jffry

49 ms·

541.
by jffry 5y ago
> Verifying their e-mail address would be useless as attacker would already know the e-mail. In this scenario, no. We're talking about an attacker who is iterating over the ID space of a URL shortener in order to find a password-r
542.
by jffry 5y ago
Even the fact that WebGL is disabled contributes some entropy that can be used to identify you.
543.
by jffry 5y ago
That's my point though. Even though they may understand the immediate flaw in their code that caused the issue, there's not much use (for them or their customers) in just talking in detail about that specific flaw. I'd go so
544.
by jffry 5y ago
Plus it would be weird to present just that specific information, outside of the context of a post mortem / failure chain analysis type discussion.
545.
by jffry 5y ago
If your web app container can query the database, and your web app container is compromised, then yes the attacker could query the database. This is an issue independent of how you conveyed that access to the web app container. If you want
546.
by jffry 5y ago
For anybody who's lost: Russ Cox is the original author of re2, a fast C++ library implementing regular expressions that are guaranteed to run in linear-time. There's a collection of articles they wrote talking about regexes and v
547.
by jffry 5y ago
Thanks! It's not a huge issue, just moderately amusing. Thanks for the work on Lighthouse.
548.
by jffry 5y ago
It's good to see that they've added a Content-Security-Policy related test. I checked and Lighthouse 8.0.0 still penalizes you on "best practices" if your CSP does not allow inline styles. Something that Lighthouse inje
549.
by jffry 5y ago
There's a large body of existing code out there, some of which might rely on the current behavior but never be updated. I doubt any length of deprecation period would solve this issue. Instead, adding .at() allows having the new featu
550.
by jffry 5y ago
Should suburban restaurants with parking lots and no pedestrian infrastructure be forbidden from serving alcohol? What about one that is served by public transit, but still has a parking lot out back? Where is the right place to draw the li
551.
by jffry 5y ago
Troy Hunt has blogged a few times about the legitimacy of his service, and it's clearly been a carefully walked path to where it is today. I think ultimately it comes down to the fact that he's not redistributing the lists of emai
552.
Pwned passwords, open source in the .NET foundation and working with the FBI(troyhunt.com)
323 points by jffry 5y ago|72 comments
553.
by jffry 5y ago
My apologies. I searched for Math/pow, saw that the sentence there started with "Clojure doesn't", and missed that we were looking at two different parts of the document :)
554.
by jffry 5y ago
The N suffix is for clojure.lang.BigInt, which are created with (bigint) which was added in Clojure 1.3 and still work to this day (I did these examples in the latest 1.10.3 release) user=> (bigint "12911004008776102783961602993
555.
by jffry 5y ago
Yeah if you know you're definitely dealing with integers that are large, and are willing to pay the cost to promote into biginteger territory, that's certainly a way to do it with the stdlib. The nice ergonomic thing about clojure
556.
by jffry 5y ago
The very next sentence of the article points out that you can leverage Clojure's interop to invoke Math.pow(), but that's still limited to casting its arguments down to java.lang.Double and suffering the limits therein If you inst
557.
by jffry 5y ago
Cloudflare Pages [1] is relatively new, but I recently had a pleasant experience using it for a small static site recently [1] https://pages.cloudflare.com/
558.
by jffry 5y ago
A plausible explanation is that it's doing some kind of preprocessing of the file into a data structure that allows for faster or more responsive scrolling and editing of huge files. For example a rope or similar: https://e
559.
by jffry 5y ago
Is your downweighting process driven by manual reading through threads or are there signals that draw your attention to potentially-downweight-worthy subthreads? edit: that is to say, I wouldn't expect user-driven signals to automatica
560.
by jffry 5y ago
I wonder how much of a sampling bias there is. It's plausible to me that users of non-IE11 browsers are more likely to be using ad/tracking blockers which block Google Analytics. That could skew the relative population of "
561.
by jffry 5y ago
I believe that yes, the angle on this is overseas patent protection, as moderated by the WTO. This "waiver" seems like it would essentially be the WTO member states unanimously agreeing that they won't be using any of the usu
562.
by jffry 5y ago
That's a standing, upright rocket, which is pretty cool! More camera angles (unofficial): https://www.youtube.com/watch?v=NPNvB5ComFw Looks like whatever the small fire was after the landing has been contained.
563.
by jffry 5y ago
U+1F7E6 + ZWJ + U+1F3E1 ?
564.
by jffry 5y ago
I wrote a CUDA kernel to look for some. My 3080 managed 3 billion/second including population counting the 8s. After 48 seconds it had spat out three 10-eights and one 11-eights amulet: Here are some excellent hex digits: 251d5b059
565.
by jffry 5y ago
Ingenuity has already fulfilled its mission with overwhelming success, and anything extra now is just a bonus. Perseverance is still early in its mission. There's no way they would ever have it attempt to push Ingenuity upright, simpl
566.
by jffry 5y ago
I suspect, but don't know for sure, that this is related to funding for staffing in command centers and such. "Fly it until it breaks" means that somebody must approve an uncertain and ongoing expense without any results to s
567.
by jffry 5y ago
11, 949f43b1118080d2b3b5888888888889ca2e3bee84b2298bbe4f18d6d203ed47 - I adopted 18425680900202321846 puppies.
568.
by jffry 5y ago
Any resemblance to a specific real-world problem is purely coincidental ;)
569.
by jffry 5y ago
7, b2a3a24530d0e7c15e821d944e34a28178888888458c7d660573ad6e11707df1 - I adopted 2222020 puppies. 8, 8888888808a07e25f69a55118d348c25774e94d21800c6015341d0ff42664e62 - I adopted 6443609616 puppies. 9, 7f0183bc4b5eae38888888
570.
by jffry 5y ago
Or perhaps a more real-world example ;) match (n % 3, n % 5) with: (0, 0) => print "FizzBuzz" (1, 0) => print "Fizz" (0, 1) => print "Buzz" (_, _) => print n

More ›