adumbledore
Joined 8 years ago
Karma
61
Submissions
12
Member since
Mar 13
Recent submissions
Comment · 8 years ago
How political was this decision? Seems like they wanted to get rid of him and citet some minor misdemeanor some time back.
Comment · 8 years ago
It even says so on the official website ( https://oauth.net/2/grant-types/implicit/ ) - astonishing that they can't get this right. Maybe says something about the product?
Comment · 8 years ago
Scammy site - see previous discussion:https://news.ycombinator.com/item?id=16576516
Comment · 8 years ago
I am not sure about you, but as my career as a developer progressed I rely less on Stack Overflow today as I did in the past. To me it seems that this survey may have a strong bias.
Comment · 8 years ago
Oops, not sure what went on in my head there. Corrected!
Comment · 8 years ago
Not entirely sure, but is the idea to implement something like https://github.com/emirotin/mongodb-migrations in python? If so, what's the difference to other tools like:
Comment · 8 years ago
The article doesn't actually talk about preventing injection attacks, but rather identifying potential attack surfaces by doing an AST search for eval/exec in combination with mutable variables. The article does not explain what limitations exist for their runtime check:
> This results in 5 false positives (out of 56 benign inputs), which are caused by limitations of the static analysis (3/5) or node types outside of the safe set (2/5).
Besides that, it's good to see more security tools - especially when the research is open source: https://github.com/sola-da/Synode
Comment · 8 years ago
Something being apparent (in a certain demographic) does not in any sense reduce the validity of scientific research in this area. There have been great papers on topics like these in the past, some of them even award-winning and read-worthy.
Comment · 8 years ago
Were are you reading that? It's a long report but I wasn't able to find what you're referring to. Would be awesome if you could clarify!