ayrx

6 ms·

1.
by ayrx 6y ago
I think you mean Druid instead of Barbarian :)
2.
by ayrx 7y ago
I don't disagree with your overall point but in the world of high-end watches Rolex watches _are_ mass produced and leverage economies of scale. I think the latest estimates are around 800,000 watches produced per year by Rolex.
3.
by ayrx 7y ago
You will be part of the rare minority that uses that configuration which by itself is a fingerprint.
4.
by ayrx 8y ago
To be more exact, what you want is not a slow password hashing algorithm. What you want is an algorithm that is as efficient for the defender as it is for the attacker. The key is that you do not want an attacker to be able to abuse custom
5.
by ayrx 8y ago
It's a nice sentiment but that's how you end up with abandoned, low quality projects that no one uses. Or even worse - abandoned, low quality projects that half the Internet relies on.
6.
by ayrx 8y ago
Yeah, it was a pain in the early days but I feel like Blizzard has recognised that and are actively taking steps to improve things.
7.
by ayrx 8y ago
What incentives would a someone have to invest a considerable amount of time in releasing and maintaining an open source project if they can't even use that to promote themselves?
8.
by ayrx 8y ago
That's actually untrue for Hearthstone. You can be perfectly competitive without playing arena or buying packs. I haven't paid a cent for the past 2 years and can play all the competitive decks I want in every meta. Blizzard has b
9.
by ayrx 8y ago
If you look at his other comments in this I’m not sure it’s sarcasm.
10.
by ayrx 8y ago
“we deal with it successfully enough in TLS and SSH all the time” Not quite. Downgrade attacks has been a huge problem for TLS.
11.
by ayrx 8y ago
You can audit iOS. Security researchers do it all day long.
12.
by ayrx 9y ago
WordPress has a history of almost embarrassing security vulnerabilities. To be fair, most PHP applications of that era have similar track records. The newer versions have been _much_ better.
13.
Prometheus's Brother – Gods, Science, and Camels by Thomas Pornin(prometheussbrother.com)
3 points by ayrx 9y ago|0 comments
14.
A DNSSEC Primer(ayrx.me)
2 points by ayrx 9y ago|0 comments
15.
by ayrx 9y ago
It very clearly shows the need for education.
16.
by ayrx 10y ago
This StackExchange answer[0] has a nice overview of what encrypted.google.com does. [0]: http://security.stackexchange.com/a/32374
17.
by ayrx 10y ago
His point is absolutely not applicable. Rust is a _very_ new language. The community will eventually converge on specific crates for specific purposes in time.
18.
by ayrx 10y ago
> This isn’t a question that comes up so often with respect to (say) Python because Python has an effective form of curation – blessing things into the standard library, at which point their alternatives generally disappear. In effect, P
19.
by ayrx 10y ago
> AMD it seems won't be able to do that now. Yes they can, they'll just have to commit resources to keeping up with kernel changes instead of having it done for them upstream. You can't have your cake and eat it as well.
20.
by ayrx 10y ago
lvh was until very recently an employee at Rackspace and Rackspace provides the hosting for the project.
21.
by ayrx 10y ago
In my experience a lot of the problems with automatically converting existing Python 2 code to Python 3 code is that the Python 2 code usually makes fundamentally broken assumptions when it comes to unicode and bytes.
22.
by ayrx 10y ago
And if he doesn't understand that concept should he _really_ be teaching anyone programming?
23.
by ayrx 10y ago
> Currently you cannot run Python 2 inside the Python 3 virtual machine. Since I cannot, that means Python 3 is not Turing Complete and should not be used by anyone. I stopped there.
24.
by ayrx 10y ago
But all things are not equal.
25.
by ayrx 10y ago
Not quite, Thomas's avatar in many places is that of a bear. He has named a few of his works after bears, in particular his password hashing function Makwa.
26.
BearSSL – Smaller SSL/TLS(bearssl.org)
338 points by ayrx 10y ago|195 comments
27.
by ayrx 11y ago
This is a very awesome library. I am attempting to integrate it into the test suites of my various projects this past week and the author has been more than helpful, even when I filed bug reports that turns out to be issues in my own code.
28.
The open source Patch-or-GTFO (POGO) license(github.com)
14 points by ayrx 11y ago|1 comments
29.
by ayrx 12y ago
RPython is definitely a Python-first thing. PyPy is the only VM written in it that's actually production-ready at the moment. I'm guessing that has more to do with effort invested than any real limitations on RPython's part t
30.
by ayrx 12y ago
Are you implying that it's impossible to write maintainable code in any dynamic language?

More ›