rst

87 ms·

841.
by rst 13y ago
Actually, there's been at least one instance of legally purchased media installing spyware, the Sony rootkit scandal that's already come up in this discussion: http://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootki...
842.
by rst 13y ago
They've been working on deep learning for vision longer than that: http://static.googleusercontent.com/external_content/untrust... This is the paper that did unsupervised training of a deep net on frames from YouTube videos, and found it
843.
Reporters threatened with CFAA, labeled hackers for finding security hole(networkworld.com)
2 points by rst 13y ago|0 comments
844.
by rst 13y ago
The extra overhead could be kept pretty small. After being retrieved once, it can be cached in the memory of a server process. So, there's one short SQL query at process startup (or perhaps first request, depending on how you do it), and
845.
by rst 13y ago
One trick I've used in Scala code is to put the test suite in the same package as the code under test, which gives the tests access to package-private stuff which are normally inaccessible to other code. That probably could work for Java a
846.
by rst 13y ago
But not with the new Hangouts service, which was announced to great ballyhoo in the Google I/O keynote yesterday as their new, general-use chat system for the vast bulk of their userbase. Which is what this whole conversation is about.
847.
by rst 13y ago
It's sourced. That's a reply to a thread based here, which starts by quoting email from Google which says point blank that "the new [hangouts] service will not support XMPP". https://news.ycombinator.com/item?id=5714557
848.
by rst 13y ago
The Boston Ruby Group (bostonrb.org) and the Python Meetup (meetup.com/bostonpython) both have project nights which are designed for this sort of thing. The Ruby group is regularly on the first Tuesday of the month; the Python project nigh
849.
by rst 13y ago
The pipeline that FWD.us has been touting would actually be in the "lower 48" --- it's the proposed Keystone XL pipeline, which would be intended to transport a particularly dirty form of petrochemicals ("diluted bitumen", which is somethin
850.
by rst 13y ago
A judge is not a free agent; they can only rule on the cases they're assigned. Moreover, what got this judge's goat was specifically "the illegal parts" of what Prenda was doing, most notably repeatedly lying in court. It wasn't the tangle
851.
by rst 13y ago
What Oracle wanted out of the Android/Java-IP lawsuit was an up-front payment in the billions, plus an ongoing cut of Google's android revenue. If they'd won on copyright, which lasts for decades, that could have accrued into a colossal
852.
by rst 14y ago
It gimbals the engine for pitch and yaw, and uses cold-gas thrusters for roll (around the vertical axis).
853.
by rst 14y ago
Parachutes were the first thing they tried, on the first stages of the first Falcon 9 launches. It didn't work; the stages broke up on re-entry before they slowed down enough to deploy the parachutes. The response was to try active contro
854.
by rst 14y ago
The video actually shows two stages and the Dragon capsule, which is payload. As to the use of staging, there are several reasons: 1) During the late stages of the boost, the one second stage engine is pushing only its single engine, fuel
855.
by rst 14y ago
It is, in fact, possible to run Linux on the Chrome Pixel bare metal; Linus himself has one and likes it (and has posted about it quite a bit on Google+), mainly because of the screen. The main problem is that the SSD is sized to be a loca
856.
by rst 14y ago
Presumably the one across the street from campus on Main St., for those not from the area. (ETA: And assuming that the police report is accurate.)
857.
by rst 14y ago
In addition to what other have already noted, one other thing to keep in mind: The Tor exit node that happens to handle any particular request gets to read the relevant traffic (since it is handling the request to the actual end server on y
858.
by rst 14y ago
I think the idea is that if the real port 80 never answers, real customers are highly unlikely to set up their apps in the vulnerable state in the first place. That said, having port 80 open, but returning an appropriate error code to all
859.
by rst 14y ago
I am the author of the email you quoted, and the punning reference to "patchy" is exactly what the "say 'Apache Server' ten times fast" bit was meant to refer to. (I didn't feel the need to elaborate, at the time, because the whole thing w
860.
by rst 14y ago
A firewall might be adequate; configuring postgres itself seems not to be. The vulnerable code is invoked before client authentication, so anyone who can make a tcp connection to the postmaster process can exploit the attack, even if their
861.
by rst 14y ago
I'm playing with a couple of strategies: creating a list, and then viewing tweets on the list (which show up jumbled when the list is first created, but seem in order thereafter), and just having multiple accounts...
862.
by rst 14y ago
FWIW, the Rails security team says they're about to drop suport for 2.3, and this time they really mean it. (They say.) The current announced security policy is that once 4.0 gets released, they'll only be doing security patches for 4.0
863.
by rst 14y ago
Here's a pointer to the security fixes in the release as a monkeypatch to 3.2.12, without any of the other cruft: https://github.com/discourse/discourse/blob/master/lib/freed... The discourse folks who threw this together have an app (Rai
864.
by rst 14y ago
A document saying that any device can get on their network, and that it is deliberate policy to allow that, already is in the public record --- aaronsw's father read from it at the recent media lab memorial. That said, it's possible that a
865.
by rst 14y ago
There are four pods. One is working already, so they need to reactivate two of the three that are squelched. They have telemetry, and solar power, so that gives them time to work on the problem; battery lifetime is not a constraint. But i
866.
by rst 14y ago
You may have trouble with bundler, though; it's documented to work only with Bundler 1.3.0 pre-releases.
867.
by rst 14y ago
There are Coffeescript forks that try to deal with issues like this. Here's one that takes a different approach on a bunch of 'em, including the scoping: https://github.com/satyr/coco
868.
by rst 14y ago
Re "heat sink": Most of the global climatic effects of our current energy infrastructure are due to the greenhouse effect, not direct heating. This stops going, which can only be a good thing (though at this point, a lot of greenhouse gai
869.
by rst 14y ago
Another common bug: bad troubleshooters don't verify their hypotheses. They get attached to their first idea of what might be going wrong, and start tweaking things to alter the behavior of whatever they think is at fault --- and after e
870.
Ortiz Under Fire: Critics Say Swartz Tragedy Is Evidence Of Troublesome Pattern(wbur.org)
7 points by rst 14y ago|0 comments

More ›