958 karma · joined March 9, 2014
but here are some of the little bots i've written on the dime:
- ?lunch - an eggdrop command that displayed the catered lunch that day
- scheduling bots that posted to channels who was "on call" for that day
- yeah, that's it. in terms of bots. i thought i had more but i can't think of jack
(i know this is a "low content" post for hackernews, but this is a new thread with no posts, so ymmv.)
I think about this sometimes. When I was 15, and just learning to program, I thought I could code anything. And if you look at history, I was perhaps right.
Now, as a seasoned professional software developer, all I see is pitfalls everywhere...
Found the position on the company website which I visited after looking at a whoishiring thread.
print $amount;I was offered three jobs at the same time. One, local, paid half of my current job. Another, remote for a company in Vancouver, paid 71.5% of my current job.
It's a good thing to attempt!
Before generating the PW reset link, someone might try to login first. So they'd enter bob@example.com into the login form and then when that failed, it's not uncommon to redirect with error-msg-in-session to /login?email=bob@example.com . So you'd leak the email first.
> IceSoft Software presents IceZmodem, an amazing
> new Zmodem file transfer protocol with 100%
> standard Zmodem compatibility and many enhancements.
> While transferring files you can chat with the
> remote user, shell to DOS, edit a text file,
> play Digital MOD file Music, or play games.
> You can even get 2 pages of system information about
> the remote computer. Sysops can view the dropfile
> to find out who is using the BBS. It has one of the
> best status displays ever and includes a Screen
> Saver. TurboTrans, a Zmodem speed booster, has
> helped to get 99% efficiency on some file
> transfers.
> This amazing protocol simply has to be seen to
> be believed! Supports Sound Blaster or DACs
> for music.
- phonelines can be hijacked (this article)
- DNS can be hijacked in a similar manner
- SMS can be hijacked (for 2FA via text message)
I guess 2FA using an authenticator app is the way to go for now. Do you guys agree with the removal of backup phone numbers recommended here? Seems reasonable to me but scary; I've lost my phone(s :( ) before. I do have backup codes generated though.
I am not sure that being asked not to disclose is a good enough reason without further justification; in fact it seems like a poor reason to me. Mozilla is in my view kind of a shepherd for internet users and I'd hope they'd fall more on the side of "let's not let our users get owned unnecessarily" than that of "let's sit on this vulnerability just because the disclosing party asked us to."
Edit: It may be that this is only an issue inside of Firefox extensions (addons). In which case, maybe the point is moot. See: https://github.com/mozilla/addons-linter/blob/master/docs/th...
Still, very cool. And the presence of cameras everywhere should help navigate insurance/accident stuff everywhere, I'd hope.
>
> Federation supports what Cunningham has described as "a chorus of voices" where users share content but maintain their individual perspectives.[3] This approach contrasts with the tendency of centralized wikis such as Wikipedia to function as consensus engines.[4]
- https://en.wikipedia.org/wiki/Smallest_Federated_Wiki
In short I guess if I disagree with a page instead of editing it and starting an edit-war I can fork it.
Does FB now have an option like Google to export your data? I thought that was a nice touch on Google's part; I vaguely remember reading it was championed by some people in the company who really wanted to avoid locking people in out of their own moral convictions.
I confess to not seeing the bigger picture here: I don't see how all of this can be equated to locking a user's data into Facebook. Would it be against TOS to write a FB app that crawled a user's graph and downloaded all of their data?