pepve

Remember that we're trying to mitigate exploits. The test code could just be an exploit. Either that or just dump and analyze the memory.

Either that, or the developer community has appropriated the term to mean something more generic.

I think that's a sarcastic stab at Java, not a real question by the author.

I read some of the comments on the pull request and the commits. This is the worst part of Github, these kinds of public massive flame wars, complete with animated gifs. I think Github should have moderation features for situations like this. Even though they're not common, they're damaging the constructive atmosphere that's usually present.

We use Gitolite (http://gitolite.com/gitolite/index.html). It can be configured to block (force) pushes for repositories, branches or persons, among other things.

I upvoted you, you make a good point.

It irks me that many people are calling this a backdoor. It's not. It's a vulnerability. You have to exploit it to get in.

Your private key should be encrypted with a strong password.

If you follow that best practice, you can stop worrying about your laptop being stolen, and start worrying about five dollar wrenches. (http://xkcd.com/538/)

I think you're being silly. And I don't think that's what downvotes are for (not that I have a say in the matter, because I don't have the button). Explaining why the comic is relevant would be like explaining the joke itself. That hardly every works.

Would you downvote a comment with just a link to a paper about the technology being discussed in the article?

Just a note, you don't have to mathematically solve a game in order to win it.

It's indeed a large amount of traffic. But it's not scary. None of it will get through if your SSH software is up to date, you have it configured properly, and user accounts are managed sanely. The attacks to be scared of are those that are actually targeted at you. And they will find the port SSH is running on either way.

Where do I find out more about this? A quick web search didn't yield anything.

34 hours is the roundtrip time, the distance is 17 light hours.

A drop with a radius of 5.7 km...

http://www.wolframalpha.com/input/?i=10MW+times+a+year+divid...

Came here to say the same.

Sources for that phrase:

http://bobsutton.typepad.com/my_weblog/2006/07/strong_opinio...

http://www.saffo.com/02008/07/26/strong-opinions-weakly-held...

There's also a wiki: http://xkcd-time.wikia.com/wiki/XKCD_Time_Wiki

I see claims like this regularly, but never any data to support it. Do you have anything to back it up?

Maybe I understand your sentiment - are you one of those children who thinks his/her toy hammer can build ocean liners?

:wink:

The ssh_config HashKnownHosts option hashes the contents of the known_hosts file, making it intractable to get a list of hosts. But of course your shell history will still provide it.

Some tools adjust their output based on it going to a terminal or not. Try 'ls' versus 'ls | cat'.

History is littered with designed societies.

Here is how Netbeans does it: http://netbeans.org/projects/versioncontrol/pages/Git_ui#Inl...

About that extensibility, would it be possible to implement inline diffs? (Paint margin green for added lines, show a red marker for deleted lines.)

I feel postscripts like that are not appropriate in general. I think it's the "should" that grates me most. It sounds arrogant to me. I know they do it to get a following. But please just let your content do the talking. And then give your readers the option to read more without being so pushy.

This is besides the point. Judging platforms using trivial benchmarks is utterly useless.

Also, I think they shouldn't have made it the third sentence anyone reads about their project.

What metrics can we use?

Your parent wrote "someone here has said in another comment". He meant the comment by arturventura downthread.

I guess people can be very different in this respect. I really need the full number (or at least all of the numbers in the same unit) to be displayed. I don't find the 'human' format helpful at all when looking at ls output.

It does not: https://www.google.com/search?q=sftp+without+ssh