DCoder

7 ms·

181.
by DCoder 10y ago
Out of curiosity, what makes 42030 better than MB Arocs (42043) or Mobile Crane II (42009)? I was just looking for a gift for myself a week ago, and 42043 looks great.
182.
by DCoder 10y ago
Excel has Get & Transform, formerly known as Power Query, which can do similar things... if a custom query language [1] instead of SQL doesn't scare you away. I have used it a few times, it can definitely be useful. [1]: https:&#x
183.
by DCoder 10y ago
Perl has such a feature, it's called "taint mode" [1], it marks all variables receiving external data as "tainted" and disallows their usage in sensitive contexts. PHP has an inactive proposal to implement it as wel
184.
by DCoder 10y ago
The bigger problem is that Google ranks that website higher than the modern stuff. You can make much better tutorials and it won't help as long as that legacy cruft is sitting at the top of every newbie's search results.
185.
by DCoder 10y ago
It gets worse: https://3v4l.org/Slvpp Note that PHP also has a JavaScript-style triple-equals comparison, which does not attempt type conversion and does not exhibit this bizarre behaviour.
186.
by DCoder 10y ago
How so?
187.
by DCoder 10y ago
> You can also escape the scans by using variable names that start with an underscore So people who use "WHERE id=" . $_GET['id'] will not get detected?
188.
by DCoder 10y ago
Variable table names can also be useful if you have poor man's partitioning – separate tables with historical data , like "logs_201610", "logs_201611", "logs_201612", etc. Another scenario I just thought o
189.
by DCoder 10y ago
> it's not really representative of the sector of developers that make a living with PHP. Anecdote: I was integrating a paid Magento extension (which charges about $1000 for a license) into an existing shop, and some poor code in
190.
by DCoder 10y ago
That's what happens when you use Regexes to find problems: https://github.com/laurent22/so-sql-injections/blob/7b9d99c0...
191.
by DCoder 10y ago
Yes, Ansible supports conditionals and loops in its playbooks. Ansible 2.0 also introduced blocks, which are effectively a try-catch-finally in disguise.
192.
by DCoder 10y ago
https://v8project.blogspot.com/2016/12/v8-release-56.html says: > V8 version 5.6, which will be in beta until it is released in coordination with Chrome 56 Stable in several weeks... > Starting with 5.6,
193.
by DCoder 10y ago
> Can you remember all services you signed up for with your email? Cause I definitely didn't. You might also want to check your browser settings to see which domains have saved cookies, saved passwords, or the "never save pas
194.
by DCoder 10y ago
Browser language preferences, yes. Keyboard layout, no. For one thing, layout names vary between OSes, for another, custom keyboard layouts are a thing... However, you can try and read individual keypress events and see which printable char
195.
by DCoder 10y ago
We never lost control You're face to face With the man who sold the world
196.
by DCoder 10y ago
You're not the only one who feels that way :)
197.
by DCoder 10y ago
The email field in your profile is private. Add your email to the "About" field for others to see it.
198.
by DCoder 10y ago
Amanda Palmer's rendition is amazing as well: https://www.periscope.tv/w/1DXxyoEbXBLGM (starting at 3:01:56).
199.
by DCoder 10y ago
Typically parameterized query APIs (such as PHP's PDO) only support dynamic parameters for elements that do not affect the query plan, that is, as replacements for literal strings or numbers. Dynamic identifiers, such as table/col
200.
by DCoder 10y ago
In case of KeePass at least, you can skip the master password and use keyfiles or HOTP such as Yubikey instead. Or, better yet, you can combine the master password with one of those.
201.
by DCoder 10y ago
No problem :) I just edited the post to add some more security implications, because they deserve more attention.
202.
by DCoder 10y ago
Yep, I've seen such issues in multiple systems as well.
203.
by DCoder 10y ago
They reflect poorly on the Lastpass website , not necessarily on their crypto. Judging from the URLs, it seems that each action is handled by a different standalone script. This is very common in legacy code bases, and it typically (not
204.
by DCoder 10y ago
Where do you draw the line at "dynamically constructed strings"? Do I need to duplicate the whole query to another literal just to change the sort field? See also: Perl has a "taint mode" [1] which marks all variables re
205.
by DCoder 10y ago
Like it says earlier in the post, it could be enough to only serialize (stringify) the data structure at the very end of building it, once it's finalized. Once it's stringified, it must be treated as a isolated black box, which ca
206.
by DCoder 10y ago
> First person shooters can have super accurate AIs that are really frustrating to play against. The Worms series is also notorious for this. Their AI targeting seems to flip between "clueless" and "godlike", with ver
207.
by DCoder 10y ago
Apparently, the fact that they work until 4am?
208.
by DCoder 10y ago
https://en.wikipedia.org/wiki/Strip_(Unix)
209.
by DCoder 10y ago
1. type=number only accepts the period as a decimal separator, and there are lots of locales using comma for that purpose. Customers often ask us to support commas, which requires type=text and manual validation. 2. One customer requested t
210.
by DCoder 10y ago
See also: https://en.wikipedia.org/wiki/Hubert_Blaine_Wolfeschlegelste... .

More ›