zhoutong

23 ms·

181.
by zhoutong 14y ago
I think they have requested permission from all authors. I remember I read it somewhere.
182.
by zhoutong 14y ago
There are lots of free and premium themes to build a "basic site" like this, and anyone can get a license to use the design legally. Why steal from someone who isn't willing to license? CSS is open source by default, but this doesn't mean t
183.
by zhoutong 14y ago
The Hacker News is not something small or sketchy. They have 50,000 followers on Twitter. ( https://twitter.com/#!/thehackersnews ) They really deserve to learn the lesson.
184.
by zhoutong 14y ago
> Streisand Effect - the act of trying to suppress information but simply making it more widespread as a result. This effect provides a natural equilibrium. When an organisation considers censorship, if the Streisand Effect comes into t
185.
by zhoutong 14y ago
It seems that Heroku has been down for at least 4 hours in June. This makes the June uptime less than 99.5%.
186.
.app was applied by 13 companies(gtldresult.icann.org)
2 points by zhoutong 14y ago|1 comments
187.
ICANN gTLDs Reveal Day Live Streaming(icann.org)
8 points by zhoutong 14y ago|1 comments
188.
by zhoutong 14y ago
It seems that you created a new account with the same email delan@azabani.com. I have tested and I can link my HN account with that email as well. So it means that the email field is not unique. Also, I'm not sure about Name.com's configura
189.
by zhoutong 14y ago
Based on this report, this is my rough understanding of this vulnerability: When you pass nested query parameters such as "id[a]=b&id[c]=d", Rails will parse it as parameters :id => {'a' => 'b', 'c' => 'd'} If you use where(
190.
by zhoutong 14y ago
Oh, I got it. My brain wasn't working then. Don't worry, I use per-user salts for all my web projects following all security best practices that I know.
191.
by zhoutong 14y ago
Then the rainbow table can only be used with this specific site. This makes it no more efficient than brute forcing. You can store the hashes yes, but you can also include the cracked passwords in the dictionary and it takes only slightly m
192.
by zhoutong 14y ago
The maximum traffic you can use for 10Mbit is 3TB/month.
193.
by zhoutong 14y ago
Also have to consider the inferior CPU performance: 1 ECU is equivalent to 1.0 GHz - 1.2 GHz Xeon CPU in 2007. And the number of cores is usually small.
194.
by zhoutong 14y ago
I'm agnostic, and I'm interested in Physics. I believe in science, and the belief itself is nothing different from the beliefs in god for some people. Science theories are all about proving older theories wrong, and humans naturally regard
195.
by zhoutong 14y ago
This is my understanding of how this works: When you instruct GS to sell the share for you, GS actually went to the open market and just sell the share. They are supposed to deliver the share at some time later, when they have found the sha
196.
by zhoutong 14y ago
And the worse thing is, you can even re-use a password reset link for Rackspace Cloud even when it has already been used. Changing passwords won't log out existing sessions either.
197.
by zhoutong 14y ago
Thanks a lot for the clarification. Now I understand your point. I have officially left the Bitcoin economy so my next project will not be anything financial related. The most important thing that I have learned is exactly what you said - "
198.
by zhoutong 14y ago
If everything the warning serves is to ask me shut down the site immediately after the launch, I have to say that I ignored them. However, I really did everything possible to prevent security attacks. I failed at trusting other partners too
199.
by zhoutong 14y ago
Unfortunately, I have signed an NDA on this.
200.
by zhoutong 14y ago
Unfortunately, I haven't encountered a single strong hacker (in terms of web). All my 3-year Rails experience was sufficient to prevent the most direct web attacks: Injection, CSRF, XSS, etc. The rest is simple, keep wallet.dat securely. It
201.
by zhoutong 14y ago
Thank you for your original advice. It's definitely useful. But it's not relevant today. I don't wish to link the Bitcoinica fiasco with my leave because I sold Bitcoinica a few months ago. And I lost my control in January. Basically everyt
202.
by zhoutong 14y ago
Reputation damage is never the motivation for leaving. I wanted to leave long ago. The income was too attractive for me to actually leave. Without money I can finally rationally re-think my destiny.
203.
by zhoutong 14y ago
If I did something seriously wrong, I would definitely admit it. The recent hack is not my fault. It just destroyed the only reason that I stay in Bitcoinica.
204.
I'm leaving Bitcoin(bitcointalk.org)
85 points by zhoutong 14y ago|47 comments
205.
by zhoutong 14y ago
If monopoly and charging high tariffs for usage are what Apple wants, they can simply work with a single carrier in a market to achieve them. Apple already had that control before. Perhaps the more sound reason to go SIM-less is to reduce t
206.
by zhoutong 14y ago
The beauty of the Internet is low barrier of entry for startups with potential. If .secure becomes popular among big guys, startups with similar features will be disadvantaged. The complicated paperwork will not only drive phishers and scam
207.
by zhoutong 14y ago
Yes, I'm exactly referring to this.
208.
by zhoutong 14y ago
Giving up reading is just "harder" than giving up the Internet.
209.
by zhoutong 15y ago
Perhaps the front-end can always be open sourced since the business-critical parts all sit on the back-end. Advantages of doing this: * Clients can run their own copy of the software * Other developers (or even clients) can submit pull requ
210.
by zhoutong 15y ago
Why they watch the price to go up for short sale opportunity instead of just buying at the lower price?

More ›