Hacker Newsnew | past | comments | ask | show | jobs | submit | marcioaguiar's commentslogin

How is this different from having one password for all sites? If I break the master password I gain access to everything.


If you use one password for all sites:

* if password hashes from any site you use leak and they’re weak, you’re compromised everywhere

* if any site is or becomes malicious and its operators/hackers read your password, you’re compromised everywhere

This approach (maybe not implementation – its hashing is kind of weak) is fine if your master password is strong enough, which it should be.


If the database of a site gets stolen it makes it a little harder to break your master password.


The number of higher education institutions more than doubled in Brazil in the last decade.

I'm not an expert, but I think this was largely because of a government program called FIES, which finances private colleges and universities for students and the student will only pay the government a year after receiving the diploma. Payment is divided into very low portions. It is an excellent deal for the student and the educational institution. This program was greatly expanded in recent years and almost every student was able to receive funding.

With the crisis, the program suffered a major cut. I believe this will further increase the spaces not occupied.


Here in Brazil we have no such laws. You can drink anywhere and anytime. I remember drinking till 5am when I was a teenager and bars would stay open until the last customer was out. Today there is still no restriction, but mostly because of labour laws and the costs of maintaining service it's very hard to find open bars after 3am.

* edit: of course I'm talking about my experience living on a medium-sized city (Maceió). I guess bigger cities like São Paulo and Rio de Janeiro you can find a good number of late open venues.


I spent about three weeks in Brazil (Salvador and then São Paulo), and in SP in particular we regularly found bars open around 5 or 5:30 am, but this was circa 2004/2005 so it may have changed since then.


It would not be possible to establish a period to migrate all tokens? This "if you change in a possible feature" is not a good argument when modeling something, in my opinion. That's how AbstractFactoryStrategies are made.


Someone with no integrity, can use their intelligence and energy for bad things.


It's impossible to deal with ANY LARGE PROJECT without an IDE.

If you don't use an IDE, your project is not large yet.


This is an incredible generalization. I've very comfortably navigated codebases in the thousands of files of Python with only find and ack to guide me. I've done a lot of C# in Vim, too.

But I can't do the same in Java; at my last job we had thousands of .java files and I was stuck fumbling around with an IDE to do anything. The verbosity and repeated ceremony of the language makes it difficult to search for anything in an effective manner and the distractingly clumsy syntax (inner classes, as an example) made trying to Vim it failure-prone enough that I'd use an IDE just for the red squiggles. Those being in and of themselves concerning at times--I'd often find myself just trying to make the red squiggles shut up rather than concentrating on writing better code. I don't find myself doing that in Scala or C# or even C++.


I would say that if you need an IDE because of the size of your project, the components are too tightly coupled.

(Admittedly, I like what IDEs can do in static languages to catch errors early and improve productivity, but that's independent of project scale.)


Would you call the Linux kernel a large project?


It is not enterprise enough. If it used Java EE then it would really scale, like a stadium sound system.


This is a hacker news link to a reddit post that points to a blog post that references the actual link.

Here is the direct link: http://www.inside-r.org/howto/finding-data-internet


1. You cannot be sure they're going to shut this down soon.

2. What did you lose when google closed reader? It gave you plenty of time and options to go to another service.

3. Products have a limited lifetime, deal with it. And not only on the internet.

4. If you think it's an interesting concept you should join it


Definetly slower. Also, there's some features I miss from the old maps, like navigation on the map while on StreetView and the measurement ruler (from labs). But you don't need to switch to Bing as you can still change to the classic google maps.


I'm glad to hear I am not the only one with performance issues. That is a lot more upvotes than I expected, especially considering how google heavy the user base is here.

I love google's products and the fact that they all work together but everything seems to be running slower than it ever has before.

Looking at the comments below, it is pretty clear that other people are also having this issue.

It takes a lot for me to stop what I am doing, and move over to Bing so if I am doing it, other people are doing it as well.

They should put making all of their applications less CPU intensive at the top of their list, right away.

===Also, while I am complaining about Google products, the google news doesn't let me easily search by time anymore which has also forced me over to bing. Articles from 30 days ago are rarely useful.


Does not make sense to me. Lavabit claims that it cannot decrypt customer's data, but if someone else could read what goes through Lavabit server and a client it could decrypt the data?? So, how come Lavabit can't do tha same thing?


I don't know a lot about Lavabit's arch.

But my guess is he's referring to replacing the login page's Javascript code with a malicious one that phones back the plaintext password. Kinda like a keylogger.


Lavabit's original architecture only store's an encrypted version of the private key needed to decrypt the messages. The private key is encrypted with the users password, and they don't store this password in plain text.

However; if you could intercept this password, and already got a copy of the encrypted private key as well as the encrypted data from lavabit, you could then decrypt the data.

Presumably lavabit didn't want to back door their services, by either storing a copy of the session keys, the password, or the plain text -- and chose to shut down instead.


Because Lavabit doesn't keep passwords in the clear, presumably.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: