AgentME

190 ms·

1981.
by AgentME 12y ago
I see this behavior too on SPDY-using sites, including ones on CloudFlare. Everyone is constantly going on about the benefits of parallel requests that SPDY / HTTP/2 brings, but I'm not seeing it. Can anyone explain? I'
1982.
by AgentME 12y ago
They work together very nicely. See taskjs ( http://taskjs.org/ ) for an example. ES7 is considering embracing that pattern with some syntax sugar ( http://wiki.ecmascript.org/doku.php?id=strawman:async_functi.
1983.
by AgentME 12y ago
It seems like there's two ideas here: new error handling syntax, and new asynchronous task handling syntax. About asynchronous tasks: I think many people here might be interested in taskjs which combines Promises and ES6 generators ( h
1984.
by AgentME 12y ago
And what sanitization should Apache be doing to all of the environment variables? A blacklist against "() {"? That syntax is specific to bash, bash's support for it is undocumented, and it can be in any environment variable.
1985.
by AgentME 12y ago
The vulnerability only exists during the startup of a bash process. Updating bash is enough. Bash processes that are already running are past the point where they could be exploited. Future calls to bash will get the updated version. No ser
1986.
by AgentME 12y ago
There's nothing wrong with putting arbitrary data inside an environment variable that other programs don't assign meaning to. The issue is that bash takes it upon itself to parse all environment variables for functions, and accide
1987.
by AgentME 12y ago
If an attacker can fully control the name of an injected environment variable, then you've lost already. The attacker can override LD_PRELOAD, which is an environment variable honored by the Linux kernel itself.
1988.
by AgentME 12y ago
What sanitization do you expect the CGI framework to apply to the header value representing the user agent? str_replace($userAgent, '() {', 'no bash bug for you')? Only a few environment variables are given any meaning b
1989.
by AgentME 12y ago
Everything there besides Proxies and Symbols is already in common browsers, and I can't say I'm familiar with Proxies and Symbols in other languages (not to say some other languages necessarily don't have them, but I don&#x27
1990.
by AgentME 12y ago
The vulnerability is the attacker's way into your system. If you've rooted and blocked that vulnerability, then the attacker can't use that way into your system.
1991.
by AgentME 12y ago
What's really annoying is the pages where the background image stays fixed as you scroll down (and text starts to scroll up over the background image). Sometimes I believe I'm at the bottom of the page when scrolling appeared to d
1992.
by AgentME 12y ago
There's no difference between that and just requiring the user to use a longer password. Anyone trying to attack the system will just program their cracker to be more likely to try concatenating words together awkwardly in the password
1993.
by AgentME 12y ago
As long as you don't need to remove items or update their costs often.
1994.
by AgentME 12y ago
I payed it, it confirmed practically instantly, said "loading content...", and never got past that step. When I refreshed, a new paywall was in place asking for another payment.
1995.
by AgentME 12y ago
A stream can be thought of like a function in a lazy language returning an array of results which aren't necessarily calculated (or available) all at once. >If you want to "allow many returned values" you can just use a ca
1996.
by AgentME 12y ago
Can't you already set Firefox (and Chrome?) to only keep cookies around for the session?
1997.
by AgentME 13y ago
>SQL Injection is something every web application should do. This is a completely separate issue from CSRF (cross site request forgery), but they conflate the two as if they're one. It sounds like they're describing a web appli
1998.
by AgentME 13y ago
>In a March 2013 statement, Julian Assange said that, while the file was still in their possession, Wikileaks had successfully decrypted the video ... Assange blamed former spokesperson Daniel Domscheit-Berg for taking the video, who sai
1999.
by AgentME 13y ago
It doesn't matter that the form is POST only if it doesn't do CSRF checks. (I haven't checked.)
2000.
by AgentME 13y ago
I attempted to use Ekiga a few years ago. I remember having trouble getting it work, so I don't really have any hope in convincing anyone to use it when Skype is dead-simple. And I mainly use Skype for its group text chat support (and the f