mixedbit

48 ms·

481.
by mixedbit 13y ago
I would even say that full disclosure should be standard in such cases. If vulnerability is already exploited, some bad guys already know about it. Keeping it secret, even for a short time, gives these bad guys advantage and hurts users tha
482.
by mixedbit 13y ago
Maybe used food recycling?
483.
by mixedbit 13y ago
Interesting, are you aware of any such algorithm (proven to exist but not discovered yet)?
484.
by mixedbit 13y ago
Is this a good book for someone that uses the language for quite some time, but never studied it deeply? I'm looking for something like 'Effective C++' (but for Python of course): a collection of recipes and good practices that would allow
485.
by mixedbit 13y ago
I wonder why authors of P=NP 'proofs' won't attach a program that solves some NP hard problem for a collection of large inputs in reasonable time. This of course wouldn't prove the work is valid, but should be enough to draw attention and h
486.
by mixedbit 13y ago
From the author home page: 'It seems our algorithm is a polynomial one. So we would like to discuss with more people.' It's weird if a proof doesn't even convince the author. https://sites.google.com/site/xinwenjiang/
487.
by mixedbit 13y ago
It does. You can currently do this with an external Django DB Pool module, for some numbers see: http://mixedbit.org/blog/2013/02/06/django_db_pool_on_heroku... I also can't wait to have such mode fully supported by the core product.
488.
by mixedbit 13y ago
Just to clarify: it wasn't Chomsky that wrote the ridiculous book about the Holocaust. Chomsky was disagreeing with the book thesis, but he defended the right of the author to publish it.
489.
by mixedbit 13y ago
In Manufacturing Consent Noam Chomsky makes a very similar point. He advocates for the right to publish a ridiculous book that denies Holocaust ever had place. Chomsky argues that the freedom of speech applies universally, even if a speaker
490.
by mixedbit 13y ago
As a side note: if(b->qid.path==a->qid.path) is interesting. This is not how you compare strings in C. So it is either a bug or dirstat() needs to guarantee that different results pointing to the same file always share the
491.
by mixedbit 13y ago
A crypto puzzle: Is it safe to encrypt several keys with the same passphrase? Or is it possible to reveal the keys if the same passphrase was used to encrypt them?
492.
Can you connect to AWS (us-east) from Europe?
3 points by mixedbit 13y ago|1 comments
493.
by mixedbit 13y ago
One more: in the old days you often needed to run a java applet to get full functionality, today you often need to download a mobile app.
494.
by mixedbit 13y ago
Login CSRF attacks are known to be harmful: https://en.wikipedia.org/wiki/Cross-site_request_forgery#For... The attacker doesn't brute force someone's credentials, but uses own credentials to log the victim as the attacker.
495.
by mixedbit 13y ago
The mechanism would need to somehow accommodate a login cross site request forgery protection. Maybe following headers: Auth-Spec: type=plain; csrf_token='xyz'; action=https://www.example.com/login; method=POST fields=email,password,
496.
by mixedbit 13y ago
and one more: http://mixedbit.org/life.html
497.
by mixedbit 13y ago
What do you mean by 'using GET requests for verification'? I think you are mixing different concepts. The problem is caused by URL encoded credentials and has nothing to do with GET requests. It is perfectly fine (and often desirable) to au
498.
by mixedbit 13y ago
You are aware that many popular services allow to share stuff privately using URL encoded credentials?
499.
Object Oriented Programming with closures(mixedbit.org)
1 points by mixedbit 13y ago|0 comments
500.
by mixedbit 13y ago
Couldn't some kind of PHP level sandboxing be used to isolate plugins and themes? So for example a theme would not be able to spawn OS processes, access DB connection or create a new one, read and modify HTTP headers.
501.
by mixedbit 13y ago
The problem is that security is not a feature. It can not be simply added at some point if software was not designed with security in mind. For example, if authorization code is spread all over the code base and mixed with business logic no
502.
Lying and Hiding in the Name of Privacy(customercommons.org)
1 points by mixedbit 13y ago|1 comments
503.
by mixedbit 13y ago
Be aware that this isn't an equivalent of the C code. Replacing pointer arithmetic with string copy increases big O complexity of the algorithm. An equivalent would need to pass indexes to sub functions to avoid additional copies.
504.
by mixedbit 13y ago
Correct :)
505.
by mixedbit 13y ago
Say, the smallest item in a hash table for which item.key is larger than given_item.key. Assume larger-than relation for keys is defined, so for example keys are integeters.
506.
by mixedbit 13y ago
For most graph algorithms it doesn't matter in which order you traverse neighbours, you just need to visit them all.
507.
by mixedbit 13y ago
Agree, buy a good book (for example Cormen), learn the algorithms and implement them to get a good understanding. Try to use the table to answer a following question: what is a time complexity for finding a next item (according to a key) to
508.
by mixedbit 13y ago
I've been recently watching Structure and Interpretation of Computer programs, where it is demonstrated that first class functions and assignment operator with nested scope are enough to implement object oriented system. The simplest exampl
509.
by mixedbit 13y ago
The article received unofficial HN post of the week award. @voidnull please post contact details, so the prize can be sent to you.
510.
by mixedbit 13y ago
"... such a qualitative, safe and modern mode of transportation should be available for everyone" This is such a BS. Stockholm is one of the best capital city to live in, and one of the reasons is that the car traffic has the lowest priorit

More ›