al3x

15 ms·

121.
by al3x 17y ago
I've been on Dvorak for a while now. Honestly, typing QWERTY on my iPhone isn't particularly difficult, as the muscle memory for the tiny on-screen keyboard seems to be different than that of my laptop keyboard. But it would be nice for App
122.
by al3x 17y ago
I was researching various Thinkpad models for a friend (and out of idle curiosity at the non-Mac laptop market) the other week, and found that complaints about the display quality are true across the Thinkpad line, even including their pric
123.
by al3x 17y ago
Quicksilver is basically a dead project. The lead developer now works on Google Quick Search Box. Open source contributors periodically write patches to keep the thing alive, but most of the plugins and such haven't been updated in ages. Us
124.
by al3x 17y ago
Neat technologies at play here, but at the end of the day, it's all kind of moot. It doesn't matter how many toy HTTP requests per second your web server can do: once you hook it up to a database, a network-based caching layer, or any other
125.
by al3x 17y ago
Thankfully, we don't have to choose between good programmers and good languages. Organizations that care can have both.
126.
by al3x 17y ago
I was at the JVM Language Summit yesterday and went to the session by the developers of Noop. Indeed, it has not been "delivered" - though they have a working "Hello World", the syntax of the language has not yet been finalized, nor have th
127.
by al3x 17y ago
There are some good points in this comment. Still, have you watched over the shoulder of a non-techie trying to use a recent version of iTunes? Accomplishing many goals, like configuring what content ends up on your iPod, is remarkably conf
128.
by al3x 17y ago
shrug
129.
by al3x 17y ago
Yes, I agree. That's why we've tried to assist Rails Core in reviewing a more comprehensive string tainting model. I've said for some time now that security needs to be institutionalized in frameworks in order for developers to be unable to
130.
by al3x 17y ago
Normally, we escape output as well. These fields were (foolishly) considered "trusted" and allowed to be rendered without escaping.
131.
by al3x 17y ago
Bug Labs is super cool, but this blog post is pretty vapid.
132.
by al3x 17y ago
No. We have a code review process. It wasn't caught in review, and was okayed for deployment by another engineer.
133.
by al3x 17y ago
We're a small company trying to solve a lot of difficult problems all at once. We make mistakes, but it's always interesting.
134.
by al3x 17y ago
See my other comment. The engineer who wrote this code did take the time to validate, but his validation was incorrect. Call it "blatant incompetence" if you like, but I'm guessing you've written a buggy validation or regex once or twice in
135.
by al3x 17y ago
A fix for this is being deployed as I type. For those interested in the details: the vulnerability was caused by inadequate invalidation of URLs submitted by users when registering OAuth applications. There was a validation routine on those
136.
by al3x 17y ago
They're working on it.
137.
by al3x 17y ago
If I could downvote this, I would.
138.
Cassandra_object: persistent storage for Ruby objects in Cassandra(github.com)
11 points by al3x 17y ago|0 comments
139.
by al3x 17y ago
A little proofreading and peer review would have gone a long way. We do, eventually, need different models of sharing identity and personal data on the web, but this is fairly incoherent.
140.
by al3x 17y ago
Actually, we at Twitter are thinking quite a bit about exactly this.
141.
by al3x 17y ago
But does that excuse issues with a platform that's intended to compete with the iPhone? The whole point of Gruber's piece is that Android is going to have to exceed the standard set by the iPhone in order to capture mindshare with early ado
142.
by al3x 17y ago
As the author of that "especially ignorant" quote, I'll try to explain what I meant. When talking about Linux on the desktop, I'm not talking about the kernel, per se. Mostly, I'm talking about the user experience as informed by GNOME, KDE,
143.
by al3x 17y ago
Individuals who want to sell their experiences and expertise are generally called "consultants". A marketplace for whate are essentially dilettante or part-time consultants seems hard to regulate and verify.
144.
by al3x 17y ago
Twitter is: http://twitter.com/jobs
145.
by al3x 17y ago
The verdict that idiomatic Scala is unreadable is questionable. One could say the same about most any language, save Python. I wouldn't let this piece color your perceptions of Scala. It's evolved a ton since early 2008, and it's too deep a
146.
by al3x 17y ago
A Behance dot grid notebook was with me at every meeting until it ran out of pages. I recently replaced it with a Whitelines notebook, which I like even better.
147.
by al3x 17y ago
I wrote about this in 2004: http://al3x.net/2004/11/14/emergentcollaborative-catagorizat...
148.
by al3x 17y ago
This is good advice. ankp's comment is also good advice. A well-run technical organization shouldn't have to choose between good programmers, code that performs, and the ability to quickly operationalize new hardware when necessary. If you'