Viewing profile — kevjiang

>> Are you doing these changes on the user's computer or in the cloud? I'm surprised this wasn't covered in the blog or FAQ. Seems like an important detail that security-minded cus…

Were any HNers ever able to reproduce what RiskIQ reported? Namely seeing jquery.com include the script from the malicious jquery-cdn[.]com domain?

In fact, an attacker doesn't even need to steal the private key.. Heartbeats can be sent before certificate authentication takes place.

You should probably assume that they have your password too. Since Adobe encrypted the passwords instead of hashing them, all of these passwords will be known once the encryption k…

Amazingly, these aren't even password hashes.. they're encrypted versions of the password. Ars wrote an article on this yesterday [1]. Basically if anyone has the encryption key, t…

I came to this comments page just to check if quarterto's law was still holding up :)

Rental prices are based on supply and demand, except for in a few cases (for example, rent control). That's why he suggests using rental prices as a way to check how reasonable a h…

>> LinkedIn leaked 8 million users' passwords less than a year ago, because they were storing them in the database in plain text. The password leak from last year was really a leak…

Another really useful app is Spectacle, for keyboard shortcuts to dock an application the left or right half of the screen (like winkey+left and winkey+right on windows 7/8). http:…

Doesn't seem like it. Code: var common_url = '&pagesize=100&order=desc&site=stackoverflow&todate=1363473554'; SO /questions api: todate – Unix timestamp of the maximum creation dat…