Just generally, don't write SQL queries as strings. An ORM is one option, language-level extensions another. But for that you need some good macros in your language - or convince the maintainers of your compiler to add…
There is a relatively recent audit[1] of EncFS with some damning results. I really wouldn't use it. [1]: https://defuse.ca/audits/encfs.htm
The CTFs I've played usually had a good mix of web stuff and binary exploitation. Also, the best way to learn this stuff is to do it. Even if this seems out of your league, I'd suggest to just join a team and start…
You do have some information in the browser you can't get to from the outside. For example, the filter with the most hits for me is "@@||192.168.$xmlhttprequest", which whitelists XMLHttpRequests to 192.168.*. A proxy…
If Github would only host git repositories, you'd be right. But people use Github for the issue tracker, source browser, code review system. Those are just as centralized as the svn server. And in my opinion, they are…
For some reason, the #content element is hidden with a `display: none`. Disable that and the content shows.
Gcc doesn't have such a warning. Clang has it, but it has to be explicitly enabled. (It's not even in -Wall or -Wextra.)
When there are too many messages, rsyslog will drop them in the default configuration, too. http://www.rsyslog.com/tag/systemlogratelimitinterval/
Who says the function call actually happens? If the function is short enough, they are a very good candidates for the JIT to inline. If they aren't short, the overhead of calling the function shouldn't matter much…
C has variable sized arrays. http://pastebin.com/BEgDNAhu That's no longer backward-compatible to C89, though.
You don't have to simulate multidimensional arrays in C. It's just easier than wrapping your head around the weird syntax required to pass them around: http://pastebin.com/JTjQMfxr
Tuition was common for a while, but it isn't anymore. Lower Saxony is the only state where you still have to pay it and they're abolishing next year [1]. [1]…
$ 5000 seems way too much. 50 TB of traffic would cost something like $ 200 (if all downloads were from the US or Europe) to $ 450 (if all of were from South America) according to this page:…
Is there any chance for that most-used software to be secure if the underlying OS is full of holes? (I'm not completely sure myself. But I'd rather err on the safe side.)
Afaik, as long as a weak cipher is enabled on both client and server, a MITM attacker can force it to be used. It involves manipulating the handshake to tell both parties the other one doesn't support any better cipher.
From the next paragraph: > An early prototype of the Inspector even included a significant portion of Firebug. Ultimately, integration proved to be too challenging and would have required rewrites that would have been…
$ find / -mindepth 10 | wc -L 273 I seem to have some slightly longer file paths on my home computer. Do I need that? Probably not. I could move those files somewhere else. But should I really have to worry about such…
I think it might be a support thing. They don't want people to return the computer because they couldn't figure out how to do simple task X with the OS on the computer, or because an update broke the proprietary drivers…
If you guess a wrong address, the process crashes. With a fork-based server, you don't care much about that. Every time you connect, you get a fresh new process - with the same addresses as the older copies even. So…
http://en.cppreference.com/w/cpp/string/basic_string/c_str According to that link, c_str() and data() work in constant time. With that restriction, it's impossible to do the joining lazily - it must be done when data is…
What's interesting here to me is that C++ strings are not immutable. So I'd have expected them to behave basically the same way as StringBuilders in other languages. But apparently they are required to be stored…
If the enterprise wanted as much compile time checking as possible, why haven't they adopted something like Haskell years ago? The checks done by the type systems of the JVM and CLR are laughable in comparison. There…
Looks like it's here: https://github.com/mozilla/tincan
You misunderstood the part about println. The implementation of println() uses synchronized internally. You can't see it without downloading the Java source code, but it's there.
CONNECT is used to get a raw socket connection through a HTTP proxy. There'd be no way to get SSL/TLS to work with a proxy without it (save using SOCKS instead of HTTP to talk to the proxy).
Just generally, don't write SQL queries as strings. An ORM is one option, language-level extensions another. But for that you need some good macros in your language - or convince the maintainers of your compiler to add…
There is a relatively recent audit[1] of EncFS with some damning results. I really wouldn't use it. [1]: https://defuse.ca/audits/encfs.htm
The CTFs I've played usually had a good mix of web stuff and binary exploitation. Also, the best way to learn this stuff is to do it. Even if this seems out of your league, I'd suggest to just join a team and start…
You do have some information in the browser you can't get to from the outside. For example, the filter with the most hits for me is "@@||192.168.$xmlhttprequest", which whitelists XMLHttpRequests to 192.168.*. A proxy…
If Github would only host git repositories, you'd be right. But people use Github for the issue tracker, source browser, code review system. Those are just as centralized as the svn server. And in my opinion, they are…
For some reason, the #content element is hidden with a `display: none`. Disable that and the content shows.
Gcc doesn't have such a warning. Clang has it, but it has to be explicitly enabled. (It's not even in -Wall or -Wextra.)
When there are too many messages, rsyslog will drop them in the default configuration, too. http://www.rsyslog.com/tag/systemlogratelimitinterval/
Who says the function call actually happens? If the function is short enough, they are a very good candidates for the JIT to inline. If they aren't short, the overhead of calling the function shouldn't matter much…
C has variable sized arrays. http://pastebin.com/BEgDNAhu That's no longer backward-compatible to C89, though.
You don't have to simulate multidimensional arrays in C. It's just easier than wrapping your head around the weird syntax required to pass them around: http://pastebin.com/JTjQMfxr
Tuition was common for a while, but it isn't anymore. Lower Saxony is the only state where you still have to pay it and they're abolishing next year [1]. [1]…
$ 5000 seems way too much. 50 TB of traffic would cost something like $ 200 (if all downloads were from the US or Europe) to $ 450 (if all of were from South America) according to this page:…
Is there any chance for that most-used software to be secure if the underlying OS is full of holes? (I'm not completely sure myself. But I'd rather err on the safe side.)
Afaik, as long as a weak cipher is enabled on both client and server, a MITM attacker can force it to be used. It involves manipulating the handshake to tell both parties the other one doesn't support any better cipher.
From the next paragraph: > An early prototype of the Inspector even included a significant portion of Firebug. Ultimately, integration proved to be too challenging and would have required rewrites that would have been…
$ find / -mindepth 10 | wc -L 273 I seem to have some slightly longer file paths on my home computer. Do I need that? Probably not. I could move those files somewhere else. But should I really have to worry about such…
I think it might be a support thing. They don't want people to return the computer because they couldn't figure out how to do simple task X with the OS on the computer, or because an update broke the proprietary drivers…
If you guess a wrong address, the process crashes. With a fork-based server, you don't care much about that. Every time you connect, you get a fresh new process - with the same addresses as the older copies even. So…
http://en.cppreference.com/w/cpp/string/basic_string/c_str According to that link, c_str() and data() work in constant time. With that restriction, it's impossible to do the joining lazily - it must be done when data is…
What's interesting here to me is that C++ strings are not immutable. So I'd have expected them to behave basically the same way as StringBuilders in other languages. But apparently they are required to be stored…
If the enterprise wanted as much compile time checking as possible, why haven't they adopted something like Haskell years ago? The checks done by the type systems of the JVM and CLR are laughable in comparison. There…
Looks like it's here: https://github.com/mozilla/tincan
You misunderstood the part about println. The implementation of println() uses synchronized internally. You can't see it without downloading the Java source code, but it's there.
CONNECT is used to get a raw socket connection through a HTTP proxy. There'd be no way to get SSL/TLS to work with a proxy without it (save using SOCKS instead of HTTP to talk to the proxy).