prohor

In Hubic (by OVH) you pay 10 euro / month for 10 TB. So it is more expensive if you need 1 TB, but if you need more then it can be nice option. https://hubic.com/

I'm using both as well. I like the extract of articles in Slashdot, which helps in getting idea what the news is about rather than just a catchy title.

Glad it worked. And this is what I don't get. I understand they may not want to distribute hardware tokens in some countries, support SMS, as it is a burden. But why don't they just allow me to activate an existing token?!

They also support VeriSign VIP (https://idprotect.verisign.com/mainmenu.v), which you could take mobile app - should be better than waiting for SMS. At least in theory as I cannot validate it, because 2FA is not available in Poland.

A bigger problem for me is that two-factor authentication for PayPal is available only in few countries (US, UK and Germany I think). I tried to get a token but no chance; not even software with mobile app. When contacting support I was considered as a freak probably - they completely didn't what is the problem without 2FA. I really don't get it, why being global they limit 2FA to a few countries.

Strange, but I don't see "classic" link unless I use the link you provided. Isn't it some kind of elite club of high-karma users?

A bit of a problem with lazy quantifiers is that they are not so widely supported out of the perl world. Therefore I often need to find some tricks to get similar behavior (eg. "[^,]*," - if coma is separator)

But then you need to support 1.0, 1.1, 2.0 and 3.0. I'd rather wait a bit to avoid need to support yet another version. I can bet every new version of HTTP will cost millions of dollars across the industry. It is not agile where you just drop in a new increment. This is the base everybody need to support then and you won't be able to stop support in foreseeable future.

I'm using this reader for HN: http://hckrnews.com/ It isn't RSS but converts to a timeline - very convenient to use.

I use password hasher / generation extension for browser, which makes sort of HMAC of password with domain. Then I use few master passwords depending on sensitivity of a site. But at the end - each site has its unique very strong password.

Firefox: https://addons.mozilla.org/pl/firefox/addon/password-hasher/...

Chrome (same algorithm): https://chrome.google.com/webstore/detail/pawhash/adgekjfphh...)

WOW! Never thought there is just one person devoted to a library that we rely to bring security to us all. Community is great but still some more dedication is needed in parts which are essential for security. Glad to see that some took it seriously.

I'm always scared when I see the maximum length limit in password. I expect they just put clear text in their DB. Otherwise why would they limit it? Any key deviation or hash function will give the same length, regardless of the password length. Scary ...

Something I start to notice that more and more questions are being closed as duplicate pointing to another question which only sounds similar but when you look deeper it is different.

I wish I had this when I was figuring out how it all works. I'll definitely point it friends who start with CSS.