HN user

babby

322 karma
Posts0
Comments177
View on HN
No posts found.
Strong Passwords 10 years ago

The only complicated part of this method is securing the key, and the key is definitely required or you may as well just save it as plain text.

You sync your DB across multiple cloud services, and to decrypt you use a weak master pass and strong key.

I've been struggling with how to move that key around.

.1) Put it on a USB drive or hide it in your filesystem.

This is cumbersome and losing the drive could be disastrous. It's also trivial to scan a filesystem for key-like files.

.2) Use an authentication dongle.

This one is better but requires third party hardware in most cases, and is slightly expensive.

.3) Bluetooth/NFC to your device.

This can be intercepted at extended ranges as proven at defcon etc. Though is admittedly the most convenient method. The data can be signed, but I haven't seen anything out there that implements this well just yet.

.4) Timed one time passwords, PushBullet etc.

This feels like a bonus feature.

I'm not sure how to go about this. You lose or leak the key then you're screwed.

Is there a wristwatch or phone app with signed credential sharing based on wearer input, compatible to a standard?

Universal.css 10 years ago

I've done this before. The performance on IE, firefox, safari and mobile is complete shit yet suprisingly good in Chrome.

Windows 10 Review 11 years ago

Thats wrong. Pro lets you choose not to download it indefinitely with the option I described.

Unless you're implying it auto-downloads after a few weeks, I wouldn't know.

Windows 10 Review 11 years ago

While I recommend a switch to Linux/Mac, you can make updates behave like Win7 by opening "Edit Group Policies" in the start search. Then look for Windows Updates for the option.

Without this done windows will actually download updates automatically while you are ingame or something else network sensitive, it's so fucking stupid.

Windows 10 Review 11 years ago

This is pretty much the preferred cure from what I've gathered. If you can build a PC with two GPU's (or merely one PCIe and one integrated), you can game, use Photoshop nearly natively.

But as you have said, it's not as straighforward as I'd like. I haven't tried it yet but it's nice seeing others having success.

Are there any up to date guides and best practices for this?

I'd love CoffeeScript support.

Additionally... Tonic is comparible to CodePen in terms of testing and thus gave me the idea;

Perhaps you could also include other languages into your platform. Such as a Stylus REPL, SASS, SCSS etc. all of which, like CoffeeScript, are just JS modules on npm.

With compilers like Stylus and SCSS you would probably default the return value to be the compiled CSS, and with Coffee you'd need a toggle button to show what the compiled JS looks like, though not 100% necessary.

With that said, if there was just a way to set up a "build" script for a REPL to set up the environment to achieve the same result. As in, you require('stylus') then have some global variable stream/buffer, tonic.output, for which you could inject into the module of your choice to generate output, and then save it via tonic.buffer.write() or something. It could then be ridiculously flexible in terms of testing out finicky new languages/compilers.

Finish your stuff 11 years ago

Then at the top of your readme you should absolutely write [[Project feature complete and stable]], or something to that effect.

You just can't look at a repo and discern its completeness in an easy way. Also explain why you think it's complete.

I had the displeasure of reading most of what you wrote and am writing this to convince you of something:

Please stop. Your SJW politics is off topic and in my opinion; utterly trivial nonsense. You were out-argued and still you found it in yourself to write more damage control comments.

I'm certain the reason people on HN don't call you out on this more often is the latent fear of being shadowbanned due to political correctness.

You made this your personal little soapbox and your posts reek of entitlement. Stop.

This is a mostly garbage. It doesn't even mention control flow; callbacks, promises.

A big problem with JS is in part its best quality; flexibility. New and old developers need to be shown how JS has evolved to be written. I see massive code-quality and structure discrepancies in various large modules throughout the JS community and it only serves to dissuade contribution.

I'm not sure if it exists, but there should instead be a site dedicated to: "JS, done right."

It could outline actual best practices. - Building, usage of precompilers - Control flow - Code structures - Tests - Everything in between

Usage of precompilers. - Browserify, for modularity - Babel, for next-gen features and code elegance

Control flow - Bluebird, for promises

Tests - What libraries to use - How to build tests and how the big guys do it - Guides for complex tests

Then you could introduce other somewhat subjective deviations, like CoffeeScript, other promise libraries, other control flow techniques.

