| bio | website | timothy.green.name |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 10 months |
| seen | 2 days ago | |
| stats | profile views | 9 |
|
Feb 13 |
comment |
Lessons learned and misconceptions regarding encryption and cryptologyH(json_encode(array("builtin", "securely"))) might do it. And @penguat. Realex Payments use a hash of that form in processing credit cards: H(H(various)|secret). |
|
Jan 25 |
comment |
Content hashes to help protect resources being fetched from a CDN Isn't something along these lines already done for flash .swz files? I vaguely recall reading about that one time. |
|
Nov 7 |
comment |
Manually adding 's' to 'http' let us continue this discussion in chat |
|
Nov 7 |
comment |
Manually adding 's' to 'http' @Iszi. Quite. It's not strange. At all. At all at all. I know that. And I'd expect everyone else to know it. So .... I feel I'm not explaining myself well. |
|
Nov 7 |
comment |
Manually adding 's' to 'http' @Iszi. Sorry, perhaps I should have put the word strangely in italics. |
|
Nov 7 |
comment |
Manually adding 's' to 'http' On shared hosting, it seems quite common for a HTTPS request to respond with a certificate made out to snakeoil.dom signed by the Snake Oil CA. Strangely, browsers don't trust this (not least because the domain name doesn't match), but the connection is still encrypted. |
|
Oct 24 |
comment |
A safe license System Some programs "phone home" for license verification, but if they can't reach their home server, they assume that everything's working. So they'll be fine as long as you're offline (or, being nastier, you can edit your hosts file and redirect their home servers to the loopback address). |
|
Feb 15 |
comment |
Am I wrong to believe that passwords should never be recoverable (one way hash)? Report them to Plain Text Offenders. |
|
Oct 25 |
comment |
Should I prevent sending of GET requests for urls that are normally operated with POST request? As in, in PHP, check the $_POST array, not the $_REQUEST array. |
|
Aug 26 |
comment |
How can my country's legal/telecoms environment protect against cold-callers conning a remote-access session to the victim's computer? Happened to my mother here in Ireland. She called me in a panic. I assured her she could safely ignore it. |
|
Aug 11 |
comment |
XKCD #936: Short complex password, or long dictionary passphrase? "Colourless green ideas sleep furiously." Chomsky. |