HN user

saool

177 karma
Posts6
Comments81
View on HN

Anecdotally...

Having spent time driving in both Europe and Southern California, I'd say that European drivers are more attentive to their driving and way less likely to be looking at their phone while driving, since it's policed. You can often see drivers in SoCal holding their phone for a video call.

Sorry, I should've specified that it's impossible as the standard is written, not necessarily cryptographically impossible.

A scheme could definitely be devised to add authenticator "stubs", but I don't think it's possible right now.

Unless you're saying the above is already available in the spec.

1, 2, and 4) Yes, that's already possible. Look into Solo Keys for open source hardware and firmware. The standard allows for key manufacturer attestation but seems like the way it is going (especially with the proliferation of software authenticators) it likely won't be relevant in practice. You can also enroll many authenticators to the same account (provided the service allows it, which most do).

3) This is pretty hard/impossible, I think. The authenticators don't use the same key-pair for all websites (a la SSH through Yubikey), but rather create a per-service, per-credential key-pair, and encrypt it with the main key-pair. The encrypted credential key-pair is then handed off to the server for storage, and the service sends it back for the authenticator to decrypt and use during a challenge. Clever trick to not depend on local hardware memory and be able to have unlimited per-credential key-pairs, but afaik prevents you from just "adding lists of public keys".

I'm also not mentioning the resident keys aspect of the standard but that won't fix it as they're still service and credential based.

In the typical case and handwaving a bit:

On registration, the server is handed a site/user-specific key pair _encrypted_ with the master key of the authenticator device (your usb key or your phone, etc), together with the plain-text site/user-specific public key.

On authentication, the server sends down that encrypted blurb, which is temporarily decrypted and then used to sign a challenge the server sent.

So basically the server is used as storage. There are exceptions to this (e.g. resident/discoverable credentials on hardware keys)

As long as we are talking (de)colonization, the distinction makes all the difference.

The difference in the treatment of a land and its people as equals to the rest of the country's citizens and states is what makes Hawaiians regular Americans and Ceuties regular Spaniards, and what keeps Llanitos from being British _citizens_.

To answer your question: yeah, if Gibraltar was a self-sufficient state within the UK (instead of an -arguably- geo-strategic colony that is a tax haven according to the OECD) you likely wouldn't hear as many complaints about it.

Take for example the cession of Sardinia in the very same Treaty of Utrecht. You ever hear complaints about its sovereignty?

Not only is that a tu quoque fallacy but it also fails to take into account that both Ceuta and Melilla are integral parts of Spain and have been since the 16th century, centuries prior to Morocco's independence from France in 1956, whereas Gibraltar, being a British Overseas Territory, is not and never has been part of the United Kingdom.

While the Basque conflict was mostly about identity, and the Catalonian one is half about identity and half about economics, the Leon conflict is sheer economics.

The region took an economic hit during the 80s as the country transitioned to a tertiary-sector-heavy economy, which lumped together with the lack of investments from the new regional government and their inability to perform any sort of industrial restructuring quickly turned Leon from one of the most prosperous regions in the country to one of the least.

Basically the same issues and politics you see in coal country in the States.

It is, but in Spain's case it is sometimes nationalism too, as the Spanish Crown rules over several different old independent kingdoms which have cultural differences and languages that stem directly from Latin (ex. Euskera).

I don't know where academics put the bar, but in my mind any area that has its own non-dialect language or was once an independent entity for a good while can claim to be a nation. Though not sure what the claim would mean in practice.

That said, I'd rather see all these things die down and have a strong EU of federated states of whichever size helps democratic and economic progress. Tall order, I know.

The cathedral in Leon, Spain, a slightly older gothic church, was the scene of a very similar fire when a badly grounded lightning set the wooden roof on fire in May, 1966.

The damage wasn't as pronounced thanks to the stone used for the top, which was chosen for its lightness but had the added benefit of having volcanic-like properties. And especially thanks to a local mason who made the call to pull the fire brigade and sacrificed more of the wooden roofing to prevent the water weight from making the vault collapse.

I haven't found much info in English but here's a detailed account in a Spanish blog: http://cosinasdeleon.com/el-incendio-de-la-catedral-de-leon/

not worth holding long term

for him.

Even if he were confident that Facebook has a good chance of growing, say, 10% YoY for the next 20 years, with those smarts and his access he can put the money to work on the next facebook, or even less successful companies that will likely beat that 10% in aggregate.

Thinkful | Senior Software Engineer ¡ Brooklyn, NY or Remote | ONSITE, REMOTE, https://www.thinkful.com/

Founded in 2012 in New York City, Thinkful is on a mission to reinvent education. We are building a school that trains the workforce in the technology skills necessary to sustain innovation and growth in the economy. We are developing a method of online learning that emphasizes practical, sustainable skills and prepares students to achieve their career goals. We are looking for experienced engineers with a passion for education that want to join us and help shape the way people learn online.

The company was founded by Dan Friedman —one of the Thiel Fellows— and Darrell Silver, founder of Perpetually (acquired by Dell), our CEO and technical co-founder. The culture is balanced: analytical but fun, serious but sane. You will be joining a small, agile team with big challenges ahead of us.

If you are interested, check the job listing http://goo.gl/AoUW1M or drop us a line at swe-position@thinkful.com to hear more.

I must be out of date, but my impression is that heroku's ease of use deploying and configuring applications through the web UI can't really be matched with kubernetes, mesos or others, which would need thousands of lines of orchestration code to work. Is that not the case anymore?

Just to clarify, I wrote what I understood the piece to be, I don't necessarily hold the same view. I have seem my share of resources squandered by a short-sighted politician looking for re-election.

I guess in a perfect world, the State realizes it needs to plan and invest beyond 4 years, and in the rest of the cases your mileage will vary greatly.

I understood it to be that seemingly Ayn-Randian heroes like Musk are standing on the shoulders of giants, giants being the State.

Add to that the thesis that the same way Musk wants to keep SpaceX private to focus on the long-term, states can take that same long-game stance with their strategic economic policies.

And because of that, the author is looking forward to a more leftist current (Sanders, Podemos) to increase and lead government spending and investment.