hdhzy

34 ms·

301.
by hdhzy 9y ago
Okay but you need to check if they are vulnerable. I think the owner wouldn't be happy with people fiddling with his locks to check if he is vulnerable. The correct solution is the same as for pentesting: ask for permission first.
302.
by hdhzy 9y ago
What if you break into someone's home at night, unnoticed and ask if they want an advice on how to stay safe, do they hire you? No damages made!
303.
by hdhzy 9y ago
What if you beat up a person, lightly, to show them they are weak, and then offer your body building / fighting training, do they hire you? :)
304.
by hdhzy 9y ago
I believe pacala was talking about regular mics in cars and baby systems that are not connected to internet (I have products like that). Of course there are different products that are constantly connected to the Internet, we hear a lot a
305.
by hdhzy 9y ago
Primitives themselves to not have methods, maybe you thought about primitive wrapper functions? Even then implicit conversion to string is special cased for each primitive (you can't call toString on null or undefined, see [0]). > W
306.
by hdhzy 9y ago
> Do any other primatives throw errors for operators instead of performing type coercion? Yes, Symbols cannot be implicitly converted to strings for example.
307.
by hdhzy 9y ago
> 23n + 2 is a TypeError even though "23" + 2 isn't? The former is banned because it's error prone the latter is allowed because of backwards compatibility.
308.
by hdhzy 9y ago
Very interesting principle. Now when I think about this games utilize this design heavily. For example in Final Fantasy X you can select which statistics to improve or skills to learn on a Sphere Grid. The Grid is designed so that its effec
309.
by hdhzy 9y ago
Excellent post. The blog [0] is an incredible boon for anyone interested in CLR internals. I wonder if the author considered writing a book, kind of modern Shared Source CLI Essentials (that I read years ago and hold in high regard)? [0]:
310.
by hdhzy 9y ago
> As a web app developer, I keep an eye on those failed or lesser known products from Facebook and Google Could you provide an example or two? I wonder if you mean something like Buzz and Reader or something completely different.
311.
by hdhzy 9y ago
You don't need to guess, you can check document.styleSheets if it contains your file. See: https://curiosity-driven.org/minimal-loader#plugins
312.
by hdhzy 9y ago
> Yes, fetch is basically sugar around XHR. Believe it or not but currently it's actually the other way around: XHR is defined in terms of fetch: > XHR is now defined in terms of fetch (see the calls to fetch in XHR's .send(
313.
by hdhzy 9y ago
I agree. Most consumer electronics (phone and tablets) are non developer friendly - you cannot develop anything on them. I find this quote by Russell Kirchner to be really good: > They’re trying to get everyone to use iPads and when peop
314.
by hdhzy 9y ago
> all providing the sort of benefits that let researchers and academics justify paying to connect up. Well you could say the same about Bitcoin as it's current price comes from people willing to buy Bitcoin using their USDs.
315.
by hdhzy 9y ago
Smart contracts are in Bitcoin from the very beginning: https://en.bitcoin.it/wiki/Contract
316.
by hdhzy 9y ago
That means OCSP Must-Staple extension [0] can be very dangerous given bad implementation (like Apache). [0]: https://scotthelme.co.uk/ocsp-must-staple/
317.
by hdhzy 9y ago
Reading notes at [0] it seems it takes a little bit of configuration to get good setup. [0]: https://secure.php.net/manual/en/sqlite3.exec.php#usernotes
318.
by hdhzy 9y ago
Do you have problems with locking if two requests are made in the same time?
319.
by hdhzy 9y ago
I wonder why is that? Apps on the phone are by default sandboxed and there is no way to get root (instead of running the exploit).
320.
by hdhzy 9y ago
Yes, but passwords can be keylogged and SSH keys on a hardware token (like yubikey) can't. Also if you've got touch-to-use enabled on the token you can't even use the key without physically touching the token.
321.
by hdhzy 9y ago
Ivanr this is an excellent resource (just like SSL Labs) but I'm missing the "gamification" element: percentage points that make one strive for 100% (whether it is a good idea is a separate matter). Regarding DANE is there a
322.
by hdhzy 9y ago
Yes but there are still browsers that support only XFO so it's mostly for them.
323.
by hdhzy 9y ago
Why do I see callbacks for completion instead of Promises in 2017? Promises are included in ES6 spec [0]. [0]: https://www.ecma-international.org/ecma-262/6.0/#sec-promise...
324.
Project Sopris(microsoft.com)
1 points by hdhzy 9y ago|0 comments
325.
by hdhzy 9y ago
Because Atom was created by Github I persume.
326.
by hdhzy 9y ago
Mozilla had an excellent resource [0] for security headers, especially Content Security Policy with examples for different use cases (e.g. APIs). See also Google's CSP Evaluator [1] and a blog post outlining security best practices [2]
327.
by hdhzy 9y ago
You could upload wasm to npm and distribute code like that, no need to compile it on target machine. While node.js generally does not have problems with that I've seen missing tools/MS Build on Windows machines.
328.
by hdhzy 9y ago
But the URL would not be that pretty, would it?
329.
by hdhzy 9y ago
I don't see a way to embed debugging info inside/alongside wasm binary code. I still remember debugging Java that does not store parameter names in byte code resulting in weird generated names vs .NET that stores this info. Maybe
330.
by hdhzy 9y ago
Yeah it also struck me as something weird and I know about using //. Maybe prepend http/https based on the current page's protocol? So that URL looks like a URL. By the way cool service. I've got an internal JSON st

More ›