HN user

DrCatbox

263 karma
Posts0
Comments159
View on HN
No posts found.

The [[:print:]] will match any printable characters like åä, while the [ -~] will not.

I used this once as another safeguard against pushing binary data into the database. It was a poor system to begin with where you even have that possibility... and it happened at least once before the fix and my safeguard was in place.

Yes I can read it.

The argument I was trying to make is to bring attention to the difference between a file and a book, they are different beasts, sure you can read them, but its not the same thiing to read a book and to read from a computer screen or kindle. Its just not the same.

The author has no right decide how I am going to read the book. Its the redistribution which he holds a right to. Lets take the discussion to what form of distribution copyright should apply to. Lets discuss who can decide when to read and how to read a text. Who has the right and who has copyright?

Its not just so simple, oh hey copyright, do as I almighty author say. Where is the consumer-rights in all this debate?

Somebody is mad about their book being read. Cry me a river. If you didnt want your book to be "stolen" then dont write it. You, as author, will not control what I read, how I read and where. So yes, I am gonna "steal" that book from you, just to steal from you, and then delete it from my computer. Its probably not worthy of being read anyway.

And furthermore, nobody is sharing your book illegally, they are sharing a digital copy of your book as a data-file, which is very quite different from a real book. You cant hold it you see, you cant smell it, you cant borrow it to your friend, only make another copy.

NoPassword 14 years ago

"The thing is when I used internet cafes, the first thing I would always open would be email."

Seriously? Intenet cafes are the least secure computers to give your email and password to. Sure for junk and spam-email accounts, that you dont care about anyway. But logging in to your personal email account on an internet caffe!? Thats madness.

You misunderstood the vulnerability here a bit.

It works even when you have "passive observation". All you need is two things 1) to make the victim run your JavaScript, irregardless where you make your victim fetch and run your script. And 2) sniff his packets to see what is going over the wire. You can do both things very easily for example in a caffe on an open WiFi network. Or in a caffe with WPA2 where you and your victim are on the same wifi, using the same password from the caffe. (Arp poisoning your victim...)

Take the "you and victim are at secure wpa2 caffe", the bartender gives both of you the wifi password. You perform an ARP poisoning on your victim, now all his communication goes through your computer, you act as gateway for him. Now you have 2 from above. Then you can for example replace his request for a http://cdn.google.com/jquery.js with your own jquery.js spiced with this new CRIME fancy JavaScrip as well, in which you just create a lot of img elements with src set to say https://facebook.com. And so on as described in CRIME you can reveal the victims session cookie for example.

The tools to perform arp have been around since the stone age, the tools to serve your victim your own .js for some random request of his over http have also been around since the stone age. And now we have crime to reveal parts of the victims supposedly secure communication channel as well.

This approach is very easy to bypass by any knowledgable hacker.

Since you said your WiFi is open, the only thing that needs to be done is fire up the aircrack-ng airdump and sniff, there I would see your MAC, in the clear. Then I could set my own to it or select any other mac I have seen connecting to for a longer while ,and use it and access your router and add my other mac on its whitelist.

The Next Microsoft 14 years ago

Surely a new logo and "branding communication" will change the way a corporation works and conducts its business.

Companies are realizing that Microsoft doesnt have what it takes to maintain a good desktop user experience. They have introduced Metro and UEFI, both aim to reduce the power of the user on their devices. Perhaps Samsung and Valve realized they as suppliers of programs/hardware need more to say in a future computer market.

You cant write anything serious with this, for any business processing, where the interesting things happen, you need your own servers, not just storage and you cant trust the clients with your processing needs. For example, make a VPN service out of this, or a file sharing application with payment system?

Why whould anyone spend time on this deployment options for the various python web development frameworks instead of actually doing web development?

This is one area where python lacks, and that you need

You put mirrors in space.

But seriously, solar power generation by huge space stations that beam the power down to earth, then use mirrors to feed it where it is needed.

Solar panels need to be cleaned and at the end of their lifespan, several years if not decades, need to be replaced. I dont know about nuclear rods, but they do require security and safety measures.

NASDAQ:FB 14 years ago

Facebook was not made with intent to spur political unrest, thats a side effect, a collateral.

And anyhow, the effect on arab spring of social media such as facebook is highly overstated, as one rebel said in an interview "We turned to facebook and twitter only after we had destroyed 90% of the police stations in our town."

I tried using git for several weeks now and still cant manage to do the simplest things, like maintain a work repo and a sync repo and then pull/merge between them before pushing upstream from sync. It feels like I have to know the internals of git workings just to perform a simple action, and I need to know all the side-effects of its actions, and how to fix those as well. With mercurial all the commands I need to know are hg log, diff, incoming, outgoing, pull, update push and merge. With git I need to know at least two or three flags for each command where each flag is really special to that command and using/not using it changes everything. With mercurial I just know -p -r and -l for limits thats it.

I hate git with a passion now. Its like forcing everything through its world view, for the tinies action it barks are you with insane messages.

Version control systems are supposed to model commits or sets of changes on a repo, not model and show you their own internal representation of what it thinks about my code.

Also Ive noticed most git tutorials really simple things (like this is how you do cvs but now with git), while "the rest" is left to some black ninja voodo magic expert dudes who "get" it.

And this is just another tutorial to work in a very specific environment using git.

Im so glad we use mercurial at work right now.