sigil

58 ms·

541.
by sigil 15y ago
Your quoting of "$0" does not protect it from the shell. An attacker need only provide an input such as: /tmp"; rm -rf /; " Not true. $ sh -c 'ls "$0"' '/tmp"; rm -rf /; "' ls: cannot access /tmp"; rm -rf /; ": No such file or direc
542.
by sigil 15y ago
1. Shell-escaping all values used to construct commands Avoid shell-escaping and the shell altogether! Use list form program execution wherever possible. In Perl: open(my $fh, "-|", "find", $dir, "-type", "f", "-print0") or die;
543.
by sigil 15y ago
But with articles, what you might have found uninteresting one day may become interesting the next. And what you thought was fascinating one day may become boring the next. True. This is a real problem. Much better results can be obtained
544.
by sigil 15y ago
Interesting idea. I bet within some specific application domain, stemmed probabilities either diverge or don't across the board, so it wouldn't pay to conditionally stem term-by-term.
545.
by sigil 15y ago
We wrote a Naive Bayes Classifier for http://linktamer.com/ that learns what news articles you find interesting. It's in C and uses a cdb for the database of frequencies, so it's pretty darn fast. Maybe we'll throw it up on github one of
546.
by sigil 15y ago
How does this relate to Dremel? I thought Dremel had a SQL frontend to MapReduce that was already in wide use at Google. http://research.google.com/pubs/pub36632.html
547.
by sigil 15y ago
Also don't forget about comm(1), which can do an equijoin and set difference on whole line records.
548.
by sigil 15y ago
Is there a programming languages where functions have inverses? How about a computer architecture where every instruction has an inverse, and therefore all functions and even programs are invertible? (Quantum computing, for example.) htt
549.
by sigil 15y ago
Very cool, thanks for the info.
550.
by sigil 15y ago
Maybe because of the PKI features of SSL? For instance...with an SSH client, the first time you contact a new server you're asked to verify the remote host's identity. I bet most of us just blindly type 'y' at this point despite the securit
551.
by sigil 15y ago
Always lacking from these kinds of debates about code: actual code. Does anyone have examples of crazy unmaintainable Lisp code we could look at? On the other side, what examples of powerful / elegant Lisp code do you feel best make the cas
552.
by sigil 15y ago
I've found so many gems on freshmeat that I would have never have found in Google ... stackoverflow (field is too narrow) or github (which basically restricts to software developed with git, and is often incomplete). If there's one thing
553.
by sigil 15y ago
Not sure about C++ overhead there. C++ often edges out C in the alioth benchmarks. More to the point, I highly doubt the author's parser ("parser") in http.cpp is faster than the one in nginx, which really is a thing of beauty. http://trac
554.
by sigil 15y ago
Plura Processing tried it a while back with a Java applet. There was a big uproar when one of their affiliates sold visitor's compute time without disclosure. http://pluraprocessing.wordpress.com/2009/08/24/our-response...
555.
by sigil 15y ago
Amazon marketplace. The 9 cell lithium ions give 5-6 hours. The one I'm using currently is from Energy+. http://www.amazon.com/s/ref=nb_sb_noss?url=search-alias%3Dap...
556.
by sigil 15y ago
I'm probably utterly alone in this, but my ideal laptop is a 5-10 year old Thinkpad where all the hardware works under Linux and BSD. The latest PC laptops never do. There's always something new and flaky under the hood (wireless, suspend
557.
by sigil 15y ago
The SWIG author in question, Dave Beazley, also gave a couple great talks on the Python GIL: http://www.dabeaz.com/GIL/
558.
by sigil 15y ago
Sure, scraping works for operations that don't require login. But we're seeing more and more "apps for HN," and it would be nice if they could authenticate and do nifty things without me giving up my HN password.
559.
by sigil 15y ago
Hacker News needs you to be logged in to your account for upvoting and does not provide a programmatic way to do that on your behalf. I remembered from earlier experiences that a resubmission (once per user) counted as an upvote. Yeesh. I
560.
by sigil 15y ago
Re 1), what's odd is that current ebook pricing makes this an attractive option.
561.
by sigil 15y ago
"Numbers everyone should know", from Google's Jeff Dean, has part of the answer: http://julianhyde.blogspot.com/2010/11/numbers-everyone-shou... Where do SSDs fit in? Not sure, but I've heard SSD read latency can be as low as 30,000 ns (c
562.
by sigil 15y ago
Hopefully obvious, but some of this stuff also applies to A/B testing. Yet in the 1950s the usual technique was to give a new treatment to the patients whom it was thought would most benefit from it. It frequently happened that those were
563.
by sigil 15y ago
Not so: > "The trading shops saw that the lowest-latency solutions would only be possible with Linux," Lameter said. "The older Unixes couldn't move as fast as Linux did."
564.
by sigil 15y ago
Ahem. I know of at least one HFT in NYC that's killing it with FreeBSD.
565.
by sigil 15y ago
A few years back I wrote a scraper for 13f and 13g filings. There was no standard format requirement at the time (is there now?) so it was an 80/20 hack with the remaining 20% completed via Mechanical Turk. Not sure what became of the proje
566.
by sigil 15y ago
Another advantage they don't mention: revolights should be easier to secure than bracket-mounted lights. Just pass a cable through the wheels, like you probably already do. Not so excited about the external battery though. But they're appar
567.
by sigil 15y ago
With tmux, you can monitor the window for activity (^A M) and do: make -j3 >make.log 2>&1 ; echo $? When make finishes, your prompt is printed again (activity!) and the window's caption is highlighted. I use the same mech
568.
by sigil 15y ago
I found this piece both inspiring and a little disappointing. Inspiring because of guy's vision and sheer determination. Disappointing because all three of his recent ventures sought soft bailouts to stay afloat (subsidies of some form or a
569.
by sigil 15y ago
"Every normal man must be tempted at times to spit on his hands, hoist the black flag, and begin to slit throats." -- H.L. Mencken We all have the urge. Unfortunately, in cases like this one, some also lack the restraint.
570.
by sigil 15y ago
Also worth nothing: the typical 4MB WRT54G router doesn't have enough room for OpenVPN if you use the stock OpenWRT images. I've got a stripped down .config and image that does include OpenVPN, if anyone's interested.

More ›