@XavierCombelle look at the code again: you said, you mixed the two when overwrite and when not, now, if your first one is the not overwrite, then you handle the KeyError once and then handle with setdefault; in my solution if not overwrite I handle both with setdefault
@davidism would you like an account on the server? Would that make it easier for you to work? We've already got all of the data in a mongodb and you can always download what else you need using wget insanely quickly.
I'll not test the attack right now but I'll explain how it works
You take as many urls as you can from a website add every single link into Google docs with =image(“url”) in cells where url is the url you took from the website With say 5000> different accounts you refresh Google Docs
@Ffisegydd Do you even understand what I am trying to say? Good that you flagged it for mod attention, so I can speak with him, but bad because I won't be the "tester" then.
I understand exactly what you're trying to say. You're saying you want to perform a DDoS attack on Stack Overflow. You claim to be doing this for ethical reasons. And if your test is "successful" and you bring down the SE network? Do you expect to be showered in praise? Did it even occur to you that maybe the SE developers run their own tests and know a lot more than you...
@Ffisegydd I got your issue and you're 80% right about them. I'll so assume and hope that they also think about this theoretical attack vector. As per my knowledge Google servers aren't in the SE network iptables.
At the risk of feeding the trolls, what makes you think the admins aren't aware of this, since it was all over HackerNews a while ago, and why do you think you need to cause a DOS to test it?
It's not like you've done any original work, you're just applying a known vector.
@DanLugg If you're taking it this far let me counteract by saying that my autobiography would apply to you right now. They weren't DDoS "threats", and is good how you're incentivized to help out. My username has a different history than that of autobiography. This is all.
@davidism Please. I won't comment further on your first words. The fact is that many notable websites still seem to be vulnerable and I don't know if SE is in them or not. But well, I'm done, won't help anymore like this.
@XavierCombelle but that just looks like it is saying that the user is logged in, what if there were stratified roles of users where only a few would be admins?
oh wait. There's a little doodad on flask.pocoo.org's snippets. Love those things
@XavierCombelle For your concerns of compression performance posted on your blog you may be able to use lz4 which has a very good performance in compression and discrete in size, while being ultrafast in decompressing.
@XavierCombelle basically, I want users to schedule a time, then they sign in by QR code on arrival to the place, then an admin can check if they scanned in for their lesson
Stop what you are doing, it does nothing but make you appear unprofessional. Don't be that guy. You can still stop it and be a helpful member of the community. @stupidtroll , also, change your nick back -_-
@GamesBrainiac That's by design: "If any component is an absolute path, all previous components (on Windows, including the previous drive letter, if there was one) are thrown away".
As well you might. In my (limited) experience Small Claims Court is pretty straightforward and hassle-free (if you're on the "gimme my money" end at least).
In fact I don't think I even had to attend court ...
Good luck with it ... if the other party's been ignoring you, d'you reckon there's a chance they won't show up? I understand it's surprisingly common, and the court obviously doesn't take kindly to it.
@BenjaminGruenbaum What did I do wrong now? I will stop the act if I know what it is ;) As soon as the system permits I'll change my nick back. If you read my chat history you'll know why I choose that name (and I regret)
Anyway I created the Meta post as suggested, but it was deleted, not even locked! All of this without receiving an answer..
If the concern is that I "have given more people info about an attack vector to exploit" then stay assured that there is no other info in the net to warrant the question removal -_-
This makes me think that they didn't really thought about this attack vector and discarded it as a "work in progress" to compensate for the missing mitigation system while deleting my question ensuring that it wouldn't reach the vaster masses in the meantime that they do their "work".
On three consecutive questions, I have been downvoted into negative values, even though the question was clear. When a reason was provided for the down votes, the reason was nonsense (BS) or simply illustrated lack of understanding of entire concept (meaning they shouldn't have even bothered loo...
on another line.. does only allowing specific ips in iptables (Linux obviously) stop other ips flooding your server in case of a DDoS attempt?
I'm coupling a test app that evaluates "trusty" ips and put them on the allowed list in iptables that then makes the server only available to those trusty ips when a DDoS is attempted
and switches back after a time you set before starting the app
I'm just looking at it from a theoretical standpoint before delving into building the "real" thing
The flow would be like client -> server -> client ? in allowed_ip -> ? 0 -> reject client -> server -> client ? in allowed_ip -> ? 1 -> allow -> process...
This would in theory mean that the server has to be restarted once to disconnect from the malicious DDoSers and ensure that it is still available for the "trusted" ips while avoiding a network saturation or any other issue caused by a DDoS attack
Is there a website that can explain the meaning of some short Python code? Just like [regex101.com](www.regex101.com) explains any regex you give to it
bugs are reported and fixed regularly, some of which represent potential security issues. see the changelog for a list of what is fixed in each release
in general, you do not want an old release of 2 or 3
Because that doesn't do anything, you need to assign it, print it, etc. It won't be very interesting anyway, it's only one line in one frame. pythontutor.com/…
@Tim The recent 2.7.x releases contain security fixes relating to Heartbleed ... I think that's only relevant if you're on Windows (Linux/Mac Python builds use the system SSL libs), but regardless of the exact issues, you should always be on the latest point release; the difference between 2.x.y and 2.x.y+1 is only ever bugfixes, so there's no downside.
@Tim __mod__ (use backticks for code formatting btw) implements the % operator ... it's called mod because for integers that's the modulo operation, but it can be used with any type.
the one about string formatting says you use the % operator, the special method reference says that the % operator is implemented with the special __mod__ method
% is just an operator, like any other - they all have their own magic method, and they do different things with different types: for example + is addition with numeric types and concatenation with sequence types.
An alternative to percent-formatting is the format() function - originally intended as a replacement for percent-formatting, but the consensus these days is that both have their place, and both will stay in the language for the foreseeable future.