788 karma · joined October 5, 2011
Amazon is an outlier.
If another company did this, but it's stock price didn't keep rising, corporate "raiders" will replace the board and get money back as dividends.
Sorry if my point isn't clear. I'm typing this in a hurry.
I also use it to deploy hobby web sites.
Quoting the paragraph, in case my paraphrasing is inaccurate: "What’s depressing is that I could have easily helped them intercept basically all of the traffic they were interested in (except for Twitter – I helped write that TLS code, and I think we did it well). They later told me they’d already gotten a WhatsApp interception prototype working, and were surprised by how easy it was. The bar for most of these apps is pretty low."
Btw, Lightroom has a scripting interface using which I'm pretty sure you can roll what this guy wants.
I'll have to see if the Google Authenticator app shows up on all of my iDevices linked to my Apple account and whether the code from any of them will work (from the setup process, I don't see why not). Does anybody know?
If the app will work from any of iDevices, it would not be secure enough for a service storing bitcoins :) because the second factor should be hard to copy (which a real hardware token is, while a software token isn't).
For me, this was the article that made it crystal clear why you cannot use current time as a seed for a RNG.
More practically, it seems to remove a class of errors. Semicolons are optional in Javascript and I've seen posts here about subtle errors that can creep in when you change code a little carelessly.
And even more practically, it allows you to type "one liners" into things like REPLs even if they aren't one liners.
Just my two cents.
Btw, I don't agree with your last point. It's pretty much possible to stay in a rented apartment for 5 years at a time quite easily. And kids go through wrenching changes every five years on average (home->kindergarten->middle->high school).
You make good points about the drawbacks of buying a house. However, the ability to lock in your housing expenses for the next 30 years (i.e., no impact of inflation) shouldn't be underestimated. IMHO.
I paid $10 for an SSL cert. Isn't that low enough?
I have a Model B with a connected HDD that's been on 24x7 for a few months now. No problems so far. I don't expect a big difference between the Model A and B wrt stability.
I also did the thing to get rid of the tmux prefix for pane switching. But since I don't use the function keys, I mapped keys F1 through F9 to various tmux functions. F1 = next pane, F2 = prev pane. One less key to press. :)
Second, I've tried to work twice with Doing-It-Right (i.e., fine-grain) permission systems. Once with apparmor and earlier with SE Linux. With AppArmor, I wanted to set up rules to prevent Skype from reading any except a couple of directories. The sheer number of permissions I had to configure was exhausting and I gave up. Maybe I missed something simple, but that's why I'm not clamoring for the current simple, but coarse-grain permission system to be abandoned.
It would nice if Chrome separated 'DOM write' permissions from 'DOM read' permissions. AFAIK, today extensions can't request only 'read' permissions.
Yes, I understand that it's a pain for new Chrome developers to have to understand the permission system among other things. I liked the easy ACLs of Chrome when I started.
So maybe they could allow permissions to be written in two different ways in the manifest file? Today's quick-and-dirty coarse-grain permission system would co-exist with a fine-grain permission system that would use new directives.
I'd love to prove to my users that my extension is in fact not malicious.
I run with foreign key support disabled, because the referencing ("child") rows might get inserted before the referencing ("parent") rows (I don't control the order of inserts).
Now I can just run a periodic scrub job with this command to clean out rows which didn't successfully transition from "violating foreign keys" to "satisfying foreign keys", instead of writing my own code.
Neat. SQLite is an awesome database library.
Then you'll be pleasantly surprised to know that they CAN indeed autoupdate, and the DIY autoupdate mechanism is very lightweight to setup. And it includes security checks (i.e., will check if update is signed with the same key as the extension etc). I have a personal extension that's served out of S3 which does exactly that.
1) Where can I find official-ish Chromium for Windows?
2) On Ubuntu, Chromium always seems to be behind Chrome wrt updates.
I tried Chromium on Ubuntu, but switched because of the lag. Let me know if I am mistaken.
What about these remotes bothers you?
You would ssh to the bastion host, and from there to internal hosts.
With the appropriate ssh config at the client end, the tunneling through the bastion can be scripted away (using the ProxyCommand directive and RSA keys).
The ufw man page is pretty decent.