AtNightWeCode

8 ms·

271.
by AtNightWeCode 3y ago
At the end of the day. We need cryptography that is understandable. There is absolutely zero need for the complexity in this field that exists today. And we need something better than just private keys.
272.
by AtNightWeCode 3y ago
Is the key a certificate? Then it might be installed on all Service Fabric clusters. There is overall something fishy with X.509 handling in Azure.
273.
by AtNightWeCode 3y ago
Maybe it is the price model. It should state what type of security updates are included and for how long these are for free and what the expected cost after that is. I think a problem is that you buy a thing and not a thing and a service.
274.
by AtNightWeCode 3y ago
I straight out think MS lied when they said this was an .au only issue. We had a surge of rouge traffic from MS during this issue and we are pretty much on the other side of the globe.
275.
by AtNightWeCode 3y ago
Metrics. I used to work on a team with skills in agile development. The process was evaluated at every retro and everything was tweaked. One member of the team however continued to put tasks into states that was not even in our agile board.
276.
by AtNightWeCode 3y ago
Have no time. Rework this. This is flawed in many ways.
277.
by AtNightWeCode 3y ago
I created a game editor some years ago that had several HSL alternatives including one contrast corrected bar and two different light/shadow corrected bars. I used it mostly the other way around though. Creating suggestive backgrounds
278.
by AtNightWeCode 3y ago
I quit using GC since it adds cognitive load and because it lures one into incorrect solutions. I always try to have a single focus when I work. I don't even like having multiple screens for the same reason. I do use AI for coding some
279.
by AtNightWeCode 3y ago
Most chat programs have solved this by using a proxy. The downside of this is that the proxy may be blocked. There should be a more generic and safe way to deal with link previews.
280.
by AtNightWeCode 3y ago
I think a problem with AI is that it is used so much by people that don't really know a field. Like middle management. I heard those fools claiming that a complete IT project took a couple of minutes to do with ChatGPT. The same crazy
281.
by AtNightWeCode 3y ago
What is the problem with BSL? Is it that the code is still available but you have to run their binaries? Honest question.
282.
by AtNightWeCode 3y ago
Overall this is my standpoint too. But it depends on how KPIs are set. I think it is more destroying to not have any general directions at all.
283.
by AtNightWeCode 3y ago
Envs are not process secure. Files are. Ram disks exists.
284.
by AtNightWeCode 3y ago
Environment variables should never be used. This was a known security hole already in the last century. Several OS solved this by config files that comes with file permissions. The correct solution on Linux and Windows at least. And still p
285.
by AtNightWeCode 3y ago
Delete all captchas everywhere. While at it. Delete all challenges. I am tired of wasting time into all this bs. If we did put the same amount of time into real solutions like rate-limiting and actually making endpoints secure there would b
286.
by AtNightWeCode 3y ago
Before I break my neck completely. Htmx is still JS? No?
287.
by AtNightWeCode 3y ago
The fantastic cost of running TF in the cloud is painful. Several years ago it was very clear that it would be difficult for HC to survive once they became a company registered at stock markets.
288.
by AtNightWeCode 3y ago
This is perhaps the most incorrect post you will ever find on HN. I am not a huge fan of Terraform. However, TF is made for infra not config. There are several tools out there to manage config like Salt, Ansible and so on.
289.
by AtNightWeCode 3y ago
Some years ago it was common that some sites did not work or was slow in FF. I can't remember that I've had that problem for years. Good work by the FF team regardless of these benchmarks.
290.
by AtNightWeCode 3y ago
"" valid!
291.
by AtNightWeCode 3y ago
Could some of the genius down-voting argue for the reason why Google needs both of these more or less dying langs?
292.
by AtNightWeCode 3y ago
Go ecosystem is like a fraction of what .NET/Java is. Both in quality and size. Dart for instance is a better lang. It is also from Google. It also compiles to binaries. Why is that not the new... The slim spot for Go is the devops too
293.
by AtNightWeCode 3y ago
No. It would only be a flag to allow obsolete Go code in practice I guess. EDIT: C++ did not break C. The people managing Go have full understanding of dependencies even though they made breaking changes.
294.
by AtNightWeCode 3y ago
I suggest Go and Dart morph into one lang. Then you could use the power of Go with the more logical syntax of Dart.
295.
by AtNightWeCode 3y ago
Historically this service is known for being highly incorrect.
296.
by AtNightWeCode 3y ago
It can easily be done with WASM. You could even add the domain as a salt.
297.
by AtNightWeCode 3y ago
Are you aware of that secure pw hashing comes with a cost factor and that the cost is linear with the size of the input to the hashing algorithm? EDIT: Down voters. What pw hashing algo are you using instead of BCrypt or similair?
298.
by AtNightWeCode 3y ago
What? I always use my daily backup of the Internet as the pw every time I sign up for something.
299.
by AtNightWeCode 3y ago
256 is fine in most user scenarios. No one will type in more chars than that anyway. And if a pw manager is used the length is not really a problem. For services there are often better alternatives.
300.
by AtNightWeCode 3y ago
Passwords are sent to the server though in most cases. So there must be some limit.

More ›