.
1097.
▲
Whatever happened to says-it.com?
1 points
by
zxcvbn4038
9y ago
|
3 comments
1098.
▲
by
zxcvbn4038
9y ago
The banks didn't get the memo from NIST and if anything they are getting worse - they are actually ramping up their use of callback and SMS authentication. Last month I had several apps force an SMS authentication because I hand't