For those that don't know, OpenSSH previously used MD5 to secure the private keys. They added the option a while back to use PBKDF2 via PKCS#8, but I rarely see it in use in the wild.
The existing 2 factor auth basically does this, without the requirement of SMS, internet, or any connectivity really in general. The OTP tokens are based on time or a counter, and a secret key.
I don't know of any that are hiring, but there are lots of non profit conservation orgs that could probably seriously use some tech help if you're just looking for somewhere to volunteer.
IIRC, the previous implementation of Riak Search had some gotchas when it came to rebalancing and adding/removing nodes. Does anyone know if this new arch fixes or helps with those issues?
Looking through the source code posted elsewhere, it appears to make heavy use of AndroMDA internally, which appears to generate Java classes from UML diagrams. I think that's important to keep in mind when judging the 500m figure, as 500m computer generated code != 500m human code.
Or just use a static site generator? It amazes me how many rarely updated sites use Wordpress when the people who run them are more than capable of using something like jekyl. I guess the themes ecosystem etc around Wordpress is just too big to pass up?
My last experience with Tor was somewhat painful due to the sluggish nature of it. If Firefox added Tor as a feature, making Tor "mainstream", could the existing Tor network handle the extra load?
This is a huge deal for enterprise app developers. We've been able to develop on a modern web platform, but have our customers use our app with IE 6, 7 and 8 (via ChromeFrame). Now we're going to have to add support for at the very least IE8, since XP (still over 50% market share in business) isn't going anywhere anytime soon, despite Microsoft EOLing it. Most IT admins I've dealt with refuse to install any other browsers on their systems, but don't have a problem with browser plugins for some reason.
Didn't Paypal start out as a Palm Pilot app that transmitted money using cryptography? I think it's interesting that bitcoin is kind of the 21st century version of that.
There is a download link under options for pictures in "theater" mode. I haven't run into any WebP images yet, so I'm not sure if it downloads as jpg or not, but I've read it gives you the jpg link.
I uninstalled all of the Java plugins when the 0 days started coming out a couple months ago. If you want to be extra safe, you should probably have some sort of Linux LiveCD without any plugins enabled, that acts as a trusted environment for banking.
This is ridiculous. If you just want to learn "Rails", you've already lost. Your goal should be learning how to build things with software, not learning one facet of building a web application. If getting Rails setup and installed is too frustrating, maybe software development isn't for you.
You can also trigger the debugger only if certain conditions exist. This is helpful if you are trying to fix a bug in a code branch that is hit very often, but the bug only happens under certain conditions.
If I submit a form where the param is "login[select]=* from users limit 1 --" when I inspect params[:login] I get {"select"=>"* from users limit 1 --"}. Is there a different way of submitting things that converts it to symbols? params[:login] works due to it being a HashWithIndifferentAccess
It seems like this is being conflated with the session token issue? How do you submit params with symbolized keys? Hashes are easy enough, but it doesn't work with hashes that have strings as keys, only symbols.
EDIT:
Just to be clear, tenderlove (Ruby/Rails committer) confirms that you do not need to edit the session to exploit this (http://news.ycombinator.com/item?id=4999767). It's still unclear how it is possible otherwise though, I assume he's being purposefully vague.
I haven't used the Linux version in a while, but as it's not a first class citizen of the kernel, I don't think it will ever be the same as a BSD implementation. In my opinion, if you're doing anything with storage, you'd be crazy not to use ZFS, even if that means learning a new OS/kernel.
This looks pretty cool, but by default it gives Obama a 100.00% chance of winning? Something seems off about that. With the more conservative settings that you list for stddev and sample size, it gives more reasonable results. Why didn't you pick those as default?