mixedbit

39 ms·

391.
by mixedbit 12y ago
One problem is that a truly full cleanup of a hacked website should in theory include manual cleanup of all clients' caches (not really practical). Otherwise, malicious index.html (for example with JavaScript that sends cookies to an a
392.
by mixedbit 12y ago
PHP will be a tough market to enter for Heroku. It will be especially hard to attract owners of small PHP based sites. Almost every traditional, shared hosting provider supports PHP, prices are really low and setup is trivial (just dump PHP
393.
by mixedbit 12y ago
No, I was thinking about the original auth_request. For cookies based authentication you need to turn off authorization for login pages (because every visitor should be allowed to access login pages) and pass login requests directly to your
394.
by mixedbit 12y ago
Haskel doesn't address problems of distributed computing at the language level. For distributed computing you need message passing, you need to handle failures. If you do distributed computing in Haskel, you also need to build and use
395.
by mixedbit 12y ago
8GB would be at least 100 million lines of code (upper bound with 80 characters per each line). For comparison Linux has 15+ million lines of code, PHP 2+M.
396.
by mixedbit 12y ago
Not really, because Oculus does not compete with anything done by any big player. It is a new territory for everyone.
397.
by mixedbit 12y ago
For Facebook an equivalent of Bing could be a try to launch a mobile OS.
398.
by mixedbit 12y ago
This isn't correct, you can use auth_request when authentication agent needs to talk to the user. I can't even see how it could be used without such communication.
399.
by mixedbit 12y ago
Wow, finally auth_request is an official module. Thank you!
400.
by mixedbit 13y ago
It isn't necessarily the case. When individuals optimize their outcomes, they often make decisions that are not optimal from the whole group perspective. In such cases regulations are necessarily to achieve optimal global solution.
401.
by mixedbit 13y ago
If you understand a vulnerability, you can often tell for sure if it can lead to exposure of private keys. For example if a PHP app runs in a separate process with separate user credentials than nginx SSL endpoint, and if file access contro
402.
by mixedbit 13y ago
Any exploitable bug that allows to access private keys should invalidate certificates. There are many security vulnerabilities that don't give access to private keys.
403.
by mixedbit 13y ago
> The Mozilla CA policy does not include a provision for obvious trolling and posturing. This isn't really trolling, after Heartbleed we should consider all SSL certs used by OpenSSL based servers as compromised. This sites just tri
404.
by mixedbit 13y ago
Security issue explained without Alice, Bob and Malory, this is way too confusing. Who is this Meg character?
405.
by mixedbit 13y ago
This is actually the main advantage of having detailed coding style guide. Teams don't need to discuss minor details like this over and over again, and can focus on higher level issues. Style rules can be sometimes arbitrary because th
406.
by mixedbit 13y ago
I can't see why C++ would be any safer than C. For example Heartbleed like bugs in C++ are still very much possible.
407.
by mixedbit 13y ago
What language other than C would allow code to be used from all mainstream languages/frameworks? This is a critical requirement for a lib like openssl, having N such libs for N languages would be a nightmare.
408.
by mixedbit 13y ago
The problem is also that as long as a vulnerable site is not fixed, users should not attempt to login or interact with such site while logged in. Such interactions increase chances that users' cookies or passwords will be in servers me
409.
by mixedbit 13y ago
In case the bug was really actively exploited on Heroku, updating private keys and changing Heroku password can be not enough. SSL endpoints forward all HTTPS traffic, so according to my understanding cookies, application specific passwords
410.
by mixedbit 13y ago
As a "bonus" you will make your site unusable for suffix proxy users.
411.
by mixedbit 13y ago
Using development kits sales as a base for such estimates doesn't make much sense. Development kits have low resolution, cause motion sickness, there are no playable games for them, you need to wait 1+ month for one. It is safe to assu
412.
by mixedbit 13y ago
Today Oculus is just a display and a controller (sending head movements to the computer). I really, really hope it will stay this way. It would be so unfortunate if Oculus became sophisticated, stand alone device with Facebook controlling
413.
by mixedbit 13y ago
How a user is supposed to know what site is behind the snip.ly URL? This is a phishing heaven.
414.
by mixedbit 13y ago
I guess silence clips are intended for paying users, no one would want to listen to ad interrupted silence.
415.
by mixedbit 13y ago
I wonder if and how C# scripts (a big part of the Unity framework) are supported for the WebGL target.
416.
by mixedbit 13y ago
The X% from the link is not about performance of the demo, but about performance of asm.js: "In less than 12 months, optimizations have increased the performance of Web applications using asm.js from 40% to within 67% of native, and w
417.
by mixedbit 13y ago
Games performance is often GPU bound. If a driving language (C++, JavaScript of whatever else) is fast enough to compute application logic without delaying frames, it doesn't really matter if it is x% slower compared to some other lang
418.
by mixedbit 13y ago
Can this be explained with a birthday paradox? If there is a large number of people signing up to Stripe and a large number of people receiving spam emails from Stripe competitors, probability that some people will receive a spam email just
419.
by mixedbit 13y ago
I disagree. Persona piggy backs on email system so it doesn't need a critical mass of users to be useful. Persona as a brand may not become widely recognizable with limited involvement from Mozilla, but some people argued from a beginn
420.
by mixedbit 13y ago
What you describe is quite similar to how gollum wiki uses git for storage: https://github.com/gollum/gollum

More ›