71–80 of 84 posts
Very nicely done. This is precisely the attack that I described in a HN post a month ago. Glad to hear that it would have worked if I'd had time: http://news.ycombinator.com/item?id=596126
Probably fine for generating session IDs in most circumstances, but if you're using it in another situation (e.g. shuffling something), you might find the performance is terrible.
Earlier quoted context omitted.
The qualities that make a great developer and a great professional security researcher are about the same. Both involve taking hardware, a programming language, an API, an application or something else that someone in the computing industry had one purpose for, and bending it in a way to produce a rather unexpected, very unique result. A great developer builds Web 2.0 with something as novel and limited as JavaScript…
Developers think of ways to make things. Security guys think of ways to break things. That's the main difference.
what a job, what a feedback, what a community!!!! no awesomenes but more warm warm warm!
This is pretty interesting stuff, but man it would have been nice if you were able to post it somewhere with actual HTML formatting. The gray on gray is tough after a full screen or two.
wooooow:D what a job, what a feedback, what a community!!!! no awesomenes but more warm warm warm!
Thanks to dfranke for giving us time to release a fix, and in fact writing part of it.
I hope you scoop him up for one of your YC teams. That hack was damned impressive for breadth and depth of knowledge, pretty rare in my experience.
Thanks for sharing it with everyone!
Earlier quoted context omitted.
I hope you scoop him up for one of your YC teams. That hack was damned impressive for breadth and depth of knowledge, pretty rare in my experience.
That makes me somewhat sad. I am a good coder, but... still so much to learn... so much...
This should be exhibit A, B, and C in the death of the idea of the "rockstar programmer".
I love smart people. (plus having the ethics to actually do no evil - great combination)
This is pretty interesting stuff, but man it would have been nice if you were able to post it somewhere with actual HTML formatting. The gray on gray is tough after a full screen or two.
Gray on gray is awful. Does only one person like it? :-) Here's a fix for Firefox that doesn't need the overhead of Greasemonkey. http://news.ycombinator.com/item?id=563492