carvalho

5 ms·

1.
by carvalho 9y ago
Edit: ...
2.
by carvalho 9y ago
To be a fully random sequence, a sequence would have to contain substrings of apparent predictable beautiful order. If it didn't, it would be more predictable (you could then discard ordered continuations), not unpredictable. > [Mod
3.
by carvalho 9y ago
It is not relevant that you were on the internet before Google even existed. Apparently you are the only person in the universe that regularly gets never-before-seen error messages. I feel for you, but I hope you stay away from any issue tr
4.
by carvalho 9y ago
Maybe I never experienced it, because if I want to force exact match results I simply place the error message within double quotes. But often you do not need exact match searches to get good results for a random error message. If it happens
5.
by carvalho 9y ago
Thanks, but can you please give a specific example? One, I do not share this experience, and think the quality issue is overstated (you are more likely to remember the time that a query failed, than when it succeeded). Two, if you can produ
6.
by carvalho 9y ago
Can you give an example of a random error message where the results do not match?
7.
by carvalho 9y ago
There is nothing wrong with that, but it is good advice if your goal is to become exceptional. The only way to equal or beat someone naturally talented is to put in many hours. Relaxation is good (but try to combine it with activities that
8.
by carvalho 9y ago
Way down this thread, so time to ask the question: Do American anti-virus, social media, and search companies do exactly the same, but for the US military? I've always found it suspicious that Russia and China created their own social
9.
by carvalho 9y ago
I do hope that companies like Twitter and Youtube take their responsibility. How about 15 years of jailtime for the CEO of a company that facilitates streaming of terrorist propaganda and child-erotic material?
10.
by carvalho 9y ago
More like implementing a password hashing scheme using a library and not understanding the maths behind bcrypt. Or mocking up a proof-of-concept in Python with no idea of how to speed it up 10x rewriting it in low-level C.
11.
by carvalho 9y ago
Why wouldn't Youtube pass on any extremist material on to the FBI before making it unavailable for the wider public?
12.
by carvalho 9y ago
War crime evidence can also be extremist material. It is often repackaged as propaganda to rile up new troops. Give evidence to the courts or police. Don't upload it to a video entertainment site and expect it to stay up, despite skirt
13.
by carvalho 9y ago
It is basically WannaCry without the kill switch. It is using the same exploits (EternalBlue). Not some recent zero-day, but sloppy patching.
14.
by carvalho 9y ago
In Europe there is a mindset that companies can become so big that you can not avoid them anymore. Nobody forces you to use Google or Facebook, but you are put at a disadvantage if you do not use them. Facebook is not free. You trade your d
15.
by carvalho 9y ago
The major concern for the US military when attacking North Korea was not nukes, but military hackers inside a bunker disrupting everything. There probably is a lot of know-how there. The Sony hack was also attributed to North Korea.
16.
by carvalho 9y ago
Of note: The Shadow Brokers hinted at the same thing a few weeks back. "In May, No dumps, theshadowbrokers is eating popcorn and watching "Your Fired" and WannaCry. Is being very strange behavior for crimeware? Killswitch? Cr
17.
by carvalho 9y ago
Prolog is used in IBM Watson, Datalog, and AFAIK in Windows OS. Prolog is not so popular for general purpose computing since: compilers are inconsistent, compatibility problems, difficult debugging, high maintenance costs, few experts, stee
18.
by carvalho 9y ago
Apparently I was part of a test where input sanitization was turned off. Reported and fixed before they could push it live. Very "monkey on a typewriter". I was not even looking for security bugs, but studying usage of maia.css.
19.
by carvalho 9y ago
On Quora someone asked what the longest search query time was. I was able to craft a query that took multiple seconds to complete. It used wildcards and undocumented iteration allowing one to stuff thausands of queries into a single query.
20.
by carvalho 9y ago
Depending on the severity of your finding, your report could wake up a senior security engineer. When your report is out of scope, Google will not ignore your report. When there is a non-serious bug, you get acknowleged in the bug report th
21.
by carvalho 9y ago
Good catch! Also studied Google's 404 pages. Seems like they have unified all but a few of them. One of them I found was vulnerable to old utf-7 injection (specified customizable page title before character encoding) and another was vu
22.
by carvalho 9y ago
I was surprised to find the Central Intelligence Agency in my weblogs. This means they both leave JavaScript on and use the company IP for casual browsing. I'd expect that they make attack vectors as small as possible and have access t
23.
by carvalho 9y ago
My first (and last) non-compete was when I was starting out as a web developer in a small company. By the time I fully realized what I had signed I had contractually given up my right to work for any other webdev company for 1.5 years, and