News for hackers. Stuff that matters.

blueplanet

Re:Changes to Npm's unpublish policy on Tuesday March 29, 2016 @03:14PM (#11384078)
> Without a web of trust (sigh), a PKI (ugh), or some other mechanism to tie identities to trust metrics, this is essentially a complicated, very expensive, and fragile version of the shasum check npm already has.

The stance was without an agreed upon way of trusting public keys, you don't get any additional protection beyond shasum. Isn't that true?

Re:Java 7 changed the structure of String on Friday July 10, 2015 @03:32AM (#9862712)
Can someone explain to me why using a cached value for hashCode in an immutable string is a bad thing?
Re:NPR One on Monday July 28, 2014 @12:07PM (#8097589)
I think they mean tailoring in two ways:

1. Play stories local to where you live. 2. A lot of shows on NPR aren't straight news, so it'll remember which shows you particularly enjoy.

Re:Maintaining digital certificate security on Tuesday July 08, 2014 @01:55PM (#8005765)
Moxie Marlinspike gave a talk at DEFCON 19 about how broken the CA model is and suggested an alternative.

The talk - https://www.youtube.com/watch?v=pDmj_xe7EIQ The alternative - http://convergence.io/