alexwebb2

12 ms·

91.
by alexwebb2 9y ago
I wouldn't think they'd care about the geography of it - a good tip is a good tip, and they want to encourage responsible disclosure.
92.
by alexwebb2 9y ago
I asked this in the other thread, but... does anyone know how big of a bounty the guy missed by not disclosing this responsibly? I'm guessing it probably would've been a fairly big chunk of change.
93.
by alexwebb2 9y ago
Ouch. This guy's going to kick himself pretty hard. The 15 minutes of infamy seems like a pretty bad tradeoff.
94.
by alexwebb2 9y ago
Does anybody have any info on how much Apple would've been likely to pay for a responsible disclosure in this case, given the scope and severity of the issue? I'm just curious how much of a payday this guy missed out on by not dis
95.
by alexwebb2 9y ago
I'm sure there was a good reason for that.
96.
by alexwebb2 9y ago
Shout out to costpermille for the jQuery removal: https://github.com/aiwebb/nooooo.ooo/pull/1
97.
by alexwebb2 9y ago
Yeah, I have a rapid prototyping index.html template that includes jQuery and Lodash. I literally just slapped that in and wrote four lines of code. I know it's completely unnecessary.
98.
Show HN: nooooo.ooo
14 points by alexwebb2 9y ago|4 comments
99.
by alexwebb2 9y ago
EFC Systems - FieldAlytics | Web Application Developer | State College, PA; Nashville, TN; Remote | ONSITE, REMOTE, http://www.efcsystems.com We make software for managing all aspects of farm and field management - mapping geosp
100.
by alexwebb2 9y ago
If a company spends millions upon millions in R&D to come up with something that makes their customers dramatically more productive, I think it's fitting that they should be able to patent it and reap the rewards of their investmen
101.
by alexwebb2 9y ago
Funny you should mention that - the author happens to have written what I consider the best resource out there for hexagon drawing algorithms for game development: https://www.redblobgames.com/grids/hexagons
102.
by alexwebb2 9y ago
I think the Bench logo is confusing. I've never heard of the company before, but the logo looks like it might read "Bench Pi". It's the pi symbol in a shield (although it's so small it's very hard to tell at fi
103.
by alexwebb2 9y ago
This is neat, but based on the title, I thought this was going to be a bit more informative about _how_ engines work, and how each subprocess contributes toward the end goal. What I saw instead was a subset of subprocesses in isolation from
104.
by alexwebb2 9y ago
I did read the memo. It was extremely juvenile, and reminded me of the racist drivel that gets pushed on Facebook. Mixed into the stats he cites is a whole lot of hand waving and unsound conclusions, and it's clearly meant to push a se
105.
by alexwebb2 9y ago
I don't really understand how firing him is controversial. He wrote a pathetic, juvenile manifesto that served only to reinforce and perpetuate gender stereotypes. To me, that absolutely falls under the umbrella of "creating a hos
106.
by alexwebb2 9y ago
Oh, neat - I hadn't heard about that. I don't think I can go back from DataGrip, though. Too many nice things I've gotten used to (query tabs, multi-format result exports, etc).
107.
by alexwebb2 9y ago
We use YouTrack on my team. It's incredibly flexible, extremely fast, and has a very powerful command palette built in for keyboard navigation and issue management. It's not perfect, but it hits more of the marks I'd want tha
108.
by alexwebb2 9y ago
They really do put out some great stuff - ReSharper is tremendously useful for .NET developers, YouTrack is one of the best (if lesser-known) issue trackers out there, and DataGrip is a fantastic database management tool (especially for Pos
109.
by alexwebb2 9y ago
> 50 manyears worth of original work that has become unmaintainable for some reason or other (mass walk-out, technical debt out of control or something to that effect) That's the scale I'm talking about, so at least we're
110.
by alexwebb2 9y ago
> > What do you mean by 'fast'? > deploy within a few days and incremental changeover to the new situation starting within two weeks or so I'm going to take this as confirmation that you're working on very, very
111.
by alexwebb2 9y ago
> How to Improve a Legacy Codebase When You Have Full Control Over the Project, Infinite Time and Money, and Top-Tier Developers edit: I'm being a little snarky here, but the assumptions here are just too much. This is all best-case
112.
by alexwebb2 9y ago
> Anyone who has been farming for years already makes pretty close to optimal decisions based on the available data about crop prices, weather, soil status, labor rates, etc. I'm not sure if you're including software analysis i
113.
by alexwebb2 10y ago
Found an auto-archive screenshot here: https://archive.li/s5HMf
114.
by alexwebb2 10y ago
> Perhaps it would be useful to add an option that toggles the animations on/off. If hundreds of people are telling you the animations are too much, kill the animations. If a small handful of people are saying it, ignore them. But p
115.
by alexwebb2 10y ago
Uber is having a very bad month.
116.
by alexwebb2 10y ago
This is now returning a 403 Forbidden.
117.
by alexwebb2 10y ago
Interesting that in JS, `let` is ranked 536, far lower than I expected.
118.
by alexwebb2 10y ago
No need for a submit click. Presumably auto-fill triggers a change event on each affected input, but even if it didn't, an attacker could just repeatedly check for new content in the inputs. This means an optimistic solution (autofilli
119.
by alexwebb2 10y ago
Only allowing non-(display:none) fields wouldn't be enough. You could still position them off screen, or behind an image, or very small or nearly transparent, or any other sneaky tactic. Your second idea about an auto-fill warning woul
120.
by alexwebb2 10y ago
It's not. I think the poster may be confused about how the Echo works - it's not constantly streaming audio or transcripts back to Amazon, just when it's directed to do so via the "Alexa" trigger word. You are absol

More ›