Viewing profile — jasonkeene

This is the meetup page in case you are curious what the talks will be: https://www.meetup.com/Denver-Go-Language-User-Group/events/... • 6:50 - 7:20 - Ryan Djurovich: Idiomatic De…

> * Everyone who clones the git repo either forgets or doesn't know that they have to do 'git submodule init' (and maybe update too? even I'm forgetting ...)... ‘git clone --recurs…

This can give you the characters but not their ordering or frequency. Still, it's a nice information leak. Yet another reason to disable custom fonts.

Does anyone have any links describing the new CSRF for JS GET requests? Also they misspelled CSRF in the blog post title :/

You don't get it. Emails were encrypted at rest with the user's password. This was publicly disclosed by lavabit on their site. With the SSL key material the state could decrypt th…

Yeah, I was thinking the same thing. The only downside is that it isn't generic for variable length chunks.

Simulacra.. not simulacrums.. http://en.m.wikipedia.org/wiki/Simulacra_and_Simulation

Github already offers free micro plan (5 private repos) for verified students. Unlimited private repos is a rather big hammer and might attract abuse. edit for link: https://github…

It is intended to be connected to a television set via Composite or HDMI. I'd assume most families in the UK already have a television set so really the only additional cost is the…

CMD+click WFM

In order to exploit this an attacker would need to be MITM on the network or on a subdomain by setting a wildcard cookie. The site would still keep the nonce check. I don't see any…

Humm.. I'm thinking you could write a middleware that checks for Referer over https and if not set, go ahead and set it to https://yourdomain.com That would allow you to continue t…

If I'm blocking cookies/referer by default then the onus is upon me to enable them for sites that require them for stuff like this. I wouldn't worry about users who have this issue…

Yeah this is something I run into often as I don't accept cookies from sites by default and don't send Referer header (both are required for django's CSRF middleware if over https)…

So web2py introduces new members to __builtins__? Coming from a general Python programmer with no "vested interest" I have to say that isn't the best of ideas. len/dict/list are bu…

> Toss me that 100k you're bandying about so easily and I'll have it done by May :) Considering merge with trunk will probably be done shortly after 1.4 I don't think he'll be gett…

perhaps this? http://htsql.org/

https://www.youtube.com/watch?v=P9M__yYbsZ4&t=1h42m05s (skip to 1:42:05) Thorium comes up with rare earth minerals.. we can use it as a sustainable source of energy.

I so LOL'd when someone in the webinar pointed out that their measurement wasn't a vector so their paper should be titled neutrino speed not velocity. http://arxiv.org/abs/1109.489…

Yeah, noticed this too. http://www.whyprime.com/temp/yipit-key.png Whoops!

Yeah, Apple has used EFI for quite a while. My laptop still doesn't boot that fast.

"EDIT: I'm getting down voted for doing the math! Seriously?" "35,000 miles per hour / 60 = 583 miles per second." I stopped reading right there, please actually do the math if you…

If you use a mac check out http://macfreedom.com/ or http://anti-social.cc/ I use freedom every time I have work in front of me that I want solid time to complete and I can't trust…