Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
dessant
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
74 ms
·
751.
▲
by
dessant
8y ago
For a customer it's irrelevant that the discount is a loss leader. The end result is that I can renew a .space domain for half the price at Namecheap, without having to buy other services.
752.
▲
by
dessant
8y ago
New GTLDs may cost considerably more at Cloudflare Registrar. For example, the annual cost of a .space domain during transfer is $15.18 (it was $17 two months ago), while renewal for the same domain at Namecheap costs $9.06. To be fair Name
753.
▲
by
dessant
8y ago
Both storage types will have comparable prices at 128GB, and their cost per GB will decrese at different rates as you increase storage capacity. It's not fair to compare pricing between different storage capacities across different sto
754.
▲
by
dessant
8y ago
I think you meant 3x, 30x may have been true when SSDs were first brought to market. https://www.wd.com/products/internal-ssd/wd-blue-3d-nand-sat... https://www.wd.com/products/internal-storag
755.
▲
by
dessant
8y ago
If you want to reduce your costs, you can have HTTPS with a custom domain on a free Heroku app by using Cloudflare. Why are you using Firebase to serve quotes? I imagine the dataset could number just a couple thousand quotes max, which is f
756.
▲
by
dessant
8y ago
The site appears to be hosted by GitHub, and the API is served by Heroku, which has a free tier with a soft bandwidth limit of 2TB/month.
757.
▲
by
dessant
8y ago
You might enjoy this: https://xkcd.com/1213/
758.
▲
by
dessant
8y ago
The KV Storage API appears to be almost identical to the extension Storage API in Firefox, which is a joy to use. https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...
759.
▲
Firefox extensions cannot securely clear browsing data
(armin.dev)
5 points
by
dessant
8y ago
|
1 comments
760.
▲
W3C Captcha Accessibility Report Needs Your Input
(w3.org)
2 points
by
dessant
8y ago
|
0 comments
761.
▲
by
dessant
8y ago
This is also valuable for debugging CI builds, and it can be more secure than the debugging mode CI services provide when coupled with an ssh key. For example on Travis CI a host is displayed in the logs that anyone can access through ssh.
762.
▲
by
dessant
8y ago
> Some respect and acknowledgement, and more than $15/hour, seems like it would be a good start. If it isn't already the case in the US, psychologically hazardous jobs should come with wage premiums.
763.
▲
by
dessant
8y ago
This is a rather common tactic, they spam out automated security reports, and request a payment for their "services" from those who reply and engage further with them. On a related note, I often feel uncomfortable reading about a
764.
▲
by
dessant
8y ago
I found the running horse to be an adoring touch. The author's site is also worth checking out: http://linkdot.link https://en.wikipedia.org/wiki/Sallie_Gardner_at_a_Gallop
765.
▲
by
dessant
8y ago
The attitude you describe can easily hurt their business. They may be future paying customers that are exploring your service, or don't have the money yet to subscribe. And even in the latter group there is an opportunity for building
766.
▲
by
dessant
8y ago
They allow advertisers to run JS on your device, and ads are a trendy way to deliver malware. People are using ad blockers not just to hide annoyances and to improve performance, but to protect themselves from bad actors. https://
767.
▲
by
dessant
8y ago
Discord defends against combo lists by showing a CAPTCHA and asking for email confirmation if you log in from a new location, but no challenge is shown during the default login flow.
768.
▲
by
dessant
8y ago
Account creation is different from a login attempt.
769.
▲
by
dessant
8y ago
I would have appreciated if your post would not have been a personal attack. I was suggesting limiting login attempts based on a particular user account, not an IP address, and I have never talked about a pending message system for forums.
770.
▲
by
dessant
8y ago
I think that stems from flawed security models. CAPTCHAs are trivial to bypass, and scrapers can keep their session cookies to never see the login challenge again. Regular users are the ones suffering from CAPTCHAs on login forms, not scrap
771.
▲
by
dessant
8y ago
Yes, and Google also blocks the audio challenge sometimes, so people with impaired vision or with neurological issues that affect object recognition are effectively denied access to a large portion of the web.
772.
▲
by
dessant
8y ago
For a contact form I think it's ok to show a challenge. It won't eliminate spam entirely or work against targeted attacks, but at least it keeps out the bulk of annoyances (at the cost of annoying some of your users :P). EDIT: Hav
773.
▲
by
dessant
8y ago
I've made a browser extension that solves CAPTCHAs using the audio challenge. Native user input simulation will come with the next release. https://github.com/dessant/buster On my part it is a direct reaction to d
774.
▲
by
dessant
8y ago
The next release will use native messaging to send native user input events to the browser. It's already working well, I just need to finish the app installation bits.
775.
▲
by
dessant
8y ago
Software often gets better upon further iteration, and we can do our part by offering our time, or at the least, encouraging fellow developers.
776.
▲
by
dessant
8y ago
> A European Commission statement Thursday didn’t identify the institutions being investigated for "a collusive scheme that aimed at distorting competition" in trading sovereign bonds issued by euro-region governments from 2007
777.
▲
by
dessant
8y ago
Awesome initiative, I'd love to see some classical music!
778.
▲
by
dessant
8y ago
We don't expect relinked data to be viewable, because that is ripe for exploitation, but we do want to access and control the data that is linked to the advertising cookies that were placed on our devices.
779.
▲
by
dessant
8y ago
And that isn't even the full story. After Kite was forced to come clean about their Atom extension purchases, they were caught with yet another unrelated Sublime Text plugin that was phoning home to an IP address for an entire year.
780.
▲
by
dessant
8y ago
We should also be able to access our marketing categories without a Google account, since sensitive data is collected and a profile is built even if you don't have a Google account.
More ›