ejr

23 ms·

181.
Holga . D(saikatbiswas.com)
2 points by ejr 12y ago|0 comments
182.
by ejr 12y ago
iPhone and Kindle, but my Android seems to get through.
183.
by ejr 12y ago
https://news.ycombinator.com/item?id=8056882
184.
by ejr 12y ago
There's Suhosin which does a great deal to lockdown the core and has largely limited functions to the essentials http://www.suhosin.org/stories/index.html On debian, I've used : apt-get install php5-suhosin
185.
by ejr 12y ago
If the API uses HTTP, it's fairly straightforward. PHP has had streams available for quite some time : https://php.net/manual/en/stream.contexts.php Many shared hosts often don't have cURL and so stream_
186.
by ejr 12y ago
I've addressed these concerns and more in my subsequent replies. Your tone suggests my efforts to reply here will be wasted. Have a nice day.
187.
by ejr 12y ago
The dropper has to be present on the server somehow to get the rest of the payload so you have to have uploaded it there, allowed a user to upload it[1] or be in some way included by a malformed script or some other existing vulnerability.
188.
by ejr 12y ago
Python and PHP need not be adversaries is my point. Long running, ex. polling, bots, scrapers etc... can be better dealt with in Python as it has dedicated tools and frameworks for those purposes. Backend applications that don't direct
189.
by ejr 12y ago
Thank you. That's actually far more constructive advice.
190.
by ejr 12y ago
These are often used on crawlers, bots - not necessarily of the harmful variety - and other automated retrieval, transfer and storage scripts. They're very useful, but highly specialised for those particular tasks and often not needed
191.
by ejr 12y ago
The list is limited to a very specific set of functions that PHP is an ill fit to utilise and I have never seen used in a positive context. These are best done with a non-scripted program or perhaps Python. Of course, no matter the language
192.
by ejr 12y ago
This is a very well reasoned point. Thank you for writing this.
193.
by ejr 12y ago
While the dropper was written in PHP, it's important to keep in mind that Perl, Python or other language could just as easily have been used. If you're using a shared host that otherwise doesn't allow many configuration chang
194.
by ejr 12y ago
Well a significant percentage of HN folk certainly, but I doubt this translates well outside this sphere. I'm more alarmed by the email spoofing. Isn't this the same as manufacturing evidence? Consider: An entity is under surveill
195.
by ejr 12y ago
This might be one occasion where throwing technology at the problem may actually be productive. HN has a reputation for using tech as a crutch for social problems, but this is an ideal job for a quadcopter. In the U.S. the FCC was overruled
196.
by ejr 12y ago
Thanks! Who knew breaking a large problem into smaller chunks works in rocketry as well ;-)
197.
by ejr 12y ago
Could anyone with knowledge about engines explain why Russians always seem to prefer multi-nozzle designs? Is there some inherent advantage in redundancy, cost or some other factor?
198.
by ejr 12y ago
It may not be so infuriating when you consider how important names are to Japanese people. Breaking your name is unacceptable and breaking it because of a technical convenience chosen during development would be deeply offensive on top of b
199.
Man Sues Feds After They Target Him for Photographing Rainbow Art(wired.com)
8 points by ejr 12y ago|1 comments
200.
by ejr 12y ago
He has a Muslim background, I think, and he wasn't the only one to be part of this complaint. Wired has a write up about this as well http://www.wired.com/2014/07/five-sue-gov-over-targeting/
201.
by ejr 12y ago
There's a great disconnect between actual security needs and the security theatre demanded of those who must engage in guard duties. Those in charge must view the empowerment of security guards to determine actual threats as somehow in
202.
by ejr 12y ago
Lacking immediate political or economic drivers, I'd say this is realistic. Neil deGrasse Tyson has a better explanation of why this is the case https://www.youtube.com/watch?v=ErZq2ZQQTrs (starting at 7:45 or so)
203.
by ejr 12y ago
That's awesome! Thanks!
204.
by ejr 12y ago
This is a delightful discovery. I wonder there exists a used book anthropology of sorts for these tidbits.
205.
'Another World' May Not Play So Great, But It Still Looks Incredible(wired.com)
10 points by ejr 12y ago|6 comments
206.
by ejr 12y ago
We seem to have killed the site. https://webcache.googleusercontent.com/search?q=cache:krazyd...
207.
by ejr 12y ago
Bringing work home has not been a popular option in these spheres as far as I know, so the staff may become excluded. The officials themselves may be doing the edits if that's the case.
208.
by ejr 12y ago
There's a significant difference between those two scenarios. You'll find Americans are far more willing to intercede if speech was at stake here. The right to speech and free expression is protected in the U.S. (for the most part
209.
by ejr 12y ago
There are times when the wheel at hand is an ill fit or perhaps there genuinely is a better way to do things Ex: Libressl. And so the wheel needs reinvention. Reinvention of the wheel, reimplementation of a paradigm or some other repetition
210.
by ejr 12y ago
It wasn't that long ago and I don't think it was compromised. At least I hope not. It may have been a new plugin, but I'm fairly certain it was "Nowhere". I'll have to look into HTTPS Everywhere. Thanks for the

More ›