eddington

They "fixed" it. Well, there's still another.

https://hulbee.com/?query=%3C%2Fscript%3E%3Cimg%20src%3Dsdf%...

It runs on Chrome and bypasses the filter.

Edit: for context, the parent found an XSS issue. It was patched within a few hours. The patch was incomplete, and this one still worked. So, not only do they get it wrong for launch. When presented with an exploit they don't even patch the full vulnerability. I'll trust my data with someone who understands security, thank you very much.

There appears to be a bug. Here is the state I reached (notice that "white" now has two bishops of the same color).

      a b c d e f g h
    8 ♖ ♘ ♗ ♕ ♔   ♘ ♖ 
    7 ♙ ♙ ♙ ♙ ♙ ♗     
    6                 
    5             ♙   
    4     ♝ ♟ ♟       
    3               ♙ 
    2 ♟ ♟ ♟     ♟ ♟ ♟ 
    1 ♜ ♞ ♝   ♚   ♞ ♜ 

Someone want to submit a pull request? :-)

edit: For anyone who wants to reproduce ("black" went first, since black appears as white on the board)

    1. e4 h5
    2. d4 h4
    3. Bb4 h3
    4. Qf3 g5
    5. Qxf7 Bxf7??

Complete solution to today's problem in one line of python

def gen(univ, n=5): return univ if n == 1 else [x+y for y in gen(univ,n-1) for x in univ if all([(x+y)[start:start+upto] != (x+y)[start+upto:start+upto*2] for start in range(len(x+y)) for upto in range(1,(len(x+y)-start+2)/2)])]

... god that looks ugly. Call it with

>>> gen(["1", "2", "3"], 5) ['13121', '23121', '21321', '31321', '12321', '12131', '32131', '21231', '31231', '13231', '13212', '23212', '21312', '12312', '32312', '12132', '32132', '23132', '21232', '31232', '31213', '13213', '23213', '12313', '32313', '32123', '13123', '23123', '21323', '31323']

Please leave those elsewhere.

One of the authors of that book taught a class earlier this year at Berkeley. If you learn best listening, the lectures might help. I found them a bit easy, but a nice overview of the book.

http://webcast.berkeley.edu/playlist#c,d,Computer_Science,EC...

It's worth noting that not every bug is a security-critical bug. Similarly, not every crash is a security-critical crash.

Sometimes you can exploit a bug to give you something, sometimes it's just a plain old bug.

People only pay for the security-critical ones.

I don't know why you're saying it isn't NP-complete. For an arbitrary set of coins, it's definitely NP-complete. You could easily reduce 0-1 ILP to it, or subset-sum.

If you don't believe me, believe http://graal.ens-lyon.fr/~abenoit/algo09/coins2.pdf

"Optimally making change—representing a given value with the fewest coins from a set of denominations—is in general NP-hard."

You're correct, but the article makes exactly the same point as you. There's no reason to correct it.

Why is this comment being downvoted? It's not aggressive, rude or otherwise mean. It's also not factually incorrect (because it's talking about a possible future).

I agree that I don't believe this future is likely, but that's no reason to downvote him.

You might want to fix this in case you ever decide to add a way to log on:

http://scrib.in/m27dy7

(I added the text </textarea><img src=g onerror="alert(1)"> and went to view it.)

It actually looks like the vulnerability is on Rails itself, which Github is built on...

Previously, 2 points...

http://news.ycombinator.com/item?id=3207255

It should be noted Solitaire is not secure for long messages.

http://www.ciphergoth.org/crypto/solitaire/

Still doesn't work going end to start.

    src starts at 50, ends at 100
    dst starts at 25, ends at 75.

First we copy 100 to 75, then 99 to 74, etc ... now we get to copy from 75 to 50, but we've overwritten it already!

If you were to try to say "my friend's house" in lots of languages you have to use a gender-specific word.

In spanish, for example

La casa de mi amigo / La casa de mi amiga.

If you were to try to do it in a gender neutral manner ...

La casa de una persona que conozco bien.

Which translates roughly to "the house of a person that I know (and know well)."