mediumdeviation

Well, the blog post presupposes you can get remote code execution on the WordPress server. There's very little you can do to secure yourself if the opponent already has RCE, because at that point the attacker has at least as much privilege as the application itself. In that case you have to fall back on limiting the amount of damage that can be done by respecting the principle of least privilege.

A CMS would need to send email so that it can reset passwords, just as an example. Again, as the parent has said, the failing here is not that the CMS is provided with email credentials - that's very common for all but the simplest CMS, but that it didn't separate and limit the accounts properly

Modern iOS should support flexbox, which should get you what you want with a few lines of CSS. http://caniuse.com/#feat=flexbox

It's mainly due to the Fundamental Theorem of Arithmetic (aka unique prime factorization) - https://en.wikipedia.org/wiki/Fundamental_theorem_of_arithme...

Adobe Flash is a browser plugin. Chrome is a browser. How are they unrelated?

Because a human brain is not field programmable, and improving cognitive ability isn't as simple as plugging in another stick of RAM. The worry about AI is the bootstrap scenario, where an AI gains sufficient intelligence to modify and upgrade itself.

Sure, you're right in that humans don't understand enough about our own brains to perform such modifications, but that may simply be down to a lack of knowledge, rather than not having sufficient cognitive ability to comprehend the brain.

Additionally the hardware which an AI can run on is generally assumed to be significantly more malleable than our limited gray matter confined within our cranium

You forgot your [1] URL

I've managed to get Let's Encrypt working on a shared hosting environment using letsencrypt-nosudo in less than half an hour from the time I started cloning the repo to finally pasting the cert into cPanel. And every step in that process except the final one of installing the cert using cPanel can be automated.

For PHP there is PHP Debug Bar - http://phpdebugbar.com/, although if you're using a framework you'd want to find the fork with the bindings. I'm using the one for Laravel and it's pretty good https://github.com/barryvdh/laravel-debugbar

Huh, I was expecting MutationObserver[1] (which is the 'proper' way to do this, by the way). Not sure about the performance though - MutationObserver probably comes with more overhead.

[1]: https://developer.mozilla.org/en/docs/Web/API/MutationObserv...

Human beings evolved senses to perceive food which will aid in the individual's survival on the plains of the African savannah. There's no reason to believe that food perceived to be flavorful necessarily contains the correct nutrients for us, and (more importantly) contain them in the right amounts. Otherwise if we can all just trust our taste buds then nutritionists would be all out of jobs.

Except he never provides any proof that any of the chemicals named are harmful in any way. His claims are

1. Juice produced at industrial scale are loaded with sugar and are less nutritious than actual fruits (true, but also true of any juice, industrial or otherwise)

2. Juice produced at industrial scale is "unnatural" (also true, depending on your definition of "natural", but merely asserting that they are unnatural doesn't mean they're good or bad for you - naturalistic fallacy)

He can't assert that the chemicals are in fact bad for you because there's no proof of it, as mentioned elsewhere in this comment thread, and by his own admission these are the exact same chemicals you'd find in oranges anyway

Basically, http://www.eros-os.org/essays/capintro.html and https://en.wikipedia.org/wiki/Capability-based_security

Sorry to be pedantic but I presume you're not a native English speaker? 'Joyable' is not an English word, but rather the name of a startup company[1]. Perhaps you're looking for 'joyful'. 'Checkout' when spelt as one word refers to the place in a supermarket where you pay for the things in your basket. When you ask people to look at something, it's usually spelt as two words (as in 'check this out').

[1]: https://joyable.com/

It's not a bad game, especially for its price, but remember that this is a town, not city building game. That means that there is a hard limit to the size of the town - any bigger, and the agents (citizens) will literally starve to death en route to their next destination because it is too far from their home.

If you want to expand further, all you're doing is making exact, self-contained replicas of the same town in other places on the map. There's not much variety because each town needs the same resources, and each map has those same resources.

