jgeralnik

14 ms·

91.
by jgeralnik 14y ago
Not necessarily anything to do with YC; the vulnerability was discovered and posted on twitter shortly after last week's vulnerability.
92.
by jgeralnik 14y ago
Of course it's not considered a smart idea. That's why this was fixed. It was a (critical) bug.
93.
by jgeralnik 14y ago
That's how this vulnerability came to light. After finding out about the last vulnerability, there was a huge amount of interest in seeing if parameters could be exploited, leading to a number of people simultaneously discovering this flaw.
94.
by jgeralnik 14y ago
If you wait a couple of weeks you are much more likely to get an answer. Since all rails apps were vulnerable, most people who know how to execute arbitrary code are keeping silent for now.
95.
by jgeralnik 14y ago
Yes, it's just :r!howdoi python regex :r! executes a command and inserts its standard output below the cursor
96.
by jgeralnik 14y ago
But you also have to store the index at which the image occurs, and the index is bigger than the gains from the compression . This is similar to the argument that since pi is (probably) normal, any sequence of characters appears in it and
97.
by jgeralnik 14y ago
Obviously you can create a machine which already has the original file on it, and have your "decompressor" simply print out that file. I think that it was an unwritten requirement that it would work on Goldman's computer, and I think even p
98.
by jgeralnik 14y ago
The file is not really random, though, since Mike generated it and had time to make sure it was a "good" file before sending it on. That is, if the file was truly random, it would have a chance of 1/(2^X) of being all 0, where X is the size
99.
by jgeralnik 14y ago
That doesn't help, because at the end of the day we are running on a specific os and machine. And given that machine, there exists a file of size X which it is not possible to compress because of the pigeon hole principle.
100.
by jgeralnik 14y ago
No. Let's say you have a file of size X. You want to write a program of size Y which will decompress an X-Y-1 sized file back to the original program. Does such a program and file exist for every file of size X? Using the pigeon hole princi
101.
by jgeralnik 14y ago
The problem is in the assumption that the inverse derivative exists, which is true for most functions in the real world but not for all (non-smooth) mathematical functions.
102.
by jgeralnik 14y ago
Small correction, not the ration of the energy to the entropy but the derivate of the energy by the entropy - that is, the rate at which the energy increases as the entropy increases. (Of course, it's slightly more confusing since it's actu
103.
by jgeralnik 14y ago
Relevant xkcd: http://xkcd.com/320/
104.
by jgeralnik 14y ago
Not connected to github, but look at https://github.com/robots.txt , specifically the first 2 lines.
105.
by jgeralnik 14y ago
To be fair, it does escape characters and verify with a regex that the data is actually JSON before eval-ing it.
106.
by jgeralnik 14y ago
joey@j-comp:~$ locate todo.txt /usr/share/vim/vim73/doc/todo.txt Does that count?
107.
by jgeralnik 14y ago
He does market his software, and practices everything he preaches on his own software too. But let's look at some numbers. Let's say that Patrick's techniques can increase profits by 10% compared to an "unoptimized" website. If the bingo ca
108.
by jgeralnik 14y ago
Unless you make less money writing the book than you would consulting. Yes, the content is already produced. But putting it all together in a book format still takes time. You need to go over old articles, choose the ones to go in, edit and
109.
by jgeralnik 14y ago
> Similar to Linkedin with 6.5m, we have a real-world case study. Except that Linkedin's passwords weren't salted. > When you say "entire password space" you're implying that there's a hard upper limit on the complexity of a user's
110.
by jgeralnik 14y ago
Almost. The result could be something else if it's in the code in the middle. It just won't ever get to whatever's after that return B.
111.
by jgeralnik 14y ago
I have a database of 1 million users. Regardless of what hashing algorithm I am using, if there is no salt I just need to hash the entire password space once, where the password space could be a dictionary attack or a brute force of passwor
112.
by jgeralnik 14y ago
This is as strong as SHA-1 plus a salt, which is much stronger than SHA-1 without a salt(but still not a good way to store passwords). The salt does not need to be random, merely unique. Since salts are stored in plaintext in the database n
113.
by jgeralnik 14y ago
The goal of a salt is to make it so that each password must be targeted individually. The salt need not be random, only unique and sufficiently long. It is impractical to precompute the hashes for (that is, have rainbow tables for) every po
114.
by jgeralnik 14y ago
An idea or patent is utterly worthless without execution No it's not. In this case it's worth $525m. Clearly other people assign value to them, even if you don't.
115.
by jgeralnik 14y ago
While agricola does have significant luck in the inital game state, this is lessened by drafting the initial cards which almost all advanced players do. This ensures that at most players will only have 1 extremely powerful card, and adds an
116.
by jgeralnik 14y ago
The most important line in the article is this one towards the end: Ultimately, though, I think it will take a lot more than a new codec to kill the pixel.
117.
by jgeralnik 14y ago
To prevent people from (unintentionally) DDoSing the site.
118.
by jgeralnik 14y ago
No, they gave you android versions in addition to the Linux/Mac/Windows versions.
119.
by jgeralnik 14y ago
That's the definition of variance. Look here: http://en.wikipedia.org/wiki/Variance#Definition
120.
by jgeralnik 14y ago
You missed Printrbot: Your First 3D Printer which raised $830,827 http://www.kickstarter.com/projects/printrbot/printrbot-your...

More ›