ErikD

14 lat temudiscuss

That uses mostly data collected clientside using javascript and flash. HTTP headers alone are no way enough.

14 lat temudiscuss

With and option to disable this behavior from the HTML websites could chose to disable it on forms which might contain sensitive data. Browsers could even disable it by default and let the websites enable using an attribute.

ErikD

14 lat temudiscuss

Anyone else ending up on a "UPVC Doors and Windows" site when going to http://jsunittest.com/ ?

ErikD

14 lat temudiscuss

I think anothermachine meant it should be default behavior in browsers. I agree, with the attribute to disable or enable this from the html it would be a nice feature for browsers to implement.

ErikD

14 lat temudiscuss

I would suggest using userData [1] for IE 6 and 7.

[1] http://msdn.microsoft.com/en-us/library/ms533007%28v=vs.85%2...

ErikD

14 lat temudiscuss

That's what https is for. It should prevent them from doing anything useful with the packets.

ErikD

14 lat temudiscuss

In Chrome it's 3300 [1]

[1] http://src.chromium.org/chrome/trunk/src/net/cookies/cookie_... search for kMaxCookies

ErikD

14 lat temudiscuss

What apps do you have installed? This is interesting to know since the data might be from a popular app instead of Apple.

ErikD

14 lat temudiscuss

Does it really matter that the hacker doesn't know which hash belongs to the user? He will still be able to do a dictionary attack using the same method you use to login.

Wouldn't this just make dictionary attacks easier? Now the hacker doesn't have to find one exact password but has the option to match any of his dictionary passwords to any of the password hashes.

I know that there are hardly any collisions and that in practise this wouldn't really change a thing. But in theory the dictionary attack would be faster this way.

ErikD

14 lat temudiscuss

You don't: http://en.wikipedia.org/wiki/Halting_problem

ErikD

14 lat temudiscuss

Using mk-slave-delay you can do this with Mysql as well. We always have a slave running behind a day. You can fast forward the slave using the 'START SLAVE UNTIL' command.

ErikD

14 lat temudiscuss

Once Chrome and *JS support SourceMap it shouldn't be that hard to debug.

ErikD

14 lat temudiscuss

Opa means Grandpa in Dutch.

ErikD

14 lat temudiscuss

Keep in mind that serving already properly minimized png, jpg and gif images with gzip can actually increase their size.

ErikD

14 lat temudiscuss

It's not faster in all cases. You can construct mazes on which bi-directional is a lot slower.

ErikD

14 lat temudiscuss

He means using the auto-complete in your address bar, not actually searching with it.

ErikD

15 lat temudiscuss

Since the code in question was run server side using nodejs you can just enable it. Using it for client side javascript is another case indeed.

ErikD

15 lat temudiscuss

People should realize that by using this service, all sensitive data posted to your website will be readable by google.

ErikD

15 lat temudiscuss

Yes. Here is a link to the linkedin blog: http://blog.linkedin.com/2011/07/24/apply-with-linkedin/

ErikD

15 lat temudiscuss

That's very much possible using images:

  .someIcon {
  padding: 0 0 0 20px;
  background: url(someIcon.png) left center no-repeat;
  }

Submissions

Brainfuck JIT

All you need to know about SYN floods

PhpRedisAdmin, a simple web interface to manage Redis databases

comments