Like many games of this genre, the game has a reverse difficulty curve. This is especially true here because of the focus on survival. That means that the first few winters will be spent micromanaging every single resource to ensure everyone has sufficient materials, but after that initial period is over, it's impossible to fail because the town basically runs itself.

Because even a 'simple' email need to carry significant amounts of information, all with varying levels of importance.

A newsletter will multiple items will need headings (for people to scan through if they're short on time), a paragraph for people who need more details. Images, if the articles require them, also help.

Corporate email - not just advertisements, but also invoices, notifications, as such, almost always require some sort of branding. Customers expect them - a plain text email might be regarded as phishing or fake. And why force people to open up an attachment when HTML exists and can mark up those elements perfectly well?

Email also need to carry information of less importance - unsubscribe links, confidentiality notices, signatures, most of which are required by law or lawyers, but which can be made smaller or greyed out so they can be ignored when reading.

You can't do any of the above with plain text. What you need is markup, which guess what, HTML is.

Well, all Moonies have to do to see the Earth is to travel to the opposite side of it, whereas to do the opposite from Earth requires launching a vehicle out of the planet's atmosphere, across the orbit of the Moon, and back to Earth again.

Granted, it wasn't until several hundred years ago that Earthlings began to circumnavigate the globe, but the technology to travel long (cross-continental) distances have existed since ancient times.

Disagree. The 'market' is far less important when the good you're selling takes up no tangible shelf space - people have been buying games just fine without Steam for decades before Steam, and still are.

Steam itself, by dint of being another layer between gamers and their games, have to justify its existence and value to them, and generally does through a variety of features as well as its legendary sales. But being a marketplace and distribution network alone does not get you anywhere, not when the cost of setting up shop on the Internet is so low these days.

I understand his argument about gatekeepers, but Steam is a poor example. Steam itself provides so much more than a simple storefront as he describes it. By selling on Steam you also get

Steam API, which gives you

- Achievements

- Leaderboards

- Cloud save

- Steam Workshop - user generated mods and content

- Multiplayer infrastructure

Steam community, which gives you

- Forum

- Social network - user generated content such as screenshots, game guides and fanart

- Reviews - endorsements from several thousand actual players sells games far better than a flashy trailer

Whether these features are worth the 30% cut is arguable, but these services are far more valuable to independent developers, who don't have the time or ability to implement these, than to developers under large publishers, who may share these infrastructure within the games they publish.

The lawyer's words don't pass the smell test.

> “I don’t know with 100% certainty, ma’am, but I would guess that [Urbanovsky and the single seller] probably are [the same person],” her lawyer Steven Lefler told BuzzFeed News.

He just admitted on record that his client cost the payments company they used several million dollars.

> “This is a case that I didn’t charge enough money for,” Lefler told BuzzFeed News.

> “But of course, I’m her lawyer. So who gives a shit what I think.”

This is quite possibly the single least professional lawyer I've ever seen.

Copied from my comment when this was posted to r/Singapore subreddit

- The source indicates the site is generated using CKAN (http://ckan.org/). Never heard of it myself, but it is F/OSS, and widely used in other countries. Great to see the government adopt open source software

- The homepage loads 2MB+ without a primed cache, and 600KB+ with, which is really high. The site pulls down a lot of JS - jQuery with a gazillion plugins, Bootstrap, DataTables, Select2, d3.js, and Moment.js.

- The icons are in SVG, which is good, but some of them are really badly optimized - this icon (http://beta.data.gov.sg/uploads/group/2015-06-12-061106.9773...) for the environment category is 128KB (!) which is an absolutely monster for a SVG. The equivalent PNG file will be much smaller.

- The site is not accessible at all over HTTPS - it doesn't even redirect, but just keeps the client waiting until the client times out. It's 2015 - I'd expect government sites to be accessible over HTTPS.

- The favicon is not the icon, for some reason. I really like the design of the icon, although I'm not entirely sure if it is the best fit for the data site. I can see it being used for as a single brand for all government websites though

- Fonts on almost everything need to be made bigger. The graph labels are so small I need to squint.

