jordoh

11 ms·

1.
by jordoh 3y ago
Code delivery happens in desktop apps too, when you download the binary from evilsite.com, or when you receive an auto-update, they can give you a different binary than the security professionals reviewed. That's assuming the professio
2.
by jordoh 5y ago
That's certainly credible evidence for past use I overlooked, though it remains unlikely to be useful with the advent of per-origin cache isolation. The Last-Modified header can be used in exactly the same way, and isn't blocked b
3.
by jordoh 5y ago
We use the ETag header to make use of browser caching - not just for performance, but as a component of offline support. Yes, we could add an additional header with the same information to work around this specific extension for application
4.
by jordoh 5y ago
It should be noted that this extension strips ETag headers from all responses by default, which can break sites in surprising ways. As a developer of a web application that relies on ETag headers for vital functionality, I see not-infrequen
5.
by jordoh 6y ago
For better or worse, providing multiple ways to do the same thing is part of ruby's philosophy. [1] [1]: https://www.artima.com/intv/ruby.html
6.
by jordoh 6y ago
`_` being assigned the result of the last statement evaluated is an IRB feature [1], not a ruby feature - hence the note that it is not a universal solution. [1]: https://github.com/ruby/irb/blob/master/l
7.
by jordoh 7y ago
It's used in Rails to reduce the likelihood of un-sanitized user input in SQL fragments [1]. I think it would see a lot more use if additional input sources were marked as tainted [2]. [1] https://api.rubyonrails.org/cl
8.
by jordoh 7y ago
I tried running the source images through FineReader Online, but the images with handwriting resulted in "was not processed: the recognized document contains errors". The website image worked, but was missing a few elements, like
9.
by jordoh 7y ago
Running tesseract (4.0.0 using the LSTM engine) on the same images leaves a lot to be desired for handwriting, but does well on the (non-handwriting) website image (the source images are linked in the "OCR Image Processing Results&quot
10.
by jordoh 7y ago
Have a specific image you'd be interested in seeing tested? The article only contains a few examples that could be freely used, but images with sparse random text (e.g. [1]) do tend to have good results across all the services. [1] ht
11.
by jordoh 7y ago
That's a good point not explained in the article: there are a huge number of use cases for OCR. In this case, the use is extracting words that can be used in full-text search, so structural extraction isn't a key criteria. Edit: a
12.
Background Burner API(bonanza.com)
14 points by jordoh 12y ago|2 comments
13.
by jordoh 14y ago
There could be such a service flying under the radar, but third-party AdWords resellers are required by the TOS to only use one account per client.
14.
by jordoh 14y ago
Do you have evidence to support the assertion that it isn't purely percentage based? Perhaps there is some account out there that has the same ratio of prohibited items as knife-depot, but has not been banned? Whether AdWords should allow "
15.
by jordoh 14y ago
How do you level the playing field in this case? One account has 50% disallowed items (50 of 100) and another account has 0.005% disallowed items (50 of 1,000,000). You could bias _against_ large accounts by banning when they reach a fixed
16.
by jordoh 14y ago
This seems like a pretty clear-cut case of assuming that there is some intentional malice or favoritism in actions that are the result of an automated system. - Google adds some terms like "assisted opening knife" and "assist folding knife"
17.
by jordoh 14y ago
The writing has been on the wall for a while about the end of XNA development by MS - none of the development tools for XNA have been updated to work in Visual Studio 2012. Fortunately, there's an open source replacement that run on a much
18.
by jordoh 14y ago
I wonder how this will work with SSH keys. I've been using Git Extensions ( http://code.google.com/p/gitextensions/ ) with VS 2010 for a while now and have been pretty happy with it, but it has taken a long time for the SSH key support to g
19.
by jordoh 14y ago
There are a couple assumptions here that seem like they could be pretty faulty: 1. Whoever touched a line of code last is most familiar with that line of code. I just moved a method to a different module, so following this assumption I am n
20.
by jordoh 14y ago
Even if you make it easy to unsubscribe (one click, no sign-in, prominent link), sending an email to any large number of people will still result in "mark as spam" being used on a surprisingly large percent of messages. Where I work, we sen
21.
by jordoh 14y ago
Great to know about 1.9 - just looked through the 1.9 changelog and saw it described as "Newlines allowed before ternary colon operator (:) and method call dot operator (.)", so it does seem like they are encouraging this specific formattin
22.
by jordoh 14y ago
This seems to be a popular style in javascript (particularly when using jQuery), but it's not actually valid ruby (edit: ruby 1.8.7, that is - see reply). The first line forms a valid statement, so the dots would need to be at the end of
23.
Ray Traced Quaternion Julia Sets in WebGL(jkfill.com)
2 points by jordoh 14y ago|0 comments
24.
by jordoh 14y ago
How long has it been since you used MonoTouch? I first used it a little over a year ago: debugging over the wire worked just fine (though you can debug over a network connection), the API was only ever behind on major iOS updates (it's also
25.
by jordoh 14y ago
Using a vector representation may be a more practical approach as retina-style screens become more pervasive. Microsoft Research has an interesting paper on this from last year's SIGGRAPH: http://research.microsoft.com/en-us/um/people/kopf
26.
A different approach to Rails mass-assignment security(jkfill.com)
7 points by jordoh 15y ago|0 comments