robert-wallis

wait for it... the exact section of the code that contains the "sprintf" I mentioned will pop into your screen. Just be patient.

sprintf buffer overflow in the string library https://github.com/LuaDist/lua/commit/52eff16f51750cf47afaa5...

This library is not included in NetBSD as far as I can tell: http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/modules/lua/?onl...

But it's an indication that it shouldn't be included in a Kernel.

I just created a model from a table with over 20 columns. A few days ago I had to hardcode a list of settings I screenscraped into a JS array in the Chrome console. You can't refactor things like that.

Wouldn't it be ironic if the list were hosted by a company who's revenue largely comes from ads. Like most internet companies today.

Maybe some kind of balance would be better than a block list. Effective ads that don't annoy.

I always believed leaders should do the main thing the company does. Microsoft's new CEO should write software and make hardware. It's hard for me to respect a manager that doesn't understand what I do.

interview video http://www.twitch.tv/jenesee/c/2488434

Just checked, you can now enable SSL, but by default it is not enabled. No doubt most people don't have it on. Therefore, Yahoo is still an insecure email service.

Why promote Yahoo!'s email service? They still don't use SSL after you are logged in right? Sending your plaintext session cookie over the net, allowing people in your coffee shop to hijack your email. Nobody should be encouraging people to keep or get Yahoo email accounts.

MVP

Any reason the logo is on the right instead of standard left? https://www.google.com/search?hl=en&biw=1435&bih=762...

In other news, "Windows laptop gets compromised, media responds 'And your point is?...'"

It would be nice if the attack vector were the main focus of the article, but how much publicity would "Java plugin allows Facebook and Apple to be hacked." get.

Here's some perspective: http://www.qualys.com/research/top10/

Also here's their site where you can check your current config: https://browsercheck.qualys.com/

Chrome's "click to play" plugin setting chrome://settings/content has a nice user experience, because on YouTube you click the video that you want to play instead of clicking some off menu to enable Flash on the whole domain. I think that setting should be default, but likely the AdSense team would have a throwdown with the Chromium team if that happened.

This makes me think of a "degree, in fashion, from France" http://www.youtube.com/watch?v=EZFOab0Ar4M #portal2

What about the security angle? The registrar should log these transactions with the IP address and probably the UA string so they can tell the customer what computer they were using when they did it. And if it wasn't them, then investigate how their password was stolen or security was breached.

Does your registrar log information like this?