79d697i6fdif

7 ms·

1.
by 79d697i6fdif 10y ago
I don't think you understand how the internet works. Some websites only serve static content and don't deal with any sensitive information. Without seeing Cloudflare's data set there is no way to verify that the responses the
2.
by 79d697i6fdif 10y ago
2. Information that can be actively exploited, but can also be fixed so the previous disclosure is harmless. This means passwords, authentication tokens, etc. I wouldn't call the disclosure harmless. It's unknown if anyone made
3.
by 79d697i6fdif 10y ago
My biggest issue is that they didn't release their data-set. With something this major, it's standard to either have a third party investigate or publicly release your data so it can be validated. For all we know they cherry picke
4.
by 79d697i6fdif 10y ago
Cloudflare mentioned they only went through about 2000 leaked responses out of over a million. That combined with random people on hackernews STILL finding private data after the purge points towards this leak being a lot worse than they&#x
5.
by 79d697i6fdif 10y ago
Hey at least mine is an obvious throwaway. And I don't think 17 comments in two months is that bad compared to ten in 5 years
6.
by 79d697i6fdif 10y ago
:( My bad.
7.
by 79d697i6fdif 10y ago
Tagging along on the top reply here, but does anyone else notice some serious HN gaming going on in this thread? Accounts commenting that have made 10 comments in 5 years, people defending CF that, after going through their profiles, are cl
8.
by 79d697i6fdif 10y ago
they only sampled a few thousand leaked responses out of over a million. The margin of error is 2.5% on conclusions because they didn't use enough data, not even close.
9.
by 79d697i6fdif 10y ago
Also, a lot of web spiders are not benign. All sorts of bots troll the internet looking specifically for data leaks like publicly visible email addresses and SSN's. I'm sure they're having a field day.
10.
by 79d697i6fdif 10y ago
antitrust is all bark with no bite these days. Most industries having 3-4 "competitors" that don't actually compete is the new norm. I wouldn't be amazed if a link is shown between this situation and the increasing wealt
11.
by 79d697i6fdif 10y ago
So every website that uses cloudflare should ask their users to change all of their passwords, credit card numbers, and SSN's? This leak is being downplayed by webmasters because it's so incredibly bad that there's no way of
12.
by 79d697i6fdif 10y ago
And 1.2 million people dying is nothing compared to the number of people on the earth. IMO a leak this bad should be enough to sink cloudflare. A provider of SSL was randomly spitting out private data onto public websites. OVER A MILLION TI
13.
by 79d697i6fdif 10y ago
In total, between 22 September 2016 and 18 February 2017 we now estimate based on our logs the bug was triggered 1,242,071 times. Wow, so just as bad as we thought. We did not find any passwords, credit cards, health records, social secu
14.
by 79d697i6fdif 10y ago
Ouch, this is much more thorough than my attempt to debunk the post.
15.
by 79d697i6fdif 10y ago
realistically any hash table bigger than the 32 bit boundary will be well outside any CPU caches and possibly even ram. At these sizes the memory latency will dwarf CPU speed
16.
by 79d697i6fdif 10y ago
The author seems mistaken about a couple things relating to hash tables. He doesn't seem aware that, by far, the main reason for using power-of-two hash table sizes is so you can use a simple bitshift to eliminate modulo entirely. He
17.
by 79d697i6fdif 10y ago
The Iran thing is too bad. Besides our governments not getting along, it's possibly the most advanced, moderate, and educated Muslim majority country in the middle east. Maybe second to Turkey, but Iran seems to have a lot more enginee
18.
by 79d697i6fdif 10y ago
At this point I think I'm just going to start the blog I always planned but never did :). I've got about 10 pretty long articles buried in my docs folder about marketing and a bunch of other nonsense. I was never CEO/VP of a
19.
by 79d697i6fdif 10y ago
We were bootstrapped :) . Old school company that had been around for 20+ years, just needed a kick in the pants since advertising/marketing has changed immensely since the dawn of the internet. #5 is a killer for so many places, maybe
20.
by 79d697i6fdif 10y ago
only for free, current job prevents me from doing anything outside work :). I'll email you when off work
21.
by 79d697i6fdif 10y ago
1) Remade website to be more professional looking, faster, more focused towards SEO, mobile friendly. I could write many pages on this :) but following online guides will get you in the ballpark 2) Started writing interesting content. Truly
22.
by 79d697i6fdif 10y ago
the source to all the benchmark is available https://github.com/TechEmpower/FrameworkBenchmarks If you want to make your chosen platform fast you can see what they're doing in the src to get those results. The one
23.
by 79d697i6fdif 10y ago
My argument doesn't have anything to do with multiple inheritance. C is the only one I know of that supports multiple inheritance and it's largely considered a historical mistake (see deadly diamond of death). Javascript uses some
24.
by 79d697i6fdif 10y ago
How does this get to the front page? Has nobody seen this? https://www.techempower.com/benchmarks/#section=data-r13 Much more thorough than this toy benchmark article, which reads like marketing release...
25.
by 79d697i6fdif 10y ago
it's bad code if you're writing it again. Everything you mentioned is something already handled for the developer through the browser/API's. It's like writing your own multithreading instead of using something provi
26.
by 79d697i6fdif 10y ago
the way inheritance works in JS leads to a ton of inelegant design patterns that need to be remembered and very inefficient handling of many casts because the prototype chain is literally just a linked list. It also prevents sound encapsula
27.
by 79d697i6fdif 10y ago
>The drop in rates arguably raised asset prices, which helps e.g. people who currently own houses. This comes at the expense of people who need to purchase houses in the future. >However, it can also be argued that the drop in rates c
28.
by 79d697i6fdif 10y ago
I think it's around 5 years too late to prevent the complexity explosion :) JS has been object oriented since the beginning it just has an insane prototype based inheritance hierarchy that they're increasingly trying to hide/
29.
by 79d697i6fdif 10y ago
Anything you could write in less than a half hour. Lets take fizzbuzz for example. These types of problems almost always require manipulating strings and dumping them to the console in the simplest scenario possible. Usually the main method
30.
by 79d697i6fdif 10y ago
You would never hire somebody like me :). I write code in IDEs usually, and never basic console apps. Always inside of a framework or a bigger project. Good luck creating a maven project archetype and getting it to work during a whiteboard

More ›