coderrr

6 ms·

31.
by coderrr 14y ago
Hey Matt, thanks a lot for investigating, I've updated the post.
32.
by coderrr 15y ago
please read this book: http://www.amazon.com/Facts-Fallacies-Software-Engineering-R...
33.
by coderrr 15y ago
as long as mint.com has HSTS and either the user has been there once before or it was hard coded into the browser as an HSTS domain then the browser will never visit http://mint.com , it will immediately go to https://mint.com EDIT: and
34.
by coderrr 15y ago
From the proposal it doesn't sound like it's even a single log, but that each timeline server has its own log. I'm assuming when you publish your SK you send it to all of the timeline servers. So there will be 10-30 global append-only log
35.
by coderrr 15y ago
It's not really bitcoin-like other than the fact the store is append only. There aren't any DAGs in SK. There aren't really any DAGs in the bitcoin blockchain either (correction: bitcoin transactions - not blocks - do actually form a DAG)
36.
by coderrr 15y ago
Yea if you send coins to a new address no one can prove you own that address. You have to be careful though. If you send 100% of your known linked addresses to a new address it's pretty obvious that you own the new address too and have jus
37.
by coderrr 15y ago
"Otherwise your identity would have to be 'disclosed' for each different address separately." Actually, it's a lot worse than that. Most people will have a majority of their addresses linked without knowing it. http://coderrr.wordpress.c
38.
GitHub hack: speed up git push/pull(coderrr.wordpress.com)
2 points by coderrr 15y ago|1 comments
39.
by coderrr 15y ago
Sorry this is off topic, but did you ever analyze the results of your google spreadsheets survey here: http://news.ycombinator.com/item?id=2763932 ?
40.
by coderrr 15y ago
Starts at 3:20. Apart from the somewhat bad audio this seems to be the best technical overview video of Bitcoin so far. Slides at http://people.mozilla.com/~bwarner/bitcoin/
41.
Bitcoin: A Technical Introduction - by Mozilla Labs engineer Brian Warner(vimeo.com)
2 points by coderrr 15y ago|1 comments
42.
by coderrr 15y ago
That's correct, we log connections TO our VPN but log absolutely nothing in terms of traffic sent THROUGH the VPN. So whatever you do while connected is not logged and therefore un-subpoena-able.
43.
by coderrr 15y ago
Only problem with the LD_PRELOAD method is that it doesn't work for all (many) apps. I believe one case it breaks for is non blocking connect()s, not sure if there are others. Although the iptables setup is a lot more complicated it prett
44.
by coderrr 15y ago
We don't keep any logs.
45.
by coderrr 15y ago
One interesting benefit of using a local proxy tunnel (instead of VPN) is that you get rid of one round trip when making TCP connections. Since your browser will connect to localhost (~0ms) it will be able to send the HTTP request immediat
46.
by coderrr 15y ago
Just fyi, all your non-HTTP Flash traffic (Flash sockets) is probably not being proxied at all. Even if you have a SOCKS proxy set in the browser. The easiest way around this is VPN, but you can also do crazier stuff like use ProxyCap (for
47.
by coderrr 15y ago
Another shameless plug here... We provide a cheap (39.95$/year) unmetered VPN service at https://www.privateinternetaccess.com We support all devices (OpenVPN, PPTP, IPSEC/L2TP) and have servers in US west/midwest/east, UK, and Switzerlan
48.
by coderrr 15y ago
"2) I think that some of our analysis would be possible to foil. Its probably possible for client software to avoid a lot of the account 'linking' that is due to transactions inputs being merged," I already did some work on this: http://co
49.
Patching The Bitcoin Client To Make It More Anonymous(coderrr.wordpress.com)
2 points by coderrr 15y ago|0 comments
50.
by coderrr 15y ago
I think the most interesting aspect of this whole thing is, like you mention, how new bitcoin-like currencies are perceived, valued, and participated in. Will everyone start jumping into new bitcoin-like currencies in hope of massive bitco
51.
by coderrr 15y ago
Yes it is but I don't think Bitcoin was created out of dislike of all banks, probably just the Fed.
52.
by coderrr 15y ago
I agree with your concerns although I think they are pretty analogous to people stealing gold out of banks. There's no recourse from that and if enough big gold reserves vanished I'm sure the gold market would be screwed up. Of course thos
53.
by coderrr 15y ago
Completely agree. Although your code wouldn't help make a worm. Because even though you could get the Bitcoin client's peer addresses you couldn't remotely exploit them. I'm worried about the bitcoin client being in c++ rather than java b
54.
Password haystacks(grc.com)
5 points by coderrr 15y ago|1 comments
55.
Beware of Thread#kill and partially commited ActiveRecord transactions(coderrr.wordpress.com)
10 points by coderrr 15y ago|1 comments
56.
by coderrr 16y ago
I'm only getting this in Firefox and I'm also getting it on a bunch of other searches: download firefox, download winrar, download microsoft word, download anti virus, download free music
57.
Anyone else seeing this interesting Chrome advertising?(i.imgur.com)
6 points by coderrr 16y ago|2 comments
58.
by coderrr 16y ago
I'm pretty sure you can't set the Origin header yourself. That would kindof defeat the purpose of it. If anything they'd only allow you to specify whether or not to include the header. But I doubt any browser even lets you do that: $.ajax(
59.
by coderrr 16y ago
Ah sorry, I was only checking same domain XHRs, which doesn't seem to send the Origin header. That combined with the fact that Origin isn't sent for <script> tags seems like it can't be used to prevent CSRFs.
60.
by coderrr 16y ago
But how many browsers actually send the Origin header currently? I just checked Firefox and Chrome and neither sent it on a <script> or XHR request.

More ›