gtklocker · HackerTrans

gtklocker

no profile record

Submissions

Messenger

1 pointsby gtklockervor 12 Jahren0 comments

A Gentle Introduction to Algorithm Complexity Analysis

132 pointsby gtklockervor 14 Jahren23 comments

Quake 3 source code review by Fabien Sanglard

fabiensanglard.net

2 pointsby gtklockervor 14 Jahren0 comments

Black Mesa (Valve's Half-Life remake) asks for Facebook likes in a geeky fashion

blackmesasource.com

1 pointsby gtklockervor 14 Jahren0 comments

Plain English explanation of the Big O notation

stackoverflow.com

1 pointsby gtklockervor 14 Jahren0 comments

comments

vor 8 Jahrendiscuss

How exactly do they "try to keep extension authors from destroying the editor"?

vor 8 Jahrendiscuss

There's mypy.

vor 9 Jahrendiscuss

This is making me really curious because while Chrome is buttery smooth on my Macbook Pro, Firefox 57 is really sluggish, especially when creating/closing tabs. You can literally see the animation stuttering. Other times when a page loads it won't paint for some seconds even if it appears that it has completed loading. Is anyone else having these issues?

vor 9 Jahrendiscuss

Very nice!

vor 10 Jahrendiscuss

docker id is gtklocker, thanks!

vor 12 Jahrendiscuss

Didn't restore most stuff for me (especially SMSs and calls) last time I tried it on my N4.

vor 12 Jahrendiscuss

* I'm not talking about F-Droid. I'm talking about CM as a whole and the recovery someone may use.

* There is a way, however it's common practice to leave it unlocked and I'm not sure you mention that in your article.

vor 12 Jahrendiscuss

The idea of freeing your phone is cute, however, there are some considerable dangers.

* The software that you give access to your phone (be it drivers or the recovery images themselves) isn't signed by anyone. Some of the software isn't even available via HTTPS. I think it's a bad idea to trust some HTTP and unsigned executable more than Google, who are making all they can to ensure the integrity of anything that runs on your phone.

* Unlocking your bootloader is a bad idea. Google erases all your data whenever you unlock your phone[1]. They don't hate you, they've just realized the security issues that come from having an unlocked phone. Take this for example: You're at the airport and ready to leave. However, TSA stops you for a "random" check. They have your phone for about 5 minutes and there's nothing you can do about it. Now, they could ask you for your passcode but then you'd know something's wrong. Now, your bootloader is unlocked, which means they can see your device at firmware level and alter it to their liking it. Nothing can stop them from plating a backdoor in there or just making a copy of all your files and you wouldn't know. That's why Google does [1].

[1]: http://wiki.cyanogenmod.org/w/Install_CM_for_maguro#Unlockin...

vor 12 Jahrendiscuss

Good to see the HTTPS site/download working. Now if only we had GPG signatures for this.

vor 13 Jahrendiscuss

I regret putting myself on one of those circles. :(

vor 13 Jahrendiscuss

The SafeSearch setting isn't saved on https. Did they even test this thing before pushing it out?

vor 13 Jahrendiscuss

They're stating they have a partial DB leak. https://twitter.com/1775Sec/status/421842856748126208

vor 13 Jahrendiscuss

Am I the only one who remembers this?

http://www.edn.com/design/automotive/4423428/Toyota-s-killer...

vor 13 Jahrendiscuss

https://news.ycombinator.com/item?id=6978539

vor 13 Jahrendiscuss

https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security...

vor 13 Jahrendiscuss

Point is, I should not be able to access a plaintext version of a website hosting such cryptographically crucial software/information.

It's obvious why it can be a grand target for Man in the Middle, defacement and worst of all integrity attacks. Apart from preventing many of the latter, implementing HSTS could have really mitigated the problem. Anyone who had already visited the site wouldn't see the defaced page. Furthermore, they could get added to an STS preloaded list[1], making the attack invisible to anyone using a modern browser.

If you are interested, the Wikipedia page[2] does a fair job at explaining more about why HSTS is needed.

[1]: https://src.chromium.org/viewvc/chrome/trunk/src/net/http/tr...

[2]: https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security...

vor 13 Jahrendiscuss

What is a good reason for openssl.org not to utilize HSTS[1]?

  $ curl -I https://www.openssl.org/
  HTTP/1.1 200 OK
  Date: Sun, 29 Dec 2013 03:57:54 GMT
  Server: Apache/2.2.22 (Ubuntu)
  Accept-Ranges: bytes
  Vary: Accept-Encoding
  Content-Length: 15686
  Content-Type: text/html

[1]: https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

vor 13 Jahrendiscuss

I want to believe!

vor 13 Jahrendiscuss

How do I switch tabs using my keyboard? Cmd-<N> doesn't work, so does not Cmd-Alt-Left|Right.

vor 13 Jahrendiscuss

A thing I've noticed is that pinch to zoom is much more smooth than Chrome in OS X.

How do I switch tabs using my keyboard? Cmd-<N> doesn't work, so does not Cmd-Alt-Left|Right.