Viewing profile — jakecraige

Yeah this is not universal. I bought mine

Yeah, I think it's more of a British English thing. It can also mean things like "in a fight". Like: "those two guys had a big row outside the pub the other night"

Another vote for SynthRiders here. I have the same complaint about Beat Saber as OP. Can be done with wrist flicks and be lazy Synth Riders forces you to have to move your body and…

The main app powering coinbase.com, the “monorail”, is a Rails app backed by MongoDB. It’s typically what’s being referred to when breaking out microservices. Historically most oth…

We (Coinbase) already sign cold storage transactions in a distributed manner so this isn’t an issue :)

Brian calls this out and describes how Coinbase plans to do this in the “This will require a huge shift in how we do things. How will we get there?“ section. > To address all of th…

It’s not assuming MITM or that the attacker can upload the signature to the site. The attack is that the attacker can reuse the already uploaded signature in a way that allows them…

Matthew Green has a related post about this speaking to “multiple encryption” where people do the same thing with ciphers. [1] A very generic take would be that depending on the sy…

I haven't implemented but like what it's going for. Modern crypto is all about making it easy to do the right thing without thinking about it and PASETO does that well with its ver…

Nonce reuse is easily preventable with deterministic nonces or sufficient randomness. PS3 used a fixed nonce which is a whole different problem. I agree that JWT has all sorts of f…

They have a bug bounty program that gives you permission to do certain kinds of things and it not be illegal since you’re planning to report anything you find (and get paid for it)…

Y'all are talking about two different things. Secret key recovery via nonce reuse(linked SO post) is a different than simply trying a range of integers which is mostly what these r…

Thanks for the link! I went down a small rabbit hole from this which ended up with a script that allows for similar style workflows even within the GitHub PR world: https://twitter…

First step in trying it out requires inputting my full name and email address :/

Yes, I’m saying that rather than needing an hour to get 6 blocks if the hash rate doubled, you’d only need 30 mins _until_ the adjustment occurs. Then it would be an hour again.

Yeah it’s sort of time based assuming consistent blocks, but it would still based on confs. If the hash rate doubled then one would only require 30 minutes until the difficulty adj…

It would be helpful to expand on how many blocks can be reversed given only one hour of hash rate. Many wallets, exchanges, etc require a minimum number of confirmations before all…

It's not so much that miners would ignore empty transactions, it's that the spammer would need to pay the miner fee to get each transaction in the block which would end up being ve…

Tools like React Native and Electron are pretty popular these days to build cross-platform apps and such. Since you know web stuff and I'm assuming JS, those might be a good option…

Cool product. I've used calendars in the past to maintain this kind of thing but a product has many more features than a calendar so I'm into it. A mobile app would definitely be n…

US style dates, you probably want 03/18/1965

I'm a fan of FB login. In practice it's pretty trivial to maintain once it's set up, I don't recall ever having to do any updates to an FB login system once set up. It's nice that …

> I say it's shitty because they don't follow best practices and just focus on pushing out workflow apps as quickly as possible. No docs, old tooling, etc. Really a mess. I doubt s…

Great read. Reminds me of a book I read recently, Difficult Conversations, where my key takeaway was to do everything I can to understand the other person, and make sure they under…