dionysiac
Joined 17 years ago
Karma
40
Submissions
24
Member since
Feb 3
Recent submissions
Comment · 12 years ago
Thanks, Whoaa. I was always carrying the iPad plus a pad of paper to every meeting three years ago when I started this fiasco :) There were other drawing & notes apps out there, but this is the one I wanted.
Comment · 14 years ago
Have a look at http://betterexplained.com/ - Kalid's got some of the most intuitive explanations I've seen.
Comment · 15 years ago
And things are continuing to change, too. More and more FPGAs and CPLDs are showing up in end user electronics - our hardware is becoming software.
Comment · 16 years ago
It's an old one, but I still think of it every time someone is trying to come up with an acronym: http://dilbert.com/fast/1993-06-23/
Comment · 16 years ago
IMO, A big danger of implementing centralized authentication across multiple sites is that will make social engineering schemes aimed at stealing a user's credentials more plausible and effective.
I know that systems such as OpenID and others perform authentication directly between the user and thetrusted provider (google, facebook, twitter, etc), and that the site ends up with a one-time token that confirms the user's identity. The site requesting authentication never gets the actual password to the openID account, which makes this approach viable in a technical security sense.
But here's the thing: general users are getting used to entering their centralized credentials to perform actions on untrusted sites. Technical users understand the design. We can confirm that, yes, TwitScoop does indeed direct us to twitter.com/oauth/... (no HTTPS, but that's another story).
Regular users posting a comment on a blog, though, don't see any difference between giving their credentials to a trusted Google login site and entering their credentials into some form on a blog.
If, for example, logging in with Facebook credentials becomes common, it would be trivial to create a rogue blog which collects login information. Fill it with a few incendiary posts, possibly create an official-looking Facebook login page that doesn't display its URL, and it would be possible to capture quite a few sets of credentials.
Comment · 16 years ago
Hence the -maxdepth 3 param:
# time find / -maxdepth 3 -perm -7 -type d -print
/tmp
/var/tmp
real 0m0.034s
user 0m0.005s
sys 0m0.028s
Comment · 16 years ago
find / -maxdepth 3 -perm -7 -type d -printComment · 16 years ago
He did do some trading when he was around: http://www.independent.co.uk/news/science/einsteins-relative...
Comment · 16 years ago
"The rest just want to forget about whatever is going on in their lives and get high. Why can't people just admit the truth?"
Many people consuming alcohol are doing so for similar reasons.
Comment · 16 years ago
Storing something like a username in client-side data and then trusting its accuracy is effectively delegating your authentication outside you circle of control. Saying that encryption will make this magically secure is like saying encryption makes for effective DRM - eventually it will be compromised and you will have a systemic problem.
Storing, say, a username and a password hash in your encrypted cookie is at least as secure as direct authentication at each page load; even if they break your encryption they still have to know the admin's password.
Start with the assumption that the locks you use for security will fail, and ask "how will this break?" If we take the encryption out of the picture, do we trust the client to log in as root (or similar) with just a username and no password? The lock in question (as I understand it) is failing for an unrelated (information disclosure) reason. The design decision to lean so hard on the lock is what makes this such an issue.
Comment · 16 years ago
"..Dozens of people collaborated spontaneously, motivated by loyalty, friendship, or the love of craftsmanship. We were hackers, creating something for the sheer joy of making it work."
This.
Comment · 16 years ago
It's getting there. Check out http://ccmixter.org/ .
Comment · 16 years ago
The man wants to enrich himself by boning the hottest chick he can, and possibly at her expense if she is seeking a longer relationship. It's perceived sexual gratification vs perceived financial gratification. Both are similarly illusory IMO.
Comment · 16 years ago
For those interested, "The (Mis)Behavior of Markets" by Benoit Mandelbrot and Richard Hudson examines, among many other things, the 1987 "Black Monday" event. Mandelbrot theorizes that sudden, disproportionate events such as these may be much more common than today's models and distributions predict. It's a great, accessible read even for those not mathematically inclined.