sil3ntmac

5 ms·

1. 1.▲
   by sil3ntmac 12y ago

   I assumed it was asymmetric like pgp, but you're right they dont mention it anywhere. That is rather puzzling. wtf.
2. 2.▲
   by sil3ntmac 13y ago

   I would say yes. Pop-unders should be blocked, and modern browsers work pretty hard to, but it is often viewed as a "low priority" sec issue, and so workarounds are found, ignored, used in the wild, and patched. Here is one implem
3. 3.▲
   by sil3ntmac 13y ago

   Check your internal IP as well, some models are only vulnerable on the LAN. Metasploit has a check module for this, and will also get you a shell: https://community.rapid7.com/community/metasploit/blog/2014&#x
4. 4.▲
   by sil3ntmac 13y ago

   It depends what you mean by the term "associated browser security." The method they are describing stops CSRF attacks dead in their tracks (e.g. if dev set up a GET endpoint that should have been POST/PUT), prevents plaintext
5. 5.▲
   by sil3ntmac 13y ago

   Yep. and the simple solution is a server-side wildcard route.
6. 6.▲
   by sil3ntmac 13y ago

   there are a few workarounds you have to use. there is a compatibility shim floating around somewhere (i think from mozilla).
7. 7.▲
   by sil3ntmac 13y ago

   Erm, you guys did disable TURN right? (because otherwise the security value here is fairly decreased)
8. 8.▲
   by sil3ntmac 13y ago

   Congrats, I have been waiting to see someone build something like this for a while. This is truly a glimpse into the future :) Edit: I should have vetted this a little harder before commenting. I recognized the idea immediately, but the imp
9. 9.▲
   by sil3ntmac 13y ago

   Not really anything useful in this article. To make fibonacci "non-blocking", you use process.nextTick callbacks to "interweave" the computations, just like real threads!
10. 10.▲
    by sil3ntmac 13y ago

    It's a public wifi network that is broadcast from a device that is (probably) on your LAN. Attacker connects, finds some vulnerability, and has unrestricted access to the LAN. That is just one attack vector. ;tdlr it degrades your secu
11. 11.▲
    by sil3ntmac 13y ago

    Hopefully liberty.lavabit.com uses a new uncompromised cert?
12. 12.▲
    by sil3ntmac 13y ago

    The impression I got was that actual requests and responses are still made by the client.
13. 13.▲
    by sil3ntmac 13y ago

    Sorry. I got bitter there at the end, it was uncalled for. I spent 3+ years as a PHP programmer, there's certainly nothing wrong with being a PHP programmer , but it's hard to argue that in 2013 it is still a good and productive
14. 14.▲
    by sil3ntmac 13y ago

    > Facebook’s PHP Codebase > x * 105 files > y*107 LoC > 10 releases per week > Anecdotally, good engineers are astonishingly productive in PHP Erm... are you kidding me? LoC != productivity, not e
15. 15.▲
    by sil3ntmac 13y ago

    I like coffeescript. Lots of web devs that write ruby all day like coffeescript. tbh I think coffeescript is worth it just to never have to write "function(){..." or "this." again. It's also worth it for its free OO
16. 16.▲
    by sil3ntmac 13y ago

    Reference: http://www.engadget.com/2013/04/22/google-street-view-fine-g... (for others like myself who had not heard of this)
17. 17.▲
    by sil3ntmac 13y ago

    FileVault 2 is supposed to be secure against this* when the machine is powered on and locked or sleeping. * Source http://security.stackexchange.com/questions/18720/how-secure...
18. 18.▲
    by sil3ntmac 13y ago

    Unless you're actively thrashing through all 32GB (maybe you are), wouldn't installing a large SSD for swap space will help you out just as much?
19. 19.▲
    by sil3ntmac 13y ago

    My first reaction was, oh wow looks just like the NeXT cube, that's kinda a cool tribute to Jobs. Then my second reaction was, oh man, it will sorta look like I have a trash bin on my desk. I wish they had made the dimensions a little
20. 20.▲
    by sil3ntmac 13y ago

    Sorry for my naivety, but when does Java use the stack? Only for primitive operations?
21. 21.▲
    by sil3ntmac 14y ago

    Psst... the programmers at google might have a bone to pick with you.
22. 22.▲
    by sil3ntmac 14y ago

    I have never understood why you would process multiplication and division as separate reduction steps, besides for simplification in elementary-school learning materials. It seems completely arbitrary. Division is just multiplying by an inv
23. 23.▲
    by sil3ntmac 14y ago

    I guess gmail isn't a "real project" then...
24. 24.▲
    by sil3ntmac 14y ago

    There's plenty of libraries for this, provided you can export your audio to MIDI. Here's one: midisheetmusic.sourceforge.net Hell, just upload your MIDI to hamie.net and they'll do it for you (albeit horrendously).
25. 25.▲
    by sil3ntmac 14y ago

    This is awesome! Someone edit the title though because I had no idea this was live coding "beats".
26. 26.▲
    by sil3ntmac 14y ago

    Wait.. so any JSON API that doesn't do this is technically vulnerable to CSRF? Mind blown.
27. 27.▲
    by sil3ntmac 14y ago

    Here's the fix: https://github.com/rails/rails/pull/8853/files#L1L35 Happy hacking!
28. 28.▲
    by sil3ntmac 14y ago

    (yet).
29. 29.▲
    by sil3ntmac 14y ago

    I often pass inline data from server -> client JS using a meta tag. In rails3 it would look like: <meta name='blah' content="<%= @data.to_json %>" /> However this has always seemed unclean to me. Does anyone else have a
30. 30.▲
    by sil3ntmac 14y ago

    THANK YOU! Can't believe I missed the task switcher. Edit: spelling