reginaldo

14 ms·

91.
by reginaldo 14y ago
Last June, when this first came up, I commented: I was thinking about the implications of using this technique to analyze e.g. political speeches and try to catch people lying on the act. Your application (winning on card games) seems very
92.
by reginaldo 14y ago
Some blogs I like (most are not updated very frequently, though): Billy Rios (discovered GIFAR) http://xs-sniper.com/blog/ Michal Zalewski (one of the top security researchers in the world, wrote "The Tangled Web", a must-read) http://lc
93.
by reginaldo 14y ago
The impact varies with the platform and parser being used, and with the extensions installed. I don't know the specifics of ExpatParser (the one used by Django), but in general, the "careless" parsing of unsanitized user-supplied XML might
94.
by reginaldo 14y ago
corresation: I can't answer your post directly, so I'll answer my own. It's absolutely not vague handwaving . HTML or JSON parsers can't make arbitrary network connections. XML parsers often can. XML remains the lingua franca or most ente
95.
by reginaldo 14y ago
I think the 50% less bulshit figure is pretty generous. Let's not forget that, unless you opt out of it, most XML parsers, when given user-generated input, will do lots of crazy stuff. In the best case scenario, the machine that parsed th
96.
by reginaldo 14y ago
I was inspired by jslinux and decided to write one such emulator myself. Of course, the architecture I'm emulating (Lattice Mico32) is much much simpler than X86. It is open source, available at http://www.ubercomp.com/jslm32/src/ I did b
97.
by reginaldo 14y ago
The article is talking about temperate climates, whereas Florida is humid subtropical in the north and central parts and tropical in the south. In temperate climates, the temperature outside might be just cold enough, but not too cold, th
98.
by reginaldo 14y ago
Which means that briefly we'll live in a time where a stack overflow vulnerability will cause your car to break or accelerate at very inappropriate times. Just google for "researchers car software vulnerability" (without quotes) to see what
99.
by reginaldo 14y ago
In the same area, OpenHatch[1] seems very nice. From their own landing page: OpenHatch is a non-profit dedicated to matching prospective free software contributors with communities, tools, and education. [1] http://www.openhatch.org
100.
by reginaldo 14y ago
Actually it is $3133.7 (eleet). I got it, of course. The security team at Google is, simply put, awesome.
101.
by reginaldo 14y ago
I recently found a pretty simple one on https://accounts.google.com/ , which is arguably Google's most valued domain. I believe XSS is the most common vulnerability these days. One doesn't even have to be able to inject javascript per se.
102.
by reginaldo 14y ago
There's a nice Stack Overflow podcast[1] on the same subject, where Damien Katz talks a little about what he liked on Lotus Notes. I thought it was a nice episode. [1] http://blog.stackoverflow.com/2009/06/podcast-59/
103.
by reginaldo 14y ago
Thank you for the heads up. I didn't know that the Browser Bundle also took care of fingerprinting.
104.
by reginaldo 14y ago
Actually it's a little harder still. For instance, when your browser makes requests in your behalf, it provides the destination server with a lot of information which can be used to identify you (at least temporarily)[1]. To get a better le
105.
by reginaldo 14y ago
I don't know how things are today, but in 2009 it was possible. See, for instance, the paper Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds at http://cseweb.ucsd.edu/~hovav/dist/cloudsec.pdf F
106.
by reginaldo 14y ago
Lifelike might be the term you're looking for... :)
107.
by reginaldo 14y ago
Shameless plug: and also https://github.com/ubercomp/jslm32/ (includes a mechanism that generates Javascript on the fly).
108.
by reginaldo 14y ago
filename=file_that_doesnt_exist&attempt=
109.
by reginaldo 14y ago
Yes. You can do $x = file_get_contents(" http://news.ycombinator.com ) and it will work (well, in that case it wouldn't as the machine had locked down network access, but you get the idea).
110.
by reginaldo 14y ago
I believe he fantasized himself. Does anyone know of post 1990s a case where the small guy won in patent litigation against BigCo (I'm genuinely curious)? If it was his patent, I think he would want to defend it, but I doubt he could.
111.
by reginaldo 14y ago
Have you heard about Racket's custodians ? [1] http://docs.racket-lang.org/reference/eval-model.html#(part....
112.
by reginaldo 14y ago
The book linked from the show is The Principle of Product Development Flow: Second Generation Lean Product Development. Link (no affiliates): http://www.amazon.com/The-Principles-Product-Development-Flo...
113.
by reginaldo 14y ago
Currently there's no other way to sign up. I believe he'll add other ways to sign up soon.
114.
by reginaldo 14y ago
I'll tell him to put a giant Sponsor button on every screen. First you'll have to click the tiny "Login with google" button in the upper right corner, then the "Sponsor new issue" button. Then you paste the link to the original issue. After
115.
by reginaldo 14y ago
I know a guy working on a related idea. Instead of funding people, his system works by funding issues. The link is http://www.freedomsponsors.org The workflow, as I understand it, goes something like that: 1) There's an issue on a project
116.
by reginaldo 14y ago
When you develop a model, for instance, when implementing a classifier, you supposedly want to apply the developed model to other data, i.e., data you don't have available during development. In many situations, it doesn't make sense to t
117.
by reginaldo 14y ago
Especially the empty search part. In my experience, the three search terms most likely to return all results are: 1) %%% (many sites limit the minimum search term length to three so a single % will not do the trick). 2) ' ' (trhee s
118.
by reginaldo 14y ago
typically only happened when older scientists retired There is a much less subtle quote attributed to Max Planck that summarizes this idea: Science progresses funeral by funeral .
119.
by reginaldo 14y ago
This article is awesome. I had read it before but lost track of it. It was nice reading it again. Mike's code is a bliss to read, I don't know how to explain, it shows such a clear way of thinking... I believe one of the best ways to learn
120.
by reginaldo 14y ago
I'm not saying they want to do that. I said it creates the incentive , not the action per se . Not all facets of a given incentive are acted upon. I even understand the reason for the fee. It's to make sure developers give their maximum b

More ›