hayroob
Re:Don't Be Ugly By Accident
on Tuesday August 10, 2010 @03:17PM (#1592671)
Higher birth rates doesn't imply more sex, it implies poor use of contraceptives, which you basically stated.
Re:Don't Be Ugly By Accident
on Tuesday August 10, 2010 @03:08PM (#1592640)
Women like unavailable men, so the iphone is where it's at.
Re:Xcode 4 public preview - Single window, LLVM 2.0, streamlined editing
on Friday July 23, 2010 @01:10AM (#1540421)
git and as petty as it is, not having to type @synthesize.
Re:Ask HN: What DVR do you use?
on Tuesday June 22, 2010 @12:29PM (#1452325)
You could try out boxee and an eyeTV on a mini or shuttle pc, it's pretty easy to set up.
Re:Ask HN: Whats missing from podcasting? Why hasn't the market grown ...
on Tuesday September 01, 2009 @04:43PM (#798883)
Podcasting for most is an analog for radio and until podcasts are as at hand as radio is, it's market share will be capped. Most people want to be able to press a button their dashboard and here a show, not go search it out, put it on their iPod and then hook that up to their car.
Re:How Do IPhone Users Find New Apps?
on Tuesday August 11, 2009 @03:15PM (#756059)
If you're looking for a specific kind of app I use yappler.com, lot easier than iTunes
Re:Managing Your Digital Comics Colllection
on Wednesday July 22, 2009 @03:43PM (#718393)
Cool open source software to manage your digital comics and a basic summary of the state of digital comics.
Managing Your Digital Comics Colllection
Secure Persistent Login With Very Little SSL Redux
http://getitdownonpaper.com/2009/07/11/secure-persistent-login-with-very-little-ssl-part-1/
I have rewritten I had previously submitted to adjust for comments made. This is my proposal for a login system that can reliably keep a user logged in for an extended period with minimal use of SSl to save on overhead. I have also posted code at http://getitdownonpaper.com/2009/07/15/secure-persistent-login-with-very-little-ssl-part-2/.
Re:Secure Persistent Login With Very Little SSL
on Monday July 13, 2009 @07:45PM (#702758)
Is there a reference implementation that you like and that is well documented.
Re:Secure Persistent Login With Very Little SSL
on Monday July 13, 2009 @06:00PM (#702586)
That seems like viable thought. I will watch the presentation when I get a chance, but for now I will modify the article to consider this scenario and my code already forces SSL on the login page and the authentication script.
Re:Secure Persistent Login With Very Little SSL
on Monday July 13, 2009 @05:42PM (#702554)
ya I should probably being using HMAC
Re:Secure Persistent Login With Very Little SSL
on Monday July 13, 2009 @05:36PM (#702534)
SSL is relevant and in my actual implementation, which I am prepping now, I do use SSL on the login form, but technically, the form it is submitting to needs to be SSL, but the form itself does not.
Since I wrote the article I have made some small adjustments to the AES key dialogue, they key is generated at the login form using javascript then sent as an ssl cookie to the authentication form and also stored into a local persistent storage, which is not accessible (barring an exploit.) Once the auth page is reached the aes and guid cookies are cleared. I suppose that a script could be crafted to cause the user to reveal the key and guid stored in persistent storage, this is something I am still working on securing against.
I will consider your suggestions carefully and attempt to integrate them as I work to code this out.
I have posted this discussion into the comments in the article and will be updating it tonight to reflect this conversation. Thank You.
Secure Persistent Login With Very Little SSL
http://getitdownonpaper.com/?p=15
A proposal for a secure login system using SSL only at initial login, but maintaining robust authentication and defending against man in the middle and replay attacks.