eyeareque

Is it too late for http2 to require encryption by default?

It's because they were bought by linkedin, not many people's favorite. They're known for doing some borderline shady practices.

I worked 40 a week during my trip. I'm not a developer though, and my coworkers worked similar schedules.

I worked remotely from Tahiti for a few months. It was an amazing experience that I'll always cherish. Now I just need to convince my new boss to let me do this again somewhere else.

For those of you in the pacific time zone (sf bay). If you're interested in doing this, I recommend Tahiti or Hawaii. It's three hours off from pacific time during the summer months but only 2 hours off during winter. You can easily work a local time of 6-3 which would be 8-5 in PT. This gives you the rest of the day to enjoy paradise.

A tip on how to convince your boss to let you do this: Plan to go on a two week vacation somewhere. When asking for time off, ask your boss if they mind you working remotely for a couple weeks following your vacation. It might just work--and like in my case I found out that my boss didn't care if I stayed longer.

Can we have a no paywall link rule?

[edit] Let's try this again: https://www.schneier.com/blog/archives/2011/03/comodo_group_...

The above link should work. This will teach me to link to an anchor on Wikipedia.

[original post] It should have been: https://en.wikipedia.org/wiki/Comodo_Group#Certificate_hacki...

This is what should happen when a CA does something insecure. Kick them out and make an example out of them. If you don't the whole system is worthless.

Ex: http://en.wikipedia.org/wiki/Comodo_Group#2011_breach_incide... Nothing happened after this breach, which was a shame.

Take one for the team so to say? I don't think I could do it. I'd feel negative about myself and the contributions my job made to the world.

I would run there every single day if I worked there.

It is more efficient because you can tell when people are at their desk or not, which adds accountability, maybe?

Here is it: https://www.youtube.com/watch?v=Nn3O8XD1z0w

Kevin is well known for his skills, mostly as a social engineer. I'd argue that he's one of if not the best at it.

He became famous when he was on the run from the FBI for a few years. This was one of my favorite stories: http://news.softpedia.com/news/Watch-Kevin-Mitnick-Explainin...

A lot of people don't know the history around him because it happened years ago. If you were following him at the time or if you've read his "ghost in the wires" book you'd see why he he's rightfully famous.

Nice work. This will help a lot of people who audit sites.. and its great to have an open alternative to the closed source ssllabs tester.

Posting that was worth the down votes.

Yeah, for the driver to use it. I'm sure the NSA won't be limited by that rule.

It is the law, but to utilize their property how they see fit they have to use a loop hole.

The city is basically making land owners give section 8 rent welfare to tenants, in a bid to keep the city affordable to long time residents during a housing shortage. You'd hope that the city would open up building more high rise housing (high end) to open up more space for the lower end of the community.

I feel for the renter, but shouldn't the landlord be able to do whatever they want with their property?

Rent is going way up because there aren't enough homes in sf for the amount of people who want to live there. The city is to blame for this problem. Why is sf such a flat city? There should be a lot more tall condo buildings but as I've read it seems the city blocks any structure over 4 stories.

Raising rent will cause lots of low income people in sf to have to move. That's not a good thing--but what is the answer here? How do other large cities deal with this problem?

The property taxes are based on the price the owner bought the house for. Not the current value.

you'd hope that the water they used was at least from waste water treatment plants.. however that water was fresh at one time, and used by a big city in the middle of the desert.

Makes sense. OpenSSL needs time to develop fixes.

If you bought a real domain for this, I'm sure people would find it to be useful.

Nice work, I like it.

This should be a hardware requirement imposed by google then.

Interesting. I wonder why the iPhone doesn't have the same issue?

I'm sure the reasoning behind those modes is because they had big (paying) customers who needed them there to help their "never ever getting an update" mission critical system webpages continue to work properly.

What are these "ads" you speak of?

Would you trust your life on a protocal such as HTTPS?

How often is https broken? It seems like every six weeks OpenSSL comes out with a new advisory full of vulnerabilities. I'm assuming that the world powers out there have zero days in OpenSSL, they attack SSL and VPNs all day long. People will be harmed if they trust HTTPS to secure their correspondence.

It is great that you're trying to give PGP a new life, but you're weakening it by using a vulnerable protocol with it. The weakest link will always break first.

I don't think he is trying to push the use of text secure over PGP, he has admitted that there isn't a replacement for PGP yet. He is just a forward thinker, hoping for a future where strong encryption is ubiquitous.. and not the state where PGP is today.

I wish HN would ban paywalled article links.

Paywalled links should be banned