jtchang

59 ms·

601.
by jtchang 12y ago
For this to happen the attacker has to control environment variables and then a bash shell is spawned. Lots of web stuff spawn shells setting environment variables to stuff in HTTP headers. LC_TIME with some time zone settings might be one.
602.
by jtchang 12y ago
Technically it isn't REST. However what makes the most sense for a RPC style call is a POST.
603.
by jtchang 12y ago
Thought I'd leave a link here for a company based in the bay area and grew out of the Noisebridge hackerspace: http://www.typeamachines.com/ They have a small office in Techshop though they are in the process of gettin
604.
by jtchang 12y ago
I remember square going down one weekend and having to try and contact support. It was a nightmare. I tell everyone to avoid square if possible if taking transactions during critical times is a must. I simply couldn't get through to th
605.
by jtchang 12y ago
I actually built something like this but realized a lot of enterprises don't need it since they probably grew something themselves. If you want to talk about it my e-mail is in my profile.
606.
by jtchang 12y ago
I really like this library for clustering map pins: http://google-maps-utility-library-v3.googlecode.com/svn/tru...
607.
by jtchang 12y ago
I would say fairly secure based on length Here is the reason: 1. It is 101 characters. If I was brute force attacking I'd imagine I'd target passwords <32 characters. Probably more like 8-16. 2. It has [a-zA-Z0-9]. This isn&#x2
608.
by jtchang 12y ago
what's your e-mail? I might have time to work on some stuff.
609.
by jtchang 12y ago
Lots of kneejerk reactions here. I had the same until I thought about it a bit more. In a free market these reservations should generally go to the highest bidder. On the one hand you could view it as the site being a market maker and injec
610.
by jtchang 12y ago
I don't think it was a downright lie to say Grooveshark was worth $375MM if they were making $13MM/year in revenue. Heck valuations aren't necessarily tied to revenue. If they were then a lot of pre-revenue companies would ha
611.
by jtchang 12y ago
For some reason I can't seem to hear it. I just hear the general tempo and beat but not the words.
612.
by jtchang 12y ago
Gripe: When you start a container and forget to forward a port into it you can't do it at a later time. This is braindead.
613.
by jtchang 12y ago
Yeah my email is in my profile!
614.
by jtchang 12y ago
Competition has really heated up since the last time I checked out Fab. It strikes me that this news is the first time I've heard about what Fab was up to in a long time. I can't really think of anything that would make me go &quo
615.
by jtchang 12y ago
That footage is excellent and definitely show how valuable drones can be during disasters. I don't envy the FAA. They are being dragged kicking and screaming into this new age of drone flight. It is going to take a while for good polic
616.
by jtchang 12y ago
This is what happens when users are screaming "I want my privacy back" and you are stuck between corporate goals of monetizing users and user experience.
617.
by jtchang 12y ago
The technology inside the self driving car is amazing. It almost makes me think that we will have AI at the same time we will have a self driving car.
618.
by jtchang 12y ago
I really wish he'd release the tapes so we can actually see what happened. On his blog he states that the tapes were "bullshit" but I have a feeling they are otherwise.
619.
by jtchang 13y ago
Perfect. Can you send me an e-mail? I want to learn more.
620.
by jtchang 13y ago
Can you tell us something about the idea and why you think it is different?
621.
by jtchang 13y ago
Why flag? The title could be better but it isn't really spam.
622.
by jtchang 13y ago
The fact is linode is more expensive than Digital Ocean. I actually hope they stay that way. Why? My expectations are that they take that extra money and give me more assurances. Pricing is screwy and I fully admit this just may be pricing
623.
by jtchang 13y ago
Hate on Microsoft all you want but this is a great thing. If Microsoft feels they want to play in the infrastructure as a service game they need to earn the customer's trust. Price matching is certainly one way to do it. Azure does run
624.
by jtchang 13y ago
Social engineering will almost always work. I don't really fault Sendgrid for this (though I could see this not working as well if you were using Amazon SES...no support to even talk to!). It sucks that they got caught with their pants
625.
by jtchang 13y ago
Does -/+ buffers/cache mean subtract out the buffers and add in the cache?
626.
by jtchang 13y ago
It nags me that even at this great price I'm not jumping up and down to switch from Dropbox. Why is this? -- Once you start using Dropbox there are some serious network effects. It takes a lot of work to get all your friends (both work
627.
by jtchang 13y ago
While the author may me making some technological comparisons that need a bit of vetting the basis premise is good. Given how much these planes cost it does seem reasonable to have real time telemetry. Yes it is hard. Yes it is expensive. B
628.
by jtchang 13y ago
Solid architecture. For those not familiar with payment industry terms PCI stands for Payment Card Industry. You usually know this as PCI DSS (Data Security Standard). Basically all the payment card providers got together and said that you
629.
by jtchang 13y ago
Yup. If everyone just had a Dwolla card.
630.
by jtchang 13y ago
Are you able to take visa/mastercard?

More ›