jacobian

17 ms·

121.
by jacobian 14y ago
Note that this article is by the author of wheezy, a framework that just happens to do quite well on this particular metric. Yes, I'm a maintainer of Django, so I'm biased too. But look: there's a good argument to be made that parts of (eve
122.
by jacobian 14y ago
> However, my idea is just what's already outlined above: avoid using 'Host', except (perhaps) as a key. Yes, this is a good idea in theory (it's an offshoot of the idea of avoiding using any data that's provided by the browser.) But in
123.
by jacobian 14y ago
It's a tough line to draw. Requiring users to whitelist every domain that might be used to access the app is a PITA, and makes the lives of new developers more annoying. (It also makes multi-tennancy by domain name, e.g. customer.example.co
124.
by jacobian 14y ago
> The fix as described seems to just check the Host header for suspiciously-formatted information. Is that also enough to prevent other wrong (but well-formatted) Host values from being used? No, it's not. As the release notes say, "So
125.
by jacobian 14y ago
Yup, that's basically it. It essentially makes phishing Django sites easier. The vulnerability could allow an attacker to send a legit email -- sent by the real site itself -- with a link that sends a user to a malicious site instead. [So
126.
Django security releases issued(djangoproject.com)
95 points by jacobian 14y ago|17 comments
127.
by jacobian 14y ago
Thanks for the feedback; let me try to give you some more info: 1. Yes, we're (painfully) aware that restoring users' trust is going to be a big deal. There's obviously no way I can prove the future, so all I can say is that we're in this f
128.
by jacobian 14y ago
Indeed, as Grove users the stability issues annoyed the heck out of us, too; fixing them is our first priority. As in, I'm already working on it! I know migrating (again!) is a pain, but if you ever want to give Grove another try, please ge
129.
by jacobian 14y ago
Yup, we certainly have some work to do to win users back. If you've got any suggestions, or if there's anything we can do to get you back, please let me know! jacob at jacobian.org.
130.
Grove is here to stay(grove.io)
93 points by jacobian 14y ago|51 comments
131.
by jacobian 14y ago
Thanks for adding a Django backend, that's pretty awesome. I'm a fan of filepicker, so of course I love to see first-class Django support. It'd be even better if you'd consider spending a bit of time adding some tests and docs. Our communit
132.
Help fund Read the Docs(ericholscher.com)
53 points by jacobian 14y ago|13 comments
133.
by jacobian 14y ago
How strong are the PLA parts that come out of these printers? I.e. how do they compare to molded ABS or PVC?
134.
by jacobian 14y ago
Well, part of that I'd just file under "hiring is hard" (right now, at least). I do think you need to start further up in your hiring funnel than the phone screen: were I in your shoes, I'd be trying to get more minorities to submit resumes
135.
by jacobian 14y ago
> jacobian inferred that because the OP doesn't care about diversity then he doesn't care about fairness. That is tantamount to charging someone with sexual discrimination, also known as mysogyny. Really it's not. There's a big differen
136.
by jacobian 14y ago
> [...] I've never seen anything that discourages women. http://geekfeminism.wikia.com/wiki/Timeline_of_incidents
137.
by jacobian 14y ago
Before 2003, in the entire history of the NFL there had only been seven minority coaches. That year, the league passed the Rooney Rule ( http://en.wikipedia.org/wiki/Rooney_Rule ), which required that teams interview at least one minority c
138.
by jacobian 14y ago
I wish you wouldn't disparage outreach efforts as "causing a fuss." It's patronizing, insulting, and it badly mischaracterizes efforts like the one that kicked off this thread. I see it like this: lack of diversity is a bug on our community
139.
by jacobian 14y ago
> In effect, you're saying "If we could get twice as many people, then we would have twice as many people". Sorry, I must have not been clear: my point is that if we have twice as many people, then we get twice as much work done, move t
140.
by jacobian 14y ago
> How many members of your community are gay? Have red hair? Are left handed. The data I've seen suggests that the penetration of these minorities in technology closely tracks their representation in society as a whole. Further, there i
141.
by jacobian 14y ago
> [...] charging dissenters with misogyny. Where, exactly, did I do that?
142.
by jacobian 14y ago
Well, I could talk about social justice and basic fairness, but the tone of your question implies that you don't see it that way. So instead, let's look at the question from a coldly calculating point of view. Let's say I have a open source
143.
by jacobian 14y ago
That's the next step - authors of 3rd party apps will need to port their code. We've started putting together some documentation to help authors write single-source code (i.e. code that runs on both 2.6+ and 3.2+). The idea is that they'll
144.
by jacobian 14y ago
My experience has been that functional tests are excellent and discovering that "something" is wrong, but less good at finding what is actually broken. Say my "log in" test fails: OK, I know auth is broken... but what part of it? Is there
145.
by jacobian 14y ago
You say that you've "tried everything that [you] know" -- does that include seeing a doctor and/or physical therapist? If you haven't, please do: many (most) running injuries are curable with the right training and rehab. A good PT can prob
146.
by jacobian 14y ago
Do you have a source for this?
147.
by jacobian 14y ago
This is the approach I'd like to see; I'll be proposing it for addition in Django 1.5.
148.
by jacobian 14y ago
I've been happy with Heroku, Dotcloud, and Webfaction. Of the three, Webfaction's the only one that's Python-specific (although not really), but both Heroku and Dotcloud have Pythonistas on staff and take Python support really seriously.
149.
by jacobian 14y ago
Trust me, you really don't want a Django-specific hosting environment. Django's a WSGI framework like the rest of the Python world (even moreso as of 1.4). Supporting any WSGI app is in some ways easier than just supporting Django, so I c
150.
by jacobian 15y ago
If you didn't write it and don't cite a source, it's plagiarism. Doesn't matter if a friend sent it to you in email -- that just means you plagiarized a friend, which is kinda worse actually. It's really hard for me to see this as an "hones

More ›