marcinw

10 ms·

91.
by marcinw 16y ago
Right, and by the third or fourth day, we all knew who it was. It was just too easy to pick out: this person's profile had too much in common with the person behind it (paintball team, Facebook fan of that person's company page, etc). Some
92.
by marcinw 16y ago
Unless you order a plain old coffee, everything else is 300+ calories.
93.
by marcinw 16y ago
Keep up with full-disclosure, dailydave mailing lists, conferences, etc and security guys on Twitter. That's it. Oh, and might as well break some stuff while you're at it ;)
94.
by marcinw 16y ago
I would imagine the constant bobbing up and down would be even worse for your eyes...
95.
by marcinw 16y ago
I don't know what's better... the Coke vs Pepsi story in the article, or the fact that this entire website is dedicated to mechanical pencils.
96.
by marcinw 16y ago
I've always preferred the taste of Coke out of a can to any other cola. Pepsi is too sweet, and it has a slightly different aftertaste; Coke on the otherhand, tastes pretty consistent throughout, making it an excellent choice as a mixer.
97.
by marcinw 16y ago
Right, sorry for not making that distinction. That is what I meant, but the latency between brain and fingers is under some delay :)
98.
by marcinw 16y ago
The only reason I stick with gzip over bz2 or 7z (lzma) is that gzip is everywhere. In reality, nobody has a file compression utility that can handle LZMA (even though I do, I never use it).
99.
by marcinw 16y ago
At the moment, you're at a serious disadvantage if you're not across the street from the Exchange due to latency (obviously).
100.
by marcinw 16y ago
You seriously think developers will manually HTML encode every time user input is rendered in the response? It's not just HTML they have to worry about, but Javascript, URL, HTML attributes, etc. If the framework doesn't automatically do
101.
by marcinw 16y ago
I'd love to say I agree, but I can't count the number of times I've been asked to deliver a list of bugs/issues/vulnerabilities in an Excel spreadsheet. --shudders--
102.
by marcinw 16y ago
I know there are more than several of us on Hacker News, who work in the field of information security and many ask who ask how we got started. Dan Guido created this guide for recent college graduates looking to break into information sec
103.
So you want to get started in an Infosec Career?(pentest.cryptocity.net)
31 points by marcinw 16y ago|22 comments
104.
by marcinw 16y ago
Serve pages with the "Cache-Control: private" HTTP header.
105.
by marcinw 16y ago
Actually... the browser won't send a referer to a HTTP site if coming from HTTPS. From the RFC: http://www.w3.org/Protocols/rfc2616/rfc2616-sec15.html#sec15... "Clients SHOULD NOT include a Referer header field in a (non-secure) HTTP re
106.
by marcinw 16y ago
Wow, this is seriously awesome. I always avoided Scribd because I could never just download the PDF, but with HTML5 view + fullscreen mode I am happy. Now time to overtake Slideshare... ;P
107.
by marcinw 17y ago
Exactly. Just another blog post by someone who doesn't understand why. Not everything can be web 2.0'd, bubbly and made into an iPhone app.
108.
by marcinw 17y ago
Check out http://code.google.com/p/owasp-esapi-js/source/browse/trunk/... While it may be overkill, replacing just < and > is nowhere near enough. You have to consider HTML attributes, URL's, CSS, and Javascript. At an absolute m
109.
by marcinw 17y ago
Looking for security engineers interested in consulting, penetration testing, development, and research. Experience with C, C++, Java, .NET a plus. Positions open in both London and NYC offices (candidates must be willing to relocate if no
110.
by marcinw 17y ago
Of course there are milestones (that leaves you something usable) in construction! * Construction start * Foundation completed * Structure/Frame completed * Roofing completed * Interior Walls etc etc etc.. I'm not in the construction busin
111.
by marcinw 17y ago
One of the mitigations to this is to create a PIN that's unique to a telephone number you've associated with your account.
112.
by marcinw 17y ago
sure feels like it reading some of the replies to this thread :/
113.
by marcinw 17y ago
Awesome! Just purchased this without even thinking about it. Would love to see this app grow, supporting other instruments like saxophone, guitar, trumpet, etc.
114.
by marcinw 17y ago
Thanks Mike for providing such a useful module! Some plans I have to add to this module (if you don't plan too already): Add support for: * Pass a font-size, bold, italic, bold+italic and spacing to paragraph method to modify font * Pass a
115.
by marcinw 17y ago
Also why stored procedures are often recommended since you can apply access controls around them.
116.
by marcinw 17y ago
Gotham Digital Science is hiring software security engineers and penetration testers in NYC and London. Those with security and/or development background in Java, .NET, C/C++, Python... See http://www.gdssecurity.com/g/ca.php for more in