dfranke

38 ms·

331.
by dfranke 17y ago
Fixing CSRF is pretty formulaic. You can probably do it across your whole codebase using nothing but sed. Stick a copy of your session cookie as a hidden field in every HTML form, and validate it as the first step of every form processing
332.
by dfranke 17y ago
From now on, I'll be appending my PGP signature to all chromosomes that I leave at crime scenes. A = 00, C = 01, G = 10, T = 11. If it's not signed, it didn't come from me.
333.
by dfranke 17y ago
See also: http://en.wikipedia.org/wiki/The_Complexity_of_Songs
334.
by dfranke 17y ago
Yes. I was a math major.
335.
by dfranke 17y ago
Xach's metaphor is apt: http://news.ycombinator.com/item?id=776376 While your immune system is fighting an infection, you get all kinds of additional symptoms like fever or inflammation that are caused by the immune system itself. You ma
336.
by dfranke 17y ago
There was an effort to do this, but it seems to have fizzled: http://www.macs.hw.ac.uk/~dsg/gdh/
337.
by dfranke 17y ago
I hated static typing too until I learned Haskell. I dabbled in OCaml first and hated even that. Haskell and OCaml use the same basic paradigm for their type systems (Hindey-Milner), but Haskell's variant is more expressive. Typeclasses
338.
by dfranke 17y ago
Yes. It was compiled with the threaded runtime, but the nature of the problem is such that all but one thread should be blocked at any given time, so the Haskell runtime scheduled them all on the same core.
339.
by dfranke 17y ago
The solution to this is # apt-get install dnscache-run , with the fringe benefit of not having to worry about whether your ISP has remembered to patch the BIND vulnerability de jour.
340.
by dfranke 17y ago
I thought this article was going to be about beef tongue, which is rather bland compared to muscle meat.
341.
by dfranke 17y ago
I stopped reading after the first three paragraphs when the article had already managed to drag in paradigm shifts and Socrates.
342.
by dfranke 17y ago
Tarsnap is unique among the startups that get play here in getting me to open my wallet to the tune of more than the price of a T-shirt.
343.
by dfranke 17y ago
http://register4less.com . Been using them for years, no complaints. I even got them to lean on Tucows (their upstream provider) to get me AAAA glue records, something Tucows doesn't normally support.
344.
by dfranke 17y ago
It actually sounds like they had some talented coders behind this project. I bet everything worked fabulously when they tested it in their lab. Pity that they neglected to think about the real world.
345.
by dfranke 17y ago
Ah, thanks. British tabloids seem to be a lot better than American tabloids at disguising themselves as legitimate news. I'll add this one to my mental blacklist alongside the Daily Mail. Submission flagged.
346.
by dfranke 17y ago
> Raise the stakes: I'll bet you $100. Wait, what? I'll take that bet. I'll eagerly agree that it was praiseworthy and impressive, but I'll hold off on doing so until after I've finished any quantity of alcohol that you're able to p
347.
by dfranke 17y ago
4chan is not so amoral as to find incorrect pharmaceutical information lulz-worthy Uh. http://encyclopediadramatica.com/Epilepsy_Foundation
348.
by dfranke 17y ago
I wanted to adapt someone's command-line-based program into a library, but it wasn't designed as such. The program was strewn with calls to exit(), and on encountering one of these I would just want to return to the function that called in
349.
by dfranke 17y ago
Because they're keys to different algorithms. The bit-length in AES is not an arbitrarily tunable parameter. AES-256, AES-192, and AES-128 are related but nonetheless different algorithms. The recent attacks on AES-256 and AES-192 have e
350.
by dfranke 17y ago
Haven't bothered looking through the JS source, but it seems to be something bound to C-c. It only works for me on Linux when I use the main clipboard; highlight-and-middle-click doesn't do it.
351.
by dfranke 17y ago
s/right/revocable privilege/
352.
by dfranke 17y ago
This apology doesn't fly for me. The issue is not with their use of discretion in yanking paid-for content off users' devices. The issue is that they gave themselves that ability to begin with. Once I see that "feature" removed, I'll be
353.
by dfranke 17y ago
The problem with philosophers is not that they can't find solutions, it's that they're incapable of rejecting bad ones. There are plenty of good ideas in philosophy, but you can't pick them out from the flood stupid ones without thinking ev
354.
by dfranke 17y ago
No. It's just for hack value.
355.
2009 Pwnie Award finalists announced(pwnie-awards.org)
3 points by dfranke 17y ago|0 comments
356.
by dfranke 17y ago
This is also an old trick to test whether your code was compiled as a C++ or not: 2//**/2 == 1) ? "C" : "C++"
357.
by dfranke 17y ago
> I cannot even think of a single instance off the top of my head where applying buxfixes on a Debian Stable box has caused any problems at all. Well, a certain commented-out line in OpenSSL comes to mind :-) But seriously, I refuse to
358.
by dfranke 17y ago
Well, a democratic site doesn't imply that there's no censorship; a true democracy would permit the majority to censor the minority. But anyway, even without any editors stepping in to ban certain links, the site doesn't really function ac
359.
by dfranke 17y ago
That's true in the public square. It's not true when you're trying to build and maintain a specialized community. The opposite of censorship is 4chan.
360.
by dfranke 17y ago
> Is it dishonorable if it helps Twitter more than it harms them? Yes, it is. TC's breach of conduct consists of publishing stolen confidential information, and then, apparently (see above thread), lying about having permission to do s

More ›