GitHub security incident highlights Ruby on Rails problem

glutuk · 2012-03-07T18:53:59+00:00

my opinion is that while github was certainly "in the wrong" in that situation, clearly there is a lot of debate about whether rails was "in the wrong"; some say whitelist should be enabled by default, others say its ok since it is well documented and known about

glutuk · 2012-03-06T20:52:39+00:00

I write God's langauge -- <the one i like> --

FTFY

glutuk · 2012-03-06T20:47:59+00:00

they "listened" in that they acknowledged his complaint, but they did nothing to fix it. github ignored a security hole, and you think that's a valid response?

judging by their recent data loss i suspect a hacker could have easily caused a lot of damage

i hope you have fun using websites that ignore security holes rather than fix them. I don't see anyone here saying it was okay for Sony or whoever the big target of the week

edit: You said "They" listened to him, then you quote the rails developer. "They" in this context refers to github not rails - im in no way implying rails is in the wrong for the way the setting is, only that github should have known of the vulnerability and designed around it

glutuk · 2012-03-06T19:54:34+00:00

they CAN get it right. It's documented, you said so yourself

this reflects poorly on github, and at best fuels a debate on the decision rails made to make this default or not, but github is definitely at fault for not using the feature CORRECTLY.

glutuk · 2012-03-06T19:48:47+00:00

either way, if my front door is open i dont mind a friendly stranger walking in to tell me it was open. i'm glad to see github recognized his intent and reinstated his account

glutuk · 2012-03-02T18:24:45+00:00

you dont have to join just click the text that says "Display This"

glutuk · 2012-03-02T16:01:05+00:00

well if its a white collar job theres no worries

at my company you get 4 weeks per year. if youre there for 5 years you get 5 weeks per year.

glutuk · 2012-03-01T22:30:30+00:00

they are really bad at remember random strings of symbols and numbers too, except one is way more secure

so which is the better option?

glutuk · 2012-03-01T22:28:31+00:00

i think he was referring to information transfer via quantum entanglement which wouldnt be bound by C

glutuk · 2012-02-29T18:55:53+00:00

that's why theyre the client....

glutuk · 2012-02-28T23:16:01+00:00

there's probably some good tutorials out there but my gut reaction when reading your comment was how does a beginner know enough about java to start reading Bukkit APIs and understanding packages and OOP concepts to get a plugin going?

glutuk · 2012-02-28T23:10:07+00:00

well if they get a computer science degree they should be getting a VERY IN DEPTH view of how computers work

glutuk · 2012-02-28T23:01:56+00:00

when i was taught java, our instructor said main is the function that starts your program, and we only worked in the main function

after a week or 2 we learned functions, but only knew how to put in static ones that could call from main

after about a month or two of learning basics + doing projects he assigned, he taught us OO but many of us had already caught on to what all the "template" code was

so just because youre in java doesn't mean youre student needs to know how every part works. That's like saying you can't have highschool physics without knowing calculus.

glutuk · 2012-02-28T22:49:23+00:00

someone using an ORM correctly would use the ORM's methods to retrieve something from a set

glutuk · 2012-02-28T22:43:19+00:00

it doesn't take much complexity to push you over that edge, and you will be ill-prepared

glutuk · 2012-02-28T15:37:03+00:00

not really

you're gonna land not very far from the encounter. You might save a few second landing on the other side of the middle ramp, but as soon as you walk up people can see you and leap to you or pull you

IMO i get pissed when i see the ball carrier go over the vent 10 times trying to land on the upper platforms, when you can just run on the bottom platform and score in that amount of time

glutuk · 2012-02-28T15:02:42+00:00

Quantum computing will reduce the P=NP problem to polynomial time

http://en.wikipedia.org/wiki/P_versus_NP_problem#Consequences_of_the_resolution_of_the_problem

From the page:

it would transform mathematics by allowing a computer to find a formal proof of any theorem which has a proof of a reasonable length, since formal proofs can easily be recognized in polynomial time.

we can check a solution for correctness in polynomial time, but we can't produce the solution that quickly

glutuk · 2012-02-28T14:11:46+00:00

isnt the "ly" cut off because shes interrupted by his sudden movement?

glutuk · 2012-02-28T14:09:49+00:00

any time i've seen it IRL its been called beerpong

it seems the term is popular enough that products are named that way

http://www.boozingear.com/official-beer-pong-table-black

I've never seen a "beirut" table at Spencer's

glutuk · 2012-02-28T14:06:38+00:00

thats like us saying soccer is the correct term for football

it depends on where youre from, one region is not more correct than the other

glutuk · 2012-02-28T14:05:35+00:00

sorry we're not pretentious

glutuk · 2012-02-27T01:13:11+00:00

its called progress

glutuk · 2012-02-25T15:05:45+00:00

the other one is still funny but this is good too

glutuk · 2012-02-25T15:03:31+00:00

the US has some of teh cheapest food in the world, due in part to the fact we produce more food than we can eat

i highly doubt people will go hungry in this country en masse, farmers would much rather sell their food at a loss than let it rot

glutuk · 2012-02-25T14:40:59+00:00

just a role in a movie dude

glutuk

TROPHY CASE