mofey

14 yıl öncediscuss

The public key form update vulnerability was based on the same concept in a different place.

14 yıl öncediscuss

"The same user exploited another vulnerability". It wasn't exactly "another vulnerability". It still had to do with the same mass attribute assignment feature just in a different place.

mofey

14 yıl öncediscuss

  Fred Wu
  So what's a good gem (if any) for safe guarding params on the controller level? @dhh's params.slice feels too dirty.
  DHH ‏
  yeah, it's too simple to be clean! I think you are using the wrong framework if you crave more complexity for its own sake.

mofey

14 yıl öncediscuss

Isn't that Twitter?

mofey

14 yıl öncediscuss

Love the comment by dbounds: "Nice work. FULL DISCLOSURE"

mofey

14 yıl öncediscuss

Hey, how come there are no comments by @dhh and @josevalim? Are we missing out on epicness of zedshaw-level?

mofey

14 yıl öncediscuss

Saw your full comment on github: https://github.com/blog/1068-public-key-security-vulnerabili... Well put. I guess startups can act enterprisy too when money is involved. The irony is that had they been actually proactive, they would have avoided this kind of publicity and money (for 3rd party audits).

mofey

15 yıl öncediscuss

This was probably the best tl;dr I've read.

mofey

15 yıl öncediscuss

Aren't continuations being removed from Ruby?

mofey

15 yıl öncediscuss

This excerpt has been appeared in many news featured on YC, but I think it deserves its own thread. In the beginning there's discussion about the performance penalties of dropping GOTOs. However, in the second part there are a few proposed solutions like event-driven loops (no, it's not what you think). Furthermore, he talks about the possibility of optimizing your code by transforming source code into optimized code in the same source language. Are there some notable implementations of the things he talked about?

mofey

15 yıl öncediscuss

This guy makes an argument as to why:

http://www.shoemoney.com/2011/07/13/twitter-will-be-as-worth...

mofey

15 yıl öncediscuss

How is this different from LinkedIn?

mofey

15 yıl öncediscuss

I use indentation provided by IntelliJ and it has always helped me indent my code.

mofey

15 yıl öncediscuss

- More meaningful information about a particular commit.

- Robustness of versioning. Certain types of errors will become extinct. For example, refactoring will update a variable in all 10 places instead of 9/10.

- VCS can take on tasks of an integration server. The VCS now will be able to make sure that your project "compiles" before accepting a commit.

The real motivation behind this would be to make branch management easier, since the VCS has now more information.

mofey

16 yıl öncediscuss

Should we stick to Java or C/C++ then?

mofey

16 yıl öncediscuss

Do it! Wordpress is ez to use.

mofey

16 yıl öncediscuss

How does GPL lose by pushing software to be open?

mofey

16 yıl öncediscuss

Ask pg: Is it true that you can't handle the back action with continuations in Lisp?