catshirt

is that how you interpreted it? it's not until paragraph 13 (!) where author states:

"Josh realised my app might be somehow getting cookies from visiting our site inside this web view, and then sharing those cookies with AFNetworking's underlying NSURLSession, which is handling my requests."

which would have been clear if they'd checked the cookies of the NSURLSession request.

then, in paragraph 17, the author starts concluding:

> "And so the the CSRF check was failing every time, because I wasn't sending a Referer header, or any other related CSRF bits."

which would have been clear if they tried comparing a working request to a failing request.

and finally,

> "And of course, I didn't even know about these cookies, so I wasn't deleting them on log out"

which leads me believe the author never checked the request at all, let alone before anything else.

i'm ignoring the fact the bug sat for months, and took a second person to fix, and got a write up on the blog... so i'm going to have to assume my advice has an audience (like anyone who would classify this bug as "bizarre").

(not trying to pass judgement on the author here at all... we have all been there :))

when you have a bizarre request issue... find a working request, find the failing request, compare the headers... problem solved.

Godel Escher Bach has a bit where he explores an ant colony as consciousness, opposed to an individual ant (which are more like "thoughts", to put it one way)

Rick Doblin, founder of MAPS, talks a bit about this in his interview with Duncan Trussel: http://www.duncantrussell.com/episodes/2016/7/18/rick-doblin

(i'd imagine this information is available elsewhere, this is just the instance i happened to come across myself...)

i think OP is calling the process phony, not the conclusions. the government theatre that acts like it's learning something new about the benefits of these drugs so they can palletize their legalization. (palletize -- to make palatable -- can i do that?)

eh. don't worry about me. your vote is positive and so you're doing fine. maybe i am lonely and angry. i didn't want to be critical really. just trying to provide some closure, since you asked...

ps - TalkJS website is awesome. triggers my retro feelies

i don't think i'm lonely or angry. i'm just not super fond of irrelevance or self promotion. so using one as a platform for the other kind of rubs me the wrong way.

on one hand, who am i to arbitrate relevance? on the other hand, i really think you're pushing it.

"HyperTrack of messaging" -- you are using "HyperTrack" here, the proper noun, as an analogy for "SaaS". TalkJS is "SaaS of messaging". and i think "hey i have a SaaS product too!" is too broad to be contextual.

a similar scenario would be an employee of Stripe posting in this thread, promoting Stripe. sure they could argue it is relevant. i'd argue they are trying a little too hard to make it so.

forgive me if i've missed something.

dang. this is so awesome. really makes the machine feel so much more accessible.

and your ad is one of the best i've seen since MasterClass ads in my Facebook feed. i felt like the ad was basically free content. i was learning!

"ganking 0ms reaction times would be fun"

wonder, against this type of AI, if it's even possible to land something like meat hook or sacred arrow?

on the note of good decision making, maybe even a failed hook could be enough to exploit the bot into death. for instance, hero X chases bot back toward tower. hook comes in predicting the bots path. bot would have to either walk into the hook or walk back into the hero chasing it.

the takeaway is that you can do it, as the title suggests :)

lot of help that did...

in this instance the patent itself bothers me more than the trolling.

got my Vive 2 weeks ago. literally just got Altspace ready yesterday. i have friends who work there, and some of my favorite artists have authored there (Duncan Trussell, Reggie Watts). and if you take VR to it's logical conclusion, Altspace was basically v1 of the Matrix. so... yeah... as far as companies closing down goes, kind of a bummer...

maybe i'm a little crazy (doesn't get much more generic than 3d cubes...) but the demo visualization brought me back to 3d animation in Flash. interesting peek/reminder of how our tooling contributes to our outputs. (or maybe i'm just crazy).

awesome work!

seems disingenuous to suggest race had no part in her decision. it's not a coincidence she started getting racist in defense.

if someone is spouting off the N word while beating up a black dude i seriously doubt you'd demonstrate the ignorance or audacity required to call it irrelevant. so what's the difference?

haha. i hear you. i'm kind of more into the idea of Facebook saying something like "caution: seems like you're kind of being a dick!" before you post a comment.

yep. and i think that is just a small step.

when you enter some community event (bingo, concerts, golf) the social atmosphere does a good job self regulating. there are expected standards for behavior. the internet is a different beast of course, but i wonder if we still can't do a better job encouraging people do be/do good.

I recognize this may be a really unpopular opinion but lately I've been feeling like the lack of values and personality in ubiquitous apps like Instagram, Facebook, may be short sighted.

don't get me wrong. i make web software- I get it. just build an interface to the data. but I also think a little personality and good will from these apps could help make the world a better place (Facebook does this in some respects, like celebrating birthdays and friendship anniversaries with fun videos).

that all said... this kind of subjective censorship is totally not what I had in mind... perhaps it's a fine line.

aside (but perhaps more relevant): I'm curious as to who arbitrates this blacklist, and who is responsible for the funny messaging it responds with. (https://en.m.wikipedia.org/wiki/Tonga)

previous discussion: https://news.ycombinator.com/item?id=14736270

got it. thanks mate. was an honest question. maybe negligent on my part, but i had something like a dunking booth in mind. wasn't considering a rush up the nose. definitely at least a bit closer to waterboarding than what i'd imagined. :)

agreed. tried to articulate that in my post! thanks :)

eyyyyy tendigi. hi Jeff! looks like you're doing some cool stuff.

- your old downstairs guy

it's kinda been tried by proxy through authentication standards like OpenID.

i wonder if the solution isn't to back off a little though. that is, standardize some process instead of (de?)centralizing authentication. something that gives developers more control, and users more familiarity, than OpenID.

great noob elaboration. much appreciated. :)

is not? or was not? honest question. care to elaborate for a noob?

you are being submerged in liquid? therefor holding your breath? therefor all together avoiding any of the torture induced by waterboarding?

if you're interested in hammering out some science for us, waterboard yourself and report back. i think you might be surprised.

i visited improve.ai- presumably some cookie there is catching me.

that's not to say I haven't had some super weird "how do they know..." moments with Facebook ads lately...

kickstarter campaign for an unpublished book titled "Bitcoin, Explained on a Napkin".

no content, nothing explained.

ok so, for lack of value, I deleted my previous response to your post: "wow this is super awesome- wish I had a use case for it!"

but now that improve.ai ads are starting to pop up in my Facebook feed, thought I could provide some value letting you know about that mistarget. XD

> So the moral of this commit message is: Yes, objectively bad names exist.

more like objectively bad content blocking algorithms...

i'm not going to pretend i have a better solution than hardcoding file names. but i'm also not going to pretend it's not the responsibility of the ad blocker to eliminate false positives.