donpark

20 ms·

211.
by donpark 15y ago
I agree with the general notion but don't think raising all teachers' salary will lead to better result. While Korean public school teachers are relatively well paid, top private 'Hakwon' teachers are paid several times more. Private educ
212.
by donpark 15y ago
I noticed `websocket.io` is depends on a module called `easy-websocket` which is registered with NPM with description "lain and simple websocket client" but no where to be found on Github. Is `websocket.io` what we are supposed to be using
213.
by donpark 15y ago
Will there be 'websocket.io-client', high-performance server-side WebSockets client module, in the near future?
214.
by donpark 15y ago
Not even that in my book. It's hoodwinking that could potentially hurt existing businesses as well as creating an atmosphere of distrust if practiced widely.
215.
by donpark 15y ago
'Asynch UI' has its uses but, in case of email, I don't think benefits to users have much substance. Yes, perception is a critical design factor we must all deal with on daily basis but we shouldn't forget that 'magic show' entertains at be
216.
by donpark 15y ago
All you succeeded in doing was raise a question about which discussion followed. Anyone can do that, even a 3-year old.
217.
by donpark 15y ago
Yes, difference in ease of use is certainly there and not ignorable. But wouldn't the need to send URL and pass-phrase via two different channels would be rather difficult to communicate to 'grandfathers'? Not an impossible task but, as s
218.
by donpark 15y ago
How does this differ from sending pass-phrase encrypted ZIP file via email or IM beyond auto-delete feature?
219.
by donpark 15y ago
In most case, I think 10gen will be able to dispute false claims. With regard to nomongo's post, 10gen can check their record and say whether they did or didn't have a customer with premium support account with similar use case and issues.
220.
by donpark 15y ago
Burden of proof is on 10gen, not frustrated customers. This post is believable enough for me to avoid using MongoDB for write-heavy apps.
221.
by donpark 15y ago
Very nice but it seems to me that you are proxying only the top page off blogs and not the resources referenced by that page, including scripts, which is a security issue.
222.
by donpark 15y ago
If anyone needs to rebuild it in node.js, take a look at https://github.com/donpark/node-robohash project which renders bots using SVG parts.
223.
by donpark 15y ago
Can you share what the nature of the malware was? I've updated my Balsamiq Mockups desktop app at around 10 hrs ago and now am concerned whether malware might have tagged along. If the site is clean now, should I get a fresh copy?
224.
by donpark 15y ago
So now we can just point to Amazon when FBI asks for the keys, allowing us to blame Amazon when users raise their pitchfork? I like that.
225.
by donpark 15y ago
We won't know for certain until details are released but their claim that "exploit works even against sites that use HSTS, or HTTP Strict Transport Security" is disturbing.
226.
by donpark 15y ago
I think this vulnerability is related to WebDAV and SMB, not the DLL/path issue mentioned.
227.
by donpark 15y ago
That's because Tilemill is a Node.js app. Node.js 0.5 with Windows support is in the kitchen, however.
228.
by donpark 15y ago
There are safety measures one has take to deploy stuff I describe to protect against subset attacks like you mentioned as well as hackers using sleepers or logs to identify monitors, etc. It's not easy stuff and definitely not something sta
229.
by donpark 15y ago
Ahem, note that I wisely didn't single you out. ;-)
230.
by donpark 15y ago
Any malware script served to users will also be served to monitors and compromise is just a matter of comparing hashes with originals. Re any compromise , only detection of compromise to content/script served to client is necessary in this
231.
by donpark 15y ago
> Or the connection in between, unless SSL is satisfying that part of our threat model. From my original comment: "With HTTPS." > A nice idea, let me know when you get that implemented. It's part of a service I'm currently previewin
232.
by donpark 15y ago
Also, I think it's inappropriate to downvote a comment thread before misunderstandings can be sorted out. I've spent 10 years in the security industry building new technologies, several of which are used widely in large banks and payment se
233.
by donpark 15y ago
I didn't mean client has to be hacked but did mean script from compromised server has to run on client to decrypt user data. Hacker has to compromise the server then, for each connecting user, serve malware javascript. Meanwhile, external n
234.
by donpark 15y ago
While I agree with most of the issues raised in the article, I disagree with the blanket conclusion. With HTTPS, JS crypto can add to security when applied appropriately. In particular, requiring hacker to compromise not only the server but
235.
Personal Capital Bets $27 Million It Can Upend Investment Advice - Bloomberg(bloomberg.com)
1 points by donpark 15y ago|0 comments
236.
by donpark 15y ago
Wrong analogy. Appearance of icon impacts users' perception directly where name of a DB column does not. Also, I doubt Steve nitpicks every detail, just ones he comes across and ones he has a fetish about. As UI fetishes go, icons rate top
237.
by donpark 15y ago
First week of using CoffeeScript, I was mostly writing code and it felt foreign. Second week, same but it now felt convenient and I used it like a DSL. Third week, I was reading code as much as writing it and it suddenly became essential. C
238.
by donpark 15y ago
CoffeeScript is one of those things that one has to actually try to feel the full impact. Use it for a few days then return to javascript.
239.
by donpark 15y ago
> Airbnb has been offering to fix it, from the very beginning. From the beginning they offered to pay to get her a new place and new stuff, and do whatever else she wanted. Paul, could you clarify how you know this? Were you told this o
240.
by donpark 15y ago
Wrong from point 1. I use MongoDB and Redis because first is easier to prototype with ad hoc and second offers unique features one has to remap manually if SQL is used. In short, NoSQL requires less investment than SQL for my use cases.

More ›