ZoFreX

30 ms·

241.
by ZoFreX 12y ago
> In fact they have gone the other way with "permission groups" It's interesting that they went forward and then back on this. Ages ago the permission "read contacts and call log" was split up into two separate p
242.
by ZoFreX 12y ago
> According to the customer who complained about them (who is, after all, the person with the money) There is a time honoured tradition regarding what to do if you have money and don't like the artistic style of the author, and &quo
243.
by ZoFreX 12y ago
How did you get over that? I was only able to get past those obstacles by fixing my credit history, which fortunately was relatively easy as it was a mistake by my bank.
244.
by ZoFreX 12y ago
No horse in the identity theft question, hasn't happened to me, but I did have seriously bad credit for a short while due to a cockup by my bank, exacerbated by difficulty passing identity checks due to moving house a lot. Some of the
245.
by ZoFreX 12y ago
In the UK there is some sort of electronic cash (I forget the name) that can be bought using cash in almost every newsagents. These can in turn be exchanged for bitcoins online. Pretty simple! That said we also have pre-paid debit cards in
246.
by ZoFreX 12y ago
I'm not convinced it is, though. If you take a sample of 140 people and divide it into a dozen different cohorts, it's pretty likely that one of those groups will show a difference that would be statistically significant if observ
247.
by ZoFreX 12y ago
I don't. I recently witnessed someone writing a 10 line function to test for a particular condition in our codebase. I could have done it in less than one-line, by re-using pre-existing code. What took them 10 minutes would have taken
248.
by ZoFreX 12y ago
A compromise of any session ID is more serious than losing the CSRF token anyway. Once I have your session ID I am you from the POV of the server, so who cares about the CSRF token? Also, you may well have different session IDs across diffe
249.
by ZoFreX 12y ago
Yeah, you can. There's a couple of reasons you might not want to but there's nothing seriously wrong with doing that. There's a good explanation here: http://stackoverflow.com/a/25475141/240921
250.
by ZoFreX 12y ago
> A new random value for each request is essential to maintain the integrity of the measure No it isn't - Having CSRF tokens be unique per-session is perfectly adequate.
251.
by ZoFreX 12y ago
Solid advice, but I have a question for you that's always been in my "too embarassed to ask" category: When you say cover letter, do you mean you attach a cover letter to the email as well as the CV, or does the email itself
252.
by ZoFreX 12y ago
Funny how the same "you have nothing to hide if you're innocent" logic doesn't apply to him reading out the terms of their contract.
253.
by ZoFreX 12y ago
> We've got enough on you right now to put you away for the rest of your life, plus 30 years > Plus 30 years? That doesn't make any sense. Why not give me life plus a thousand years? > Keep pushing. - Dilbert S02E12 &quot
254.
by ZoFreX 12y ago
The BBC doesn't try to be neutral, it tries to be "balanced", which in their view means giving equal time and weighting to both sides of an issue. It's lunacy.
255.
by ZoFreX 12y ago
They missed a perfect opportunity to use "sunk cost".
256.
by ZoFreX 12y ago
I know that is a better strategy, but it's also a much much harder strategy :) Even a well designed cipher could end up leaking info in practice due to compiler quirks or implementation mistakes.
257.
by ZoFreX 12y ago
I don't disagree that that seems simple enough a process to follow, but bear in mind this command is supposed to be run daily. Convenience is definitely a boon.
258.
by ZoFreX 12y ago
It's a balance, at the end of the day. I won't be auto-updating on my server because it's not hard for me to do that myself. But if someone is just running a site where HTTPS isn't particularly important (a personal blog
259.
by ZoFreX 12y ago
And also Android 2.3 stock browser support.
260.
by ZoFreX 12y ago
You are positing a MITM on the CA though, which is a bit trickier than MITM'g a user, I would have thought?
261.
by ZoFreX 12y ago
This is what the Apple Store page looked like in 2011 shortly before Steve Jobs died: https://web.archive.org/web/20111001165346/http://store.appl... I am very confused as to why people are saying he his
262.
by ZoFreX 12y ago
I don't know how they did it but I know how I would do it: stop fighting Android and work with it. "Issue 1" is a classic example of someone trying to have a lot of control over their layout and ultimately creating a lot of w
263.
by ZoFreX 12y ago
Ah, VS2013 Express for Windows refused to install on Windows 7 (which is the one for developing Windows Phone apps, my area of interest). Perhaps this requirement has not changed then.
264.
by ZoFreX 12y ago
I'm really wary of the "don't invent your own crypto" mantra, so I want to venture an idea I had here, rather than writing any code for it: I understand the problems with adding a random delay to try to add "noise&q
265.
by ZoFreX 12y ago
Wow, it's great that this only requires Windows 7. Its predecessor requires Windows 8, which I just installed today purely for the purpose of having Visual Studio. My only criticism is I wish it had come out half a day earlier...
266.
by ZoFreX 12y ago
> Every scan increases your risk That is technically true, but it's also true that every banana you eat adds to your risk. At some small percentage increase in risk, it's sensible to stop caring.
267.
by ZoFreX 12y ago
Lack of Google Apps was a big problem 2 years ago. These days, lack of Play Services means a huge number of non-Google Android apps won't work. Play Services is Android for many developers.
268.
Inside Secure threatens security researcher who demonstrated product flaws(martin.swende.se)
3 points by ZoFreX 12y ago|0 comments
269.
by ZoFreX 12y ago
Did you even read the article? It's asking developers of third-party apps to not use the iCloud sync backend for their apps, due to a lot of problems they are seeing with it.
270.
by ZoFreX 12y ago
I only noticed it because I got bored and looked through all the settings. There's also an obscure option to tell Android that a particular wifi point is a mobile hotspot (i.e. should be subject to the same data restrictions as the 3G&

More ›