marcinw

11 ms·

61.
by marcinw 16y ago
Right, because nginx and lighttpd aren't easier to exploit. /sarcasm
62.
by marcinw 16y ago
I'd say disclosure of classified information presents a greater risk than distributing copyrighted materials. I really don't think "copyright" is the issue at all here.
63.
by marcinw 16y ago
When I was younger, I had aspirations of getting into the X-Games for freestyle bmx and dirt jumping. Those dreams ended when I broke my leg doing something very mundane. I was grinding down a box with a decline which was about 3.5 feet of
64.
All the reasons why you shouldn't do JavaScript Crypto(rdist.root.org)
13 points by marcinw 16y ago|2 comments
65.
by marcinw 16y ago
You'd be hardpressed to find a vulnerability in IIS7 or SQL Server these days...
66.
by marcinw 16y ago
Don't worry, it's common to get poorly worded questions wrong when you don't understand what exactly the examiner is asking. In this case, I too would have gotten wrong unless you replaced "building" with "exchanging".
67.
by marcinw 16y ago
XSS is hardly cutting edge.
68.
by marcinw 16y ago
Get up off your ass, get out there and just do it!
69.
by marcinw 16y ago
If you're going to round my exact change down, then don't complain if I'm a couple cents short.
70.
by marcinw 16y ago
You're thinking of the Joel Spolsky / Fog Creek method of publicizing salary information amongst employees: http://www.joelonsoftware.com/articles/fog0000000038.html There's also a sort of follow-up on why he doesn't allow for negotiation
71.
by marcinw 16y ago
I love my x301 but I do agree.. it is out of date unfortunately. It was the perfect balance between the 12" and the 14" ThinkPads. My only gripe is that it's limited to 4GB. Anyone know if it's possible to exceed this limit? A coworker o
72.
by marcinw 16y ago
Oh my, that IBM research probably went into their DataPower appliances >> http://www-01.ibm.com/software/integration/datapower/perform... My biggest gripe with XML is namespaces followed by XSLT. Working with XML at that point ju
73.
by marcinw 16y ago
One thing that'd be nice would be if Yelp could geolocate the IP address I was coming from (NYC) and autofill in the "Near" textbox with "New York, NY" instead of having me go to /nyc.
74.
by marcinw 16y ago
http://docs.python.org/library/struct.html#struct.unpack """The result is a tuple even if it contains exactly one item.""" I run into this constantly using struct.unpack(), and I find the author's idiom to be ideal way to handle this. I
75.
by marcinw 16y ago
Anytime you come across a paywall link on NYT's site, just remove the "/glogin?URI=" and query string from the URL, and you can usually brute through it.
76.
by marcinw 16y ago
I live in NYC, and I see food trucks everywhere. Someone parking their car versus a food truck doesn't even compare. Like Thomas, I enjoy food trucks, but I wouldn't want them being able to just park anywhere. Food trucks attract many pe
77.
by marcinw 16y ago
Add SSL to the list, along with hidden form parameters and request headers. It's as if nobody's ever heard of using cURL or an HTTP proxy, even if for debugging purposes.
78.
by marcinw 16y ago
Why not just buy a neodymium magnet? This usually does the trick to trigger the sensor.
79.
by marcinw 16y ago
Actually, you want to perform URL encoding in such example, as "javascript:alert(1)" when escaping HTML entities will slip past un-encoded. See http://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%2... for more information.
80.
by marcinw 16y ago
I love examples like the Bike Shed.. Another good one is the "Chicken and the Pig" story. http://en.wikipedia.org/wiki/The_Chicken_and_the_Pig
81.
by marcinw 16y ago
Thanks, even more info here: http://en.wikipedia.org/
82.
by marcinw 16y ago
Brian does not claim to have been doing it before Juliano or Thai. He wrote the blog post to explain in layman's terms what the attack was and released his own version of the original POET tool written in Perl.
83.
by marcinw 16y ago
Heh, name a couple "clueful" cryptographers you think could have helped design a better system. You'd be surprised who was actually involved in its design.
84.
by marcinw 16y ago
Why not just ask Chip or Tyrone whether they feel their lives are worth losing to save a hundred others?
85.
by marcinw 16y ago
Interesting... this would be really helpful if it also took into account pronation (see http://www.runnersworld.com/article/0,7120,s6-240-319-327-77... ).
86.
by marcinw 16y ago
Sure, it's easy to come up with a "proper response" after the fact, but how about when you've been blindsided by a reporter with a microphone and camera in your face?
87.
by marcinw 16y ago
I chose Nothing, and currently only get HD over the air with an antenna.
88.
by marcinw 16y ago
Seriously, when am I going to be able to pick and choose what channels I want to subscribe to?
89.
by marcinw 16y ago
How's that better? That's like changing the port SSH listens on to 2222 even though root's password is "root".
90.
by marcinw 16y ago
Nobody ever negotiates up from your first asking price, as that is the highest anyone will bid unless the terms of negotiation have changed. You can only negotiate down from your asking price or remain firm on it. Negotiating != auctionin

More ›