yuliyp

61 ms·

691.
by yuliyp 14y ago
The size of the population from which the top race horses are drawn is orders of magnitude smaller than the size of the set of human track athletes. Thus in the Olympics, you're looking at specimens a few standard deviations above the mean,
692.
by yuliyp 14y ago
This. A thousand times this. Especially when investigating security issues, assume everything could be vulnerable or broken until proven otherwise.
693.
by yuliyp 14y ago
It does in that if the real site properly stores a cookie that records that you've logged in from there before, the number of times that the user is asked for such questions goes down, increasing suspicion when the user actually IS asked fo
694.
by yuliyp 14y ago
The mitigation for that is asking you for a security question before showing you the login image and asking for password.
695.
by yuliyp 14y ago
The prices that go on in these markets make any of those reasons fall pretty blatantly on their face. Just like someone wanting to buy 100 AK-47s is also certainly not going to use them to just take to the range.
696.
by yuliyp 14y ago
I don't see string comparisons on tiny strings as feasible from either the Crosby/Wallach (suggests you need hundreds of nanoseconds of difference in execution time to be detectable) paper nor the Brumley/Boneh paper (which talks about a sp
697.
by yuliyp 14y ago
OK, let's do that. How long do you lock it for? What if it's a common email address? How can the real owner unlock it?
698.
by yuliyp 14y ago
So what? The point of the TSA isn't to stop suspicious people from travelling. It's ostensibly to stop people blowing up or hijacking planes.
699.
by yuliyp 14y ago
Find an apk and toss it on an Android emulator?
700.
by yuliyp 15y ago
EA sold you a copy of the song along with a license to use that song in the context of playing the game. If the copy was sold with a stipulation that you could not use the copy after a certain period of time that's fine, but that's not what
701.
by yuliyp 15y ago
Those people probably aren't developers of Facebook apps, though.
702.
by yuliyp 15y ago
Did you consider reporting it? Many such "huge" sites have bug bounty/white hat programs.
703.
by yuliyp 15y ago
Why wouldn't Facebook have legal standing? They're the ones whose servers are being accessed without authorization (employer does not have authorization to use someone else's credentials).
704.
by yuliyp 15y ago
A Nexus One is a very convenient target for research because it is (a) sold without ties to a carrier or any carrier-specific junk, and (b) flashable with any specific system image you want, including custom AOSP builds without doing any ot
705.
by yuliyp 15y ago
There is a huge difference between "applications you install running as root" and "rooting a device". "rooting a device" means taking over the OS. The typical action is that once you root your android device, you then install CyanogenMod or
706.
by yuliyp 15y ago
Also divisible by 100 => not leap year unless also divisible by 400. Complicated enough to mess up.
707.
by yuliyp 15y ago
There was a standardization process, then the committee in charge of it gave up on it because it wasn't going anywhere except IE. See the home page of the working group ( http://www.w3.org/P3P/ ). It's time IE woke up to that reality.
708.
by yuliyp 15y ago
That third one is accept that you lost 99% of IE users, since almost no IE users can actually understand something like P3P and who is asserting what and why that claim should be trusted, and thus leave that scary looking setting at the def
709.
by yuliyp 15y ago
At least until Viacom takes it down, as they love to do
710.
by yuliyp 15y ago
So you implemented OpenID using a phone instead of the third-party identity provider's web site?
711.
by yuliyp 15y ago
So you demonstrate a confused deputy attack on Android? This is hardly news.
712.
by yuliyp 15y ago
Developing software isn't just a linear stream of ideas to lines of code. If a 5 minute discussion with another team member leads to a design that will save a week of refactoring later on, then the team with those 2 people is now MORE than
713.
by yuliyp 15y ago
If you want to look at the full hierarchy, get the android developer tools and use adb. If you just plug it into your mac, you'll see the SD card instead.
714.
by yuliyp 15y ago
I really dislike the attitude of "errors are rare, so don't spend much time on them" espoused by the article. Errors are rare in the sense that you will often miss them, but most of your users will run into them. Let's say your AJAX request
715.
by yuliyp 15y ago
If you're logged into your e-mail, then someone can go to Facebook, and start password recovery, and then go to your e-mail and click the recovery link. If you're not logged in, then the OpenID authentication will require you to enter your
716.
Smooth Gestures inserts ads into popular sites(code.google.com)
2 points by yuliyp 15y ago|0 comments
717.
by yuliyp 15y ago
... -i < 6 is the only thing I can come up with
718.
by yuliyp 15y ago
Let's say I wanted 100% reliable music listening. To do this, I buy a million of the original 30GB Zune media players, create a perfect failover system, so that if the sound from one of those stops for whatever reason (hardware, software, c
719.
by yuliyp 15y ago
The fact that it could be removed overnight should give you a hint about how much it was actually used.
720.
by yuliyp 15y ago
I doubt the issue is difficulty. It's probably an issue of enrollment/retaining students in the major.

More ›