lgarron

I don't see e.g. a GitHub repo to comment on, but the HSTS header example is `Strict-Transport-Security: max-age=63072000; includeSubdomains; always`

`always` has no meaning, and probably indicates a typo in an nginx configuration.

As others have pointed out, there is other TLS advice here that you shouldn't follow blindly, like a 4096-bit cert (especially if your intermediate is smaller) or TLS 1.2 only. Rationales and trade-off explanations would help avoid misuse of this checklist.

The SSL Labs checker is probably the best tool to use for all the automatable TLS checks.

This link discusses a nice example of RSA. There was also a paper in 2014 by Bellare, Paterson, and Rogaway [1] discussing this notion more thoroughly (under the name "algorithm substitution attack").

From that paper: An approach that works against many block cipher modes is to select the IV with for a communication using key K as, say, IV = AES(backdoor_key, K). This is indistinguishable from a random IV due to the security of AES, but someone with the backdoor key can easily compute K = AES_inverse(backdoor_key, IV).

[1] http://eprint.iacr.org/2014/438.pdf

...and the ability to actually abort long computations? ;-)

I'm a fan first/rest because of Mathematica. It has four functions that all end in "st", which means I can always recall the one I need:

First, Rest, Most, Last

(Results on Range[4], respectively: 1, {2, 3, 4}, {1, 2, 3}, 4.)

http://caniuse.com/ lists Javascript API features.

2x as fast, not 2x faster, although the actual page doesn't make that mistake. That always bothers me, because even technical people get it wrong, making it hard to interpret "X times faster" correctly.

</pedantry> :-P

Oh, I see. I was struck by the direct phrasing of "You couldn't take the average number of pages", which made me parse the rest of the comment incorrectly.

Why wouldn't you be able to get the average? Return page count + total pages for each shelf and then take the ratio of "reduced" sums.

I've been using QSQRCode to send data to my phone: select, send to Quicksilver and display QR code for the phone to scan. Tap2Tab sounds like an interesting approach, though, and I'm curious to see how much it could do.

That's not particularly optimized; it's als from 2003, when speedcubing was not as advanced. If you want a fairly good attempt at an understandable minimum method, look at http://www.speedsolving.com/wiki/index.php/8355_Method

(Although memory shouldn't really matter for such few moves. Blindfolded solving is where it gets interesting.)

Dropbox is a folder dropbox, it's not MobileMe, or WhateverCompanyComprehensiveDataCloudSolution. (Although doesn't Google already do everything but files pretty well?)

Anyone else think the top of that page looks beautiful?

This is a font with 26 uppercase letters, inspired by the maze font used in promotional posters for the movie INCEPTION. Almost of the work was done in Inkscape and FontForge; I plan to release the source if there is enough interest.

(Since I found out about Hacker News by having an early typography project of mine featured, it only seems appropriate that this should be my first submission. :-)

We had an entire set of programming questions at ProCo (programming contest held at Stanford for high school students) themed with XKCD comics last May: http://cs.stanford.edu/wiki/proco/PastContests/2010Problems

I just came across Hofstadter's "I am a Strange Loop" ( http://en.wikipedia.org/wiki/I_Am_a_Strange_Loop ) in the library for the first time today. I personally care about his ideas of strange loops very much, but since it's his attempt (20 years later) to clarify and expand his central theme in GEB, it should be appealing to people who liked his writing there.

(Note: I haven't actually read it, just got to flip through sections for a few minutes. It seems to be a nice mix of Hofstadter's personal stories and ideas, and I liked the writing, so I intend to read it soon.)

An for "similar to fiction, although I'm generally not into fiction" have you looked into narratives of science? They can be written with the fun aspects of historical fiction, but you come out with knowledge about real events. My favorite that comes to mind is "The Measure of All Things" about the history of the meter: http://www.amazon.com/Measure-All-Things-Seven-Year-Transfor...