personalcompute

iostream is not part of the STL, just the standard library.

Probably hardcoded, not in the DB.

In case it isn't clear, MTGox wasn't exactly what you'd call a professional operation.

Can't invite you w/o contact information. Add an email to your bio.

Looks like blogger/google took it down.

I did a more scientific analysis of the googlebot requests in the provided log (graph! http://i.imgur.com/uMoUT.png) and it definitely looks like it is taking shortest urls first. Anyone else with a large site want to check as well for further data?

His entire site that he observed this behavior on is static.

BBC has no story, they are parroting MT Gox's reports.

It is 100% possible actually. They are called temporary generated one-use passwords.

Not the intended purpose, but the search box has been very useful to me in the past as a quick second paste-buffer, much quicker than opening a text editor or anything to place it in.

The raw list: http://www.top500.org/list/2011/06/100

I think he means disregarding all that and looking at the raw voxels then applying a modified version of this algorithm, similar to marching cubes.

It's public. I have the db loaded in mysql right now, and have confirmed its validity (my account is in there).

People use webapps because they provide some kind of value to them. Housefed.com doesn't tell me what value it provides, so why would I waste my time creating a new password and a new spam-email on absolutely pure unfounded speculation? I actually have negative sentiment towards it now for appearing so arrogant as to think it doesn't have to explain itself.

Really, how does having an explanation hurt? You have nothing backing up your over-the-top linkbait claims in your post.

They are definitely similar, but I wouldn't say XSSI is a type of CSRF. CSRF refers specifically to a few methods of attack, distinct from what is used in XSSI.

Regardless, it seems CSRF is much more widely known than XSSI, so you could say worrying about the distinction is just pedantry. I was very surprised when I searched earlier and could not so much as find an OWASP mention of XSSI. Still very important to know though.

He's definitely correct about the false positives and that nonces and/or double submitted cookies are superior, I'm not arguing that, just the 'furthermore, spoofing is extremely easy,' which makes no sense there.

Yes, but if the user wishes to avoid their own security like this, they can already do it a thousand other ways (and to no adverse affect, there is no opportunity for an attacker to exploit this, I don't know what you're getting at).

How is spoofing the referer extremely easy? I can think of no way for an attack site to do this, short of having control over the entire user machine (or a significant browser exploit anyways), at which point all of your webapp security is irrelevant.

Correct, the technical term for it is 'XSSI', or Cross Site Script Inclusion.

Cross Site Script Inclusion. The article touches on a lot of things (including CSRF), but the HN title refers specifically to JSON (As well as the link's '#' fragment identifier), and therefore the last section, where it shows an attack site including unprotected JSON through the <script> tag, and unless I'm seriously mistaken, this is the definition of XSSI.

Isn't this XSSI, not CSRF?

Ah, awesome, thank you for the correction, this allows me to continue with my plan. I said that within an hour of registering, but had asked on their support page as well.

Another problem is 80legs will only crawl pages <100kb with the free/contest plan. This means it is useless for all but the smallest pages.

Then post the bitcoin-related whatever to HN. Instant winner.

Link to the CNBC story instead of blogspam then please?

Edit: I believe this is the source: http://www.cnbc.com/id/43378490/. Their source is "people familiar with the matter."

4(9μ + 16φ + 6Ω - 200) + 3Ω - 1 + 2(2Δ - μ) + 9(9β - 5Δ - 3Ω ) = 0

10(4β - 4Δ + 3Ω ) - Δ + μ + β - 3 - 8Ω + 11(5μ - 2Ω + 4φ) = 0

9(2Ω - 4Δ + 6φ) - 15Ω - 3(Ω + 1 - Δ) + 5(7μ + 5β - 13) = 0

10(2Ω - 600 + 5φ + 6β) + 3(β - μ) + φ + μ - 4(6Δ - 8μ + 5Ω ) = 0

Nano compared to any other UAV.

I'm sure it does in China. There are other foreign mega-corps like this that you probably don't hear much about in the US, specially, Tencent comes to mind.

Flare is flash only, not Javascript.

You can definitely use log scales with google charts, just it won't do it for you. You'll have to perform the math beforehand and send custom number labels.

As for being client side, it's just a proof of concept at the moment.