anon1385

76 ms·

601.
by anon1385 12y ago
CloudFlare is the biggest MITM attack in the history of the internet. Why are we putting this much power in the hands of a few US citizens, who are legally obliged to record all that unencrypted data passing through their servers?
602.
by anon1385 12y ago
It goes far beyond CGI. Linux systems use shell scripts all over the place where the data involved may come from untrusted sources. DHCP is one example, but there are many others. If shells can't be trusted not to suddenly execute the
603.
by anon1385 12y ago
If you can't put data into variables then that makes what you can do with shell scripts quite limited. Your advice is really: don't use shell scripts any where near untrusted data. Tracking which data is trusted and which isn&#x27
604.
by anon1385 12y ago
You say dhclient should take into account all possible contexts before passing data to bash, but it's not easy to know what data shells will parse as code and what they won't[1]. If we have to sanitise data before passing it to sh
605.
by anon1385 12y ago
Well it's pretty unusual to write a Java program that accidentally parses, compiles and runs a given string as Java code instead of just treating it as data. Shells are designed primarily as human interfaces. They try quite hard to exe
606.
by anon1385 12y ago
Are you seriously arguing that information shown on the results page after you ask Google to perform a search, in response to the specific search term you use, is not 'search results'? Whatever helps you sleep at night I guess…
607.
by anon1385 12y ago
>While Google doesn't, as far as I know, "fix" search rankings to give themselves an edge They certainly have done that in the past. Marissa Mayer admitted it in this talk: https://www.youtube.com/watch?v=L
608.
by anon1385 12y ago
The same applies in Scotland as well [1]. It's always interesting to see the reactions of people who view property ownership as some kind of natural law when you present them with systems of property ownership that differ on fundamenta
609.
CVE-2014-6273: Buffer overflow vulnerability vulnerability in apt-get(lists.debian.org)
72 points by anon1385 12y ago|36 comments
610.
by anon1385 12y ago
You have not demonstrated that the clang static analyser was able to detect this. You are going to have to do that before you start firing off accusations that the developers at Apple ignored the warnings.
611.
by anon1385 12y ago
Use ad blockers. Tell your friends to use ad blockers. Install ad blockers on your families computers.
612.
by anon1385 12y ago
I would call myself a socialist and my biggest reason for disliking Uber is that it is filling the highways with drivers who no longer have valid insurance, and whose vehicles are not adhering to the level of maintenance checks usually requ
613.
by anon1385 12y ago
Holy crap, people are actually using javascript crypto for bitcoin‽
614.
by anon1385 12y ago
There is very little distinction between your own government surveilling you and a foreign government surveilling you. Especially among western nations that share a great deal of intelligence. This isn't just theoretical. Here is a ver
615.
by anon1385 12y ago
I have to admit I'm a bit more cynical. Sure somethings are just private/charged for etc and access tokens are just part of a paywall. That is fair enough. I think in a lot of cases it's really about control though. Informati
616.
by anon1385 12y ago
There is no such thing as an open web API. They are all proprietary alternatives to open data formats or protocols. If those companies used open and standard data formats or protocols (I admit that in many cases this might mean proposing a
617.
by anon1385 12y ago
>An important trend is the API-ification of everything. As more and more businesses are accessible with a web API, the Internet becomes more and more powerful. This is a bad thing. Replacing opens standards with proprietary APIs locked b
618.
by anon1385 12y ago
>Helping people maintain their privacy Businesses aren't people.
619.
by anon1385 12y ago
>the web is a the only open software distribution platform without gate keepers The browser vendors are gate keepers. They decide what your code can and can't do inside the very restrictive javascript sandbox.
620.
by anon1385 12y ago
For examples of real implementations of timing attacks, try this: http://www.contextis.com/documents/2/Browser_Timing_Attacks.... Some of those are fixed now, but the history stealing link redrawing one is still a
621.
by anon1385 12y ago
Can we stop with this 'middlebrow dismissal' crap? It's a meaningless phrase that is just brought out to bludgeon people you disagree with without having to actually address their arguments. The fact that it wasn't even
622.
by anon1385 12y ago
Unfortunately a lot of people start out by going to an incubator like YC before they really realise what they are getting into (the billion dollar exit lottery instead of aiming for a profitable business). Once you go down that path it&#x27
623.
by anon1385 12y ago
That is not how to use temperature anomalies. The entire point of using anomalies rather than the raw data is to get around the fact that the various data sets are not calibrated against each other. Picking a broad baseline avoids having to
624.
by anon1385 12y ago
I'm afraid the graph in that article has been carefully designed to deceive you. Unfortunately it's something that is not easy to spot unless you are familiar with temperature anomaly graphs. Roy picks a baseline of 1979-83, which
625.
by anon1385 12y ago
Why do you think 'find the missing heat' is different to 'reconsidering their models'? If ocean circulation is transporting more heat into the deep ocean than we thought, then that is something to change in the models. I
626.
by anon1385 12y ago
Yes I agree. I do find the obsession with plotting linear regressions of temperature data fairly strange, since surely even the most ardent climate skeptic accepts the existence of solar cycles (and volcanism etc). Once you accept that ther
627.
by anon1385 12y ago
>They are saying that the models that predict a global warming catastrophe can't be wrong Who said that? The incompleteness of climate models isn't something that has just come up recently - they have always been incomplete (th
628.
by anon1385 12y ago
>maybe you should make a prediction of their values. 4 years is a really tiny meaningless sample in terms of climate. However, here is what you asked for up to 1998, with a continuation of the linear trend in red, and a 'pause'
629.
by anon1385 12y ago
Could you show which 'predictions' you think have been contradicted by which data exactly?
630.
Systemd 216 released including DNS resolver and full TTY stream parsing(lists.freedesktop.org)
54 points by anon1385 12y ago|64 comments

More ›