News for hackers. Stuff that matters.

mabufo

Re:Banner ads on CNN.com contain keyloggers on Tuesday July 17, 2018 @01:34PM (#17551471)
cross domain script blocking should be enforceable in all browsers
Re:Demystifying CORS on Monday June 04, 2018 @01:53PM (#17230267)
Right - it is a good safety feature. Also worth noting that responding with a wildcard will not allow you to set cookies in the browser when using `withCredentials` in the client and `access-control-allow-credentials` on the server. You've got to return a specific origin (one that is a match in your whitelist)
Re:Demystifying CORS on Monday June 04, 2018 @11:29AM (#17228688)
CORS allows you to whitelist what domains you accept certain requests from. This is a good thing.

One thing I never understood really is why a webpage is able to load scripts from a different domain. That will I suppose remain a mystery to me forever. Imagine how many fewer ads and junk we might see.

Re:The Programming Talent Myth (2015) on Wednesday April 18, 2018 @04:24PM (#16870839)
If you can't use the basic tools, there are not going to BE any results.

The metaphor is ridiculous.

What are you skeptical about? That this person's friend is actually injured? That it happened because of tesla? People get injured at work. Maybe not where YOU work, but it absolutely happens.

Also, the subtext of your comment - that this person OF COURSE would have contacted a news organization if their claim was legitimate is frankly very weird.

That is absolutely baseless.
Re:The Programming Talent Myth (2015) on Wednesday April 11, 2018 @04:11PM (#16815051)
> We wouldn't judge a carpenter on e.g. his/her ability to use a saw

What? Yes we absolutely would.

Re:Elixir School on Wednesday March 07, 2018 @04:35PM (#16540130)
Can anyone actually explain to me the _exact_ differences between Elixir and Erlang?

What does Elixir offer me that Erlang does not on a LANGUAGE level?

Re:Equifax under pressure after data breach update on Monday February 12, 2018 @03:33PM (#16361807)
They should be shut down permanently. Full stop.

Furthermore, the very existence of these credit agencies should be sincerely alarming to most normal people, and probably already is. These databases should not exist.

Re:How a Medical Catastrophe Can Bankrupt a Life on Friday February 02, 2018 @05:41PM (#16294809)
you shouldn't have to shop around for medical care
Re:Amazon, Berkshire, JPMorgan to Create Healthcare Company on Wednesday January 31, 2018 @11:13AM (#16274923)
70% of americans live paycheck to paycheck. There is no money to put into an HSA - let alone to put into a savings account.

Medicare for all is the only sense making option, truly. Insurance doesn't make sense in the context of healthcare.

Everything else is just a half measure. Healthcare makes zero sense as a market; it is completely busted.

...to compose async code in Java?