timv

36 ms·

271.
by timv 12y ago
You'd prefer next year?
272.
by timv 12y ago
my target audience is teenage Asian girls who like anime I knew quite a few guys at uni shooting for that same target...
273.
by timv 12y ago
Try https://github.com/hudak/sql-parser It's out of date - only goes as far as 1.5, but at the very least you can import the 1.6.1 source as one big commit.
274.
by timv 12y ago
You asserted that it was "dangerous" for him to bandy around such statements. Care to back up that assertion? "Unnecessary" and "dangerous" are quite different.
275.
by timv 12y ago
Here's a couple of articles about the impact on Australian sewerage systems, with similar comments about needing to regulate the "flushable" label. http://www.dailytelegraph.com.au/news/nsw/wet-wipes
276.
by timv 12y ago
an angry drop bear Is there any other kind of drop bear?
277.
by timv 12y ago
They don't sound anything alike I don't know about that. My 3.5yo daughter has a 4.5yo male best friend. When they're running about squealing, it's pretty hard to tell their squeals apart.
278.
by timv 12y ago
I assume, given your involvement, that this isn't likely to be an issue, but how likely is it that your candidates will be able to find jobs outside of SF/NY, or in fact outside the US? If the goal is to find the top talent that w
279.
by timv 12y ago
You're just agreeing with ansible - no one here is arguing that a CS degree means you can code. Rather ansible is relating his experiences with people graduating from those courses and not being able to code. What you seem to be im
280.
by timv 12y ago
But they're --- for lack of a better term --- useless when it comes to actually getting real-world systems built. Part of the issue here is that each of us has a different understanding of what it takes to get a "real-world syst
281.
by timv 12y ago
firms are trying to outhire each other, like talent is some magic wand that can replace compelling products. Where do you think the compelling products come from? There are plenty of companies that take the view that you seem to be advoca
282.
by timv 12y ago
I assume cma is suggesting that the contract would allow Epic to revoke the license of anyone that failed to pay their 5%. Once Epic exercises that right, any further distribution of the product would be a violation of Epic's copyrig
283.
by timv 12y ago
My experience is much more like the one described by the_af . IntelliJ is OK for most Scala code, but it regularly makes a mess of anything complicated. So much so that, in our office, the first answer to "why doesn't this code
284.
by timv 12y ago
People may be blowing this out of proportion. No they're not. While I don't care about this change (I'm not based in the US, so we were never going to be in a position to take slack to court), changing TOS to suit the dra
285.
by timv 12y ago
1. Performance improvement plans are not for performance improvement. They are for firing employees. Management already formed an irreversible negative view. It is too late. In my experience it's not quite so clear cut. When you are
286.
by timv 12y ago
That's the point. The rules don't explicitly say that columns need to be unique (only rows). Within the stated rules there are (as best I can see) 2 valid solutions to that puzzle. It is the introduction of the unstated unique col
287.
by timv 12y ago
Sorry, you need to work harder on your hating. serf's Hater Score: 2.36% Of The Time Spent Hating. The worst comment: I wish that it showed the previous color scheme if I go back. As it stands I have to go back and the
288.
by timv 12y ago
Besides that, the customers buying their flag-ship product will find it useful to buy this product alongside Is the reverse of this also true? That is, is your competitor's (new) product _less useful_ if I don't have their flags
289.
by timv 12y ago
But that's a bit of a different argument that the hand-waving Keybase were using. Saying "it's not possible to build a secure backdoor" is a cop-out. The truth is, we can build systems so that your data can be decrypted
290.
by timv 12y ago
Just be aware that the license terms for JetBrains' student program are pretty strict. (a) Licensee may: ... (ii) use Software for non-commercial, educational purposes only, including conducting academic research or providing ed
291.
by timv 12y ago
If your conclusion that the patch was bad is based on the fact that CVE-2014-7169 still exists, I think that's an unfair assessment. The patch appears to have been a adequate fix to the bug that was discovered. The fact there is a
292.
by timv 12y ago
That update appears to only patch CVE-2014-6271 and not CVE-2014-7169 ( See: https://news.ycombinator.com/item?id=8365158 ) Although 7169 appears to be more difficult to exploit than 6271, you're not out of the woods u
293.
by timv 12y ago
Chet (bash maintainer) has indicated that this issue is different to the original CVE. The problem is the first issue altered people to the fact the the function var parsing was a interesting previously-unpublicized attack vector, and they
294.
by timv 12y ago
Reproduced from other discussion thread Try this slight variation: $ export X="() { (a)=>\\" $ bash -c 'echo date' bash: X: line 1: syntax error near unexpected token `=' bash: X: line 1: `' ba
295.
by timv 12y ago
Am I missing something? I think so, but the sample exploit isn't really designed to give a clear understanding if you don't already know what's going on. Try this: $ export X="() { (a)=>\\" $ bash -c &#x2
296.
by timv 12y ago
They don't need to. "\" isn't an escape sequence inside single-quotes. echo 'abc\' will echo 4 characters: a , b , c and \ The \' in the original command isn't trying to escape the quote, it&#x
297.
by timv 12y ago
Reproduced from my comment on the discussion of the previous CVE The same trick can be used to read files as well $ date -u > file1 $ env -i X='() { (a)=<\' bash -c 'file1 cat' bash: X: line 1: syntax err
298.
by timv 12y ago
The same trick can be used to read files as well $ date -u > file1 $ env -i X='() { (a)=<\' bash -c 'file1 cat' bash: X: line 1: syntax error near unexpected token `=' bash: X: line 1: `' bash
299.
by timv 12y ago
As best I can tell no one has (publicly) demonstrated a mechanism to turn this into an RCE (despite efforts to do so). http://seclists.org/oss-sec/2014/q3/679 Of course, that doesn't mean there isn'
300.
by timv 12y ago
Chet (bash maintainer) says he has a fix. http://seclists.org/oss-sec/2014/q3/682

More ›