danra

11 ms·

91.
by danra 10y ago
For 'wonderfully', only the 'wonderful' part is redacted, so you get '---------ly'. Not sure if this is a bug or a feature :)
92.
by danra 10y ago
I simply hate it when Waze navigates me through a dozen small streets I'm not familiar with, just to save one minute vs. taking a main road. The multiple suggested routes often don't mitigate this enough. Wish for a feature to tur
93.
by danra 10y ago
What do the !XT, !B, !U etc. mean in the commit messages?
94.
by danra 10y ago
A cool addition would be to augment the IAT hook with an option to hook LoadLibrary and GetProcAddress, so that functions imported from delay-loaded DLLs are also hooked correctly, and so that the IATs of delay-loaded or otherwise dynamical
95.
by danra 10y ago
Here's a script that detects the Anguish characters (except for the Byte Order Mark \ufeff, which isn't that rare): exp="\u2060|\u200b|\u2061|\u2062|\u2063|\u200c|\u200d" git log -p --pickaxe-regex -S"$exp&quo
96.
by danra 10y ago
Someone needs to make a script which runs through a git repo's commit history and looks for commits which add invisible Unicode characters. Maybe some existing exploits could be found in the wild.
97.
by danra 10y ago
Why not pass over management of the repository to someone else? Sounds like all sides would benefit.
98.
by danra 10y ago
> It's like a Microsoft employee wrote about vulnerabilities in Windows on their private blog, offering to sell solutions. A company controlling its employees' contact with the media in order to serve its business interests is
99.
by danra 11y ago
It's good to invest time in making decisions and coding them when it actually ends up making a positive difference to your work. Otherwise, by definition, it is premature optimization. (of performance, design or otherwise.) For instanc
100.
by danra 11y ago
No. In Herb Sutter's words, avoiding auto since it makes the code "unreadable": ...reflects a bias to code against implementations, not interfaces. Overcommitting to explicit types makes code less generic and more interdepen
101.
by danra 11y ago
I don't see how the CSO's response makes sense for Facebook's security interests. As CSO, it is in your interest to allow a researcher to exploit an RCE to its furthest. Otherwise, you would only ever allow researchers to ino
102.
by danra 12y ago
Nice, looking forward to the sequel ;) By the way, let's say I don't "remember" which other branch contains a file at a certain path - what's the easiest way to find all other branches which contain a file at that p
103.
by danra 12y ago
"And in its perfect state"
104.
by danra 12y ago
If you are into this, also check out Sonic Visualizer ( http://www.sonicvisualiser.org ), with its support for VAMP plug-ins for analyzing audio.
105.
by danra 12y ago
This. I find that learning from original documentation tends to be much more efficient than learning from third party blogs/tutorials which try to "simplify" things, and usually do the opposite.
106.
by danra 12y ago
Looks awesome. Waiting for the Mac version :)
107.
by danra 12y ago
Very important people line up differently from you and me... they get as close to the door as they can, claim a patch of available space as though it had been reserved for them, and maintain enough distance to pretend that they are not in
108.
by danra 12y ago
> It's as if history is repeating itself: > Apple rolls out new features/platform. > Developer forges ahead in gray area (there's history here with apps that launch other apps). > Apple "clarifies" their
109.
by danra 12y ago
Device 6 is amazing. Reminded me of a David Lynch movie.
110.
by danra 12y ago
Cringed when opening the link, expecting to find AppleScript. Things turned out better than expected!
111.
by danra 12y ago
Does anyone have the specifics of what malware time4popcorn includes?
112.
by danra 12y ago
I think the repercussions of this are wildly underestimated by Apple's and Google's management, and they are not doing nearly enough to prevent upcoming mass resignations of their engineers. I'm just extrapolating from my own
113.
Don't work for Facebook
5 points by danra 12y ago|0 comments
114.
by danra 12y ago
Metacademy looks like a great source for learning, one which preserves most of the associativity benefit of learning through e.g. wikipedia, but which allows for much more focus. Thank you so much for doing this!
115.
by danra 12y ago
Post heartbleed, the right way to go is for all browsers to deny https access in case the OCSP check fails, not just ignore the failure. The CAs are those who should scramble to fix whatever doesn't work. Captive networks have to be co
116.
by danra 13y ago
While it's definitely possible that OP's ad campaign sucks, that's not the main point in the article, so how come many comments focus on that? The post's conclusion is that there's a strong indication of Facebook ch
117.
by danra 13y ago
I wonder what the general mood is regarding this in Apple and Google. More importantly, I wonder if there are going to be any significant repercussions. Would appreciate comments from employees of these companies, whether this information b