pak

62 ms·

511.
by pak 16y ago
It depends. If your API was built underneath your own site, then it's easy. FB's API doesn't seem to actually support anything on the main site, e.g., I doubt their own "apps" actually run on the FB Apps API. And there's no incentive for
512.
by pak 16y ago
The difference between GET and POST is interface-related, not security-related. A better example for why you avoid GET for non-idempotent operations is to prevent a webcrawler from coming along and innocently making massive changes to your
513.
by pak 16y ago
OK, so according to him there's code review and some automated tests. But that still doesn't address wide open access to the live DB by brand-new devs, and the complete disregard for having a dedicated QA team. Why QA? I would think FB eng
514.
by pak 16y ago
So what you're saying is that now anybody can still do it, but everybody knows not to talk about it. I'm gathering that this will never change.
515.
by pak 16y ago
So about 1000 people have unfettered access to all of the live data, but there are absolutely no safeguards against them modifying it, copying it elsewhere, or peeking at it? That's terrifying. I'm under the impression that Google has mor
516.
by pak 16y ago
If it's in JavaScript it's trivial for me to hack on the client side, and if you insist on mouse movements I can just send along a prerecorded array of mouse moves before my request. Maybe even tweak a few every time, so you don't catch on
517.
by pak 16y ago
By comparison, PHP actually prevents you from using \r\n in your header() calls to inadvertently make multiple headers or break off into the body. It spits out a Warning: Header may not contain more than a single header, new line detec
518.
by pak 16y ago
Yeah, I don't think hard drives work like that. You can modally read or write at each head, not simultaneously, and the granularity has to be larger than a bit (maybe a byte?)
519.
by pak 16y ago
Just as a counterpoint, here's my anecdote. I'm no Apple fanboy, but I like their hardware enough to buy it for work-related purposes. My trackpad for a recent MBP had lost its "click", obviously this is a rather disturbing thing on a tra
520.
by pak 16y ago
But you couldn't put those sayings on stock photos and have it work so well. This blog works because the "fakeness" of the stock people nicely parallels the ridiculousness of the slogan to create a satirical meta-advertisement... about adve
521.
by pak 16y ago
I've seen it used to manage deployments, and it's not perfect, but it's a lot better than expecting a whole team of engineers to muck about on the production servers and remember to get everything just right. In fact, an expect script [can
522.
by pak 16y ago
"I have made a terrible mistake."
523.
by pak 16y ago
I have no experience with the App Store approval process but it seems like this might fly. It just uses the audio jack as any custom mic/headset might; conceivably they could use valid API calls to just play or listen for sound and/or driv
524.
by pak 16y ago
An impossible threat to fix, for all the reasons discussed in the article and comments. The only disincentive you can rely on for somebody showing you a fake badge is the small comfort that it is a huge felony for the guy to do so, so he's
525.
PS3 Root Key finders served with TRO, suit by Sony(geohot.com)
1 points by pak 16y ago|0 comments
526.
by pak 16y ago
Because it locks people out of Apple mobile devices.
527.
by pak 16y ago
Well, you can demonstrate this already either with normal Bluetooth tethering or with MyWi after jailbreaking.
528.
by pak 16y ago
Or for those less python-happy: just use expect http://en.wikipedia.org/wiki/Expect Slightly weird syntax, but learnable in a few hours. You are likely to already have it on your machines.
529.
by pak 16y ago
Did he seriously write that entire article without bringing up Steam? Wake up and smell the coffee, Windows users: you've had an app store for seven years now, and its primary target (gamers) are actually pretty damn happy with it now. If
530.
by pak 16y ago
You mean the yellow buttons don't work, or command M, or something else? I haven't tried this hack yet. Edit: tried it, and those two things do work.
531.
by pak 16y ago
Agreed, they took literally the most immediately identifiable property of a window--its size--and threw it out in favor of a grid with text labels that I never read. The only justifications I can conceive of are that they wanted to give ea
532.
by pak 16y ago
In case you were serious, I would have you go down in flames trying to use that as a defense for all of the UX changes in Windows Vista. You have constructed a rhetorical question with no sane answer, kind of like the prosecutor asking the
533.
by pak 16y ago
In case you are thinking of running this, it is fantastically memory/disk space expensive. The fractals are rendered as movies and saved to your disk.
534.
by pak 16y ago
Yes, this is why Twitter without intelligent clients reformatting all of this garbage (I have to read this backwards to make any sense of it) is unenjoyable for most power users.
535.
by pak 16y ago
IIRC from the last time I browsed through jQuery source, attr('css', ...) is used internally but didn't look like it was meant to be exposed as a public method. And I never remember seeing this sort of special case in the docs. So, I woul
536.
Computers That See You and Keep Watch Over You(nytimes.com)
7 points by pak 16y ago|0 comments
537.
by pak 16y ago
Ehm, I beg to differ. Booting off a regular drive (non-SSD) can produce pretty variable times, depending on if you just installed something, fragmented the drive with some large files, etc. I remember many startups on my old PowerBook G4
538.
by pak 16y ago
Also, the progress bar that they used to have for starting up OSX (removed in Leopard I think?) had no actual relation to anything the machine was doing, it was just timed to move across at a particular rate based on the average startup spe
539.
by pak 16y ago
You mean lower-bound. current_length should be greater than what you calculate given any my_text with >1 char words. So you will wind up giving the students more than you can fit, not less than they should have. That's just as bad as
540.
by pak 16y ago
I wish it were this simple, but you forgot about word-wrapping. Also, what to do in the event that space_left is negative, but the user hasn't reached 150 words. (Also, it's layout for print, so better to think in terms of pts or picas.)

More ›