News for hackers. Stuff that matters.

tachang

Re:Security Issue February 2019: FAQ on Friday February 15, 2019 @11:05AM (#19171957)
For those wondering MD5 by itself is a terrible hash for passwords. It’s really fast and without salting you can build rainbow tables against it with reasonable speed.

If the passwords were salted it still means that a determined adversary can find your password relatively quickly.

Other better hash functions for passwords include things like bcrypt. Though I do understand it is a pain to migrate users over since you can only do it when they login.

How did we end up purifying the amount of U235 needed?

I saw on another page "General Leslie Groves consulted with lead scientists of the project and agreed to investigate simultaneously four separate methods of separating and purifying the uranium-235: gaseous diffusion, centrifuge, electromagnetic separation and liquid thermal diffusion."

Seems like a ton of work.

Re:REST and GraphQL really aren't that different on Wednesday January 30, 2019 @03:22PM (#19039031)
The reason you'd do this is because you are probably planning to return the same response for all the HTTP verbs.

Like if you wanted to return a empty hash {} for:

  GET /
  DELETE /
  PUT /
  PATCH /
  POST /
I guess just being lazy.
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more on Tuesday January 15, 2019 @10:58AM (#18912046)
This is some seriously good marketing. Tesla is in a unique position to offer their car up as a prize and target. Other manufacturers could do this but because it is hard to update their firmware they don't do it.
Reading the discussion thread is fantastic. The postgres community culture definitely feels a lot different than some of the other open source projects I've seen.
Re:JIRA is an antipattern on Sunday December 09, 2018 @02:35PM (#18642770)
What are you doing that I am not? Jira is slow as hell and updating statuses take forever.

Are you on an onprem version?

Re:Google rescinds candidate verbal offer due to low GPA on Saturday December 01, 2018 @12:06AM (#18575297)
It's possible at some schools to have 89s through most of your classes which equals a B (3.0) and have a few Cs and thus have a 2.6 GPA.
What product is it?
Re:YouTube is down on Tuesday October 16, 2018 @09:17PM (#18234769)
Peanut butter and jelly reload.
Re:Children poisoned by lead on U.S. Army bases on Thursday October 11, 2018 @06:35PM (#18197570)
Where exactly in the link does it say the army discourages lead testing?

Reuters says "Yet it also “discourages” this type of lead-paint inspection" at the link https://phc.amedd.army.mil/topics/workplacehealth/ih/Pages/L...

Re:Serverless Best Practices on Sunday September 02, 2018 @02:48PM (#17898066)
I agree with this. Having a traditionally relational store can be a huge help: lots of people know it well, the disadvantages are well known, and everything is insanely mature. I dislike how the article tries to say that isn’t serveless’s fault when it is just a trade off.
What if you can’t because you want to use a hosted provider for your homepage like wix? Which doesn’t support reverse producing?
Re:The Secret API of Banks on Wednesday August 08, 2018 @05:11PM (#17719520)
Banks do this so they can gain the interest on the delay. Very annoying though for the end usrr
Re:Massive Comcast Outage Hits the US on Friday June 29, 2018 @02:57PM (#17426798)
Some of you conspiracy theorists are insane. No Comcast didn't purposely do this. I can guarantee it was just a backhoe digging around. Happens more often than anyone would care to admit.
Re:How 'DevOps' Is Killing the Developer (2014) on Thursday June 28, 2018 @11:47AM (#17417872)
For a react developer I'd say one level is understanding reactive design and maybe how you would implement it in pure JavaScript without react. One level below that would be how you would implement JavaScript and maybe a bit of knowledge how the engine works and shadow Dom.

Ask HN: Any good app for downloading tech articles?

Sometimes you are going away for a weekend but want to do some brush up on a tech topic such as react or some specific iOS/ android topic. Is there an easy way to download a bunch of medium or articles and read them offline? does anyone else have this problem?

( Read More... | 2 comments | on HN )
I do like the name smoosh
It's a testament to humanity's ingenuity that we managed to put a rover on Mars. I sometimes wonder if in 1000 years we will look back and think how primitive we were and curiosity will be in some museum.
Re:JavaScript Promises Discussion: Make Them Monadic? (2013) on Thursday February 15, 2018 @07:35PM (#16389025)
Can you explain a bit more what your code is doing?

Are you suppose to instantiate the handler class and call it?

You're thinking too much into it. They might just record the screen every few seconds and save it to their servers. There's software that does this easily.
Which app did you use
Re:Reverse-engineering the Starbucks ordering API on Wednesday July 12, 2017 @09:52PM (#14758204)
As to point #4 I think the hardest api I tried to reverse was sim city build it. I couldn't seem to find the right signature generating code.
Re:Crypto Tools for DevOps: Git-Crypt – Tozny on Monday April 10, 2017 @05:57PM (#14082916)
No mention of blackbox by stackoverflow? On a phone right now but it is pretty useful for this type of stuff. The only thing bad about it is key management and new developers have to generate their own keys.