eddington

5 ms·

1.
by eddington 11y ago
They "fixed" it. Well, there's still another. https://hulbee.com/?query=%3C%2Fscript%3E%3Cimg%20src%3Dsdf%... It runs on Chrome and bypasses the filter. Edit: for context, the parent found an XSS issue. It wa
2.
by eddington 13y ago
There appears to be a bug. Here is the state I reached (notice that "white" now has two bishops of the same color). a b c d e f g h 8 ♖ ♘ ♗ ♕ ♔ ♘ ♖ 7 ♙ ♙ ♙ ♙ ♙ ♗ 6 5 ♙
3.
by eddington 14y ago
Complete solution to today's problem in one line of python def gen(univ, n=5): return univ if n == 1 else [x+y for y in gen(univ,n-1) for x in univ if all([(x+y)[start:start+upto] != (x+y)[start+upto:start+upto*2] for start in range(len(x+y
4.
by eddington 14y ago
Please leave those elsewhere.
5.
by eddington 14y ago
One of the authors of that book taught a class earlier this year at Berkeley. If you learn best listening, the lectures might help. I found them a bit easy, but a nice overview of the book. http://webcast.berkeley.edu/playlist#c,d,Computer
6.
OpenCount, California's Election Auditing Tool, is Open Source(code.google.com)
2 points by eddington 14y ago|0 comments
7.
Pointer magic for efficient dynamic value representations(nikic.github.com)
1 points by eddington 14y ago|0 comments
8.
by eddington 14y ago
It's worth noting that not every bug is a security-critical bug. Similarly, not every crash is a security-critical crash. Sometimes you can exploit a bug to give you something, sometimes it's just a plain old bug. People only pay for the se
9.
by eddington 14y ago
I don't know why you're saying it isn't NP-complete. For an arbitrary set of coins, it's definitely NP-complete. You could easily reduce 0-1 ILP to it, or subset-sum. If you don't believe me, believe http://graal.ens-lyon.fr/~abenoit/algo0
10.
by eddington 14y ago
You're correct, but the article makes exactly the same point as you. There's no reason to correct it.
11.
by eddington 14y ago
Why is this comment being downvoted? It's not aggressive, rude or otherwise mean. It's also not factually incorrect (because it's talking about a possible future). I agree that I don't believe this future is likely, but that's no reason to
12.
by eddington 15y ago
You might want to fix this in case you ever decide to add a way to log on: http://scrib.in/m27dy7 (I added the text </textarea><img src=g onerror="alert(1)"> and went to view it.)
13.
by eddington 15y ago
It actually looks like the vulnerability is on Rails itself, which Github is built on...
14.
by eddington 15y ago
Previously, 2 points... http://news.ycombinator.com/item?id=3207255
15.
by eddington 15y ago
It should be noted Solitaire is not secure for long messages. http://www.ciphergoth.org/crypto/solitaire/
16.
by eddington 15y ago
Still doesn't work going end to start. src starts at 50, ends at 100 dst starts at 25, ends at 75. First we copy 100 to 75, then 99 to 74, etc ... now we get to copy from 75 to 50, but we've overwritten it already!
17.
by eddington 15y ago
If you were to try to say "my friend's house" in lots of languages you have to use a gender-specific word. In spanish, for example La casa de mi amigo / La casa de mi amiga. If you were to try to do it in a gender neutral manner ... La casa