xPaw

Made a online tool that tests for this vuln: https://lab.xpaw.me/MS15-034/?host=bing.com

It is actually possible to clone/push wiki pages using git: https://help.github.com/articles/adding-and-editing-wiki-pag...

Our post was made BEFORE that page was live and any announcements by Valve were published.

Why blog.cloudflare.com is not SSL-only?

Why is "GitHub for Windows" listed under "Authorized applications" and not "GitHub applications"?

They already have http://git.io

Also list of Linux games on Steam:

1. http://steamlinux.xpaw.ru/

2. http://steamdb.info/linux/ (automated, pulls data from Steam)

2. I have a website that displays historical changes (diffs) between things, and I noticed it was displaying "blockquote" for no reason there. 3. Me too!

4 different people on Chrome 27 confirmed it gets replaced by 'blockquote'

He just uses JSONP-ajax to get result from "http://www.patrick-wied.at/static/qrgen/qrdecode_widget.php?.... It's a dumb idea to sell this for 15$

I think arrow should be replaced with raw css, or converted to base64, since it's very small image, it won't be big as base64.

Yep, any website using CloudFlare's DNS is not resolving.

Not bad, but you should get rid of jQuery, it's absolutely not needed in here.

Discovered this when I visited YouTube in incognito mode.

javascript:document.cookie = "VISITOR_INFO1_LIVE=u8uWhAyPa3U";

It's not really down.

Looking into an issue with one of our upstream providers, affecting multiple colos

https://twitter.com/CloudFlareSys/status/246997504950956032

CTF was lots of fun, but I never really bothered finishing final level :(