billpg

81 ms·

1. 961.▲
   by billpg 13y ago

   Put yourself in the shoes of an inexperienced programmer building their first website. You've been advised to sanitize your inputs with the example of Bobby Tables. You know the plain English meaning of "Sanitize". Clearly, y
2. 962.▲
   by billpg 13y ago

   Read on, there's a section titled "Isn’t sanitization still needed with HTML?".
3. 963.▲
   by billpg 13y ago

   Okay, let's keep advising people to "sanitize" inputs. Even though its confusing and there's another word that isn't confusing. Because reasons.
4. 964.▲
   *NEVER* sanitize your inputs(blog.hackensplat.com)

   37 points by billpg 13y ago|73 comments
5. 965.▲
   by billpg 13y ago

   You were showing cartoons to my wife? Sir, I challenge you to fisticuffs at dawn!
6. 966.▲
   by billpg 13y ago

   I showed this to my wife to see if the cartoon worked with an educated but not-technical person. She subconsciously glossed over the (n LETTERS) part of Meg's requests as just an annotation on the cartoonist's part, not realizing
7. 967.▲
   by billpg 13y ago

   "the first connection to a website is trusted" Yeh, I can't see that going wrong any time soon.
8. 968.▲
   by billpg 13y ago

   Is that the trade-off? Either we neuter SPF et al or we break mailing lists? I vote for SPF et al.
9. 969.▲
   by billpg 13y ago

   So what should Yahoo do? Change settings to say "Actually, anyone in the world can send emails from @yahoo.com now."? (Honest question.)
10. 970.▲
    by billpg 13y ago

    I was in a shop looking for a camera SD card and they were all listed with capacities in "Gb". I thought it was unusual to see these sold by the gigabit. (Turned out they weren't.)
11. 971.▲
    by billpg 13y ago

    You should do an Ask-HN post asking for ideas.
12. 972.▲
    by billpg 13y ago

    What I normally tell people to do when setting up a WiFi access point... 1. Set up a PSK of at least 30 random lower case letters. 2. Switch off WPS. (I used to tell people 20 random characters using mixed case letters, digits and
13. 973.▲
    by billpg 13y ago

    The Saudi government sound like a wonderful group of people who are quite comfortable with their own religious beliefs and would never go about doing anything irrational to those who take a different view. No, you'd only expect someone
14. 974.▲
    by billpg 13y ago

    I suspect many of the different blobs will suddenly merge into one big blog labeled "European Union" one day with Russia and few eastern European hold-outs on the edge. Another hundred years or so down the line, that blob will mer
15. 975.▲
    by billpg 13y ago

    Please do not wget files over HTTP (no S) and just run them, as the example script does. Have the script run the downloaded file through sha256sum and check the output matches what you expect. I know that was only an example script, but we
16. 976.▲
    by billpg 13y ago

    Did you ask the satellite owner's permission before you read the signals that were being openly broadcast?
17. 977.▲
    by billpg 13y ago

    No. If there's someone on the street outside my home whose lost and can't get a GPS signal, I want them to stay lost! Even though I'm happy with my AP broadcasting it's identity in the clear, the idea that anyone else mi
18. 978.▲
    by billpg 13y ago

    I never saw this sort of reaction against CCTV cameras. Is a video camera on a wall really so much different than a video camera on a person's head?
19. 979.▲
    What is the benefit of having the assignment operator return a value?(programmers.stackexchange.com)

    1 points by billpg 13y ago|0 comments
20. 980.▲
    by billpg 13y ago

    I hear some communists also believe in the private ownership of the means of production too.
21. 981.▲
    by billpg 13y ago

    I've had the same number for 16 years. Ported it between four different networks. (I still get recreuiters calling who have clearly only read a CV of mine from 10 years ago.)
22. 982.▲
    by billpg 13y ago

    I don't see this as a free speech issue. If you want to put a website with pictures of yourself naked, that's fine by me. You do not get to make that decision on my behalf.
23. 983.▲
    by billpg 13y ago

    If there's no obvious "dismiss" button, I found you can sometimes right-click, select "Inspect Element" and when you think you've found the DIV, select the "Delete Node" option. (Firefox) Requires som
24. 984.▲
    by billpg 13y ago

    I have a separate secret mailbox for them to use. I get plenty of emails in my whois-listed mailbox that purport to be from my registrar. Guess how many are genuine.
25. 985.▲
    by billpg 13y ago

    I already get all sorts of emails sent to the address listed on whois. Most, if not all, are outright scams. So now one of those will actually be genuine? But which one?
26. 986.▲
    by billpg 13y ago

    I've used GRC's "Shields Up" and asked for a user-specified probe for port 32764 and it came back "Stealth". Assuming GRC isn't out to decive me, can I assume that my router is fine? Bill, using a Netgear
27. 987.▲
    by billpg 13y ago

    Ever tried talking a non-techie friend/relative through the process putting a port-forward on a NAT router? Not fun at all.
28. 988.▲
    by billpg 13y ago

    I read "RJ45-sized" and thought they meant the size of the connector.
29. 989.▲
    by billpg 13y ago

    I wonder if the people at UIUC are wondering why there's a sudden spike in intrerest in the abandoned "sensornode" project.
30. 990.▲
    by billpg 13y ago

    My eyes!