technion

146 ms·

1561.
by technion 11y ago
Think about types. You call .to_i on the balance, so it can only initially be an integer. But you have items costing 1.50.
1562.
Testing ReactJS for XSS vulnerabilities(lolware.net)
1 points by technion 11y ago|0 comments
1563.
by technion 11y ago
I had the same initial thought. However, in reviewing the actual recommendations, if you trusted RSA 2048 before, it would be hard to argue the NSA has now backdoored RSA 3072 as a part of recommending it.
1564.
by technion 11y ago
I actually understand how it gets to be this way though. I literally can't touch a Government project without an Oracle license. When I talk to a salesman, the attitude is "I know you can't do this without me", contrary
1565.
by technion 11y ago
I'm hoping I'm reading this wrong. Because what I'm reading is "A database grew to 67GB on a server with only 66GB RAM". And apparently in that situation you can expect performance to tank until a service is unusabl
1566.
by technion 11y ago
I feel a huge part of this is "culture". If a junior developer logs an issue stating "I'm concerned that this function could lead to SQL injection", what is the reaction? In most companies I've seen, the answer
1567.
by technion 11y ago
I've recently setup Glacier with a Vault policy that prevents deletions. I really like that layer of protection, but I'm under no illusion as to what a disaster it would still be if the main pass was compromised.
1568.
by technion 11y ago
For as long as you've got official articles like this[0], it's a harder sell than it should be. [0] http://www.asteriskdocs.org/en/3rd_Edition/asterisk-book-htm...
1569.
by technion 11y ago
It defines a "long" integer, for the block and key size, as eight bytes (64 bit). It would take a lot more than a one page PDF to properly review. The example there only supports an ECB-like mode of encryption - is this a document
1570.
by technion 11y ago
Nearly every piece of malware I see rates 0/51 on virustotal. I would recommend picking one of those that has a high detection ratio, but you see...
1571.
by technion 11y ago
The related element is this: if the team behind nginx somehow all get by the same bus, I am confident someone appropriate will pick up and maintain the product. In the case of an ASM project, I would be very surprised if anyone came along w
1572.
by technion 11y ago
Voat is a media aggregator and community platform developed in C# ASP.NET MVC 5. Dependencies and attributions Voat uses SQL server and .NET framework 4.5. Quoted from: https://github.com/voat/voat
1573.
by technion 11y ago
Can you expand on this? The extent of the testing I'm currently interested in is "load a page, does the JS on that page run without error"? It won't execute from a CLI and everyone I talked to pointed me at Selenium.
1574.
by technion 11y ago
Why does it have to be Unit Tests vs. End-to-End Tests, as opposed to, "a few end to end tests can compliment comprehensive unit tests"?
1575.
by technion 11y ago
Are you able to give us an update on the status of Truffle? The page you linked talks about 2014. The JRuby wiki states: Truffle is a research project, there is no expected release date Overall, it's an exciting project, "Ruby
1576.
by technion 11y ago
The other reason for C is that the reference implementation is generally expected to eventually have bindings for every other language - a new standard won't flourish if you find out it's hard access to it in your choice of langua
1577.
Property based tests, contracts with Ruby(lolware.net)
1 points by technion 11y ago|0 comments
1578.
by technion 11y ago
I can't really identify a common problem. Things I've seen include: * After a complete, planned shutdown, neither server is happy to start until it sees the other one online. In the end, neither ends up booting. * A failover occur
1579.
by technion 11y ago
I've seen multiple deployments (not necessarily specific to PostgresSQL) engineer themselves into a corner with what people feel will be a highly available roll your own solution, complete with convincing sounding blog posts. In every
1580.
by technion 11y ago
The thorn in the side of removing Flash has been VMware, who, in their latest vSphere 6 release, clearly made the point that "Flash is the future", with announcements towards deprecating their alternative clients. I don't und
1581.
by technion 11y ago
Having worked with such solutions before.. the pricing can come in higher than having a professional actually review your code and improve it. The end result of better code is far better than a magical appliance.
1582.
by technion 11y ago
You would, however, have plaintext copies of every piece of other sensitive information in that database. Who cares is passwords are harder to brute force, once an attacker has walked away with everything in the OPM leak? Don't get me
1583.
by technion 11y ago
I can confirm that it currently just "drops in" when linked against nginx. This initially took a few small patches, but these have been merged into LibreSSL mainline. I've been testing this against each release for some time
1584.
by technion 11y ago
> Your password is stored encrypted in our system using the powerful bcrypt hashing function. That means that any leak of our user data will remain highly encrypted It concerns me to see a security product conflating "hashing"
1585.
by technion 11y ago
Running clang with the undefined sanitizer[0] goes a lot of the way towards identifying this sort of thing. I don't see why it isn't used more often. [0] http://blog.llvm.org/2013/04/testing-libc-with-fsa
1586.
Concurrent Vulnerability scanning with Erlang(lolware.net)
11 points by technion 11y ago|0 comments