Describing code structures is another big one. With the use of Babel, the example-code can feature ES6 classes which would remove a nice chunk of the confusion newbs might associate with JS's prototype system (Not to say it shouldn't be introduced).

Then describe when to use each code structure.

My last thought would be to link to Github repos; for example, applications in both node.js and the client, which could describe a standardized filestructure, explain build steps, introduce tests, supply a step by step guide, etc..

Then I might say that if someone makes it through that gauntlet (and everything I missed in between), they might just be a competent JS dev.

That's interesting stuff.

I was also in a car accident and afterwards both he and I could recount each other's facial expressions (Though they could be imagined).

I just wonder whether it is memory fidelity increasing or if brain "performance" also grows.

4chan discusses HN 11 years ago

I've observed that the SJW hive think has skyrocketed over the last year on HN. I used to be able to predict ridicule in the comments, but instead I find pandering and PC nonsense. It's pretty depressing overall.

Try running a server which watches for file changes and then automatically recompiles without server restart, preferbly configured in the server instead of a CLI. I couldn't be nearly as productive with any other setup.

Thing is that node can be searched by "node" "nodejs" "node.js" thus the results will always be skewed by a single term like "PHP".

When you think about it, PHP is not as high as you would expect in comparison.

As a user of Android HN apps, premii seems to beat them in all aspects. The major aspect being them actually working properly.

It seems like apps are less maintainable. Right now pretty much all of the Android HN apps are broken in some way, or missing a core feature of the desktop experience.

Cons: Larger memory footprint

The more annoying con is lack of shared memory. A single process can be much less complex when it doesn't have to worry about messaging systems and off process caching.

In theory, with DX12 timed for a 2015 release it could ease the burden enough to make the PC upgrade easier. From what I've gathered DX12 will be significant in terms of efficiency, so new games which support it may be viable.

It's also worth considering whether new games that come out will take VR into account in terms of graphical complexity. If it's clear VR is a viable marketing strat for a game or it gets to a point where big games are expected to support it, it could mean a developer will compromise scene complexity for it. I'm okay with that.

Firefox added a new scrolling feature in Aurora. layers.async-pan-zoom.enabled;true

With this enabled scrolling is calculated in its own thread which makes Firefox insanely smooth now, so I doubt I'd notice a difference even if it were 50000. I recommend everyone gives it a try, it's a big deal.

That will be enabled in stable soon I believe.

Thats a poor argument. Literally no one gets DoS'ed by a few guys F5'ing in coordination. If your server is so poorly set up as to allow any small number of IP's to impact it in any way then you are doing it wrong.

When I was getting into nodejs a few years back I wrote DoS script to kill a site that was scraping content from one of my sites and posing it as their own. I made it just for shits n giggles in about 5 minutes and I was surprised when it actually worked, their website just went down.

DoS is and always will be easy.

It already is for me. I had to spend ~2-3 days recently debugging IE11's utterly abysmal dom performance and stylesheet performance. Smooth as butter on chrome, 4 FPS on IE. The only way to fix it was to display: none everything I could, and we're only talking about a few hundred dom elements.

I agree, and it's close to usable but not quite. There are a few outstanding breaking issues on the repo that I wish someone who knew how it worked could fix, but the project looks abandoned.

I actually heavily modified sublime-better-coffeescript to support highlighting function-calls and I added proper CSJX support.

Been meaning to make a pull request; but these Sublime plugins are always so easily abandoned and under maintained that there's no point.

I've tried Webstorm and assumed IntelliJ IDEA had the same pitfalls, which, if I recall correctly, was poor performance and flaky autocompletion. I'll have to download it anyway and try though, if only to see what it looks like to have intellisense!

I was really excited about Visual Studio for a chance at Coffeescript intellisense, however I learned after the several gig download it wasn't supported. It seems there is basically no way to get proper autocomplete in any editor for CS, suggesting maybe I should just consider Babel for ES6/7 despite my massive love for CS and giant projects built in it.