Hacker Newsnew | past | comments | ask | show | jobs | submit | cadillackness's commentslogin

I wouldn't recommend Slime to ANYONE because the developers do not care about security. The issue[0] of a gaping security hole has been open for going on two years.


Did you forget the link?


They are talking about this issue

https://github.com/slime/slime/issues/286

If it has being left unaddressed because no one thinks it is enough of a problem. That is how free software works


That actually scares me enough to disable Swank on my laptop. Actually, to disable all localhost services that could by any stretch of the imagination execute code.

Tl;dr: web sites can send requests to localhost TCP sockets despite origin restrictions using a trick called DNS rebinding.


Yes, it certainly a gaping security hope. Yet I cant bring myself to submit a patch


And to make it even worse, Object.create does parent-relationship, and Object.assign does the cloning(if you squint a little bit). Which seems like it should be flip-flopped, since "create" is closer to "cloning" than "assign" is. Even the es5 improvements ended up getting it wrong!


I'd rather have people write Free software in JS than not write any at all.


These sorts of charts always fall short because they never explain how they were influenced. If you're not in the know already, this provides little information to you. Prolog influenced Clojure, but how? If I didn't already know about core.logic, I'd be scratching my head about why. And even then, it took me a good minute to rack my brain to think of some possible way they were connected because it's not obvious.


I dunno, I found it useful in that my favourite language (Lua) has some interesting connections I wasn't aware of before, such as the influence on Io, which is new to me.

Point is, it was sort of fun to browse around and see just how incestuous our language universe is...


The only problem with MOOCs I've had is that they assume the message boards are usable (they're not) and basically non-existent study groups. The boards are insanely slow and they're no substitute for office hours or a study group. Study groups are hard to put together because most people don't have 2-5 people in real life interested in taking the course and have time to come together on a Friday night. Though I'm a little embarrassed to admit it, those two factors have caused me to "fudge" the homework a little bit because there's just no way I can tackle something like that on my own and finish it on time. I still learned the material, but there's always the guilt that I "cheated" because I just don't have the time to finish it without any external help.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: