bl4k

44 ms·

391.
by bl4k 16y ago
not harmless at all? this can do so much damage because you can run javascript in the context of the users session. some ideas for payloads: * login as that user by sending yourself their session token * scrape email addresses * follow a sp
392.
by bl4k 16y ago
I just wrote a proof-of-concept worm that steals session cookies. It spreads by retweeting. If something like this was released it would spread like wildfire. Reminds me of the MySpace worm that took the site down Time to change your passwo
393.
by bl4k 16y ago
> Zynga does not make Zwinky, Mindspark Interactive Network does. But they need distribution, and they got that through Pincus - See: "I did every horrible thing in the book just to get revenues" : http://techcrunch.com/2009/11/06/zyng
394.
PARC 'office of the future' - 40 years later(scientificamerican.com)
7 points by bl4k 16y ago|2 comments
395.
Xerox PARC turns 40(computerworld.com)
2 points by bl4k 16y ago|0 comments
396.
by bl4k 16y ago
here is the challenge I got when I signed up for the service: http://imgur.com/x5hoN.png for the solution I put in 'stupid', and it worked this definitely doesn't solve the security considerations that captchas were designed for. Update:
397.
Becoming a Better Developer(quora.com)
2 points by bl4k 16y ago|0 comments
398.
by bl4k 16y ago
Email peter.armstrong@buy.at or Rebecca.riches@buy.at. I found their details on this page: http://www.affiliates4u.com/forums/travel-leisure/151557-exp... These companies want API users, there is no reason why they aren't letting you ac
399.
by bl4k 16y ago
I can tell you right away what their response will be, and it is that meta extensions are an accepted way of extending HTML5 with browser-specific features, see: http://wiki.whatwg.org/wiki/MetaExtensions "You may add your own values to
400.
The Sergey Spot(popstrip.com)
4 points by bl4k 16y ago|0 comments
401.
Capturing The Atom Bomb(nytimes.com)
60 points by bl4k 16y ago|13 comments
402.
by bl4k 16y ago
The more interesting next step is that the matching is being used to send advertising revenue to the copyright owners. So instead of taking down your video, the copyright owner can opt to leave it up and collect on the ad dollars. The recen
403.
by bl4k 16y ago
In the 90s it was difficult to imagine Novell ever fading away in the enterprise server market. There was no alternative comparable to Netware and NDS. Microsoft completely killed them off with NT Server and then Active Directory with Win2k
404.
by bl4k 16y ago
It looks like a great release, I haven't had a chance to use it yet. I think putting Dean Hamatchovich on IE was a great move, I am a big fan of his work. Three things: a) Can you do a separate self-contained package of IE9 on MSDN? ie. the
405.
by bl4k 16y ago
and thats how you respond to a PR crisis. wp groupon, wp.
406.
by bl4k 16y ago
dude this is Vanity Fair , the most show-offy anything in the world btw this is one of my favorite articles from the magazine, though
407.
by bl4k 16y ago
The story is Tesla visiting Henry Ford to fix some electric motors he had on his production line. The amount of the bill was $10,010. Ford called him up later to ask why ten thousand and ten, when Tesla quipped the famous quote ($10 for the
408.
by bl4k 16y ago
They have done a poor job promoting it. Developers do not see the immediate value of marking up their pages to benefit Facebook. I still don't understand what they mean by "enables any page to have the same functionality as a Facebook page"
409.
Photoshopping Through History - Examples of photo editing from 1800s to today(cs.dartmouth.edu)
41 points by bl4k 16y ago|14 comments
410.
by bl4k 16y ago
That is true. He likely mistook the hype and attention around the Crunchpad to be because of his own work, not the work of Techcrunch.
411.
by bl4k 16y ago
Also consider that McGrath is a PR company that charges clients a lot of money to get coverage on blogs like Techcrunch. They have dug their own grave. I can imagine that any client of McGrath's is on a TC blacklist now, and their current a
412.
by bl4k 16y ago
The name reminds me of the holocaust. It doesn't help that the color theme of the app evokes Schindler's List. You can bet for most non-US people that 'diaspora' reminds them of some sort of persecution their people have faced. It is also a
413.
by bl4k 16y ago
I think that since the community funded this project that the code should have a more liberal license so that the community can do what they want with it. The project also depends on MongoDB, which is also AGPL licensed, which raises the qu
414.
by bl4k 16y ago
There is no argument against having a policy for receiving, reviewing and patching security reports. It is that simple. "hundreds of other bits of (unsafe, untested) social networking code floating around the interwebs" is not a benchmark t
415.
by bl4k 16y ago
Do you realize that a contract doesn't have to be written right, that contract law places as much emphasis on oral agreements and your actions? Arrington was smart in knowing that he didn't need the written contract if things went bad (exhi
416.
Quora: Startup Ideas that Persistently Fail(quora.com)
24 points by bl4k 16y ago|12 comments
417.
London Business School Case Study: Red Bull(docs.google.com)
1 points by bl4k 16y ago|0 comments
418.
by bl4k 16y ago
As I mentioned below, I had Flashblock, and used it for a while until I noticed that Flash is still in memory and Flashblock is just some JS that hides flash elements. Killing everything is much better.
419.
by bl4k 16y ago
Flash is still in memory, and those plugins use Javascript to 'hide' the applet
420.
by bl4k 16y ago
the best thing I have done recently is to disable all plugins, including flash: http://imgur.com/mCfqQ.png YouTube HTML5 support is good, and for any other video you can directly download. Browser runs a lot faster, web pages load faster,

More ›