gibybo

44 ms·

361.
by gibybo 14y ago
How does their dedupe method work now? Shouldn't it still be possible under the same principle?
362.
by gibybo 14y ago
I use this too, but I don't think it actually prevents the attack described in the article, at least in my case. When I setup my 2-factor auth for my Google account, I also setup a series of backups in case I lost access to my phone. One of
363.
by gibybo 14y ago
It also leads in box office revenue, so I'm not sure that's sufficient to disprove a correlation between piracy and availability.
364.
by gibybo 14y ago
He was replying to http://news.ycombinator.com/item?id=4078418
365.
by gibybo 14y ago
>All major internet sites, anybody with more than 50.000 passwords, should design or configure a unique algorithm for their site He probably means to use some combination of well known/tested algorithms rather than inventing your own cr
366.
by gibybo 14y ago
>Moreover, the larger the number, the more ways exist to split it into a sum of two other numbers—let alone three. I don't think that makes sense. Every large odd number has exactly 0 ways to find its sum with two primes^, so they can't
367.
by gibybo 14y ago
I just can't imagine how he could. I can understand him saying this because it makes a lot of business sense considering the company's position, but someone so involved in content delivery cannot possibly believe internet delivery is just a
368.
by gibybo 14y ago
I don't think modern quantum theory holds that the universe is non-deterministic. I think it's still somewhat of an open question. However, I also don't think a deterministic universe would be sufficient to allow you to predict it, because
369.
by gibybo 14y ago
I suspect Twitter is fully aware of this and decided it didn't matter when designing it. It's a fairly common pattern to make URLs more readable. I do it intentionally on a couple of my sites as well.
370.
by gibybo 15y ago
There is actually some pretty good software that does this - it's just not very common because cable companies control the DVRs and they have to agree to rules set by the networks. For example, the open sourice MythTV DVR does it. http://w
371.
by gibybo 15y ago
The session cookies are often tied to IP address.
372.
by gibybo 15y ago
http://www.downtofax.com gives me a domain placeholder for some hosting company. https://www.downtofax.com gives me a certificate error. Best I can tell the DNS hasn't propogated everywhere yet. There is a CNAME record for http://dtf.h
373.
by gibybo 15y ago
I am not familair with Django's CSRF tools, but you could write your own that didn't depend on cookies. Init a js var with a random token in the html somewhere, then require that the browser includes it with any state changing actions.
374.
by gibybo 15y ago
That doesn't solve it because the attacker can just create a <form> and auto submit it with js (or make a translucent submit button that is the size of the entire page if you have JS disabled).
375.
by gibybo 15y ago
Gmail has had more serious CSRF vulnerabilities in the past - you could use it to download the entire address book of anyone who visited your site.
376.
by gibybo 15y ago
Cross site request forgery is separate from cross site scripting. He is not clamming to have done any cross site scripting. Secure sites generally require a token to perform any state changing effects, it's just odd that Google doesn't requ
377.
by gibybo 15y ago
I am used to seeing wind markings on aviation maps (e.g. http://www.aviationweather.gov/adds/winds/ ) but it's pretty cool how much clearer this map is. It makes me wish I could see a much larger portion of the world so I could get a bette
378.
by gibybo 15y ago
What makes selling live animals trivial?
379.
by gibybo 15y ago
that would definitely be an effective way to exploit the weakness, and if the value of your time is low enough, it would be profitable. A slightly more efficient way to exploit it would be to have the shop owner as a friend and have them te
380.
by gibybo 15y ago
So I'm a little fuzzy on how DNS works and this seems like a good place to ask: I was under the impression that end users typically talked to DNS cache servers rather than directly to the authoritative servers in the domain's registration.
381.
by gibybo 15y ago
The charts are maximizing EV without taking into account the discount he negotiated. With the loss discount, it becomes more profitable to increase short term variance beyond what the chart strategies would lead to.
382.
by gibybo 15y ago
Same here on Chrome. I would bet it's related to a unique feature of the Google+ button: it shows your Google account info on hover.
383.
by gibybo 15y ago
Google's cache: http://webcache.googleusercontent.com/search?q=cache:http://...
384.
by gibybo 15y ago
The 200 it suggests is per person. With 30% overhead, that would be $320k/year for a full time job.
385.
by gibybo 15y ago
If you have free roaming, one strategy might be to connect to another carrier's tower and make long/consistent calls on it, forcing your provider to pay them more than the $100/mo that you are paying your provider. If you don't have free ro
386.
by gibybo 15y ago
I suspect they request your credit report with your personal info (if you are a business requesting the report on someone else, you don't need the full SSN) and pull the information from there. Finding a hospital near your address just requ
387.
by gibybo 15y ago
Netflix is quite profitable without commercials.
388.
by gibybo 15y ago
Server just appears to be overloaded - the status code it returns for the page is 503. It also tries to load some js/css but those return empty 503s. In the meantime, Google returns this article about it: http://www.infoq.com/articles/deft
389.
by gibybo 15y ago
Check out the full audio, the rest of the introduction goes into more detail of her technical chops.
390.
by gibybo 15y ago
I admit 'sexy' was a little out of place, but I ended up getting the download to work and the full introduction starts out: "Rebecca took over as effective director of northwest entrepreneurial group and just blew us all away with her exper

More ›