getsat

50 ms·

541.
by getsat 15y ago
Right, but I've never seen it used with integers. %.2d is probably the most common format I've seen. Messing up your format strings is a common exploitation vector, so I was wondering if he had typo'd that or otherwise used it accidentally.
542.
by getsat 15y ago
It'll crash and potentially allow code execution if the rest of the args are user coercible. Check out the first few chapters of The Shellcoder's Handbook for examples. Thanks for the explanation. I've never seen/had to use %d with integers
543.
by getsat 15y ago
Why is %d used to interpolate an integer into a format string? I don't recall seeing this done for any reason before. I hope Zed actually covers how dangerous format strings can be if not handled properly. Format strings are still (hilariou
544.
by getsat 15y ago
Blogspam. Here's the direct link: http://www.youtube.com/watch?v=mo-lMdQMsdw Could you post more ontwik.com links? I don't think we have enough. http://news.ycombinator.com/submitted?id=ahmicro
545.
by getsat 15y ago
I've worked at Pivotal Labs' office in San Francisco and done pair programming at a few companies now. When you're pair programming, you're not wearing headphones and "getting into the zone". You're openly collaborating, sharing thoughts, b
546.
by getsat 15y ago
It's usually just people running Xrumer[1] to get more backlinks to their site. You can pay people $5 on fiverr.com to register 5,000+ forum accounts and drop a link back to your site. Backlinks = higher SERP positioning = $$$ [1] http://e
547.
by getsat 15y ago
You didn't really say anything so I attempted to infer from context. My apologies if I did not infer correctly.
548.
by getsat 15y ago
You'd argue that Dr. Pepper is better for your health than water? I'm speechless.
549.
by getsat 15y ago
Feel free to fork the project and make it Python-based. defunkt works at Github and does most of his work in Ruby from what I can see.
550.
by getsat 15y ago
TFA is a Slashdotism.
551.
by getsat 15y ago
Those kind of game servers are typically a binary blob that you cannot configure externally at all. Your only configuration options are in-game settings like the map list, server name, player limit, etc.
552.
by getsat 15y ago
http://news.ycombinator.com/submitted?id=yadirosadi lol. How much karma do you need before you can downvote entire stories?
553.
by getsat 15y ago
Switch the Dr. Pepper for some cold water and you'll be even better off.
554.
by getsat 15y ago
Oh, neat. I didn't realise the issue had been resolved. Thanks.
555.
by getsat 15y ago
Third world governments aren't exactly known for being cooperative with western governments. I'd rather have a rooted box in China or Pakistan than in North America or Europe.
556.
by getsat 15y ago
Everyone has a price, dude.
557.
by getsat 15y ago
> cpu Consumer-grade GPUs are better at this than even the highest end CPUs.
558.
by getsat 15y ago
I'm pretty sure this article[1] is posted daily on HN. General purpose hashing functions are all fast (which, for a password storage system, is synonymous with bad ). [1] http://codahale.com/how-to-safely-store-a-password/
559.
by getsat 15y ago
> Not really a surprise considering they have been out for so long. Not really a surprise considering they were hashed using one of the fastest/weakest common hashing algorithms.
560.
by getsat 15y ago
You need cookies enabled to get past their interstitial ad.
561.
by getsat 15y ago
Yup, you use a compromised Windows machine or Linux server in a third world country as a proxy. When you're done, you wipe the disk.
562.
by getsat 15y ago
> you know at least some of the exit nodes are controlled by the US gov't http://www.google.com/search?q=high+traffic+colluding+tor+ro...
563.
by getsat 15y ago
It is weird, but ASLR and DEP are regularly bypassed, anyways.
564.
by getsat 15y ago
The fact that NASL isn't live is far from the worst thing about it... I'd love for NASL to be awesome, but it just isn't and there's little indication that they care what they community thinks.
565.
by getsat 15y ago
My point is that "just doing your job" does not absolve you of social responsibility/repercussions. If a law were passed creating federal gangs that went around "borrowing" teenage girls from their families, you can bet fathers would kill t
566.
by getsat 15y ago
I doubt they'll set up a PTR record. What they'd do if they're smart is firewall their box so it only accepts port 80 requests from Cloudflare's systems. Anything else can be discarded, e.g.: iptables -A INPUT DROP iptables -A INPUT -
567.
by getsat 15y ago
105 votes + top spot on HN + submitted by an account registered an hour ago? HN is easily gamed, I guess.
568.
by getsat 15y ago
I'm really surprised that The Jester can't code that well. LulzSec is just mocking him publicly (again). Edit: http://twitter.com/LulzSec/status/84223058382028800
569.
by getsat 15y ago
You're correct, those aren't my beliefs. Merely an observation. > one of the means employed by tyrannical states On the other hand, we're starting to see the opposite happen. People in positions of power who abuse their authority (e.g.,
570.
by getsat 15y ago
If you attack someone, you make them a martyr. If you attack their wife and kids, you send a message.

More ›