lgarron
Joined 16 years ago
Karma
42
Submissions
18
Member since
Oct 17
Recent submissions
Comment · 10 years ago
I don't see e.g. a GitHub repo to comment on, but the HSTS header example is `Strict-Transport-Security: max-age=63072000; includeSubdomains; always`
`always` has no meaning, and probably indicates a typo in an nginx configuration.
As others have pointed out, there is other TLS advice here that you shouldn't follow blindly, like a 4096-bit cert (especially if your intermediate is smaller) or TLS 1.2 only. Rationales and trade-off explanations would help avoid misuse of this checklist.
The SSL Labs checker is probably the best tool to use for all the automatable TLS checks.
Comment · 10 years ago
This link discusses a nice example of RSA.
There was also a paper in 2014 by Bellare, Paterson, and Rogaway [1] discussing this notion more thoroughly (under the name "algorithm substitution attack").
From that paper: An approach that works against many block cipher modes is to select the IV with for a communication using key K as, say, IV = AES(backdoor_key, K). This is indistinguishable from a random IV due to the security of AES, but someone with the backdoor key can easily compute K = AES_inverse(backdoor_key, IV).
Comment · 13 years ago
...and the ability to actually abort long computations? ;-)
Comment · 13 years ago
I'm a fan first/rest because of Mathematica. It has four functions that all end in "st", which means I can always recall the one I need:
First, Rest, Most, Last
(Results on Range[4], respectively: 1, {2, 3, 4}, {1, 2, 3}, 4.)
Comment · 14 years ago
http://caniuse.com/ lists Javascript API features.
Comment · 15 years ago
2x as fast, not 2x faster, although the actual page doesn't make that mistake.
That always bothers me, because even technical people get it wrong, making it hard to interpret "X times faster" correctly.
</pedantry> :-P
Comment · 15 years ago
Oh, I see. I was struck by the direct phrasing of "You couldn't take the average number of pages", which made me parse the rest of the comment incorrectly.
Comment · 15 years ago
Why wouldn't you be able to get the average? Return page count + total pages for each shelf and then take the ratio of "reduced" sums.
Comment · 15 years ago
I've been using QSQRCode to send data to my phone: select, send to Quicksilver and display QR code for the phone to scan. Tap2Tab sounds like an interesting approach, though, and I'm curious to see how much it could do.
Comment · 15 years ago
That's not particularly optimized; it's als from 2003, when speedcubing was not as advanced. If you want a fairly good attempt at an understandable minimum method, look at http://www.speedsolving.com/wiki/index.php/8355_Method
(Although memory shouldn't really matter for such few moves. Blindfolded solving is where it gets interesting.)
Comment · 16 years ago
Dropbox is a folder dropbox, it's not MobileMe, or WhateverCompanyComprehensiveDataCloudSolution. (Although doesn't Google already do everything but files pretty well?)
Comment · 16 years ago
Anyone else think the top of that page looks beautiful?
Comment · 16 years ago
This is a font with 26 uppercase letters, inspired by the maze font used in promotional posters for the movie INCEPTION.
Almost of the work was done in Inkscape and FontForge; I plan to release the source if there is enough interest.
(Since I found out about Hacker News by having an early typography project of mine featured, it only seems appropriate that this should be my first submission. :-)
https://garron.net/
[ my public key: https://keybase.io/lgarron; my proof: https://keybase.io/lgarron/sigs/seD-zh2MF83AhYwfEyT0e7urmNmWKIGZWv8R5UgIhts ]