ryalfalpha

7 ms·

1.
by ryalfalpha 13y ago
You can fake it with a number of extensions, but there's a load of fingerprinting options that are sneakier than the user agent. The Tor Browser project has a document outlining changes they had to make to make things less fingerprinta
2.
by ryalfalpha 13y ago
The real question is, can you delete it completely? :)
3.
by ryalfalpha 13y ago
That's a fascinating idea, even if it's not made public to the end user. Getting the git blamed stacktraces mailed to the dev team would be interesting!
4.
by ryalfalpha 13y ago
Definitely recommend this site, it was a big influence in my early programming days, I found it way more interesting than Project Euler.
5.
by ryalfalpha 13y ago
Whenever said members/affiliates are former leaders we're really just splitting hairs. I get your point though, I mistook what he had said as there is no link at all between them. Instead he is saying 'The Irish government
6.
by ryalfalpha 13y ago
I don't get your comment?... prominent members from various versions of the IRA are and have been members of Irish governments, see Gerry Adams/Martin McGuinness (Or even Michael Collins if you're talking way back).
7.
by ryalfalpha 13y ago
Here's my reference for reference, http://www.slideshare.net/grugq/opsec-for-hackers (slide 137/138) I cannot recommend either, but I would note that in your link they do seem to state 'Anyway, not so many people seem to do use a tunnel b
8.
by ryalfalpha 13y ago
I don't want to slam your site too much, but just because You don't log Typeview information doesn't mean someone doesn't. If you're using regular HTTP then everything the user types in your textbox can be intercepted by people on the net
9.
by ryalfalpha 13y ago
From what I remember, Wave had it optional as they even said themselves a lot of people were uncomfortable with the idea of people seeing their train of thought (and mistakes). It's an interesting idea but it's a horrible way to treat the u
10.
by ryalfalpha 13y ago
If you have to update your browser to read a site, on a site that's main function is to provide someones thoughts in text form, then I'd consider the website at fault.
11.
by ryalfalpha 13y ago
Yes, as far as I've heard, VPN -> TOR = DANGER, TOR -> VPN = PROBABLY_OK You should probably make the 'Lahana is not super secure' really BIG and BOLD for the reader so they can understand their risk.
12.
by ryalfalpha 13y ago
I'd replace 'good at programming' with 'proven ability to ship'. Most of the time it's values way over a decent codebase from what I can see. Which is often fair enough!
13.
by ryalfalpha 13y ago
Haven't done much golang and don't have it installed on this laptop, but are string comparisons constant time? If not, I think there is potential for a timing attack here? if usr == _admin_usr && pw == _admin_pw { return RootMode,
14.
by ryalfalpha 13y ago
Someday ;) Perhaps there could be open whitelists where sites could nominate their sites as 'https only'. Wouldn't even need to be built into the browsers, could just be a thing people do when they launch a clean browser install, hit up ht
15.
by ryalfalpha 13y ago
That's a valid point, but I can't see it being an impossibility that the user will never accidentally stumble sending a http request rather than https. Whether that is user input, or a maliciously placed link. My understanding is that the H
16.
by ryalfalpha 13y ago
I said 'Not sure how valid that still is' for a reason :). I just found it extremely interesting and 'out of the box'. After reading up a bit on modern defences, I think you're right that it's irrelevant nowadays. (Unless you're in legacy h
17.
by ryalfalpha 13y ago
I think it's also worth pointing out in Moxie's sslstrip talk he does go into detail on using IDN http://en.wikipedia.org/wiki/Internationalized_domain_name to spoof something similar (for non-english TLDs). Not sure how valid that still
18.
by ryalfalpha 13y ago
Could probably ensure it fits in the window nicely though, with zooming etc. Seeing only the North-West of London on screen without scrolling is not as useful. I'd imagine it's damn hard to use on a laptop without two direction scrolling. F
19.
by ryalfalpha 13y ago
I'm pretty sure there's a market for this, I was in talks with a major Chinese company hiring to achieve a similar service for brands on Weibo (Chinese Twitter/Tumblr mashup). But it sounded kinda scummy to me and I dislike social media so
20.
by ryalfalpha 13y ago
It's just a larger, older model with less storage capacity! http://upload.wikimedia.org/wikipedia/commons/8/82/8-inch_fl...
21.
by ryalfalpha 13y ago
If by 'on there' you mean kicking ass and making bacon!
22.
by ryalfalpha 13y ago
Today I learned the ISS has baby-wipes aboard it.
23.
by ryalfalpha 13y ago
Oh yes, in source & commits it's fair game! I'm talking more about editorial content that might have been outsourced. E.g. how-to articles for a company product or articles written in-house that are localised by an external vendor. Thes
24.
by ryalfalpha 13y ago
It really would be the best repo. I can see the commit logs being the stuff of legends! I don't see much use in profanity filters on the net these days, but it is definitely useful for businesses working with external teams just to sanity c
25.
by ryalfalpha 13y ago
Could someone explain the economics driving this? Future up-selling?
26.
by ryalfalpha 13y ago
Oh man, when I worked there in Localisation for Office, there were crazy length lists for every language, it was so much fun to read through with foreign friends!
27.
by ryalfalpha 13y ago
Yeah, when I caught that, I thought that it might just be semantic trolling! (a terrible variant)
28.
by ryalfalpha 13y ago
That's a really great resource, thanks for sharing!
29.
by ryalfalpha 14y ago
"A constant time initial cost for recurring savings in bytes transmitted seems like an excellent use of CPU time to me." Wish more people understood this aspect of web scale! well said :)
30.
by ryalfalpha 14y ago
It's not even rsync yet alone dropbox!

More ›