Johngibb

18 ms·

121.
by Johngibb 15y ago
RailsCasts is a great resource: http://railscasts.com/
122.
by Johngibb 15y ago
I believe that he's right that just putting it in a hidden form field would be useless for this sort of attack. However, I believe rails and django actually include the CSRF token in headers for ALL ajax requests, not just form submits.
123.
by Johngibb 15y ago
I have to admit, I came into this discussion in support of the chapter and the author ( http://news.ycombinator.com/item?id=2664502 for example), but after reading Zed's replies I'm turned off by his elitist replies, such as on multiple oc
124.
by Johngibb 15y ago
At least this usage of affect carries a different pronunciation. The emphasis is on the first syllable here, rather than the second, making it SOUND like a different word than effect.
125.
by Johngibb 15y ago
I disagree. There was no condescending tone, and it seemed like a genuine attempt at helping someone learn the difference between affect and effect. I would label this helpful, not pedantic.
126.
by Johngibb 15y ago
I am constantly worried about this. We (as software developers) are in a time where the ability to code is scarce, and very valuable. But, at some point in time so was being a carpenter, or a toolmaker, or any other skilled profession whose
127.
by Johngibb 15y ago
I definitely got a different, more inspiring read out of this post. I'd sum it up as "programming for the point of programming will eventually reach a local maximum of enjoyment; focus instead on the creative potential and possible reach of
128.
by Johngibb 15y ago
I've always written my sensitive delete queries like this: select * -- delete x from Table x where x.whatever = 1 That way by default it's just a select, and then AFTER you verify the result set you can highlight from the delet
129.
by Johngibb 15y ago
.NET also has NHibernate. I'm not intimately familiar with the pros/cons of LINQ to SQL vs NHibernate, but I believe it gives you a lot more control over things like pre-loading associations, etc (while requiring a lot more configuration).
130.
by Johngibb 15y ago
One of the biggest changes I've noticed since moving from NYC to California (Berkeley, and then Santa Cruz) is recognition on the road.
131.
by Johngibb 15y ago
A more literal translation (using lambdas instead of a native for loop): using System; using System.Diagnostics; namespace testspeed { public static class Extensions { public delegate void Action(); public stati
132.
Google Guitar - Hey Jude(youtube.com)
1 points by Johngibb 15y ago|0 comments
133.
by Johngibb 15y ago
The logo was a combination of two of Apple's own images (iSync, and the wifi menu bar). I think your claim that they "stole the guys app and logo" is a little murky, at least regarding the logo.
134.
by Johngibb 15y ago
I'm wondering why they don't mention C#? Is mono non-viable at this point, and he's only considering truly open source languages?
135.
by Johngibb 15y ago
You'll find that 95% of the ads are fake just to get you to call the broker listed, or are mislabeled as "no fee". But if you get lucky, you can find something. Padmapper.com (no connection to me) puts a nice googlemaps interface onto craig
136.
by Johngibb 15y ago
Anywhere in midtown, village, it's going to be at least 1600 for a studio for the most part. Just spent a month looking for a place in greenwich village. And it's hard to find a place without using a broker, who's going to take 15% of the a
137.
by Johngibb 15y ago
I lived in Hoboken for three years while working in NYC. First, I'd recommend living very close to the PATH station. The buses are very hit or miss, depend on traffic, and don't run frequently on weekends. Also, if you're out in NYC on a we
138.
by Johngibb 15y ago
Chipotle already has an app that lets you order your burrito directly, pay from the phone, and skip the line to pick it up.
139.
by Johngibb 15y ago
I don't think it's ironic. C# directly addresses many of my concerns with Java. C# does away with a lot of the boilerplate code necessary in Java (i.e. type inferencing, concise lambdas with true closure instead of anonymous single method c
140.
by Johngibb 15y ago
Boy, do I prefer how lambdas in C# work.
141.
by Johngibb 15y ago
If it incorporates the domain into the hash (which it sounds like it does), this is still useful. If a hacker gets you password 'abc', they can log into any other website for which you use the same password. If they get the hash 'ABCDEFG',
142.
by Johngibb 15y ago
I second this. Storing plaintext passwords seems like a huge liability, especially since you just announced it on a public forum ;)
143.
by Johngibb 15y ago
The other issue is that the former can be done without the affected user knowing it. If a attacker resets your password, you're going to know right away when you can't log in.
144.
by Johngibb 15y ago
There are very strict rules for what can be stored about a credit card. Specifically, I'm pretty sure that no one is allowed to store the card verification number. And even just storing a credit card in the first place is highly regulated.
145.
by Johngibb 15y ago
How about "None of us knows what they're doing"? Hasn't it become generally accepted that 'they' can be used as a gender neutral singular pronoun?
146.
by Johngibb 15y ago
Also - I'd have to assume that the performance benefit of native JSON parsing in modern browsers is non-negligible...
147.
by Johngibb 15y ago
Interesting thought - since this is released with a BSD style license [1], couldn't someone else theoretically submit it to the Apple store at a lower cost? 1: https://github.com/newsyc/newsyc/raw/HEAD/LICENSE
148.
by Johngibb 15y ago
My interpretation is that this provides a mailbox API, to provision and maintain mailboxes on THEIR servers. Doesn't sendgrid just perform a restful post when an email is received rather than store it and all? Almost akin to pop vs imap.
149.
by Johngibb 15y ago
Wow - I'd never heard of this guy before. What an amazing track record, thanks for linking!
150.
by Johngibb 15y ago
Please see http://gibb-test-address.heroku.com/ for my attempt at solving this.

More ›