jakecraige

5 ms·

1.
by jakecraige 4mo ago
Yeah this is not universal. I bought mine
2.
by jakecraige 5mo ago
Yeah, I think it's more of a British English thing. It can also mean things like "in a fight". Like: "those two guys had a big row outside the pub the other night"
3.
by jakecraige 5y ago
Another vote for SynthRiders here. I have the same complaint about Beat Saber as OP. Can be done with wrist flicks and be lazy Synth Riders forces you to have to move your body and do large sweeping motions, it feels like dancing, AND it ha
4.
An Explainer on Ed25519 Clamping(jcraige.com)
1 points by jakecraige 6y ago|0 comments
5.
by jakecraige 6y ago
The main app powering coinbase.com, the “monorail”, is a Rails app backed by MongoDB. It’s typically what’s being referred to when breaking out microservices. Historically most other services were Rails/Sinatra with Postgres. These day
6.
by jakecraige 6y ago
We (Coinbase) already sign cold storage transactions in a distributed manner so this isn’t an issue :)
7.
by jakecraige 6y ago
Brian calls this out and describes how Coinbase plans to do this in the “This will require a huge shift in how we do things. How will we get there?“ section. > To address all of these, we will form a cross-functional team to oversee this
8.
by jakecraige 7y ago
It’s not assuming MITM or that the attacker can upload the signature to the site. The attack is that the attacker can reuse the already uploaded signature in a way that allows them to get certificates issued under their account instead of t
9.
by jakecraige 7y ago
Matthew Green has a related post about this speaking to “multiple encryption” where people do the same thing with ciphers. [1] A very generic take would be that depending on the system, it may be able to be done securely, but with all crypt
10.
by jakecraige 7y ago
I haven't implemented but like what it's going for. Modern crypto is all about making it easy to do the right thing without thinking about it and PASETO does that well with its versioning scheme and relying on established crypto f
11.
by jakecraige 7y ago
Nonce reuse is easily preventable with deterministic nonces or sufficient randomness. PS3 used a fixed nonce which is a whole different problem. I agree that JWT has all sorts of flexibility that make it hard to use well but NIST curves wor
12.
by jakecraige 7y ago
They have a bug bounty program that gives you permission to do certain kinds of things and it not be illegal since you’re planning to report anything you find (and get paid for it)
13.
by jakecraige 7y ago
Y'all are talking about two different things. Secret key recovery via nonce reuse(linked SO post) is a different than simply trying a range of integers which is mostly what these researchers did.
14.
by jakecraige 8y ago
Thanks for the link! I went down a small rabbit hole from this which ended up with a script that allows for similar style workflows even within the GitHub PR world: https://twitter.com/jakecraige/status/10568351044
15.
by jakecraige 8y ago
First step in trying it out requires inputting my full name and email address :/
16.
by jakecraige 8y ago
Yes, I’m saying that rather than needing an hour to get 6 blocks if the hash rate doubled, you’d only need 30 mins _until_ the adjustment occurs. Then it would be an hour again.
17.
by jakecraige 8y ago
Yeah it’s sort of time based assuming consistent blocks, but it would still based on confs. If the hash rate doubled then one would only require 30 minutes until the difficulty adjustment kicked in. The main purpose of my post is that to ac
18.
by jakecraige 8y ago
It would be helpful to expand on how many blocks can be reversed given only one hour of hash rate. Many wallets, exchanges, etc require a minimum number of confirmations before allowing you to spend the coins to handle reorgs that happen na
19.
by jakecraige 9y ago
It's not so much that miners would ignore empty transactions, it's that the spammer would need to pay the miner fee to get each transaction in the block which would end up being very expensive and unsustainable long term. For the
20.
by jakecraige 9y ago
Tools like React Native and Electron are pretty popular these days to build cross-platform apps and such. Since you know web stuff and I'm assuming JS, those might be a good option to explore so you could maintain them without having
21.
by jakecraige 9y ago
Cool product. I've used calendars in the past to maintain this kind of thing but a product has many more features than a calendar so I'm into it. A mobile app would definitely be nice for this kind of product at some point. Push n
22.
by jakecraige 9y ago
US style dates, you probably want 03/18/1965
23.
by jakecraige 9y ago
I'm a fan of FB login. In practice it's pretty trivial to maintain once it's set up, I don't recall ever having to do any updates to an FB login system once set up. It's nice that I don't have to create yet-ano
24.
by jakecraige 10y ago
> I say it's shitty because they don't follow best practices and just focus on pushing out workflow apps as quickly as possible. No docs, old tooling, etc. Really a mess. I doubt schooling would fix this. It tends to be more ab
25.
by jakecraige 10y ago
Great read. Reminds me of a book I read recently, Difficult Conversations, where my key takeaway was to do everything I can to understand the other person, and make sure they understand me. Then we can work together towards a resolution. Th
26.
by jakecraige 11y ago
This will definitely not work with MeteorJS. It's a React tool built around their framework. I don't think there's anything like this for Meteor yet. Unless you mean does it work if you use React within a Meteor app. If so, i
27.
by jakecraige 12y ago
The problem is that "Silent Errors" is not spot on. At least not his example of them. If you have this example in angular, you'll get the same result. $scope.myObj = {x: 2}; <div ng-bind="myObj.notHere"><&#
28.
by jakecraige 12y ago
The framework battle is really between Backbone, Angular, and Ember. No one else I can think of off hand has the marketshare that those 3 do.. And each has their own strengths and unique opinions. My preference is Ember, but it's just
29.
by jakecraige 12y ago
I made an Ember.JS version of this since we have a few different posts comparing all the frameworks today. Still need to split it up into steps but it's there as an example of the implementation right now Lines of Javascript: 92 Lines