cirrus3

18 ms·

151.
by cirrus3 4y ago
It blows our minds that you `figured` out a way to conflate these things.
152.
by cirrus3 4y ago
hah, nice... "endlessly" is a stretch tho
153.
by cirrus3 4y ago
Something else is going on specific to you. If this were a widespread thing for everyone it would big news, it isn't.
154.
by cirrus3 4y ago
Same here... and I wouldn't call this a static page anymore if it runs JS on load, calls a HTTP endpoint which makes DB query which returns HTML that modifies the DOM.
155.
by cirrus3 4y ago
Ok, I wasn't sure if DB.exec_params handled that
156.
by cirrus3 4y ago
ah, ok.. so it just dynamically loads comments on load?
157.
by cirrus3 4y ago
Where are you are sanitizing the comments? You have literally provided a perfect SQL injection mechanism here and allowed arbitrary HTML to be inserted onto your page.
158.
by cirrus3 4y ago
Hm. Is it really a "static" website if you have some JS constantly listening for updates?
159.
by cirrus3 4y ago
It is less funny once you've been exposed to these people frequently. I assure you they are out there, and yes they have used computers to do thing in the past, yet they behave this way still. This is kind of the point of the article.
160.
by cirrus3 4y ago
TCP Windowing
161.
by cirrus3 4y ago
I didn't expect to like it, but I do. Everything is still there, and almost in the exact same spots yet it gets out of the way so much better.
162.
by cirrus3 4y ago
> Flying in small planes seems so overrated Flying in small planes is a huge thing, not just for fun or hobby. It has literally been going on for decades and an essential service in many cases. If it were as fraught as you make it seem i
163.
by cirrus3 4y ago
> ... and trust in God Will this nonsense never end? He landed a plane in a land-able scenario with good training. Props to him, this whole part about god tho is weird and I don't understand it - I have to assume that that "tru
164.
by cirrus3 4y ago
I hope this trend will die off soon. Touchscreens have are neat and have a place, but nothing beats a nice feeling button in just the right spot for common use cases. Car reviewers have been complaining about this for years so it seem like
165.
by cirrus3 4y ago
What kind of strange conspiracy rabbit holes have you dug yourself into? Take a step back and get out asap. It's just a fun subdomain to have... do you _really_ expect this is some secret initiative to start new social platform to riva
166.
by cirrus3 4y ago
because .motorcycles is boring and .lol is fun... what that a real question?
167.
by cirrus3 4y ago
because you can't get omg.lol, it is obv taken. Not saying it is great reason, but that is the reason since you asked.
168.
by cirrus3 4y ago
huh?
169.
by cirrus3 4y ago
^ this would have been the right move
170.
by cirrus3 4y ago
I would be totally fine if would just remediate silently always... and I certainly don't care what name it gives the malware, I'm surprised they show a name at all. If you are a security researcher, it seems like you have other to
171.
by cirrus3 4y ago
> They recently changed this from calling new versions "software updates" to "upgrades" so they don't have to honor their lifetime licenses they previously sold. I've got my popcorn out for this maybe. Are t
172.
by cirrus3 4y ago
> There's something elucidating (and satisfying) in seeing a non-obvious piece of code in your native style. Not 5 years later, and when it is someone else's code. Just don't. Initialisms are no better than single char var
173.
by cirrus3 4y ago
Using "n" here instead of "user" just screams lazy... I wouldn't flag it either, and it will probably never be a problem is this case, but I would momentarily think of the dev that wrote "n" as lazy and wo
174.
by cirrus3 4y ago
> though I am in a minority at work This should tell you something. Taking the time to name it nicely now costs almost nothing vs wasting your time trying to prove it can be refactored later and then doing that refactor later. Why? What
175.
by cirrus3 4y ago
If nothing else, do it for the increased search scope... you can never predict when someone later is going to be desperately searching any reference to something and when digging into an issue with "foo" then the var name of &quot
176.
by cirrus3 4y ago
> The code is self-explanatory Never overestimate this, there is no upside to the one time it isn't. > Reading over-the-top verbose code is just as bad as the opposite No it isn't, it is just as easy, and when can help it pa
177.
by cirrus3 4y ago
You are missing something here... YouTube doesn't block your own videos on your own website.
178.
by cirrus3 4y ago
A lot of people here seem to be confused about what a breach of LastPass would actually mean. They should look into how LastPass actually works. Spoiler alert - they don't actually have your passwords, and anyone who hacked them and to
179.
by cirrus3 4y ago
The info LastPass and most other password managers I'd use have is useless even someone got it... sure they might get my email and what sites I stored passwords for, but the passwords themselves are not just sitting there in plain text
180.
by cirrus3 4y ago
Depends on the reason the user could not login. If they really just forgot, then maybe that would nice UX... maybe. It could also be concerning to an unaware user that that somehow the site knew my old password (even though _we_ know they a

More ›