100k

60 ms·

661.
by 100k 18y ago
The reason I think git is complicated isn't because it's complicated conceptually. It's because the commands are intentionally different from other SCMs, which is highly annoying when you know what you want to do but can't figure it out. Fo
662.
FutureRuby, new conf from the creators of RubyFringe(rethink.unspace.ca)
1 points by 100k 18y ago|0 comments
663.
by 100k 18y ago
I saw the post on writing well ( http://news.ycombinator.com/item?id=486574 ) and thought people might be interested in this e-book of The Elements of Style. Some of the rules have changed over the last 90 years (I have the 3rd and 4th edit
664.
The Elements of Style (full book, 1918 version)(crockford.com)
2 points by 100k 18y ago|1 comments
665.
by 100k 18y ago
I like YUI a lot - especially the components they've written for it. The YUI Rich Text Editor blows away everything else I've tried. And on a current project, I'm using the YUI DataTable to get in browser sorting (and it does a lot more tha
666.
by 100k 18y ago
I used it to add the next Ruby Users of Minnesota meeting: http://editconf.com/events/348:ruby-users-of-minnesota-febru... Nice job on making it really easy to add events. Hopefully you have a plan for spam. EDIT: I noticed you have at le
667.
by 100k 18y ago
Feel free to generate the map for whatever date range you like. http://data.giss.nasa.gov/gistemp/maps/ The 2008 map is telling. Virtually the entire world is warmer than the 1950-1980 average: http://data.giss.nasa.gov/cgi-bin/gistemp/d
668.
by 100k 18y ago
And most of the rest of the world is above average, most worrisome being the polar latitudes. http://www.motherjones.com/kevin-drum/2009/02/chart-day-2142... http://data.giss.nasa.gov/cgi-bin/gistemp/do_nmap.py?year_la... That's why the
669.
by 100k 18y ago
Some branch of the government? That seems like it would be pretty stable. But good idea to have something to show when you go for your next job!
670.
by 100k 18y ago
As for myself, I am increasing my savings, working on more side projects, writing and presenting to get my name out there. I am also going to be re-designing my web presence and updating/optimizing my resume. At this point, this is all pree
671.
What are you doing to prepare for the recession?
2 points by 100k 18y ago|5 comments
672.
by 100k 18y ago
As far as I know, the only reason Passenger disables mod_rewrite is because if they didn't the .htaccess file that ships with Rails would cause every request to use CGI instead of Passenger. See here for details: http://www.modrails.com/do
673.
Why you're drawn to mobile development(railspikes.com)
18 points by 100k 18y ago|6 comments
674.
by 100k 18y ago
Eric executed actual attacks against all the projects mentioned in the article. Most of them resulted in data corruption (e.g., making a page unviewable by setting a non-existent user ID) but on one he was able to change his order status to
675.
by 100k 18y ago
OK, I agree with you that escaping by default only stops some attacks, and if the developer's response is to simply disable the escaping every time they need to display HTML it's not going to be much help. However, I would argue that nearly
676.
by 100k 18y ago
That's to protect against cross site request forgery. This is setting sensitive attributes via post. If a post has the authentication token, it can still set sensitive attributes.
677.
by 100k 18y ago
Yup. I am suggesting escaping HTML on output (of user input) by default -- making h() the default, essentially. (Incidentally, the reason why this will probably never happen is that it would break all of Rails' HTML helpers.) There are seve
678.
by 100k 18y ago
That is not true. Django and web2py both escape HTML output when variables are displayed, broadly neutralizing this attack by default. Developers in those frameworks must explicitly say that they want to display HTML in order to have it dis
679.
by 100k 18y ago
The other security design flaw of Rails that drives me nuts is that it is vulnerable to XSS attacks by default because it takes positive action to strip HTML from user input. I believe that security should be the default, automatic choice,