HN user

prohor

443 karma
Posts42
Comments104
View on HN
www.reddit.com 5y ago

LED Holographic Display

prohor
9pts0
www.bleepingcomputer.com 8y ago

Microsoft Adds Support for JavaScript Functions in Excel

prohor
4pts0
www.sciencealert.com 8y ago

Scientists Put a Worm Brain in a Lego Robot Body

prohor
3pts0
www.w3schools.com 8y ago

Firefox share stopped declining

prohor
50pts8
arstechnica.com 8y ago

First Photo of SpaceX’s New Spacesuit

prohor
2pts0
dynatrace.github.io 9y ago

Dynatrace UFO

prohor
5pts0
www.seattletimes.com 9y ago

Microsoft stores 200 MB in DNA

prohor
4pts0
news.ycombinator.com 9y ago

Ask HN: Other CA with API, similar to Lets Encrypt?

prohor
1pts6
www.nature.com 10y ago

Google moves closer to a universal quantum computer

prohor
3pts0
android-developers.blogspot.com 10y ago

Android Instant Apps - apps without installation

prohor
3pts0
blog.hackerrank.com 10y ago

Bing live code editor with run option

prohor
3pts1
www.wired.com 10y ago

Virgin Galactic is unveiling SpaceShipTwo

prohor
5pts2
www.networkworld.com 10y ago

Airbus rolls out anti-drone system

prohor
5pts0
www.i-programmer.info 10y ago

Touchable plasma holograms

prohor
1pts0
code.google.com 10y ago

Chrome drops part of SVG 1.1 standard API

prohor
1pts0
news.ycombinator.com 10y ago

Ask HN: How should browser API be dropped?

prohor
3pts4
code.google.com 11y ago

Request for Java 8 support on Google App Engine

prohor
126pts101
betanews.com 11y ago

Microsoft Open Technologies is closing

prohor
1pts0
aws.amazon.com 11y ago

New AWS G2 GPU Instances

prohor
5pts0
www.nature.com 11y ago

Bio-Electromechanical “Cytobots”

prohor
2pts0
googlecloudplatform.blogspot.com 11y ago

Google Cloud Logging

prohor
46pts3
www.gizmag.com 11y ago

Heart-on-a-chip beats a steady rhythm

prohor
1pts0
www.cloudorado.com 11y ago

Show HN: Cloud Computing Comparison Engine

prohor
8pts2
www.businessinsider.com 11y ago

This One Chart Shows the Vicious Price War Going on in Cloud Computing

prohor
1pts0
bitcoinwisdom.com 11y ago

Bitcoin collapes?

prohor
1pts0
ruxit.com 11y ago

Ruxit – new application performance monitoring tool

prohor
2pts0
www.gizmag.com 11y ago

Uber's Android app caught reporting personal data back without permission

prohor
3pts0
www.networkworld.com 11y ago

The one thing missing from Amazon’s big cloud conference

prohor
1pts0
www.itworld.com 11y ago

American Express Seeks to Swap Card Numbers for Secure Tokens

prohor
2pts0
venturebeat.com 11y ago

Snapchat will roll out its ads this weekend

prohor
2pts0

Thanks. Yes, this is something what I think of. Does it show on the screen what operation you confirm with U2F? Or just "U2F authentication"? But cord makes it far less convenient unfortunately.

What I miss in the U2F tokens is a small display that would show transaction details which is approved.

Imagine you have a malware on your PC; it can send another transaction than the one you see in the browser, while the URL would still match. Having transaction summary on the token would be the last verification point where can still spot something is wrong.

For me the difference seems to be in handling large number of distinct logs. In Kafka every log & partition is a separate file and moreover it keeps it open. So, storing multiple logs results in writing to many files so eventually random write IO; and also you may hit limits of open files. You can multiplex logical logs in each Kafka log, but then you read unnecessarily other logs.

Keeping SS tables makes it more sequential write and reasonably sequential write, as long as you have enough RAM to get multiple records of each log, so they constitute a continues blocks in flashed file.

Actually you could get very similar result using Cassandra, which also uses SS tables. The difference is that Cassandra keeps merging files, which actually makes much more IO traffic than clients. Cassandra will typically need 16x more IO for merging then actual data write rate. You can limit it a bit if you create time shard tables.

I just wonder - if the same key is used for enabling password manager and 2FA ... is it still 2FA? I mean, having the token you get both access to password and second factor to a service.

I love the feature they keep passwords in fact on the device itself, not as a key to enable password manager. I was looking for something like that. If only they offered strong encryption for Europe!

In Poland there were many people killed, potentially due to a coma (,). A court process of the pacification of Wujek [1] was mainly whether a response to question "Should we shoot?" was "No, wait for orders" or "Don't wait for orders" (in Polish less difference "Nie, czekajcie na razkaz" vs. "Nie czekajcie na rozkaz"). This was really a ruining life of many just by one coma.

1. https://en.wikipedia.org/wiki/Pacification_of_Wujek

Thanks for hints. The Caddy server looks nice.

The default and simplest scenarios is that our domain is used, so that the user is not forced to setup DNS, but they can if they wish. But of course having a set of domains is an option. The problem with that is, that there is still a limited set of domains that we could use and still easily matches with the product.

Well, ACME would be perfect, but actually any fully automated process would do.

We provide an on-prem software available via browser. And well, we want to be very nice for our customers, so upon installation we also setup a subdomain in a domain that we control and request a certificate for that. At the end of installation we provide user with HTTPS URL where the service is available and with a valid certificate :-) Of course they can later opt-out, use their domain or certificate, but we make it work without security warnings from the first moment.

I was always wondering rather on Stack Overflow for law, where one could get advice from other knowledgeable. But I talked with few lawyers (technologically open-minded) and they weren't interested. It seems the final root cause is that in software development the level that you get help is not the level where the end products are and compete. For lawyers it would be different - an advice is the root of their service, so it is the end product. So if they were helping with advice, they would directly help competition. Secondly, their customers could end up in that level instead (while software customers cannot benefit from stack overflow).

1. Daily: rsync snapshots to disk attached to Raspberry Pi (similar to rsnapshot)

2. Periodically: duplicity to Oracle archive storage (7x cheaper than AWS Glacier - $0.001)

It is a bit confusing that you have unit selection (for temperature and wind speed) in top-right corner, and then separate for map. I thought it is broken before I noticed the other switch.