Khao

13 ms·

61.
by Khao 11y ago
The author is painting a pretty bad picure of C# error handling that isn't close to reality. In reality, you would never call uint.Parse and let the exception bubble up, you'd call uint.TryParse and handle the logic for failure in
62.
by Khao 11y ago
Thanks for that! Not being a native English speaker I couldn't really grasp what the author was trying to describe when he started talking about a "trough with a cross-sectional area of 0.1 mm2" and the following paragraph. T
63.
by Khao 11y ago
I've used android for years and never knew you could do this. This is one of the things I hate most about all those gestures : there's no way to know about them unless you just try a bunch of random things, or you google for &quot
64.
by Khao 11y ago
I doesn't seem available in Canada at all, that looks more like it's the international roaming coverage (from T-Mobile or Sprint)
65.
by Khao 11y ago
Your username is so appropriate for this :)
66.
by Khao 12y ago
Seems like you can't add a system.webServer node on the machine.config, but you could add it to applicationHost.config (source: http://www.iis.net/learn/get-started/planning-your-iis-archi... ) so yes, that w
67.
by Khao 12y ago
Can't edit the top comment anymore :( but it has been found that indeed no rules are needed to exploit this (my previous answer is outdated and wrong!) If you can't afford to reboot your servers right now to install the patch, at
68.
by Khao 12y ago
You're right! Even with no rule having kernal caching enabled will crash it! I think IIS assumes it should cache all static content even when there are no rules specifically for them. Somehow I can't edit my comment anymore but I&
69.
by Khao 12y ago
Damnit. I'll double-check on my side too and update my answer accordingly. I don't want people to think they're safe if they're not!
70.
by Khao 12y ago
Did you have to configure any rule in the Output Caching or that's completely default values?
71.
by Khao 12y ago
Do you happen to have a screenshot of the BSOD, or could test it a second time to take a screenshot? I don't really have a free test server that I can crash anymore since I tested this morning when not a lot of people were at the offic
72.
by Khao 12y ago
Specifically after enabling Output Caching for all .png files I send this : curl -v http://example.com/image.png -H "Range: bytes=18-18446744073709551615"
73.
by Khao 12y ago
Even if you have Kernel Caching enabled (as it is by default) if you haven't created any rule for it you're safe. I created a rule to cache all .png files and I changed the curl request to request a .png image on the server. I got
74.
by Khao 12y ago
Yep. I tried curl -v to get all the raw headers line by line and the payload is there, and I also tried in telnet, both return a 200 page. I read the microsoft security bulletin and it says that your IIS server is protected if Kernal Cachin
75.
by Khao 12y ago
I tried to send the bad curl request to our servers (test env, obviously) and I didn't get any error. It seems I should be getting "Requested Range Not Satisfiable" if the server is vulnerable and "The request has an inv
76.
by Khao 12y ago
I use window 8's built-in scaling to put everything at 125% too because my laptop screen is a 15-inch 1920x1080 and I find with that kind of pixel density I need to make things a little bit bigger. It's ridiculous how many things
77.
by Khao 12y ago
So can we consider our paychecks to be gifts then?
78.
by Khao 12y ago
Mirror/cached version : http://webcache.googleusercontent.com/search?q=cache:4RhIBeM...
79.
by Khao 12y ago
The only apps I'm aware of that did this to me are IE and the Windows Store whenever you do an update (8.0 to 8.1, not security updates of course). So the Windows folks are saying you shouldn't do this but they're the ones do
80.
by Khao 12y ago
In other news "This hammer is trash because it doesn't screw in nails properly!" I'm not interested in compilers, I hate writing code in low level languages, I cannot for the life of me understand assembly and Go works e
81.
by Khao 12y ago
I'm wondering why it's using 6-star rating. It got me really confused for a moment since my mind is used to ratings out of 5 stars, not 6.
82.
by Khao 12y ago
Why can't the website tell what it actually does? It's honestly a terrible landing page for an app.
83.
by Khao 12y ago
If this is the case, it would seem pretty insulting to me as a developer and user of Docker that "time-saving" is more important that security and validating images. I'd rather use a slower tool that is secure.
84.
by Khao 12y ago
it was either GREETING or greeting since it's case-insensitive
85.
by Khao 12y ago
But that's no use if you use the default TTL of 2-3 hours that I always see whenever I configure new dns entries. Sensible TTL should be at least 24-48 hours, maybe even more for your returning users to not be affected by those kind of
86.
by Khao 12y ago
So when those new native api functions arrive, jQuery will start using them and gain some performance boost (using native vs. custom js code) while at the same time remaining backwards compatible (by doing feature detection). No one wants t
87.
by Khao 12y ago
Your second link gives me an error.
88.
by Khao 12y ago
I think the hard part will be to try and stay focused and establish milestones. If everyone is giving input at the same time, it'll be extremely spread out and inefficient. Working towards the first few releases (0.1, 0.2, etc..) you n
89.
by Khao 12y ago
I can't give a very complete answer as I've been using AWS to work on a side project for about a whole week. I try to design my app with 12-factor in mind ( http://12factor.net/ ) so all the configuration is passed
90.
by Khao 12y ago
Having the full cloud ecosystem on AWS/google is great. Launch a server that store files in S3, talks to a DynamoDB and memcache server and has a CDN and load balancer. The amount of back-end work required to make that is minimal and c

More ›