Erwin

40 ms·

361.
by Erwin 12y ago
Wow, it's like McCarthy commission over again. Game companies and publications are labelled "anti-GameGate" or pro-GameGate. Boycotts are organized. You can get a Chrome Extension that will block anti-GameGate sites (who main
362.
by Erwin 12y ago
Well, here's an exhaustively checking version. Not statically still of course. for x in range(1,101): print [ # %3 = 0 [ x, "Fizz" ], [ "Buzz",
363.
by Erwin 12y ago
Fun fact: the (Australian) company supporting Prince has the (Norwegian) Håkon Wium Lie as director -- CTO of Opera and the proposer of CSS (see recent article https://news.ycombinator.com/item?id=8436659 ). Håkon / H
364.
by Erwin 12y ago
Enlightens on then on how you would solve the issue. You have a program, and the program is storing data and the "attacker" (here really the user himself) wants to bypass the policies enforced by the application. The attacker has
365.
by Erwin 12y ago
Interesting. I'm trying to really go out all the API for my project and was thinking about something like a Mathemathica-like notebook for the local API. E.g. say you want to execute an API call which normally does GET /api/v
366.
by Erwin 12y ago
YAML has an enormous amount of odd features that go beyond simple data types, similar to XML (still seeing XXE here and there). I like the idea of a slightly simpler JSON but still keeping just the primitive data types yet not being able to
367.
by Erwin 12y ago
You end up with cases like this: http://en.wikipedia.org/wiki/United_States_v._$124,700_in_U....
368.
by Erwin 12y ago
As quickly as possible? This is the same Xen issue that made Amazon reboot their EC2 instances. They announced it significantly before Rackspace. Both RS and Amazon have the info from the same source -- the Xen vulnerability pre-disclosure
369.
by Erwin 12y ago
Huh. That's a little silly given the venerable HSTORE already has this capability: create table foo (d hstore); insert into foo (d) values(hstore(ARRAY['key', 'key2'], ARRAY['value', &
370.
Rackspace Cloud also schedules reboots for the embargoed Xen issue(community.rackspace.com)
1 points by Erwin 12y ago|0 comments
371.
by Erwin 12y ago
Here's one use case: i tried importing a 500+ row wine spreadsheet into it (it has columns like type, producer, name, vintage, rating, source etc). I had to save the file as CSV and import it -- or at least that's what I thought,
372.
by Erwin 12y ago
Huh. I thought the second issue did not have an exploit? That when set, all would happen was that running "X Y" via a shell could instead run "Y > X " ?
373.
by Erwin 12y ago
RHEL made a C shared object available that you can preload in everything which cleans up the environment of the magic "() {" bit : https://access.redhat.com/articles/1200223 (and apparently exactly that seque
374.
by Erwin 12y ago
My findings so far: setting User-Agent to that new string and executing a .cgi script complains about: syntax error near unexpected token `newline' in `#!/bin/bash'. (My speculation is that we are in some kind of parsing
375.
by Erwin 12y ago
That works for me too. I was first unsure but breaking it up into an export Z=.... and then running bash -c 'echo date' on a separate line seems to execute essentially date > echo. Can anyone explain what's going on there?
376.
by Erwin 12y ago
You could search for *.cgi scripts indexed by Google. They may not be written IN Bash but maybe one of them opens up a shell to execute a command. Even if you are not explicitly passing any bad data to it, the environment will be passed and
377.
by Erwin 12y ago
Hah, I just noticed something amusing: Oracle headquarters buildings: http://en.wikipedia.org/wiki/Oracle_Corporation#mediaviewer/... The typical symbolic representation of a database in a diagram: https:/&#
378.
by Erwin 12y ago
This would have made a great episode of "Top Gear: Russia". I imagined an excited Clarkson narrating this.
379.
by Erwin 12y ago
I had one of the earlier white Kindles with full keyboard, and the buttons is what I miss the most on the Paperwhite. It just feels awkward to move your thumb to the screen and touch, as your fingers get in the way of the screen. On the Key
380.
by Erwin 12y ago
It's actually $215 for 1 platform, $295 for all 3. Per developer. That's low compared to the old one which was something like $3k for one platform, $5k for multiple. If you cannot make $215/month with your software, how can y
381.
by Erwin 12y ago
When growing up in Warszawa, I played some great and complex fantasy/science fiction games. Just as with Stanisław Lem I figured they were part the unique Polish grass-roots creativity (they were pure paper, i.e no expensive molded pla
382.
by Erwin 12y ago
The $47,000 was the average cost for the angiography so just finding out what was wrong with the heart -- that was what cost her $254 in India. Not a pleasant sounding procedure, involving sticking a giant needle through your forearm, guidi
383.
by Erwin 12y ago
FYI since RS bought MailGun, they offer each RS customer 50,000 emails per month via Mailgun (though limited to 4-5 domains). RS seems to be moving to higher minimum service levels tool -- existing plans are grandfathered, but new users wil
384.
by Erwin 12y ago
I wonder if there's a way to generalize this so any text or image can have metadata about purchasing the exact product. Something like a shorter UPC but with a non-intrusive reader embedded everywhere offering you to buy the product th
385.
by Erwin 12y ago
The Concorde engines were apparently based on the Vulcan Bomber's engines. There's still one of those that flies, and you can see it at airshows in Britain once in a while. I saw it at this year's Farnbourough which was an aw
386.
by Erwin 12y ago
As far as I know, Zope's sandbox has not been broken: https://pypi.python.org/pypi/RestrictedPython The approach there is to rewrite your Python code to disallow any potentially bad operation. E.g. your code canno
387.
by Erwin 12y ago
He does not mention it, bug ZFS has great support for snapshots (compared to e.g. LVM snapshots). You don't have to carve out disk space in advance where snapshots are stored and they are relatively high performance, so you can have an
388.
by Erwin 12y ago
I predict that the Keurig 3.0 will be Internet-only. Using an expanded Hyper Text Coffee Pot Control Protocol: http://tools.ietf.org/html/rfc2324 for management. Surely no DRM opponents can complain if they're usi
389.
by Erwin 12y ago
Who insures the insurers? The reinsurers: http://en.wikipedia.org/wiki/Reinsurance Interestingly, insurance actuaries here in Denmark has one of the highest incomes. 25% of those with the degree end up in top-1% income
390.
by Erwin 12y ago
After a few years with PyCharm I'm not excited to manually write wads of elisp to get basic functionality. Instead I pay the JetBrains people a negligible sum per year (and the basic functionality is open sourced now). They are working

More ›