udoprog · HackerTrans

udoprog

no profile record

Submissions

The Youtube Collection

youtube.com

1 pointsby udoprog14 years ago0 comments

Show HN: My POC of user auth using HTTP and public key crypto

toolchain.eu

1 pointsby udoprog15 years ago0 comments

Show HN: My weekend project, App deployment with Pusher

github.com

1 pointsby udoprog15 years ago0 comments

Ask HN: What do you think of Portlets?

1 pointsby udoprog15 years ago3 comments

Show HN: Gabriel, a zero-configuration watchdog process

toolchain.eu

19 pointsby udoprog15 years ago6 comments

Mojang will give modders access to Minecraft source

notch.tumblr.com

2 pointsby udoprog15 years ago0 comments

comments

14 years agodiscuss

It is not far fetched given that "big boobs" is interpreted in a societal context which is dominated by male gaze. That is, big boobs is "artsy" and "funny" for a man, since he is the target audience of the joke. Someone at the other end of the joke might take offense. Especially if you experience similar events on a daily basis within your professional environment. Just because something could qualify as art, doesn't mean that you are not allowed to scrutinize it.

I suggest that you employ a bit of empathy instead of drawing assumptions about the persona of the other party.

Putting up twenty links to Wulff & Morgenthaler (epic comics) and using it as an educational/critical source without context only dilutes what you are trying to say, i.e. people should more relaxed.

That being said, being able to figure out how to spell anything sensible using 8 sixteen-digit letters is an accomplishment.

15 years agodiscuss

No, the main point is to show how simple client verification actually is. This implementation is one step up on the application stack into a comfort zone which seems to be more acceptable by devs.

I believe in design in depth, and by allowing the most basic of techniques (form submission + cli tool stack) to handle something that is generally perceived as difficult and letting people "get" the manual process, the automation might not seem as daunting.

I did not intend to create a standard, just to provoke more discussion. I would however by gladly surprised if I woke up tomorrow and twitter allowed me to sign in by solving a challenge instead of a password : ).

15 years agodiscuss

Not so different in theory. This just displays how little fuzz client certification can be on a higher level which is more easily approachable by web developers.

15 years agodiscuss

Side note: Firefox extensions aren't native code, they're written in JS.

EDIT: I do however agree that chrome is more well designed. Firefox has been through a lot of iterations through the years.

15 years agodiscuss

This is an epic introduction into virtual machines for the brave C coder. Very neat and clean, thank you.

15 years agodiscuss

I haven't perceived that people think C is significantly scary (or evil). There are however many compelling reasons not too choose C in the present RAD/Web/Cloud/Solution Business world.

15 years agodiscuss

Got it.

I wouldn't however say that the complexities of C is it's syntax (unless you're playing around with macros : ) ). But I guess the concept can be applied broadly, like remembering functions, headers and other language specifics.

15 years agodiscuss

Moving from Python to C is a very good move. It allows you to go from programming to inner workings, everyone should have a solid knowledge of C since it give you the tools to identify and correlate aspects of other languages to reality.

I don't understand what "practicing the syntax" means (language barrier?), but I'm not suggesting that I've stopped learning, which I never will.

15 years agodiscuss

Indeed, I currently get turned off by most books I pick up, simply because they start out on a too basic general level.

If you however dig a little deeper you can usually find stuff that isn't too tutorialish. Like http://www.c-faq.com/top.html which has been an extremely solid resource for me.

15 years agodiscuss

It seems like the real solution would be to introduce low level guarantees and memory access (similar to Java) and the option to disable the GIL and C API extensions in CPython (until a new API is introduced?).

Also, give the developers access to some real synchronization primitives, that would be sweet.

I'm not a CPython developer, but the last points of the points on the desired list[0] seems very unfeasible to me. Not even STM solves the "Speed" requirement, but PyPy gives away with native extensions so it's halfway there!

[0] http://wiki.python.org/moin/GlobalInterpreterLock

15 years agodiscuss

I voted for displaying comment points, but I do agree that they might create something of an echo chamber where the "highest rated" comment is the one that decided where the topic is going. If this _was_ the case prior to removing comment points another solution is necessary, but more information would be appreciated.

15 years agodiscuss

Added "Java Portlet" to specify, thanks for the heads up.

15 years agodiscuss

"Awesome! Do you have any stats on how many people have installed Chrome Frame?"

I found this question interesting, does anyone know of any viable source for this kind statistics? Is the user-agent for chrome frame distinguishable?

Edit: Found the user-agent from the dev docs; "GCF reports that it is available by extending the host's User-Agent header with the string chromeframe"

15 years agodiscuss

Yes it does, however it doesn't provide granularity for multiple users of the same server, and unless you go for vanilla could be troublesome to customize through something like pam. I simply commented on the non-issue with creating private repositories.

A service like this is nice if you don't have the ability or time to setup your own environments, but in my opinion could be risking a very slim user scenario.

15 years agodiscuss

Which in turn, incidentally leads back to DDG : ).

Crazy good stuff has been going on with DDG the latest couple of months, I'm just glad I've finally found a search provider who takes these issues seriously!

15 years agodiscuss

I currently store all my passwords in a KeePass[0] database distributed using SpiderOak[1] (hassling, but only once for each device).

  [0] http://www.keepassx.org/
  [1] https://spideroak.com/

All my services have gotten 50 char (nice entropy) random passwords, and for ease of use I store them in the browser with an equally difficult master password.

My Fx settings involve flushing all cache and sessions on closing.

Apparently when setting the Fx master password, the local database appears to be using 3DES encryption in CBC mode[0] (nice and slow) which is insanely secure with long and keys. The only password I have to remember is the KeePass database, which in turn is as complicated as I can remember. The when booting up firefox, just paste the master password.

  [0] http://luxsci.com/blog/master-password-encryption-in-firefox-and-thunderbird.html

Funny enough, the SpiderOak distribution password is saved in the KeePass db, giving me a sort of chicken-or-egg problem when setting up, I'm toying with the idea of distributing the database publicly, which should be secure enough.

This means that the only password that is stored in my head is for the KeePass db, but I'm planning on replacing it with a key file (perhaps on USB), once I've figured out a usable scheme for it.

I'm just dying for the day when web services can be integrated into a proper keychain, that would spell an end to this bull.

15 years agodiscuss

I don't get it, why is setting up a private git repository on your own server a hassle?

Assuming you have ssh access (compacted for clarity):

  ssh server "git init --bare repo/project.git"
  git clone server:repo/project.git

Am I missing something?

EDIT: mkdir superfluous

15 years agodiscuss

otoh, this also leads to more peer review, which in turn could contribute to all of parents points.

15 years agodiscuss

There are so many instances where non-mathematical variables play an important role in authoring security conscious code. Yes, most security issues arise from not checking edge cases, but you have to know what they are. Mathematics will surely adapt you into thinking about this practically, but it will never teach this.

15 years agodiscuss

The last modified file is from 2008-07-17 02:14 (config.xml)

This seem to be a copy of an svn tag from tech.scedev.net/source/scedev_source/tags/20080616-33/scedev

It appears to be a snapshot of a smarty installation, so the most interesting stuff is actually in the database.

EDIT: Also, they seem to piggyback on HTTP authentication, and there is a snippet suggesting that they are using unsalted md5 passwords. Ouch.