nikcub

39 ms·

451.
by nikcub 9y ago
> not-builtin types like jsonp/hstore is a bit tricky in EF so far it feels like, but doable? and no support for spatial data types. it's why i'm still mostly using SQLAlchemy and Python - i'm a big fan of .NET Core,
452.
by nikcub 9y ago
> I'd say not holding to the standards of robots.txt and 403-Forbidden is quite malicious Most hidden services don't publish robots files. The only ones that do are the proxy services (which are hidden services but not usually
453.
by nikcub 9y ago
Pretty easy explanation: you've bumped into a few of the ~dozen people who are crawling hidden services for research or law enforcement purposes. When you publish your HSDir they'll come and crawl, and chances are none of them wer
454.
by nikcub 9y ago
That's exactly my point - the core is at fault for handing over global exec to the plugins and templates. It's a horrible design, and it appears there is little motivation to fix it but rather pass blame onto plugins.
455.
by nikcub 9y ago
the reason why so many plugins and templates are insecure is precisely because they have access to that global scope and misuse it
456.
by nikcub 9y ago
Completely sympathize. I had an experience in my black hat days - broke into a server and found folder upon folder of JPG's. Stupidly downloaded some of them and opened the first to find an image so disturbing that I can't even be
457.
by nikcub 9y ago
> In most fields there is little incentive to change things when the company itself isn't too affected in case of hack. This is steadily changing. I've had a few recent engagements where i've been asked to evaluate the sec
458.
by nikcub 9y ago
Users do report posts, from what I understand quiet regularly. It still requires manual moderation tho otherwise the reporting process can be abused (think anti-competitive purposes) I've yet to hear of a way that this is solved withou
459.
by nikcub 10y ago
> As someone else said, Google and Facebook haven't been caught breaching terms of service or accessing others' "computers" [1] without authorization. Google developed a hack for Safari to bypass the default third-par
460.
by nikcub 10y ago
It is. There is nobody here who hasn't heard it a dozen times, and the general public audience it should be aimed at doesn't understand it. Further, it is cited as a rule but it is far from one. Paying for a product doesn't g
461.
by nikcub 10y ago
Given a radius of a curve and bank angle it is simple to calculate what the minimum required speed is to have 0 lateral force
462.
by nikcub 10y ago
What a horrible title. Docker isn't being renamed to Moby, but rather all of the open source components are being spun out into a new umbrella OSS org called Moby. No need to s/docker/moby anywhere. This is going to end up be
463.
by nikcub 10y ago
> This $8T difference feels tantalizingly close to new investment money flowed in via ETFs FT says it is about $2T net in the past 8 years, and about a third of volume today[0]. Also an interesting article because it talks about the pot
464.
by nikcub 10y ago
Microsoft are leaps and bounds ahead of where they were - IIS 4.0 is likely the least secure software ever placed on the live internet
465.
by nikcub 10y ago
How does that justify having a ridiculous 35 year sentence hanging over somebody for a terms of use violation? That is murder levels of sentencing The case was far from clear cut, weev had his case overturned and the Lori Drew case was over
466.
by nikcub 10y ago
There is no contradiction. Let me break it down again. The original DOJ press release[0] when Schwartz was charged: > If convicted on these charges, SWARTZ faces up to 35 years in prison That maximum sentence is not uncommon in CFAA case
467.
by nikcub 10y ago
The whole point is that they don't sentence people to 35 years - they use that as a threat to leverage them into pleading guilty. Hence the dictatorship-level 99%+ conviction rates. Same thing happen to Aaron, they hung a 7 year senten
468.
by nikcub 10y ago
> The sentencing is up to the judge With 97% of federal cases ending in plea agreements sentencing is overwealmingly in the hands of prosecutors. In the Swartz case she wanted him to plead guilty to every single charge and serve up to 6
469.
by nikcub 10y ago
My point was that walking through an unlocked door is a terrible analogy for accessing a resource URI that isn't directly linked from a page
470.
by nikcub 10y ago
> He flagrantly violated MIT's terms of service and knew that he was doing so. Yep and that shouldn't be a federal offense with ~20 year jail term with a lifetime criminal record It's private companies defining federal law
471.
by nikcub 10y ago
I don't use any service without having a basic understanding oh how secure and private their systems are - the CFAA makes that all illegal "You wouldn't open an unlocked door" is the "you wouldn't download a c
472.
by nikcub 10y ago
The part of CFAA that classified breaking a EULA or Terms of Service as unauthorized access is a horrible law that is frequently abused (most famously Aaron Swartz) It is rightfully broadly criticized, and that shouldn't change because
473.
by nikcub 10y ago
When I was first programming and into UNIX it was the norm amongst those I was learning from that you'd symlink your history file to /dev/null This had a few advantages which might not be immediately apparent. The most obviou
474.
by nikcub 10y ago
Traefik was written before haproxy had hot reloading configuration in 1.7 It does one thing and does it well - auto configured and discoverable lb and proxying designed to run in container environments Easy to get running, easy to know ever
475.
by nikcub 10y ago
Traefik is amazing - you can add it as a service with almost no config and get http2, https (with good defaults), letsencrypt and auto-discovery of services I also use it as a frontend to all local dev
476.
by nikcub 10y ago
Digest. But you probably want to be doing auth on whatever Traefik is pointing at
477.
by nikcub 10y ago
This is exactly what we did at Techcrunch. The ads sold and we went from $3k a month ad revenue from bad ads with ad sense to $30k a month (the format where it is the square ads in the sidebar - which almost every other blog adopted) It can
478.
by nikcub 10y ago
I take it your using Chrome, disable third-party cookies.
479.
by nikcub 10y ago
They have a lower suicide rate than Silicon Valley ..
480.
by nikcub 10y ago
There is nothing wrong with their financial model at the moment - it's just high stakes, winner takes all, swing for the fences style of company building. The most famous example is Amazon, fueling growth with raised capital over empha

More ›