Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
personalcompute
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
10 ms
·
61.
▲
by
personalcompute
15y ago
> Otherwise, this is a bit one sided: We lend Google space, we do the work of adding the button, but we get nothing in return. You get the whole purpose of the button for you in the first place, users encouraged to share your content.
62.
▲
by
personalcompute
15y ago
iostream is not part of the STL, just the standard library.
63.
▲
by
personalcompute
15y ago
Probably hardcoded, not in the DB. In case it isn't clear, MTGox wasn't exactly what you'd call a professional operation.
64.
▲
by
personalcompute
15y ago
Can't invite you w/o contact information. Add an email to your bio.
65.
▲
by
personalcompute
15y ago
Looks like blogger/google took it down.
66.
▲
by
personalcompute
15y ago
I did a more scientific analysis of the googlebot requests in the provided log (graph! http://i.imgur.com/uMoUT.png ) and it definitely looks like it is taking shortest urls first. Anyone else with a large site want to check as well for fu
67.
▲
by
personalcompute
15y ago
His entire site that he observed this behavior on is static.
68.
▲
by
personalcompute
15y ago
BBC has no story, they are parroting MT Gox's reports.
69.
▲
by
personalcompute
15y ago
It is 100% possible actually. They are called temporary generated one-use passwords.
70.
▲
by
personalcompute
15y ago
Not the intended purpose, but the search box has been very useful to me in the past as a quick second paste-buffer, much quicker than opening a text editor or anything to place it in.
71.
▲
by
personalcompute
15y ago
The raw list: http://www.top500.org/list/2011/06/100
72.
▲
by
personalcompute
15y ago
I think he means disregarding all that and looking at the raw voxels then applying a modified version of this algorithm, similar to marching cubes.
73.
▲
by
personalcompute
15y ago
It's public. I have the db loaded in mysql right now, and have confirmed its validity (my account is in there).
74.
▲
by
personalcompute
15y ago
People use webapps because they provide some kind of value to them. Housefed.com doesn't tell me what value it provides, so why would I waste my time creating a new password and a new spam-email on absolutely pure unfounded speculation? I a
75.
▲
by
personalcompute
15y ago
They are definitely similar, but I wouldn't say XSSI is a type of CSRF. CSRF refers specifically to a few methods of attack, distinct from what is used in XSSI. Regardless, it seems CSRF is much more widely known than XSSI, so you could s
76.
▲
by
personalcompute
15y ago
He's definitely correct about the false positives and that nonces and/or double submitted cookies are superior, I'm not arguing that, just the 'furthermore, spoofing is extremely easy,' which makes no sense there.
77.
▲
by
personalcompute
15y ago
Yes, but if the user wishes to avoid their own security like this, they can already do it a thousand other ways (and to no adverse affect, there is no opportunity for an attacker to exploit this, I don't know what you're getting at).
78.
▲
by
personalcompute
15y ago
How is spoofing the referer extremely easy? I can think of no way for an attack site to do this, short of having control over the entire user machine (or a significant browser exploit anyways), at which point all of your webapp security is
79.
▲
by
personalcompute
15y ago
Correct, the technical term for it is 'XSSI', or Cross Site Script Inclusion.
80.
▲
by
personalcompute
15y ago
Cross Site Script Inclusion. The article touches on a lot of things (including CSRF), but the HN title refers specifically to JSON (As well as the link's '#' fragment identifier), and therefore the last section, where it shows an attack sit
81.
▲
by
personalcompute
15y ago
Isn't this XSSI, not CSRF?
82.
▲
by
personalcompute
15y ago
Ah, awesome, thank you for the correction, this allows me to continue with my plan. I said that within an hour of registering, but had asked on their support page as well.
83.
▲
by
personalcompute
15y ago
Another problem is 80legs will only crawl pages <100kb with the free/contest plan. This means it is useless for all but the smallest pages.
84.
▲
by
personalcompute
15y ago
Then post the bitcoin-related whatever to HN. Instant winner.
85.
▲
by
personalcompute
15y ago
Link to the CNBC story instead of blogspam then please? Edit: I believe this is the source: http://www.cnbc.com/id/43378490/ . Their source is "people familiar with the matter."
86.
▲
by
personalcompute
15y ago
4(9μ + 16φ + 6Ω - 200) + 3Ω - 1 + 2(2Δ - μ) + 9(9β - 5Δ - 3Ω ) = 0 10(4β - 4Δ + 3Ω ) - Δ + μ + β - 3 - 8Ω + 11(5μ - 2Ω + 4φ) = 0 9(2Ω - 4Δ + 6φ) - 15Ω - 3(Ω + 1 - Δ) + 5(7μ + 5β - 13) = 0 10(2Ω - 600 + 5φ + 6β) + 3(β - μ) + φ + μ - 4(6Δ - 8
87.
▲
by
personalcompute
15y ago
Nano compared to any other UAV.
88.
▲
by
personalcompute
15y ago
I'm sure it does in China. There are other foreign mega-corps like this that you probably don't hear much about in the US, specially, Tencent comes to mind.
89.
▲
by
personalcompute
15y ago
Flare is flash only, not Javascript.
90.
▲
by
personalcompute
15y ago
You can definitely use log scales with google charts, just it won't do it for you. You'll have to perform the math beforehand and send custom number labels.
More ›