benregenspan

11 ms·

91.
by benregenspan 13y ago
This seems like it's just plain XSS - it doesn't take advantage of a user's serverside session to forge an action on their behalf.
92.
by benregenspan 13y ago
That's the definition of a bounce. A visitor comes, they check out one page, they don't interact with anything (reading is not interaction), they leave. This might not be the most useful thing to know for many sites (a simple blog which doe
93.
by benregenspan 13y ago
The title is total linkbait -- once you read through the article, it becomes clear that all the author is claiming is that social login buttons weren't the right choice for Mailchimp. They might be the right choice for others though: "Some
94.
by benregenspan 14y ago
Impressive, but when I'm looking for a fully immersive business homepage experience nothing beats http://industrialpainter.com/
95.
by benregenspan 14y ago
While I don't want to take an unfunny joke I made in the Hacker News comments too far and am sorry for hurting any British people's feelings, "drunk driving" does make sense as a literal description of an act, unlike "drink driving". "Drunk
96.
by benregenspan 14y ago
"And while there are many Americans who care deeply about their beloved comma, in the UK (outside of the OUP) it's rarely used." The British call drunk driving "drink driving", which is nonsensical. Based on this fact alone, the rest of the
97.
by benregenspan 14y ago
Why not just use Flash?
98.
by benregenspan 14y ago
I used GIMP the same way up until recently. It worked for me, but switching to Photoshop has sped up a ton of common workflow -- slicing an image, turning on and off groups of layers, and similar. Also I've found that some small tweak to
99.
by benregenspan 14y ago
Why are Swingline staplers perpetual objects of injustice?
100.
by benregenspan 14y ago
Was about to write the same thing. Taxi drivers aren't stupid and they weren't "fail[ing] to respect" the author, they want to maximize their earnings, they also want to get their cars back before the set shift change; if they're late they
101.
by benregenspan 14y ago
Wasn't this already done in a truly exemplary fashion by Hackers (1995)?
102.
by benregenspan 14y ago
It would appear this was fixed upstream and OSX just hasn't pulled in the latest. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=224407
103.
by benregenspan 14y ago
And all you have to do to get them is log into someone else's account!
104.
by benregenspan 14y ago
This post does not go at all into the "why" of authenticated encryption. If you're interested in more of the reasons for authenticating, including actual attacks it protects against, I found http://blog.cryptographyengineering.com/2012/05
105.
by benregenspan 14y ago
There are alternatives that don't require extending the language or having to work directly with a mess of nested callbacks. A bunch of flow-control libraries here: http://dailyjs.com/2012/02/20/new-flow-control-libraries/ This is defin
106.
by benregenspan 14y ago
If your minifier/obfuscator supports creation of source maps, it's simple. You just need to set a flag to tell it to create the map along with minified JS and you're good to go. UglifyJS2 and Closure Compiler are among those that can crea
107.
by benregenspan 14y ago
Needless to say, this is an awful idea for anything besides a small personal project. PhantomJS or no, it's easy to detect this behavior, and also easy to understand why Twitter would be against it.
108.
by benregenspan 15y ago
Let's be clear: "security-conscious users" who turn off Javascript are a very small minority. If a site is geared towards serving developers or small startups, it might be serving this minority. If not, SEO ("how do I make this site readabl
109.
by benregenspan 15y ago
But you didn't make a case either that Facebook is attempting to mislead users, or indeed that their actions are misleading users at all. A number of sites gate outbound traffic for security reasons, and the language Facebook shows users is
110.
by benregenspan 15y ago
Agreed. I was expecting a much more substantial argument from Anil, but instead the post offers a list of disparate concerns without any real attempt made to link them together or to justify such strong statements. There are all kinds of ex
111.
by benregenspan 15y ago
But as lbrandy mentioned, this is in one rare case and appears to be the result of a bug. If this happened when most links were clicked leaving Facebook, you can rest assured that all publishers would be up in arms.
112.
by benregenspan 15y ago
As far as I can tell, the claim of automatically creating accounts is 100% false. So is that of automatically Tweeting or Facebook sharing. If you sign in to Klout, you'll get fairly in-your-face pitches to invite friends to it. Should y
113.
by benregenspan 15y ago
Then "privacy fuckup" is a somewhat hyperbolic choice of phrase for this, isn't it? And it's misleading to mention private investigators and law enforcement when the friend list is only shown after the phone number has been verified. The p
114.
by benregenspan 15y ago
"Big corporations don’t understand, even if you’re 'trying to do the right thing'." Really? This guy was making money by offering a dubious service leveraging someone else's brand. As he admits, it was an experiment and the way he conducted
115.
by benregenspan 15y ago
Sorry for being an asshole - it's actually quite readable and gets the point across, I just meant to comment on the somewhat dire tone. Says something good about your writing if a quick draft gets the point across and people want to read it
116.
by benregenspan 15y ago
"There are three misconceptions embedded in that common objection, all of them grave." I completely agree with this article, but why do so many security researchers try to write like cartoon samurai?
117.
by benregenspan 15y ago
Yep the "never before seen in the wild" ETag approach was implemented September 2010 in an easy-to-use library. Very clever, but it seems like Samy Kamkar deserves the credit here, not the brilliant researchers who found the library's appro
118.
by benregenspan 15y ago
SXQncyBub3Qgc3RyYWlnaHQgU0hBLTEsIGl0J3MgYmFzZTY0LWVuY29kZWQgYWxzbyAtLSB1bmNyYWNrYWJsZSE=
119.
by benregenspan 15y ago
I want my $120K of jQuery University tuition back.
120.
by benregenspan 15y ago
The other day an editor at work was complaining that a link they added only worked when visited directly, not when clicked. It turned out the target site had an access logger that synchronously downloaded the referring page, got its title,

More ›