seanp2k's comments

seanp2k | 14 years ago | on: Dotjs — hack the web

ahahahahah what? Dude, do you work for Microsoft? "Well see, we just have to run MS-SQL server (DESKTOP OMG EXPRESS ENGINE) here, and then we run IIS on top of it to serve this file listing..."

seanp2k | 14 years ago | on: Dotjs — hack the web

So actually it's much worse than Greasemonkey.

Also, with GM you can just save the script with the same filename and it'll use that instead.

This project is 100% useless.

seanp2k | 14 years ago | on: Dotjs — hack the web

Yeah, already have greasemonkey and the only thing I have to do to "publish" files is to save them with the same name.

This project is a lot of work for zero benefit.

seanp2k | 14 years ago | on: JavaScript is Dead. Long Live JavaScript

I really hate when "X is dead; long live X!" is misused like this. The original phrase is "The king is dead; long live the king!", used when the OLD king died and the NEW king takes over.

Googling around, I see tons of misuse: Example of bad usage: "White Stripes are dead (long live white stripes)"

Example of proper usage: "Palm is dead; long live Palm!" (this would mean that Palm got acquired or reformed) "Paper is dead; long live paper!" (could be proper if used in an article about how paper for PRINTING is dead but paper lives on in other forms)

REF: http://en.wikipedia.org/wiki/The_King_is_dead._Long_live_the....

seanp2k | 14 years ago | on: MtGox salted passwords cracked

Yeah dude, mine was on the bigger list. It's a 10chr semi-random password (all lower case tho).

I pick passwords based on easy things to type and the memorize the pattern / commit it to muscle memory. I also try to use obscure but pronounceable patterns somewhere in the pass.

seanp2k | 14 years ago | on: MtGox salted passwords cracked

KeePassX + Dropbox bro. It's only an alt-tab and a right-click -> log in to site on whatever you want to get into, once you enter your master password and/or present your password file.

seanp2k | 14 years ago | on: MtGox salted passwords cracked

Looks great but no Linux support. Since I use Ubuntu on my work (and home) laptop and netbook, this is largely useless for me.

KeePassX + Dropbox is a great way to go, but it's kind of more "DIY"-ish. Still not hard to set up, keeps all my passwords in sync, and KeePassX has some great features like "auto-type" which basically is a one-click website login.

I now use the max-length passwords on all the sites I use, and they're all crazy random ones. I don't memorize any of them because it's so easy to reset a password if I lost my KeePassX access (unlikely since it's on Dropbox + 4 computers + CrashPlan backups).

seanp2k | 14 years ago | on: MtGox salted passwords cracked

Yeah, I've gotten downvoted a lot for correcting people...but I think that not even approaching proper english makes you look like an idiot, so really, I'm helping.

seanp2k | 14 years ago | on: OS X – Safe, yet horribly insecure

We have some colocation clients who have a full cab of all XServes and Mac Pros (with OSX Server installed). One time, I asked what they run with all of that. They said "Ooh, we needed it to run Tomcat". Uhh....

I don't really understand the point of OSX Server beyond possibly render farms (for music / movies)

seanp2k | 14 years ago | on: OS X – Safe, yet horribly insecure

>"and there's no good way to do it seamlessly yet."

Right. There are ways to do it, but not any /good/ ones. Good here meaning "while still letting the software execute efficiently and without a ton of added complexity"

seanp2k | 14 years ago | on: OS X – Safe, yet horribly insecure

Good UX engineering is good UX engineering. Software engineering / architecture / development in general is not necessarily the same.

An app can be beautifully engineered by have an awful UX. The inverse is less likely to be true (because bugs and obvious flaws like long delays and unresponsive UIs can quickly degrade UX), but still possible.

seanp2k | 14 years ago | on: TrueCrypt User Held in Contempt of Court

You also are missing the point of TrueCrypt: Plausible Dependability and multiple passwords for different content. It'd be like "Give us the key to this safe that unlocks the incriminating evidence, even though we have absolutely no way of knowing if you're hiding more or giving us the full truth".

You could have cat pictures encrypted with passphrase A and incriminating evidence (that stands up to the best forensic analysis currently available) encrypted with passphrase B and they wouldn't know which is which, if they unlocked ALL the data, or what.

Truecrypt is AMAZING and anyone holding onto stuff that might get them into trouble (esp. w/ foreign gov'ts) should use it.

seanp2k | 14 years ago | on: TrueCrypt User Held in Contempt of Court

>"So if you get a warrant to search your hard drive for something, you are compelled to give them the password just like you are compelled to let them into your house if they have a warrant to search for something like drugs or guns or counterfeit plush toys."

You might also be missing something about TrueCrypt: plausible deniability. You can have different passphrases that unlock different things. You could provide them with a passphrase the only unlocks innocent documents when really you have CP stored using a DIFFERENT pass phrase -- any this would stand up to any cryptographical analysis -- they simply cannot PROVE that the CP exists or even that more encrypted data exists.

The analogy to a key isn't quite valid here; it's more like the doors in that hallway in the matrix. If you use key A in the door, you will get content A. However, you can use a different key, open the door, and it'll go somewhere else entirely. Also, if you rip the door off the wall, there is just the wall behind it. Crazy stuff, that.

seanp2k | 14 years ago | on: Ask HN: what still sucks about web development?

Frameworks. MVC itself isn't hard for me to grok, but doing USEFUL things with Django and friends is kind of hard having never done it before. All the tutorials assume that you're already an ace OO guy.
page 1