Or from GitHub's POV, how else can you use this XSS? Example: Open a new window
with info on howto subvert particular censorship. What else?
More GitHub DDoS details: http://www.netresec.com/?page=Blog&month=2015-03&post=China%27s-Man-on-the-Side-Attack-on-GitHub … Wouldn't it be safer for attacker to load DDoS victim's
content via img than script tag?
Faust: I want to XSS everyone! Devil: Sign here… Faust: Oh no, GitHub server's
can't handle the traffic! ♪ Twilight zone theme ♪
Any more technical details on the GitHub DDOS beyond this http://insight-labs.org/?p=1682 for the curious?
Anyone know why Chrome percent-encodes single quote in URI query? http://jsfiddle.net/unLrqxso/1/ Its a reserved char so encoding changes URI.
Hilarious dev's Tinder bot woman proxies male suitors' messages to one
another. http://www.theverge.com/2015/3/25/8277743/tinder-hack-bros-swiping-bros … Sitcom misunderstanding generator.
Cool Creative Commons limited edition shirt made of Noun Project images - http://creativecommons.org/weblog/entry/45224 … @creativecommons. Just ordered mine!
Chrome to implement pointer events! https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/ODWmcKNQl0I …
VHD in PowerShell: easy. Find drive letter: hard. Mount-DiskImage $vhd; Get-Partition -DiskNumber (Get-DiskImage -ImagePath $vhd).Number
Read registry of diff WinOS install: reg.exe load HKU\Name
X:\windows\system32\config\system http://forum.sysinternals.com/reading-windows-registry-offline_topic25765.html … Easier than expected.
Push messaging and notifications are landing in Chrome 42. http://updates.html5rocks.com/2015/03/push-notificatons-on-the-open-web … via @ChromiumDev
World's first Disposable Single-Use Unlubricated Monocle, for the On-the-Go
Gentleman (or Lady) http://kck.st/1BM0EFd
Self driving cars, or remotely driven cars. Which will catch on first and how will you
tell? http://www.openwebrtc.io/blog/2015/3/12/driving-an-excavator-using-openwebrtc-and-oculus-rift-video …
Chrome moving Service Worker's fetch() API to the window. Like XHR but with
promises http://updates.html5rocks.com/2015/03/introduction-to-fetch … via @ChromiumDev
VGA Miner on Archive https://archive.org/details/msdos_VGA_Miner_1989 … The OG Minecraft
Bi-monthly reminder that neither of JavaScript's equality operators (== and ===)
are reflexive. http://dorey.github.io/JavaScript-Equality-Table/ …
ASCII fluid dynamics (IOCCC2012) runs ASCII art (including its own obfuscated src)
through a fluid physics simulation http://youtu.be/QMYfkOtYYlg
StackOverflow Qs on the little known C++ "operators" --> and =! http://stackoverflow.com/questions/1642028 … http://stackoverflow.com/questions/21029174 …
How do you conditionally sprite/concat/shard based on http version? https://mattwilcox.net/web-development/http2-for-front-end-web-developers …
Finished re-watching Galaxy Quest: still awesome. For how long did I mistakenly
attribute "Never give up, never surrender" to Toy Story?
Some rights reserved