mpeg

58 ms·

691.
by mpeg 10y ago
They're now talking about essentially blacklisting the hacker's ETH address, how is that decentralised? Halting trading is a show of force too, if they believed a single thing of what they preach they'd let the free market co
692.
by mpeg 10y ago
This might serve as a future warning to NOT write your own VM. Sure, it's probably a contract issue, but we'd have some much better contract code if the VM didn't require you to code defensively all the time.
693.
by mpeg 10y ago
Apparently all that talk of decentralisation goes out the window when you're losing money. Ha
694.
by mpeg 10y ago
This is a special case which passes dkim, spf and dmarc.
695.
by mpeg 10y ago
Ok, if I send you an email from facebookadminforsure@gmail.com with a link saying "Your Facebook account has been compromised" that takes to a phising page, you probably won't click. If I try to spoof my email to make it look
696.
by mpeg 10y ago
This sends the email to the login email address, not to the @facebook.com address, you could fake the email headers but that'd get caught by most webmail filters as a spoof. I think theoretically the @facebook.com email address is now
697.
by mpeg 10y ago
It's not about lying, it's about giving only the information requested. "I'm attending a conference" would have been ok too, or even "I'm travelling for business" - I've used both in the US witho
698.
by mpeg 10y ago
Not sure I'm comfortable with full disclosure as I still consider it potentially harmful (phishing mostly, or sending unsolicited emails without knowing the fb login email of a user) Maybe I should try to report it again on Hackerone,
699.
by mpeg 10y ago
FB also considers "won't fix" a bug I found a while ago that allows anyone to send anyone else on FB a spoofed email that comes from @facebook.com, without knowing their email address ¯\_(ツ)_/¯.
700.
by mpeg 10y ago
AoE1 and 2 were such great games. I owe some of my high school social life to the fact I could beat anyone there at aoe, so I made friends with some of the older kids by teaching them good builds.
701.
by mpeg 10y ago
Growing up, my way to make money for the summer was playing RTS games competitively at LAN parties and regional/national tournaments - way before e-sports were a thing outside of South Korea. I met people from the internet at big LAN p
702.
by mpeg 10y ago
Also that sentence makes no sense, I usually care more about async I/O than I care about parallelism. For instance, I can make API requests at a higher rate than most APIs will let me from a single threaded async client.
703.
by mpeg 10y ago
Not just that, but a bug that OneLogin silently fixed over a year ago. If they knew about it, it's pretty irresponsible to not mention on their patch notes. I'm assuming they fixed it by accident?
704.
by mpeg 10y ago
I love how the only effective way to market an Ethereum dapp seems to be to create a Facebook group and let people pay with good old cash. Maybe I'm being a bit too harsh, but the decentralised model just presents way too many risks fo
705.
by mpeg 10y ago
I'm a big fan of the Mithril MVC framework, it does some pretty smart autoredrawing [0] while still allowing you manual control of when things are drawn if needed [1] [0]: http://mithril.js.org/auto-redrawing.html [1]:
706.
by mpeg 10y ago
You need to make this stuff international, I was about to throw money at you to goat my enemies.
707.
by mpeg 10y ago
Turn off the option to notify your network in your Linkedin profile, that'll sort out most of these issues. "Congrats on your new role !" - No, dude, I got the promotion a year ago, it's just that I am now looking to jum
708.
by mpeg 10y ago
Never going to work. Who is going to invest millions in user acquisition in a decentralised system with low fees? What about customer service? Who mediates when there's a problem with the driver or rider? Who vets and background checks
709.
by mpeg 10y ago
Definitely, which is how you end up with half of NPM's package repository.
710.
by mpeg 10y ago
I've never had a problem moving to another language, I'll never understand why people pigeonhole themselves into categories like "rails dev" or "java dev". The fundamentals are transferable, I don't even m
711.
by mpeg 10y ago
Scala is where it's at for higher paying jobs, I agree PHP and Java are generally low paid because of baggage.
712.
by mpeg 10y ago
Careful what you ask for... being able to exclude you based on a conversion means better tracking. Tracking is not something that can be easily improved, either you use cookies which are acceptable, widespread, but sadly very limited in fun
713.
by mpeg 10y ago
And there's already been an opinion to extend 2002/58/EC to fingerprinting[0] [0]: http://ec.europa.eu/justice/data-protection/article-29/docum...
714.
by mpeg 10y ago
Yup HSTS supercookies or some kinds of network fingerprinting will work to distinguish between two otherwise identical iOS devices.
715.
by mpeg 10y ago
You can't get installed fonts via javascript, but you can change the font of a known text and fingerprint the size to determine whether the font is installed or it defaulted to another font.
716.
by mpeg 10y ago
The title reminds me of "the 500 mile email" http://www.ibiblio.org/harris/500milemail.html
717.
by mpeg 10y ago
This basically means if you are a badoo or hotornot user, any third party site can unmask your identity on those sites Pretty awful that the guy in charge of their hackerone program didn't seem to understand why preserving their users
718.
Badoo and Hotornot user disclosure(hackerone.com)
1 points by mpeg 10y ago|1 comments
719.
by mpeg 10y ago
And then you are fucked because you can't update the firmware to the trusted, signed open source version.
720.
by mpeg 10y ago
Cool, let's standardise on Mandarin. What? You can't speak it? Well stop wasting your time maintaining the english version of the internet. You see how discriminatory that sounds? That's the reason there's not a single g

More ›