judofyr

52 ms·

481.
by judofyr 14y ago
> You can mess up and create a dirty execution environment. Then don't mess up. It's not that hard. If you follow best practices (don't use global variables) you should handle this fine. I haven't heard anyone having this problem in R
482.
by judofyr 14y ago
And this: > My Lua/LuaJIT implementations don't process/read any header fields, nor do they send any back (it's a simple server) I would expect this is the reason Lua/LuaJIT appears to fast. However it does demonstrate that a single pro
483.
by judofyr 14y ago
Not sure why you're downvoted. This is basically what rsync is: a smart algorithm for doing rolling checksums and only sending diffs.
484.
by judofyr 14y ago
What encoder did they compare it with?
485.
by judofyr 14y ago
You can implement coroutines with continuations with two functions: def resume callcc do |cc| $current = self @caller = cc @resumer.call end end def self.yield callcc do |cc|
486.
by judofyr 14y ago
And you backed it up with no facts what so ever.
487.
by judofyr 14y ago
There's a time and place for everything. Sometimes you want a wireframe with blocky/blurry text (to experiment with the layout). Sometimes you want a wireframe with Lorem Ipsum (to experiment with the text/font in a generic way). Sometimes
488.
by judofyr 14y ago
No, but people call it Mail.app.
489.
by judofyr 14y ago
Facebook's OAuth2 implementation is so broken. Homakov found a X-XSS-Protection-related issue: http://homakov.blogspot.no/2013/02/hacking-facebook-with-oau... . After reading Homakov's and Nir's discussions I started looking for some bugs
490.
by judofyr 14y ago
> It's a cool tech, but its social implications are far from being trivial and benign. Is there any cool tech that doesn't have difficult social implications?
491.
by judofyr 14y ago
They do: https://github.com/kraih/mojo/blob/master/lib/Mojolicious/Gu...
492.
by judofyr 14y ago
Judging from the beta ( http://try.discourse.org/ ) it doesn't seem to provide anything new in terms of managing a civilized discourse. The structure of the posts is very similar to regular forums; the only difference being the explicit rep
493.
by judofyr 14y ago
That's not an official cross-platform image. I have used some tools that converts them to VirtualBox, but it hasn't been very reliable. As I said: Having official support for Linux and Mac will be great.
494.
by judofyr 14y ago
More important on modern.IE: > The virtual machines testing platform is nearly finished. Once completed, you'll be able to easily test your site on Windows, Mac or Linux. Check back soon. Having an official VirtualBox (I assume?) image
495.
by judofyr 14y ago
I don't quite get what you're trying to say. What "community social norms"? Are you talking about how rubygems.org handled this vulnerability from the beginning? How the community handled this incident after it happened? And what does it ha
496.
by judofyr 14y ago
Short timeline: - 1 week ago: blambeau reported the issue to the rubygems people: https://github.com/tenderlove/psych/issues/119#issuecomment-... - Postmodern wrote a PoC - https://gist.github.com/4674219 - Postmodern: "I posted it in a
497.
by judofyr 14y ago
FYI, evil.rb was also a script that hooked you into Ruby's internals, so you could e.g. change the class of an object, unfreeze objects and do all sorts of funky things: https://github.com/yugui/evil-ruby/blob/master/lib/evil.rb
498.
by judofyr 14y ago
You can also do: NULL = Object.new.freeze def foo(bar = NULL) if bar.equal?(NULL) # default value end end
499.
by judofyr 14y ago
Short version: "Ruby isn't Python!! wat?!?"
500.
by judofyr 14y ago
> If you hit someone with enough felony counts sooner or later something will snap. Can we stop the speculations until we actually know what happened? :-(
501.
by judofyr 14y ago
Yes.
502.
by judofyr 14y ago
I think it's better to not discuss this openly for a few days. The exploit isn't obviously (as you've noticed) so hopefully users will be able to upgrade before the script kiddies discovers this.
503.
by judofyr 14y ago
This is bad, bad, bad, bad! SQL injections, remote code execution, DoS. Pretty much everything is possible with this exploit. Upgrade NOW .
504.
by judofyr 14y ago
This is bad, bad, bad, bad! SQL injections, remote code execution, DoS. Pretty much everything is possible with this exploit. You don't even need the secret key which was required in the previous vulnerability. Upgrade NOW .
505.
by judofyr 14y ago
I was about to say that it reminds me of the Haiku's I've been collecting: http://timelessrepo.com/haiku Or Tribute (that I wrote): http://timelessrepo.com/tribute
506.
by judofyr 14y ago
> I can't think of a compare method in the Objective-C core lib (the biggest nil-swallowing lib I know of). Does anyone know of one? Would be interesting to see how it's handled and if it causes issues. Maybe I misunderstood you, but th
507.
by judofyr 14y ago
`[a compare:b]` returns 0 both if they are equal and if a is nil.
508.
by judofyr 14y ago
A = {'a','b','\0'}; B = {'a', 'b', '\0'}; safercopy(2, A, 2, B); A = {'a','b'}; B = {'a', 'b', '\0'}; safercopy(2, A, 2, B); A = {'a','b','\0'}; B = {'a', 'b'}; safercopy(2, A, 2, B); A = {'a','b'}; B = {'a', 'b'}; sa
509.
by judofyr 14y ago
Or, well, Rocco in this case: http://rtomayko.github.com/rocco/
510.
by judofyr 14y ago
Nice to see somewhat knowledgable commenting on this issue and actually test things out . It's very easy to say "meh, you haven't done a scientific test so it's probably placebo", but remember that you're being equally un-scientific in s

More ›