mmmooo

nameservers changed at registrar, gltd reports accordingly.

nytimes.com. 172800 IN NS ns27.boxsecured.com. nytimes.com. 172800 IN NS ns28.boxsecured.com. ;; Received 114 bytes from 192.41.162.30#53(192.41.162.30) in 17 ms

Realistically, it sounds like the 2nd diagram should have the middle section of the first diagram. As in, a single message/circle, gets "split" (or more accurately dup'd) and somewhat simultaneously delivered to the start of every 'channel'. The way it is now makes the appearance that a message isn't sent down a channel where the logic gate will not eventually deliver it. But that doesn't seem to be the case.

Slightly off topic, but it would be nice if the test accounts really worked all the time. I've seen a number of cases where entire sections of the site (e.g. http://developers.facebook.com) that error out (return 500's) when using whitehat test account's auth info. This leaves us with little choice but to use real accounts in some cases.

I assume he means whitehat test accounts which are created in the whitehat console, and can only interact with other whitehat accounts

Exactly what I was thinking. They were in the press early on, and had a huge boost in users. Looks like things have been slowly dying since then, down more then 80% since peak. All the coverage should boost them right back, even if they are forced to change their name.

The current user trend is still nothing but down. With user acquisition costs likely not getting any smaller, they aren't that far away from crossing the threshold of not having enough users to migrate to a new game, to spark it. At that point, it won't matter if their games are original, or re-badged copies of other games. They'll be in the same situation as your average (or below average) game dev startup, except with 10x (or 100x if they don't do more layoffs) the expenses.

quarterly growth numbers. Making $1B is no longer good enough if you made $1B last quarter.

still md5 w/ salt as of latest vb5

nice touch with the 3 decimal precision for font sizes.

yep definitely, an interesting implementation, and certainly almost impossible to guess from passive observation. thanks.

interesting, not a ton of details of how. off to the source I go, thanks. sounds like it assigns a 'score' of some sort to each authoritative ns.

Any thoughts on where/how is this 'home in' state is saved? Other the cache and filtering/acl state resolvers should be stateless, so would be interested in any details, especially if this is on a per-zone, or per-set of nameservers or etc basis. I've never seen bind9 act like this.

don't know what kind of statement it is, but if it is a statement as in a bill, an amount of $140 means 'you owe us $140'. A negative amount would in turn mean 'we owe you'.

mplayer http://qthttp.apple.com.edgesuite.net/129opiygabsdvibsdfobsd...

seems to work for now. Though streaming the previous event for the time being.

Ozzie c

According to http://www.factets.com/application/path-LS7TuNU/history, growth has been pretty steady, and is on the rise. Granted only facebook #'s, but should be at least somewhat representative of overall trend.

Not sure if that is independent to, or a result of, their spammy marketing.

Isn't an estimate wrong practically by definition, since it is an 'approximation'. Or, the other side of the coin, without specified tolerances, all estimates are right. e.i. "This will take 3 weeks +/- 3 years".

That would make more sense, with candy crush being so closely tied to facebook, and currently having ~68m monthly users there (that is of course iOS + android + canvas), I would have guessed 10m-20m on android. Granted this is just one app.

I know these are just estimates, but 90m monthly actives on android alone seems unlikely for candy crush. Google play claims 10m-50m installs. Sounds like data is being extrapolated from a biased sample, unless play's data is regional.

Greylisting is pretty common, and this would obviously fail:

http://en.wikipedia.org/wiki/Greylisting

True, but what you are saying is only complex applications need to be secure?

and on top, looks like urlbox (properly) uses hmac!

well, for starters, I could use your (paid) account to get free screenshots.

you are basing your 'token' on md5(data+secret), however md5 (and other hash functions) are easily extended when data and token are known, even without knowing secret. Basically, given data and token, I can produce a different token, that matches a (somewhat) different data, without knowing secret.

Someone's using a hash function where a MAC belongs..

You can't call the ability to jailbreak "free to do so", any more than a prison cell is "free to escape out of". Sure jailbreaks exist, but not for all devices, and not without significant efforts by non-apple personnel (and significant effort from apple personnel to stop said 'freedom').

Are you sure about this? the public repo seems to show 2.6.18/2.6.32.. This would actually be a dis-advantage in many cases, as a number of vendor utils (I'm looking at you HP) don't play nice w/ 3.x kernels.

sadly, that is DOCSIS. You get to see very little (some modems provide signal levels, some debug info, etc) if anything at all. Everything else comes from/is controlled by the CMTS. Even in the enterprise grade modems like cisco hwic's, the docsis portion is almost entirely hidden from you.

Please don't use obscure ports for the sockets (aka tcp:4000).

1) many corporate/etc firewalls filter these type of packets

2) my personal reaction when the browser requests access to a socket on an unusual port is "Deny". Which is just what I did, and of course then there is no notification to me that it failed or any way to create/join a room.

Just skimming, and e.g.

in: controllers/invoice.php

$data['invoices'] = $this->invoice_model->select_multiple($this->session->userdata('company_id'), $page, $this->pref_user['per_page'], TRUE, $sort_col);

$sort_col appears to be just uri_segment 2 of list_items.

select_multiple() then calls:

$sql = "SELECT id, name, DATEDIFF(NOW(), duedate) AS past_due FROM invoice WHERE company_id = " . $this->db->escape($company_id) . " ORDER BY $sort_col";

$sort_col is left as-is. It is certainly more difficult, since '()' aren't permitted in the uri, and we're already in the ORDER BY clause, but I think it may still be doable to get some blindsql into there.