calvins

15 ms·

1.
by calvins 2y ago
The paper itself: https://bmcmedicine.biomedcentral.com/articles/10.1186/s1291...
2.
by calvins 9y ago
What do you mean by 'out of the box'? jsonschema needs to be installed. It's not in the stdlib.
3.
by calvins 9y ago
It seems no security audit has been performed, but they plan on it at some point: https://discussion.enpass.io/index.php?/topic/404-security-a... Their responses in that thread do not inspire confidence in the pr
4.
by calvins 10y ago
I think you should put the disclaimer at the top of the github page, and clearly state that it is not secure. The disclaimer currently is near the end of the document and says only "Purely experimental project. Designed for learning pu
5.
by calvins 10y ago
https.cio.gov SSL Labs test result: https://www.ssllabs.com/ssltest/analyze.html?d=https.cio.gov Of note is that they're using a Let's Encrypt cert and running in AWS.
6.
by calvins 10y ago
Not the OP, but I'd really like to be able to run containers with all unnecessary capabilities dropped: https://github.com/aws/amazon-ecs-agent/issues/223
7.
by calvins 10y ago
But doing a 360 doesn't mean doing a 180, and then sometime much later, doing another 180.
8.
by calvins 10y ago
Pip has a constraints file now. Running $ pip freeze -r requirements.txt > constraints.txt after you've installed all your packages gives you a constraints file that can be used to reinstall exactly the same versions: $ p
9.
by calvins 10y ago
It's easier to disambiguate shapes and colors than just shapes or just colors -- something like a checkmark of one color, and an X of a different color.
10.
by calvins 10y ago
> if it's _truly_ agent-less why do they care about the python version on the target, I feel that python target code is the agent? "Agentless" means that it works by pushing to the machine and that there isn't an agen
11.
by calvins 10y ago
> it should hopefully reduce the FUD around alternatives with better type systems (Scala), if the type system is turing-complete in any case. Beware of the Turing tar-pit in which everything is possible but nothing of interest is easy. A
12.
by calvins 10y ago
I'm also a happy user of SSL Labs and reader of Bulletproof SSL and TLS. One very cool thing about the book is that if you purchase the hard copy (I got it from Amazon, for example), they'll email you epub, PDF, and web versions f
13.
by calvins 10y ago
> Either you verify from the bottom or you can't verify at all. So 'curl ... | sudo -' is just fine now because we can't verify from the bottom, so there's no sense in verifying what we're piping to sudo?
14.
by calvins 10y ago
There is spamgourmet ( https://www.spamgourmet.com/index.pl ). It doesn't satisfy 4 exactly, but it's pretty close. If you give out an email like 'foo.20.myusername@spamgourmet.com' (there are other domain
15.
by calvins 10y ago
If we were in a simulation and the simulation would fail to realize its purpose if a sufficiently large number of beings in the simulation became aware of the simulation and changed their behavior, how smart would it be to try to get more a
16.
Transport Layer Security (TLS) Extension to Support Code Execution(gist.githubusercontent.com)
1 points by calvins 10y ago|0 comments
17.
by calvins 10y ago
> You need to allocate at least 30 minutes per day (1 hour is better) just talking (averaged over the week) and not micromanaging. What do you talk about for an hour a day, every day, that is so important that it justifies allocating 16%
18.
by calvins 11y ago
"It is better to be a human being dissatisfied than a pig satisfied; better to be Socrates dissatisfied than a fool satisfied. And if the fool, or the pig, are of a different opinion, it is because they only know their own side of the
19.
by calvins 11y ago
Yes, us-west-1 has always seemed a bit of a second-class citizen. For years it has just been two availability zones, but they're named '1b' and '1c', as if there was once a third.
20.
by calvins 11y ago
Shane Legg (a DeepMind founder) and Marcus Hutter collected and categorized 70 different definitions of intelligence: http://arxiv.org/abs/0706.3639 Their attempt at a definition that synthesizes all the others is: &gt
21.
by calvins 11y ago
Errors when already lost don't mean much.
22.
by calvins 11y ago
I wish they would include how many times each password was used. Those top 25 representing 50,000 out of a million passwords means something very different than if they represent just 1,000 out of a million. Comparing the proportion of the
23.
by calvins 11y ago
Pushed back for another six months yet again. So much for the idea somebody here put forth that it always gets cancelled in the middle of the previous month if it's going to get cancelled. This time it's four days before it would
24.
by calvins 11y ago
I know there are quite a few readers of HN that have been waiting for Crypto II for a while, so consider this a public service announcement.
25.
Dan Boneh's Crypto II Course Starts Jan. 11(coursera.org)
2 points by calvins 11y ago|2 comments
26.
by calvins 11y ago
My favorite find so far is "Advances in Crypto" conference proceedings going back to the early eighties: - http://link.springer.com/search?query=%22advances+in+cryptol...
27.
by calvins 11y ago
+1 for Dan's crypto1. I don't think crypto2 has been taught yet via coursera, as I've been waiting to take it and have seen it pushed back several times, and I've seen others say they'd been watching it get delayed
28.
by calvins 11y ago
What you're missing is that Bret Victor isn't the author of that web page. If you want to some of his inspired UX, view https://vimeo.com/67076984
29.
Cryptographic Module Standards at a Crossroads After Snowden's Revelations(pomcor.com)
1 points by calvins 11y ago|0 comments
30.
by calvins 11y ago
Andrew Wiles said much the same on solving FLT: "Perhaps I can best describe my experience of doing mathematics in terms of a journey through a dark unexplored mansion. You enter the first room of the mansion and it's completely d

More ›