Recent submissions

Comment · 10 years ago
The only complicated part of this method is securing the key, and the key is definitely required or you may as well just save it as plain text.

You sync your DB across multiple cloud services, and to decrypt you use a weak master pass and strong key.

I've been struggling with how to move that key around.

.1) Put it on a USB drive or hide it in your filesystem.

This is cumbersome and losing the drive could be disastrous. It's also trivial to scan a filesystem for key-like files.

.2) Use an authentication dongle.

This one is better but requires third party hardware in most cases, and is slightly expensive.

.3) Bluetooth/NFC to your device.

This can be intercepted at extended ranges as proven at defcon etc. Though is admittedly the most convenient method. The data can be signed, but I haven't seen anything out there that implements this well just yet.

.4) Timed one time passwords, PushBullet etc.

This feels like a bonus feature.

I'm not sure how to go about this. You lose or leak the key then you're screwed.

Is there a wristwatch or phone app with signed credential sharing based on wearer input, compatible to a standard?

Comment · 10 years ago
I've done this before. The performance on IE, firefox, safari and mobile is complete shit yet suprisingly good in Chrome.
Comment · 10 years ago
Honestly I'd rather a t520 over this new Dell i7 e7450 latitude they have our developers using. The keyboard has... Fn key Home and End keys! Maximum cringe.
Comment · 11 years ago
Quick suggestion; grab ShareX and make some .webm's showcasing Relax for your landing page. Much more accessible than learning how it all works. People want to see results.
Comment · 11 years ago
Comment · 11 years ago
Much appreciated, I'm definitely saving this!
Comment · 11 years ago
Thats wrong. Pro lets you choose not to download it indefinitely with the option I described.

Unless you're implying it auto-downloads after a few weeks, I wouldn't know.

Comment · 11 years ago
While I recommend a switch to Linux/Mac, you can make updates behave like Win7 by opening "Edit Group Policies" in the start search. Then look for Windows Updates for the option.

Without this done windows will actually download updates automatically while you are ingame or something else network sensitive, it's so fucking stupid.

Comment · 11 years ago
This is pretty much the preferred cure from what I've gathered. If you can build a PC with two GPU's (or merely one PCIe and one integrated), you can game, use Photoshop nearly natively.

But as you have said, it's not as straighforward as I'd like. I haven't tried it yet but it's nice seeing others having success.

Are there any up to date guides and best practices for this?

Comment · 11 years ago
I'm definitely excited for ProseMirror. If it's as quality as CodeMirror I'll be happily integrating it into everything I build!
Comment · 11 years ago
Comment · 11 years ago
I'd love CoffeeScript support.

Additionally... Tonic is comparible to CodePen in terms of testing and thus gave me the idea;

Perhaps you could also include other languages into your platform. Such as a Stylus REPL, SASS, SCSS etc. all of which, like CoffeeScript, are just JS modules on npm.

With compilers like Stylus and SCSS you would probably default the return value to be the compiled CSS, and with Coffee you'd need a toggle button to show what the compiled JS looks like, though not 100% necessary.

With that said, if there was just a way to set up a "build" script for a REPL to set up the environment to achieve the same result. As in, you require('stylus') then have some global variable stream/buffer, tonic.output, for which you could inject into the module of your choice to generate output, and then save it via tonic.buffer.write() or something. It could then be ridiculously flexible in terms of testing out finicky new languages/compilers.

Comment · 11 years ago
Comment · 11 years ago
Then at the top of your readme you should absolutely write [[Project feature complete and stable]], or something to that effect.

You just can't look at a repo and discern its completeness in an easy way. Also explain why you think it's complete.

Comment · 11 years ago
I had the displeasure of reading most of what you wrote and am writing this to convince you of something:

Please stop. Your SJW politics is off topic and in my opinion; utterly trivial nonsense. You were out-argued and still you found it in yourself to write more damage control comments.

I'm certain the reason people on HN don't call you out on this more often is the latent fear of being shadowbanned due to political correctness.

You made this your personal little soapbox and your posts reek of entitlement. Stop.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton