mathias

10 ms·

61.
by mathias 13y ago
Which guideline in particular? “Otherwise please use the original title, unless it is misleading or linkbait”? The new title is definitely not as clear IMHO.
62.
by mathias 13y ago
Looks like someone just changed the title of this HN submission. For the record, it originally said: “Full name and email for every Flickr invite ever sent can be viewed by anyone”, which was accurate at the time of posting.
63.
by mathias 13y ago
Minor correction: it was “d4d1a179c0f3” who reported and suggested that solution, not me (although I agree with their proposal). I’m just the guy who posted this on Twitter ( https://twitter.com/mathias/status/45271
64.
Flickr: Invitations disclosure (resend feature)(hackerone.com)
317 points by mathias 13y ago|90 comments
65.
by mathias 13y ago
For more, see the evil.js project: https://github.com/kitcambridge/evil.js Also note that `string.split('').reverse().join('')` is not a very good way to reverse a string in JavaScript. See http:&#
66.
by mathias 13y ago
Some PBKDF2-HMAC-SHA1 collisions that start with the URL of this Hacker News thread: $ ./brute-force.py 'https://news.ycombinator.com/item?id=7465849#' https://news.ycombinator.com/item
67.
by mathias 13y ago
If you’d take the time to read the free online copy (which OP links to) you’d see that there are plenty of “pure examples” in the book. In fact, there’s a code example for every two paragraphs of text, or so.
68.
by mathias 13y ago
“I didn't remember the exact wording, but he/she mentioned something in the lines of Javascript is better written than spoken.” In that case, you’re gonna love this book. There’s a small code example for every two paragraphs or so
69.
by mathias 13y ago
What did the original post say?
70.
Any Android app can read your WhatsApp database(bas.bosschert.nl)
267 points by mathias 13y ago|131 comments
71.
by mathias 13y ago
I used the SGML NET trick a few years back in an attempt to create the shortest possible valid HTML documents for different versions of HTML: http://mathiasbynens.be/notes/minimal-html Note: “valid” here is defined as
72.
by mathias 13y ago
`<script src="foo" />` only works the way you’d expect it to in XHTML. Proper XHTML, that is — served with the correct `Content-Type` header. http://mathiasbynens.be/notes/xhtml5
73.
by mathias 13y ago
From the article: “It is not, and has never been, valid HTML to write `<br></br>`.” Sure, but note that it is perfectly valid XHTML (which is a form of HTML). Oh, and `<script src="foo" />` actually wor
74.
by mathias 13y ago
The 8.8 million lines joke refers to < http://techcrunch.com/2013/05/16/google-has-already-removed-... .
75.
by mathias 13y ago
What is your definition of ‘non-free browser’?
76.
by mathias 13y ago
Are you comparing a mobile browser with a desktop browser? Note that Opera’s “Off-Road mode” in present in Opera for Desktop as well; it’s not a mobile-only feature. Here’s a screenshot that shows how to enable it: http://i.imgur
77.
by mathias 13y ago
Note that Opera’s “Off-Road mode” in present in Opera for Desktop as well, so it’s not a mobile-only feature. Here’s a screenshot that shows how to enable it: http://i.imgur.com/rvGkQrI.png
78.
by mathias 13y ago
> In the mobile world they offer access to their compressing proxy built-in Off-Road mode in present in Opera for Desktop as well. Here’s a screenshot that shows how to enable it: http://i.imgur.com/rvGkQrI.png
79.
by mathias 13y ago
Some cool features I haven’t seen in Chromium yet: Lazy session loading: when restoring browser state from session, only the active tab will be loaded. Remaining tabs will be loaded when activated. Enable here: opera://flags/
80.
by mathias 13y ago
Excellent point. I was aware http://mathiasbynens.be/notes/javascript-unicode#accounting-... is not a fully accurate/bulletproof solution (never said it was, either). I’ve added a note to the article now, linking
81.
by mathias 13y ago
The article mentions several examples of real-world issues (in popular libraries etc.) that stem from this behavior. Writing a regular expression to match a single symbol sure seems easy until you realize some characters have a length of `2
82.
by mathias 13y ago
Exactly. I wrote a separate post on that: http://mathiasbynens.be/notes/javascript-encoding
83.
by mathias 13y ago
Another example is: _.forEach(array, function(item) { doSomething(); if (condition) { // exits iteration early return false; } }); This is just not possible with native `Array#forEach
84.
by mathias 13y ago
For level2 you could also implement load balancing pretty easily. See my write-up: https://github.com/ctfs/write-ups/tree/master/stripe-ctf3/le... Would you mind sharing the code to your solutions a
85.
by mathias 13y ago
Added a link to your write-up and solutions to the collection here: https://github.com/ctfs/write-ups/tree/master/stripe-ctf3
86.
by mathias 13y ago
That was added after posting it here. https://news.ycombinator.com/item?id=6951288
87.
by mathias 13y ago
Indeed, looks like Bashstrap is a fork of my dotfiles (without giving any credit, sadly). A lot of the commands, file structure, and even parts of the readme are a direct copy-paste.
88.
by mathias 13y ago
Actually, it looks like Bashstrap is a fork of https://github.com/mathiasbynens/dotfiles . A lot of the commands, file structure, and even parts of the readme are a direct copy-paste…
89.
Evil.sh — subtle shell tweaks that will slowly drive people insane(github.com)
1 points by mathias 13y ago|0 comments
90.
Exploit for PHP Objection Injection vulnerability in WordPress 3.5.1 released(vagosec.org)
2 points by mathias 13y ago|0 comments

More ›