mirashii

41 ms·

511.
by mirashii 12y ago
Solaris zones have been around much longer, and have undergone audits and also been used for multitenancy in production for almost 10 years now. The new LX brand may have some new surface that it's worth auditing, but in general Solari
512.
by mirashii 12y ago
Generally, the common wisdom is still that Docker, lxc, and linux containers in general haven't been audited and hardened enough to use for multi-tenant isolation, so this seems like an odd choice. The article doesn't talk at all
513.
by mirashii 12y ago
This tool is doing the brute force of 11000 PINs, which is mentioned in the article but not this particular attack.
514.
by mirashii 12y ago
Honestly a bit confused on the downvotes, was just trying to provide additional information for people who aren't familiar with working with CF. Anyone care to enlighten me?
515.
by mirashii 12y ago
Even if it is true, getting an enterprise account, which is still very reasonably priced, gives you dedicated IP addresses to your site, so this shouldn't be a huge concern. Generally when under fire, Cloudflare is also happy to get yo
516.
by mirashii 12y ago
@ericflo will probably pop by and answer a little bit more, but the major pieces are a golang powered API stack, a Django app that consumes that API stack and does all the template rendering and such, and a lot of background workers based a
517.
by mirashii 12y ago
You don't have to strictly speaking, you can use your own and just resolve in the same manner. You'd just need to monitor the results of a lookup on CF's servers and send back the same response with your own DNS.
518.
by mirashii 12y ago
Also consider that if its checked on a commit by commit basis that doesn't collapse merges in somehow, then you actually check every commit that was made during incremental work on a different branch. If you're doing TDD or any te
519.
by mirashii 12y ago
Keep in mind when responding that Webkit, Clang/LLVM, and Cups are all not created by Apple, they're all preexisting projects or forks that essentially necessitated doing their work in the open.
520.
by mirashii 12y ago
It's a bit concerning that this page doesn't really reference the order of magnitude of data that they're working with, statistical significance, or anything to indicate that the difference between the two percentages they&#x
521.
by mirashii 12y ago
At a glance, one interesting use of this is a potential local privilege escalation on systems with a sudoers file which restrict commands which can be run to ones that include a bash script, and allow you to keep some environment variables.
522.
by mirashii 12y ago
This assumes that it's game publishers where there's a copyright problem, which given the recent Twitch muting of copyrighted audio, is probably not the issue that most people are concerned about right now.
523.
by mirashii 12y ago
For what it's worth, having worked with Anand, I don't think 1200+ commits suggests it's input manually (you can see on the about page a list of some of the APIs it's pulling data from), I think it more suggests that Ana
524.
by mirashii 12y ago
For those wondering why this is downvoted, read the "shaming" and the reasons behind it for yourself. http://www.joyent.com/blog/the-power-of-a-pronoun
525.
by mirashii 13y ago
A small frustration, but browsing from within a HN reader I got put behind a browser detection wall. I can perhaps understand this for some of the courses, but it seems unnecessary to read a blog entry.
526.
by mirashii 13y ago
Good. CF should not send you the IP address. If they sent the origin IP address to any random person with a DMCA claim, their service would be useless, as attackers would just send any old DMCA, demand the origin IP address, and DDOS that.
527.
by mirashii 13y ago
There's a much easier answer, the URLs aren't identical (I chekced).
528.
by mirashii 13y ago
We're certainly hiring full time, and may be looking for interns more as summer approaches. Feel free to send a github/resume/etc. to jobs at our .com and mention the post.
529.
by mirashii 13y ago
Quizlet employee here. For the JS logging you see in some of the screenshots, we use some JS on the client side that watches for errors and fires off a request to us with as much data as on the error as we can collect (in most cases we can
530.
by mirashii 13y ago
As someone who was considering Black Lotus as a potential service for DDOS protection, they had a number of failures during this whole episode that make it hard to take them quite seriously. First, and most importantly, they suffered many h
531.
by mirashii 13y ago
From what I recall when I skimmed the original paper, you would need more general hardware than the wifi chipset in a phone. Actually, that this says it uses wifi at all is a bit misleading. It happens to work on the same frequency bands th
532.
by mirashii 13y ago
Things like this are why projects like pypy use CPython's test suite whereever the behavior is not CPython specific, and have contributed many tests back to CPython as well. These aren't minutia of the language, they are well understood and
533.
by mirashii 13y ago
There's no support for metaclasses. type is missing entirely. nonlocal doesn't work. docstrings and some other double underscore names are just missing (__class__, __name__, etc.). Unicode literals don't work. dis obviously won't work since
534.
by mirashii 13y ago
> Someone has implemented Python in JavaScript. This isn't really true. This is far from a Python implementation. At best you could call it a Python-esque syntax to Javascript translator. And that's perhaps still useful. But to call thi
535.
by mirashii 14y ago
> That is not true in the slightest, I don't see how this isn't true. Care to back up your statement of fact with evidence. > The fact remains that the money spent on entertainment was diverted into fund raising, diluting the produc
536.
by mirashii 14y ago
If you're anything like me, it was you three years ago and you can't remember the password and don't use the associated e-mail address anymore.
537.
by mirashii 14y ago
10 years is a long time, I'm sure we can all agree, but having the most logged hours doesn't automatically make you the most qualified opinion in the world. There is a vast realm of other factors that should be considered. In my personal ex
538.
by mirashii 14y ago
Actually, video encoding for most codecs is a task which doesn't lend itself to parallelism due to temporal encoding. Because each frame depends on the last one, you really don't gain much from going to multiple cores (at least yet).
539.
by mirashii 14y ago
Actually, (1) is the result of vote fuzzing by reddit. They intentionally manipulate upvote and downvote numbers to obscure from potential voting rings whether their votes are effective. There are also some small safeguards in place against
540.
by mirashii 14y ago
No, they're not. 1) Your mac address is available to even passive sniffers without the key to an encrypted network. In some circumstances you don't even need to be connected to a network to grab someone's mac address (iPhones in particular

More ›