judofyr

55 ms·

511.
by judofyr 14y ago
I can confirm that @charliesome has found a loop-hole in Rails' parameters processing that makes it possible to do some really nasty stuff. I also know that other have discovered the same bug independently. I don't think anything has leaked
512.
by judofyr 14y ago
I just discovered a related bug that's much more severe than what I initially thought. So yes, man, this is bad :-(
513.
by judofyr 14y ago
I'm not quite sure what you're hinting at. I know there's been found a DoS-exploit related to the parameter handling (expect a new security release soon), but at least it seems to be safe to say that this bug can't be triggered from `para
514.
by judofyr 14y ago
sigh . Why do we always want to declare a winner? Anyone who has tried to store binary data in JSON knows that MessagePack does indeed have a use case. And anyone who is working with browsers knows that JSON/JS is the king there. > Mes
515.
by judofyr 14y ago
> > typical short strings only require an extra byte in addition to the strings themselves. > So, stored strings are actually bigger (even only by one bit) than plain text json. Strings in JSON require two bytes (the quotes) i
516.
by judofyr 14y ago
I'm going to repost my collection of Hacker News threads that contain book recommendations: http://news.ycombinator.com/item?id=4185504 — Hacker News stories which contains plenty of book recommendations (sorted by points, labeled by topi
517.
by judofyr 14y ago
Reminds me of http://i.imgur.com/fqjnK.gif
518.
by judofyr 14y ago
God, I'm so tired of animated GIFs in GitHub comment threads. The code critique is far more amusing to me.
519.
by judofyr 14y ago
Although Ruby uses English terms, a lot of the development happens in Japanese.
520.
by judofyr 14y ago
So, is this information publicly available anywhere?
521.
by judofyr 14y ago
Did you consider using forks more actively? E.g. each team has it's own fork where they commit, and one person is responsible for merging the fork upstream?
522.
by judofyr 14y ago
95% of the power generated in Norway comes from hydropower[1] so we already have a sustainable and green power source. I think it's more likely that the government sees power generation in Norway as a "solved" problem, and wants to be caref
523.
by judofyr 14y ago
Replace the second step with this then: curl -L https://github.com/daylerees/colour-schemes/archive/master.tar.gz | tar -zxf -
524.
by judofyr 14y ago
Objective-C categories are just like monkey-patching in Ruby. You can have collision with categories in Obj-C just like in Ruby, you'll just get a compiler warning (maybe error).
525.
by judofyr 14y ago
Better examples: 5.days.ago User.where(:age.gt => 5)
526.
by judofyr 14y ago
I think he meant something like: <script><%= File.read("file.js") %></script> Not that they should literally move the script inline.
527.
by judofyr 14y ago
An attacker can just remove the <script>-tag that points to the HTTS-served verifier. In general: If the site the user visits is plain HTTP then there's no way to trust the site.
528.
by judofyr 14y ago
http://www.instacart.com/assets/instacart-screenshot2.jpg
529.
by judofyr 14y ago
Slim defaults to ugly-mode: https://github.com/stonean/slim/blob/ae14457c596c963144810ce... Haml uses pretty-mode in development and ugly-mode in production.
530.
by judofyr 14y ago
It's called Haml and Slim, not HAML and SLIM. Are you running the server in production mode? Slim already has a set of benchmarks that compares it to Haml and ERB in various settings: https://github.com/stonean/slim#benchmarks Do all thre
531.
by judofyr 14y ago
Ehm, it's valid JavaScript. What is not "regular" about it?
532.
by judofyr 14y ago
You can avoid the flash by adding this into the Custom.css: html { -webkit-filter: grayscale(100%); } On Mac it's in ~/Library/Application Support/Google/Chrome/Default/User StyleSheets/Custom.css.
533.
by judofyr 14y ago
I've always liked the \r-trick: a=b=c=d=(e=1..100).each do |num| print num, ?\r, ("Fizz" unless (a = !a) .. (a = !a)), ("Buzz" unless (b = !b) ... !((c = !c) .. (c = !c))), ("Bazz" unless ((d = !d) .. (d
534.
by judofyr 14y ago
This library doesn't help you here though. It doesn't bring you any abstractions on top of regexes (e.g. parsing URLs/emails). This is merely a different syntax for matching parts of a string.
535.
by judofyr 14y ago
1: That is not entirely what he's saying though: A frequent question about the sort of techniques presented here is, "How does this scale to real-world programming?" This is somewhat like asking how the internal combustion engine will bene
536.
by judofyr 14y ago
> He said "education" with any further qualification. Sure. And the Hacker News crowd loves people who point out statements that are not strictly true. Hey, who cares what the author actually meant, this line here is wrong !
537.
by judofyr 14y ago
Yes, all school computers are unsuitable for education of embedded programming . Yes, the title didn't say so, but whitequark didn't submit it here with that title. If you read the post and the title in the context of whitequark's blog it
538.
by judofyr 14y ago
Please note that this guy's blog has a subtitle of Has someone just said “lowlevel”? . whitequark is discussing the Raspberry Pi from an embedded point-of-view. If you only intend to use the Raspberry Pi to teach Linux and above (or anythi
539.
by judofyr 14y ago
> Smalltalk stands in stark disproval of this assertion. I stand corrected. Although Smalltalk solves it by introducing a special method call syntax (which is perfectly fine). I was mostly thinking about C-style-method-call-syntax when
540.
by judofyr 14y ago
Sure, lambdas are not new, but there's still some interesting (maybe not worth calling them novel) ideas in Ruby's blocks: First of all the observation that most method only care about a single block. By having custom syntax for "method tha

More ›