HN user

gry

783 karma
Posts34
Comments251
View on HN
glench.com 8y ago

Laser Socks — a sweaty game pointing toward the future of computing

gry
4pts0
westaway.co 9y ago

Method's Hustle

gry
1pts0
threatpost.com 9y ago

Uber Debuts SSH Key Authentication Module

gry
1pts0
kitchenette.jezebel.com 9y ago

The Gratuitous Injustice of American Tipping Culture (2014)

gry
2pts0
footprints.stanford.edu 9y ago

Footprints: Are you really anonymous online?

gry
1pts0
neverworkintheory.org 9y ago

It Will Never Work in Theory

gry
2pts0
www.buzzfeed.com 10y ago

An Apple That Never Browns

gry
15pts2
medium.com 10y ago

Learning Fluency: an essay

gry
2pts0
sappingattention.blogspot.com 11y ago

Investigate onscreen language in about 87,000 movies and TV shows

gry
10pts0
krebsonsecurity.com 11y ago

Home Depot Hit by Same Malware as Target

gry
7pts0
www.theatlantic.com 11y ago

I Drank a Cup of Hot Coffee That Was Overnighted Across the Country

gry
12pts5
github.com 12y ago

An unofficial mirror of the OpenBSD team's LibreSSL project (a fork of OpenSSL)

gry
2pts0
www.informs.org 12y ago

In Search of Air France Flight 447 (2011)

gry
3pts0
zeamon.com 12y ago

Building An Orrery

gry
1pts0
practicaltypography.com 12y ago

Butterick’s Practical Typography

gry
3pts0
www.quora.com 13y ago

How much research has gone into developing the Facebook ping sound?

gry
4pts0
langref.org 13y ago

Langref: A cross-language reference

gry
2pts0
github.com 13y ago

Ruby Advisory Database

gry
1pts0
osc.hul.harvard.edu 13y ago

Highbrow: A Textual Annotation Browser

gry
1pts0
www.nature.com 13y ago

Unique in the Crowd: The privacy bounds of human mobility

gry
6pts0
monkeytheater.com 13y ago

Choosatron Deluxe Adventure Matrix

gry
1pts0
davidgalbraith.org 14y ago

Use Case Study House #1 - A house designed like a web application

gry
3pts0
helioviewer.org 15y ago

Helioviewer

gry
2pts0
www.azarask.in 15y ago

Privacy Icons

gry
55pts16
nymag.com 15y ago

The Cocktail Creationist [2005]

gry
3pts0
biae.clemson.edu 15y ago

A Literature Review on Reaction Time

gry
1pts0
andrzejonsoftware.blogspot.com 15y ago

2 problems with Cucumber

gry
7pts2
www.santafe.edu 15y ago

Why New York City is about average

gry
2pts1
www.google.com 15y ago

SSL Search

gry
1pts0
www.slate.com 15y ago

Pitcher Perfect: Why can't anyone throw a baseball faster than 100 mph?

gry
5pts5
Waterway Map 2 years ago

Minnesota's has expansive rivers feeding the Mississippi[1] and it has one million acres designated to a canoe wilderness -- the Boundary Waters Canoe Area Wilderness -- bounded by the Canadian Quetico to the north[2].

They are navigable by canoe by design, yet they are flitting dots.

It gives me pause; what is this site trying to convey? It's a fantastic effort, yet for the water we have, it doesn't match.

[1] https://www.dnr.state.mn.us/watertrails/interactive_map/inde... [2] https://www.paddleplanner.com/tools/maps/bwcaqueticomap.aspx

FWIW, Ctrl-[ is ESC's equivalent.

Ctrl-C escapes insert mode, and does not check for abbreviations. It has a different behavior.

    <Esc> or CTRL-[ End insert or Replace mode, go back to Normal mode.  Finish
                    abbreviation.
                    Note: If your <Esc> key is hard to hit on your keyboard, train
                    yourself to use CTRL-[.
                    If Esc doesn't work and you are using a Mac, try CTRL-Esc.
                    Or disable Listening under Accessibility preferences.
                                                    i_CTRL-C
    CTRL-C          Quit insert mode, go back to Normal mode.  Do not check for
                    abbreviations.  Does not trigger the InsertLeave autocommand
                    event.
https://vimhelp.appspot.com/insert.txt.html

You can use a YubiKey for a portion of a master password. This is best used by manually typing "correct" and autocompleting the latter portion with plenty of entryop of the password/phrase "battery horse staple" from the key. This way, if someone steals the key, you've still got a secret.

You'll still need a password manager to store the unique passwords for your services.

https://www.yubico.com/support/knowledge-base/categories/art...

https://www.yubico.com/wp-content/uploads/2015/11/Yubico_Whi...

EDIT: Explanation

In 2005, Bruce Schneier noted the purpose is to provide a fallback password[1] if the primary password was forgotten, but the reality is, security questions are a much less secure protocol than passwords themselves.

While on a personal level you can fix this by using a password manager and generating another random string as an answer, other cute and terrible implementations like United[2] (calling you guys out) obliterate it, making yet another, terrible, horrible, no-good secondary protocol.

Why companies use them is because the Powers That Be(TM) believe it to be a secure protocol. They localize the problem to themselves and since they haven't been exposed using their mother's maiden name, it's good enough. Also, everybody else uses security questions, even our competitors, so we have to be at least as secure as them, right? The key phrase is "at least". Then you are equivalent in policy and protocol; certainly not more secure. :D

[1] https://www.schneier.com/blog/archives/2005/02/the_curse_of_...

[2] https://www.united.com/ual/en/us/account/enroll/default

Turning off chat doesn't necessarily suggest that is true. While `sticky_pool=atn2c06_chat-proxy&state=active` suggests the case, it's something to explore and see if there is a larger issue at hand.