JangoSteve

14 ms·

61.
by JangoSteve 7y ago
Yes, this was precisely my question. I agree with you that the post does a great job of explaining the how request smuggling works, and how they used it to trick Slack's server into responding to the user's client with a 301 redir
62.
by JangoSteve 7y ago
All of your explanation (which is appreciated) just further describes the request smuggling, not how that ends up sending the slack cookies to the hackers server. If you take all of this together, it's all leading to Slack's back-
63.
by JangoSteve 7y ago
Can someone explain the redirect/cookie-stealing part of this? I read through the post explaining request smuggling, and then re-read their exploit description, and the request smuggling part all makes sense. However, I don't full
64.
by JangoSteve 7y ago
But isn't the problem with isolating parts of the image at the optical level that you can't later undo it? It seems like at least one of the advantages to everything being in focus is that you can isolate whatever you want in post
65.
by JangoSteve 7y ago
To be fair though, that's kind of life. The originators of any given thing always get remembered as the originators, despite how long they worked on it compared to anyone else since. This isn't just code. I mean, 30 years from now
66.
by JangoSteve 7y ago
But is it a long stretch from the claim: "Non-exhaust emissions (NEE) are particles released into the air from brake wear, tyre wear, road surface wear and resuspension of road dust during on-road vehicle usage." Resuspension of r
67.
by JangoSteve 7y ago
> As you say YC admission or raising funds from investors isn't a measure of business success...but then again I haven't seen a tech unicorn that hasn't been funded by investors. There is a difference between a company get
68.
by JangoSteve 7y ago
Thanks! I had no idea.
69.
by JangoSteve 7y ago
They've already done that. They're called the Facebook and Messenger native apps for Android and iOS. Conveniently, the Facebook mobile web app shows you Messenger notifications but won't let you read them without installing
70.
by JangoSteve 7y ago
I'm going to make a guess here from my own unrelated experience trying to debug problems in live systems. It is often much easier to detect that there is _some_ unusual activity present than it is to categorically define exactly which
71.
by JangoSteve 7y ago
I maintain some open source projects, and honestly, I've never considered chiming in on an open bug ticket rude. I also have never considered relating your experiences about my project on a forum rude, either. Don't get me wrong,
72.
by JangoSteve 7y ago
I once worked on a larger Rails project where we had decided to utilize Postgres views and materialized views to optimize the performance of parts of our application. This was about 7 years ago, so before Scenic existed to help with this (o
73.
by JangoSteve 7y ago
Just to clarify my grandparent comment here, I was thinking "transformative work" when I said it was protected by Fair Use, not "derivative work" as I stated. So I was wrong! To clarify my sibling response here, I'm
74.
by JangoSteve 7y ago
I agree with almost everything you said. Fair Use is definitely protected though, as it's a core component of the US copyright law that helped shape the rest of the law, not an exception or amendment that was added later. Copyright bas
75.
by JangoSteve 7y ago
My comment is definitely an oversimplification that takes into account the rest of the context of the article which outlines all the differences which makes the author's work transformative enough to count. You're right that deriv
76.
by JangoSteve 7y ago
Derivative works are protected by Fair Use.
77.
by JangoSteve 7y ago
I thought you were going to point out this line: > Lester Freundlich, an attorney for the MTA, told Berman in an email Wednesday that his subway map was “clearly a derivative work of MTA’s current version of the Vignelli subway map.” The
78.
by JangoSteve 7y ago
> Parents only call you when they are unsure of something. The problem is when the scammer manage to convince them everything is normal, which is exactly what they are good at. > if you think it's naive for your users or loved on
79.
by JangoSteve 7y ago
I agree. A returning visitor is someone who visited your site before and now they're back again. The "return" in returning visitor is the fact that they left and came back. What they're talking about is usually described
80.
by JangoSteve 7y ago
I created one a while ago called Dynatable. It's currently a jQuery plugin, but we already have a vanilla JS rewrite mostly done, so that'll be coming soon. https://www.dynatable.com/
81.
by JangoSteve 7y ago
Something I still don't understand about the OAuth flow is how it's _not_ training users to be more easily phished for actual usernames and passwords. The very first step is "If you are not logged into the third-party, displa
82.
by JangoSteve 7y ago
Wait, did the goalposts actually move at all? The original post said: > There are a lot of people with degrees FROM credible institutions, but very little in terms of currently being researchers in the field AT credible institutions. You
83.
by JangoSteve 7y ago
They often are correlated though. Better brakes mean you can stay on the accelerator longer before braking, which means you usually have higher maximum velocity and faster lap times (faster lap times are literally higher average velocities,
84.
by JangoSteve 7y ago
I'm not a lawyer, but this actually makes sense to me. The copyright on the page is to copyright the page as a whole. When you update the page at all, the new page would be copyright when you update it, and while the old page was copyr
85.
by JangoSteve 7y ago
Alternatively, instead of fixing these issues by making the incognito mode detection break, they should fix them by making regular mode look like incognito mode. Suddenly, all readers are blocked from reading NYTimes for half a day while th
86.
by JangoSteve 7y ago
> I'd love to see companies actually do the right thing and not talk about it; Was this being intentionally ironic? If companies do the right thing and don't talk about it, then you won't see it. They could be doing it rig
87.
by JangoSteve 7y ago
I'm not sure the author was berating the photographers for ruining the view for others. I read it as revealing the hypocrisy of the photographers shouting at kayakers for doing the thing they were currently doing themselves.
88.
by JangoSteve 7y ago
Thanks, I appreciate that! In the abstract sense, I would say we are, in that it's the primary benefit of what we've built versus textual searching like you get with PubMed or Google Scholar. For example, if you were to search for
89.
by JangoSteve 7y ago
> They still made the contract - and it was even their lawyers who wrote the contract and spend hours poring over it. If I order truck loads of landscaping material to be delivered to my house and I later learn that it wasn't such a
90.
by JangoSteve 7y ago
In the posted video, they said it was required for Medicaid.

More ›