Viewing profile — sil3ntmac

I assumed it was asymmetric like pgp, but you're right they dont mention it anywhere. That is rather puzzling. wtf.

I would say yes. Pop-unders should be blocked, and modern browsers work pretty hard to, but it is often viewed as a "low priority" sec issue, and so workarounds are found, ignored,…

Check your internal IP as well, some models are only vulnerable on the LAN. Metasploit has a check module for this, and will also get you a shell: https://community.rapid7.com/comm…

It depends what you mean by the term "associated browser security." The method they are describing stops CSRF attacks dead in their tracks (e.g. if dev set up a GET endpoint that s…

Yep. and the simple solution is a server-side wildcard route.

there are a few workarounds you have to use. there is a compatibility shim floating around somewhere (i think from mozilla).

Erm, you guys did disable TURN right? (because otherwise the security value here is fairly decreased)

Congrats, I have been waiting to see someone build something like this for a while. This is truly a glimpse into the future :) Edit: I should have vetted this a little harder befor…

Not really anything useful in this article. To make fibonacci "non-blocking", you use process.nextTick callbacks to "interweave" the computations, just like real threads!

It's a public wifi network that is broadcast from a device that is (probably) on your LAN. Attacker connects, finds some vulnerability, and has unrestricted access to the LAN. That…

Hopefully liberty.lavabit.com uses a new uncompromised cert?

The impression I got was that actual requests and responses are still made by the client.

Sorry. I got bitter there at the end, it was uncalled for. I spent 3+ years as a PHP programmer, there's certainly nothing wrong with being a PHP programmer , but it's hard to argu…

> Facebook’s PHP Codebase > x * 105 files > y*107 LoC > 10 releases per week > Anecdotally, good engineers are astonishingly productive in PHP Erm... are you kidding me? LoC != pro…

I like coffeescript. Lots of web devs that write ruby all day like coffeescript. tbh I think coffeescript is worth it just to never have to write "function(){..." or "this." again.…

Reference: http://www.engadget.com/2013/04/22/google-street-view-fine-g... (for others like myself who had not heard of this)

FileVault 2 is supposed to be secure against this* when the machine is powered on and locked or sleeping. * Source http://security.stackexchange.com/questions/18720/how-secure...

Unless you're actively thrashing through all 32GB (maybe you are), wouldn't installing a large SSD for swap space will help you out just as much?

My first reaction was, oh wow looks just like the NeXT cube, that's kinda a cool tribute to Jobs. Then my second reaction was, oh man, it will sorta look like I have a trash bin on…

Sorry for my naivety, but when does Java use the stack? Only for primitive operations?

Psst... the programmers at google might have a bone to pick with you.

I have never understood why you would process multiplication and division as separate reduction steps, besides for simplification in elementary-school learning materials. It seems …

I guess gmail isn't a "real project" then...

There's plenty of libraries for this, provided you can export your audio to MIDI. Here's one: midisheetmusic.sourceforge.net Hell, just upload your MIDI to hamie.net and they'll do…