- The new API looks very very neat. Much more usable than the old one. The documentation can be better, and perhaps should be more front and center, but I guess they need to balance the needs of developers with casual visitors and non-developers. Love the graphs automatically drawn by d3.js for appropriate datasets

- Data is licensed under CC-by, which is quite nice.

A few interesting data sets:

- Amount of mobile data used quarterly: http://beta.data.gov.sg/dataset/mobile-data-usage - Singapore has one of the highest mobile device ownership rates in the world - on average, each resident own more than one mobile phone

- Singapore's total land area since independence: http://beta.data.gov.sg/dataset/total-land-area-of-singapore - Singapore has been constantly reclaiming land since independence

- Number of licensed supermarkets: http://beta.data.gov.sg/dataset/licensed-food-establishments...

- Daily public transport ridership: http://beta.data.gov.sg/dataset/public-transport-utilisation...

That's interesting, but how is any commodity able to have it's price pushed down by a single seller dumping from a fixed reserve? If the market notice that the extra supply is coming from a fixed reserve, then they'd rightly be able to infer that at some point the supply will run out, and prices will return to market value, which would in turn drive up prices again. It probably won't go back to the previous equilibrium price because of the cost of storage and interest, but it should be close.

Ideas and concepts are not usually considered intellectual property, and cannot receive protection or be assigned ownership.

Barring any agreement otherwise, the code's copyright belongs to the individual developer who wrote it, though in the case of software projects this may get a little weird when multiple developers write and overwrite each other's code.

The following is speculation, because I've read up on the finer points of copyright laws as applied to purely digital property, but by sharing the code the developer has obviously gave the person he's sharing the code with implicit permission to work and use that copy of that code, although, again barring any prior agreement otherwise, he should also be able to rescind that permission as he chooses.

How many other ways are there to title an article explaining, essentially, what is computer code?

"The Economist Explains" is a regular column where the newspaper (not magazine, mind you, the Economist is very particular about that) explains a wide variety of issue, mostly current but not always, as in this case, and makes them accessible concisely to those not in the field.

That Bloomberg published an in-depth report on the same issue a few months ago, and this short column appearing now is merely a coincidence, and suggesting otherwise is completely ridiculous.

> Remove "(site) is now fullscreen" nag message and make it faster

For a list that want to make the browser more secure, why do they want to remove the only line of defense against sites using fullscreen mode for phishing?

> Disable PDF reader

PDF.js has fewer security vulnerabilities than desktop PDF readers.

> Disable 'safe browsing' aka. Google tracking/logging

This seems like a really bad idea for most users

I think you're reading too much into his words. I don't see it as any different from a trainspotting enthusiasts lamenting the fact that the Harry Potter films used a CGI locomotive instead of a real 19th century steam train.

If they believe that something is lost from the use of CGI in the film, that's their prerogative. As with any works of performance art, shouldn't television and cinema come under the same level of critique?

Doesn't the author also add in the average additional years lived without disability (5 years, according to his source, which is adjusted to 2.5 years in terms of lifespan)?

Sure, we all live a lot better lived with access to medicine, but the larger part of the improvement comes from improved access to nutrition and sanitation.

Besides, even if you disagree with the methodology (which they already admit is a back of the envelope calculation that is likely to be only accurate to an order of magnitude, I don't think the idea in itself, to identify the best way an individual can contribute to humanity as a whole is a bad idea.

The ad runs on reddit - https://imgur.com/Yg75peI.png. I'm not sure where else it runs.

I've never seen a charity run an ad that literally gives you money to give back to them. It's such an interesting strategy that I'm curious if it'll work.

And neither is reddit's. I'm sure /r/programming, /r/mylittlepony and /r/NeutralPolitics, just to take a few examples, would find it very amusing if they see people accusing them of being 'incubators of hate'.

Why wouldn't it be detectable? Ad blockers do their job by removing elements from the page, blocking requests to URLs that match those used to serve advertisements, or a combination both, and either one of those are easily detectable by client-side JavaScript.