mdavidn

33 ms·

361.
by mdavidn 11y ago
Most of LA is incredibly flat. One of the most striking vistas of the city is at Griffith Observatory. From that vantage point, Normandie Ave stretches in a straight line from the base of Griffith Park all the way to the horizon. http:&#x2
362.
by mdavidn 11y ago
True, but many teams running Ruby in Managed VM will use opt to run YARV directly.
363.
by mdavidn 11y ago
This will prevent running JRuby 9000 in (today's) Google App Engine. The project has been drifting away from App Engine support for some time now. See #2304. https://github.com/jruby/jruby/issues/2304
364.
by mdavidn 11y ago
The video and audio tracks were recorded separately, and the dash cam skipped backwards during playback. The officer's behavior was deplorable, but I'm not convinced the video was doctored.
365.
by mdavidn 11y ago
Yes. Aphyr has an excellent article on Cassandra. https://aphyr.com/posts/294-call-me-maybe-cassandra/
366.
by mdavidn 11y ago
How about S/MIME? Most mail clients offer out-of-the-box support, including iOS. No additional software required. Requesting a free certificate from Comodo with a web browser is much easier than grokking PGP. But then exporting your pr
367.
by mdavidn 11y ago
But these aren't phishing victims. The IRS deployed a system which returns a treasure trove of personal information to anyone who presents a few shared secrets. This is a fundamentally flawed authentication mechanism devised by the IRS
368.
by mdavidn 12y ago
That's a fair point, but an unsalted hash gives an adversary information before they brute force any password. In the "user with multiple accounts but one strong password" scenario, for instance, grouping by password would hi
369.
by mdavidn 12y ago
Salt has one other important property: Salt makes grouping users by password more difficult. Some subset of your users will inevitably use the same terrible password as another user. Or one user will create multiple accounts using the same
370.
by mdavidn 12y ago
Chrome ships with a list of CAs allowed to issue Google certificates. If Chrome encounters a Google certificate signed by some other root authority, it phones home. http://blog.chromium.org/2011/06/new-chromium-sec
371.
by mdavidn 12y ago
This isn't just a syntactic difference. A Proc can outlive the method that defined it, so the interpreter must lift local variables from the stack to the heap. A block, however, can never outlive the method that defined it, so local va
372.
by mdavidn 12y ago
Phone book? Leaked address book? Leaked account database? Assume your phone number is public knowledge.
373.
by mdavidn 12y ago
About 50% of people self-identify as female. Why are there only 26 female CEOs in the 500?
374.
by mdavidn 12y ago
Without CoffeeScript, automated JavaScript linters are your friend. Run them in your editor, test suites, and asset pipelines. They'll catch those pesky "var" and "===" typos. http://www.jshint.com/d
375.
by mdavidn 12y ago
Don't forget SSH_ORIGINAL_COMMAND. GitHub and BitBucket had an exciting morning...
376.
by mdavidn 12y ago
Datomic is not an eventually consistent system. All writes pass through a single "transactor," which serializes transactions and provides the same ACID guarantees as a traditional SQL database.
377.
by mdavidn 12y ago
I think Matthew Green's point was more that requesting a public key leaks your intent to communicate with someone—the metadata, if you will—to an untrusted third-party. Of course, e-mail headers, including From and To, must necessarily
378.
by mdavidn 12y ago
Lotus::View is the first library for Ruby that marks a separation between view objects and templates. This is a great idea, but Lotus::View isn't the first. See Mustache.rb, for example. https://github.com/defunkt&#x2
379.
by mdavidn 12y ago
It does match a regular expression internally. https://github.com/ruby/ruby/blob/trunk/lib/uri/rfc2396_pars...
380.
by mdavidn 12y ago
So check if uri.host matches your blacklist.
381.
by mdavidn 12y ago
Use a standard URI parser to break this problem into smaller parts. Let a modern URI library worry about arcane details like spaces, fragments, userinfo, IPv6 hosts, etc. uri = URI.parse(target).normalize uri.absolute? or raise &#x2
382.
by mdavidn 12y ago
Try git-grep. It ignores the .git directory, and it's as ubiquitous as Git.
383.
by mdavidn 13y ago
Macs are certainly full of proprietary and closed-source software, but not in this specific case. [1] [1]: http://opensource.apple.com/source/Security/Security-55471/l...
384.
by mdavidn 13y ago
About one year ago, I developed a shared widget. Some fraction of my clients refused to load jQuery, as they still preferred older, less popular DOM libraries. Starting with jQuery's battle-tested event handling code, I trimmed feature
385.
by mdavidn 13y ago
Google+ has been the butt of jokes on the Daily Show since launch. If that's not "general population," then what is? http://www.thedailyshow.com/watch/wed-october-30-2013/jon-st... http:/&#x2F
386.
by mdavidn 13y ago
I evaluated Evernote once two years ago. The iOS app crashed as I was appending to a text note. The app lost a half hour of unsaved meeting notes. I never trusted Evernote again. In my mind, a shoddy rich text editor cast serious doubt on t
387.
by mdavidn 13y ago
I've also been sticking with OmniFocus. It syncs to each of my Macs and iOS devices, yet it still accepts changes when offline. It offers a quick-entry "inbox" but also two higher dimensions of organization, project and conte
388.
by mdavidn 13y ago
Read the report. The pitot tubes thawed after about one minute. Everything after was pilot error. After the high-altitutde stall, the pilot-in-control kept the angle of attack above 30 degrees.
389.
by mdavidn 13y ago
If a MITM attacker is confident they control all paths between a server and a victim, they need not alter IP addresses on packets in transit. To pull this off, the attacker must be near the victim (e.g. compromise a broadband router), there
390.
by mdavidn 14y ago
I only want to be in control when my use case differs from the common case. I would wager that at least 95% of Gemfiles could source https://rubygems.org implicitly and automatically.

More ›