airza

30 ms·

331.
by airza 9y ago
Yes, as i commented elsewhere in this thread that would be fine.
332.
by airza 9y ago
Yes, but that gets passed to the server.
333.
by airza 9y ago
Yes, a very common dom-based XSS vector is against document.hash, which is never passed to the server. Versions of Adobe Robohelp keep getting pwned by this. The article is kind of wrong that attacks against the URL won't be detected
334.
by airza 9y ago
Ahh, that does make sense, i didn't see that.
335.
by airza 9y ago
i've never seen a double increment exploited before- it's undefined behavior, but what is the typical route against that?
336.
by airza 9y ago
finally, i can combine the security of the browser with the convenience of seeding torrents!
337.
by airza 9y ago
before HFT these transactions were run by human market makers from giant banks who skimmed hundreds of times more profit off of them (this is the reason that you hear about it in the news all of the time) Someone's job is going to be t
338.
by airza 10y ago
so like... a sovereign wealth fund?
339.
by airza 10y ago
hasn't there been a brutal multi-year price war between the large cloud vendors in favor of the customer?
340.
by airza 10y ago
gmail uses HSTS so sslstrip is unlikely.
341.
by airza 10y ago
Did you read the same book I did?
342.
by airza 10y ago
No, the exact opposite happened, narrowing the spread is super favorable to mutual funds http://www.cnbc.com/2014/04/25/vanguard-chief-defends-high-f...
343.
by airza 10y ago
a good book is 'flash boys: not so fast' which gives a needed counter-perspective from an HFT insider. It might help.
344.
by airza 10y ago
because it gives the capital-S State a motive for constant countrywide warrantless surveillance?
345.
by airza 10y ago
Application Security Consultants | Optiv | Anywhere in the US | Remote | https://www.optiv.com I'm a senior consultant with the Advisory wing of Optiv. We are hiring web app/mobile security consultants - basically, a c
346.
by airza 10y ago
Weirdly though huge IU doses of vitamin D are only by prescription there.
347.
by airza 10y ago
Because realistically speaking nobody cares. Having people trust wikipedia to stay open or be at least backed up and not controlled makes them more likely to contribute to the upkeep of the site. If i'm downloading software for free
348.
by airza 10y ago
yes, that was more or less the idea of my comment :P
349.
by airza 10y ago
Hmm, vick indi works but michael vick indi doesn't. Maybe it's doing it based on a name detecting NLP component.
350.
by airza 10y ago
Is there someone that google WILL autocomplete "criminal" for? I tried a lot of people, including those who have been convicted of crimes, and it seems to refuse to do so. (E.G Mike Tyson, John Gotti, as well as politicians like
351.
by airza 11y ago
I think you're correct here. Also, like POST-based CSRF, get-based CSRF is also a solved problem (issue a param in the URL)
352.
by airza 11y ago
I mean, relatively speaking these players were strong for their time but the science of chess analysis makes it difficult to imagine a situation in which history's best players would stand a chance against their modern counterparts. W
353.
by airza 11y ago
I finished the levels during the beta and have the first unique badge (a timing attack no longer possible on the last level). I was looking for a really specific set of job requirements and patrick both 1)was totally willing to accommodate
354.
by airza 11y ago
that's not how the security enclave works as far as i know, you can't copy that part off and so you can't copy off + bruteforce the drive?
355.
by airza 11y ago
The root problem is that something which shouldn't be HTML was sent back with the HTML mime type. Usually this happens with content type sniffing (IE no MIME type is specified) but it leaves the door open to attacks like these. It ch
356.
by airza 11y ago
Sounds like you should start your own cloud hosting service! I bet you could make a killing.
357.
by airza 11y ago
60-100% of what?
358.
by airza 11y ago
Honestly, given that you can send these kinds of emails out to like 100 people at a time, i'd be more surprised if it didn't work at least once.
359.
by airza 11y ago
People keep accidentally injuring or killing one another with only one of these technologies. Also, AFAIK, there have been zero suicides via crypto.
360.
by airza 11y ago
probably making a reasonably large lens would be somewhat easier than creating and controlling a black hole

More ›