amalag

60 ms·

691.
by amalag 14y ago
We used to play with Thermite. I think I stole quite a bit of aluminum powder from the lab and my mom was wondering what I was doing baking rust in the oven. ahh the good old days
692.
by amalag 14y ago
For a less hammered server, can use: source ' http://bundler-api.herokuapp.com in your Gemfile
693.
by amalag 14y ago
I hate to think of doing the stuff I used to do in high school 15 years ago now because of all the extra security and terrorism links.
694.
by amalag 14y ago
I would love to see something like this or a browser tool integrated with a Yubikey. Yubikey has a static password generator. Could it be combined in a browser plugin or does it need a client executable to be secure?
695.
by amalag 14y ago
have to change the name of the website, there are only 2 inputs
696.
by amalag 14y ago
Maybe obvious but you can get most of this benefit with Liberty Reserve. Non-reversible transactions and you can fill your liberty reserve account with bitcoins.
697.
by amalag 14y ago
Illegal where? In Belize where he is wanted for murder anyway? I think it's fair to say he is simply burning his bridges to a country he has no intention of returning to and this could be part of the reason he is not going back: " McAfee
698.
by amalag 14y ago
Just follow the money.
699.
by amalag 14y ago
I think the gist of it is probably true. I can easily imagine south american officials being very happy about receiving free laptops and using them without hesitation. What is more difficult is keeping your private army quiet, but i guess
700.
by amalag 14y ago
Monsanto is not a good comparison because they force you to buy seeds from them the next year. You are not allowed to collect seeds from the plants you grow and they will sue you. And our judicial system agrees with Monsanto because we th
701.
by amalag 14y ago
Now all he needs to do is get on Shark Tank.
702.
by amalag 14y ago
Well I should apologize, i didn't realize the comments were from a seasoned security researcher. I don't know the first thing about vulnerability testing, I just make reasonable precautions in code that I write. If you and others have spe
703.
by amalag 14y ago
I would love to see an example in the wild of someone taking user input, running some logic on it to create a hash with symbols and then passing it to this finder. So far noone can give an example, but Rails developers have proactively fou
704.
by amalag 14y ago
The post states that it is not exploitable through user input via params. They could show you the source code, but I don't know if that would be proof for you. You said that you are assuming it can be exploited, so someone should show it.
705.
by amalag 14y ago
It all depends on the writing style of the app. If someone writes the entire app as learning exercise in metaprogramming, then I am guessing it will be a nightmare to maintain.
706.
by amalag 14y ago
I was excited when I saw the leap motion demo a few months ago. I didn't realize that it was 8 cubic feet of space, i thought it was just 2-3 feet from the device. Being bundled with Asus is nice, but I think it's difficult for a PC maker
707.
by amalag 14y ago
The fact of the matter is people don't know enough about Rails to know what this means and like to go with the easier to spread story: "Rails vulnerability found in all versions related to user input" Sounds much more sexy and they can do m
708.
by amalag 14y ago
Yes except that bar cannot be from params since params will never return symbols as keys. So it is pretty obscure unless you take user input and do something pretty special to make it return symbols and then run find_by_whatever on it.
709.
by amalag 14y ago
Apparently some people don't like Rails and love to see an obscure bug that requires the secret session key, therefore they think their cherished and strongly held dislike will finally bask in smug glory. Edit: I shouldn't have been so hars
710.
by amalag 14y ago
So you don't have a curl command that exploits it, but you don't believe the authors. That leaves us with what?
711.
by amalag 14y ago
Similar to lendingclub and prosper except shorter terms and higher risk in terms of the risk analysis, not in terms of the social lending part.
712.
by amalag 14y ago
What is wrong with it?
713.
by amalag 14y ago
I suppose we don't want to test the fact that Rails does a callback, we would want to test the callback logic. We would test our domain class and then test if the model class has a callback.
714.
by amalag 14y ago
This is a very good point. If you consider from the point of view of what should be tested, then I think what the author proposes could be quite natural. We don't want to duplicate and overlap with Rails tests. For me "what to test" is t
715.
by amalag 14y ago
The latest Windows 8 Dell Inspirons let you turn off UEFI.
716.
by amalag 14y ago
As you may know, Jruby runs on the JVM. In fact Torquebox is JBoss specifically for JRuby.
717.
Why I Don't Use ActiveSupport::Concern(programmingtour.blogspot.com)
3 points by amalag 14y ago|0 comments
718.
by amalag 14y ago
Lol, imagine the flames if DHH had that kind of personality. People are being molly-coddled by DHH for stupid stuff like a default in .gitignore.
719.
Code School's Greatest Hits Collection(codeschool.com)
1 points by amalag 14y ago|0 comments
720.
by amalag 14y ago
Checkout timkay's perl scripts: http://timkay.com/aws/

More ›