eddington

11 ปีที่แล้วdiscuss

They "fixed" it. Well, there's still another.

https://hulbee.com/?query=%3C%2Fscript%3E%3Cimg%20src%3Dsdf%...

It runs on Chrome and bypasses the filter.

Edit: for context, the parent found an XSS issue. It was patched within a few hours. The patch was incomplete, and this one still worked. So, not only do they get it wrong for launch. When presented with an exploit they don't even patch the full vulnerability. I'll trust my data with someone who understands security, thank you very much.

eddington

13 ปีที่แล้วdiscuss

There appears to be a bug. Here is the state I reached (notice that "white" now has two bishops of the same color).

      a b c d e f g h
    8 ♖ ♘ ♗ ♕ ♔   ♘ ♖ 
    7 ♙ ♙ ♙ ♙ ♙ ♗     
    6                 
    5             ♙   
    4     ♝ ♟ ♟       
    3               ♙ 
    2 ♟ ♟ ♟     ♟ ♟ ♟ 
    1 ♜ ♞ ♝   ♚   ♞ ♜

Someone want to submit a pull request? :-)

edit: For anyone who wants to reproduce ("black" went first, since black appears as white on the board)

    1. e4 h5
    2. d4 h4
    3. Bb4 h3
    4. Qf3 g5
    5. Qxf7 Bxf7??

eddington

14 ปีที่แล้วdiscuss

Complete solution to today's problem in one line of python

def gen(univ, n=5): return univ if n == 1 else [x+y for y in gen(univ,n-1) for x in univ if all([(x+y)[start:start+upto] != (x+y)[start+upto:start+upto*2] for start in range(len(x+y)) for upto in range(1,(len(x+y)-start+2)/2)])]

... god that looks ugly. Call it with

>>> gen(["1", "2", "3"], 5) ['13121', '23121', '21321', '31321', '12321', '12131', '32131', '21231', '31231', '13231', '13212', '23212', '21312', '12312', '32312', '12132', '32132', '23132', '21232', '31232', '31213', '13213', '23213', '12313', '32313', '32123', '13123', '23123', '21323', '31323']

eddington

14 ปีที่แล้วdiscuss

Please leave those elsewhere.

eddington

14 ปีที่แล้วdiscuss

One of the authors of that book taught a class earlier this year at Berkeley. If you learn best listening, the lectures might help. I found them a bit easy, but a nice overview of the book.

http://webcast.berkeley.edu/playlist#c,d,Computer_Science,EC...

eddington

14 ปีที่แล้วdiscuss

It's worth noting that not every bug is a security-critical bug. Similarly, not every crash is a security-critical crash.

Sometimes you can exploit a bug to give you something, sometimes it's just a plain old bug.

People only pay for the security-critical ones.

eddington

14 ปีที่แล้วdiscuss

I don't know why you're saying it isn't NP-complete. For an arbitrary set of coins, it's definitely NP-complete. You could easily reduce 0-1 ILP to it, or subset-sum.

If you don't believe me, believe http://graal.ens-lyon.fr/~abenoit/algo09/coins2.pdf

"Optimally making change—representing a given value with the fewest coins from a set of denominations—is in general NP-hard."

eddington

14 ปีที่แล้วdiscuss

You're correct, but the article makes exactly the same point as you. There's no reason to correct it.

eddington

14 ปีที่แล้วdiscuss

Why is this comment being downvoted? It's not aggressive, rude or otherwise mean. It's also not factually incorrect (because it's talking about a possible future).

I agree that I don't believe this future is likely, but that's no reason to downvote him.

eddington

14 ปีที่แล้วdiscuss

You might want to fix this in case you ever decide to add a way to log on:

http://scrib.in/m27dy7

(I added the text </textarea><img src=g> and went to view it.)

eddington

14 ปีที่แล้วdiscuss

It actually looks like the vulnerability is on Rails itself, which Github is built on...

eddington

15 ปีที่แล้วdiscuss

Previously, 2 points...

http://news.ycombinator.com/item?id=3207255

eddington

15 ปีที่แล้วdiscuss

It should be noted Solitaire is not secure for long messages.

http://www.ciphergoth.org/crypto/solitaire/

eddington

15 ปีที่แล้วdiscuss

Still doesn't work going end to start.

    src starts at 50, ends at 100
    dst starts at 25, ends at 75.

First we copy 100 to 75, then 99 to 74, etc ... now we get to copy from 75 to 50, but we've overwritten it already!

eddington

15 ปีที่แล้วdiscuss

If you were to try to say "my friend's house" in lots of languages you have to use a gender-specific word.

In spanish, for example

La casa de mi amigo / La casa de mi amiga.

If you were to try to do it in a gender neutral manner ...

La casa de una persona que conozco bien.

Which translates roughly to "the house of a person that I know (and know well)."

Submissions

OpenCount, California's Election Auditing Tool, is Open Source

Pointer magic for efficient dynamic value representations

comments