News for hackers. Stuff that matters.

mofey

Re:Github Is Classy on Monday March 05, 2012 @01:22AM (#3665648)
The public key form update vulnerability was based on the same concept in a different place.
Re:Github Is Classy on Monday March 05, 2012 @01:19AM (#3665642)
"The same user exploited another vulnerability". It wasn't exactly "another vulnerability". It still had to do with the same mass attribute assignment feature just in a different place.
Re:Hacked: commit to rails master on GitHub on Monday March 05, 2012 @01:04AM (#3665615)

  Fred Wu
  So what's a good gem (if any) for safe guarding params on the controller level? @dhh's params.slice feels too dirty.
  DHH ‏
  yeah, it's too simple to be clean! I think you are using the wrong framework if you crave more complexity for its own sake.
Re:GitHub and Rails: You have let us all down. on Sunday March 04, 2012 @09:39PM (#3665162)
Isn't that Twitter?
Re:How github was hacked on Sunday March 04, 2012 @09:35PM (#3665150)
Love the comment by dbounds: "Nice work. FULL DISCLOSURE"
Re:Hacked: commit to rails master on GitHub on Sunday March 04, 2012 @05:35PM (#3664370)
Hey, how come there are no comments by @dhh and @josevalim? Are we missing out on epicness of zedshaw-level?
Re:Public Key Security Vulnerability and Mitigation on Sunday March 04, 2012 @05:01PM (#3664217)
Saw your full comment on github: https://github.com/blog/1068-public-key-security-vulnerabili... Well put. I guess startups can act enterprisy too when money is involved. The irony is that had they been actually proactive, they would have avoided this kind of publicity and money (for 3rd party audits).
This was probably the best tl;dr I've read.
Re:MagLev - Transparent, distributed object space for Ruby on Saturday November 05, 2011 @11:41PM (#3201769)
Aren't continuations being removed from Ruby?

"Structured Programming with GOTO Statements" (Knuth)

http://pplab.snu.ac.kr/courses/adv_pl05/papers/p261-knuth.pdf

This excerpt has been appeared in many news featured on YC, but I think it deserves its own thread. In the beginning there's discussion about the performance penalties of dropping GOTOs. However, in the second part there are a few proposed solutions like event-driven loops (no, it's not what you think). Furthermore, he talks about the possibility of optimizing your code by transforming source...

( Read More... | no comments | 3 points | on HN )
How is this different from LinkedIn?
Re:Ask HN: "Smart" VCS with a built-in interpreter? on Saturday March 05, 2011 @03:48AM (#2291113)
I use indentation provided by IntelliJ and it has always helped me indent my code.
Re:Ask HN: "Smart" VCS with a built-in interpreter? on Saturday March 05, 2011 @02:27AM (#2291022)
- More meaningful information about a particular commit.

- Robustness of versioning. Certain types of errors will become extinct. For example, refactoring will update a variable in all 10 places instead of 9/10.

- VCS can take on tasks of an integration server. The VCS now will be able to make sure that your project "compiles" before accepting a commit.

The real motivation behind this would be to make branch management easier, since the VCS has now more information.

Re:Lisp for the Web - Tutorial on Sunday November 28, 2010 @03:35PM (#1948207)
Should we stick to Java or C/C++ then?
Re:100 Naked Citizens: 100 Leaked Body Scans on Tuesday November 16, 2010 @11:41PM (#1912945)
Do it! Wordpress is ez to use.
How does GPL lose by pushing software to be open?
Re:Simplicity vs. Choice on Friday August 20, 2010 @11:13PM (#1622178)
Ask pg: Is it true that you can't handle the back action with continuations in Lisp?
Re:Naïve Quitting on Tuesday May 25, 2010 @01:10PM (#1377951)
Good thing you left.
Re:The Emacs Problem on Tuesday May 25, 2010 @11:52AM (#1377712)
Not really. The arguments still hold.

The Emacs Problem

http://sites.google.com/site/steveyegge2/the-emacs-problem

<<What would you rather do? Learn 16 different languages and frameworks in order to do "simple" log-file and configuration-file processing? Or just buckle down, learn Lisp, and have all of these problems go away forever?It's a rhetorical question. The answer is patently obvious at this point: Lisp is evil, and you'd damned well better write all your code in C++ and XML and JavaScript...

( Read More... | 40 comments | 73 points | on HN )
Eating multiple meals per day is not only a proven technique to keep a low body fat percentage, but also a necessity for bulking up through natural calorie intake.
Re:Chatroulette Creator Is A 17-Year-Old Russian Kid on Saturday February 13, 2010 @09:03PM (#1123972)
made my day! P.S.: I'm Russian :D
Re:Report suggests 21 hours is the ideal work week on Saturday February 13, 2010 @12:33PM (#1123221)
4HWW anyone?
Re:Ask HN: Who is hiring (entry level) on Sunday February 07, 2010 @10:30PM (#1108843)
no one? :(
Re:Ask HN: Who's Hiring? on Sunday February 07, 2010 @10:16PM (#1108814)
This comment should be at the top of the page.
Re:Ask HN: Who's Hiring? on Sunday February 07, 2010 @09:52PM (#1108765)
I'm in the same boat... It seems that startups have even more stringent hiring requirements, because they want someone to prototype fast from day one.
Re:Ruby on Rails 3.0 Release Notes on Tuesday February 02, 2010 @09:25PM (#1096893)
yes

Older »