News for hackers. Stuff that matters.

kcen

Sounds too complicated to do with a reasonable type system and autocomplete, should probably use ML.
Can we then write off the motorcycle sim racing rig as office equipment?
Re:Building Domain Driven Microservices on Tuesday July 07, 2020 @02:02AM (#23756166)
One of the problems with forcing strictly disparate domain/service is that each one introduces its own security context and authZ handling. That's a lot of places for mistakes.
Re:Profiling Go Programs on Wednesday November 13, 2013 @08:55PM (#6730033)
Looks like you can sign up just fine with only an email address.
Re:Dataset: Databases for lazy people on Tuesday November 12, 2013 @08:34PM (#6722768)
This looks pretty close to a clone of the Sequel gem.

http://sequel.jeremyevans.net/ https://github.com/jeremyevans/sequel

Re:Show HN: Hosted Docker-as-a-Service on SSDs for $5 on Thursday November 07, 2013 @07:58PM (#6693705)
I learned about it from creack (lead contributor according to github) @ a startup meetup in SF.

Things that impressed me:

1. super passionate

2. he was very receptive and quick at squashing bugs I reported (real or not)

3. docker was super portable (the same across all linux distros)

4. they (the docker team) had real solutions for the long application deployment times that were plaguing me

Everyone seemed to know it would succeed, which is rare around here.

Re:Linkedin's Response to My "Phishing with Intro" Post on Friday November 01, 2013 @10:30PM (#6657870)
I assume when Jordan gave them his address they knew he would actually want the stuff...
Re:How to launch and defend against a DDoS attack [pdf] on Friday October 25, 2013 @04:53PM (#6614548)
The primary downside to a small TTL is cost. For many DNS providers you are allotted a number of requests per month that DNS will resolve. On particularly popular websites having a ton of DNS requests can cause the cost of DNS services to inflate significantly.
Re:Empty F-16 jet tested by Boeing and US Air Force on Tuesday September 24, 2013 @06:27PM (#6441222)
It takes just as many people to fly a robo-F16 as it does to fly a manned F16. Only difference is that the pilot is on the ground instead of in the air.

Also the unmanned F16 provides 0 advantages over a purpose built UAV (plus is bigger, slower, and more expensive), I highly doubt anybody would seriously consider these for warfare applications.

It's cool tech, take it at face value.

Re:LinkedIn suffers DNS hijack on Thursday June 20, 2013 @12:10AM (#5910090)
Isn't that the point of OAuth? (versus HTTP basic auth)

Your secret key shouldn't be compromised, because you're supposed to keep that secret. Also if you use HTTPS for requests you'd still get a cert error even if DNS was routing incorrectly. You're probably fine.

Re:LinkedIn suffers DNS hijack on Wednesday June 19, 2013 @11:20PM (#5909963)
It's always the new guy, f'n new guy.
Re:LinkedIn suffers DNS hijack on Wednesday June 19, 2013 @10:41PM (#5909838)
The DNS was not exactly hijacked, there were issues inside of LinkedIn's top level DNS provider whom were delegating www.linkedin.com authorization to unauthorized nameservers, namely NS[SOMETHING].ztomy.com. The ztomy DNS replaces its delegated domains to point to a domain parking page if there is no record exiting. These changes were then propagated to other nameservers and thus to the end user. End result, dns doesn't point where you think it does.
Re:SQL injection search on Saturday June 01, 2013 @04:04PM (#5805723)
For the Rails folks out there, I have had pretty good luck with Brakeman Scanner in the past.

http://brakemanscanner.org/

Re:We got hacked on Friday May 10, 2013 @04:58PM (#5688651)
That way you can safely put your public key on all of your application servers so that any node can write data, but only allowed nodes can read.