jtheory

70 ms·

571.
by jtheory 13y ago
Your third sentence is a pretty effective rebuttal for the first two...?
572.
by jtheory 13y ago
I had moved on to talking about sites in general; the site in question would be just fine with site-wide SSL. For the rest of it -- at some point you're going to have to get used to the idea that the people putting content on the web a
573.
by jtheory 13y ago
There are valid reasons why a site might find switching to full SSL harder than just fixing payment pages. Use your imagination. What if they rely on free CloudFlare support for site content? Going full SSL will mean another $20/mont
574.
by jtheory 13y ago
It's not my startup under discussion, actually (I wasn't the first commenter above), but to be fair the first choice for a tiny startup might well be "stick with the shell scripts and dead-simple architecture for now" ra
575.
by jtheory 13y ago
Exactly right -- please do redirect to https at a minimum for any payment pages. The actual risk of a MitM attack is low, but it's certainly feasible; your page would look exactly the same if it were tweaked en-route to use a completel
576.
by jtheory 13y ago
Sure, but what does that have to do with the Hacker Bundle?
577.
by jtheory 13y ago
But that assumes that the tiny startup is either confident that, only 3 short months from now, they'll be able to spring for the full price of hosted CI, OR they can afford the time investment to set up their whole build process in hos
578.
by jtheory 13y ago
Here's the first one I saw, a couple of years ago: http://www.youtube.com/watch?v=Yp1wUodQgqQ Linking it here because I just went searching for new examples, and none of what I found was quite as good at fooling my bra
579.
by jtheory 13y ago
Interesting, but for a similar experiment that's rather higher on the "cool" spectrum, check some of the videos with "oobleck" (non-newtonian fluid, like cornstarch and water) on an amp.
580.
by jtheory 13y ago
For sure? I thought Stripe blocked that specifically.
581.
by jtheory 13y ago
The general public thinks that if you open a jar and the lid goes "pop" that means it hasn't been opened before. Of course, elementary school science is enough to figure out that if you bought a jar of apple juice from the store, replaced s
582.
by jtheory 13y ago
They obviously chose the word "aping" for a reason, but it strikes me as a poor word choice here. These aren't pocket calculators with "I-PHone" rubber-stamped on the cover. From the article: "Skeptics say the company produces low-price iPh
583.
by jtheory 13y ago
I have similar experiences -- I spoke only English at home as a child, then studied French starting in 6th grade. Nowadays I'm fairly fluent in French (and live in France, so I use it regularly), though nowhere near my level of comfort in E
584.
by jtheory 13y ago
Probably Microryza: http://microryza.com
585.
by jtheory 13y ago
See also ErrPlane (ycomb winter 2013)
586.
by jtheory 13y ago
Right -- Big O notation is a useful formalization of a thinking process that in practice usually includes more information. That is -- anytime you write a loop, you'd better think about what's inside it (and how long those things will tak
587.
by jtheory 13y ago
Average probably 5-6 hours, on balance. I admit I'm a bit amazed to see the number of folks who report sleeping 10 or more hours a night; I've been assuming normal sleeping habits were around 8 hours a night. Personally, I do best on 8 a ni
588.
by jtheory 13y ago
Meh. Saying "yes" uncritically isn't helpful, but saying "no" (even to imperfect ideas) often isn't wise either. It's better to give a psychological "yes" even if the final answer should be "no" to a particular implementation. So point ou
589.
by jtheory 14y ago
I've tried before to set up even somewhat anonymous identities online before -- not for law-evasion purposes, just for things like working on anti-spam tools. It's difficult, and I've noticed recently that it's getting worse. It used to b
590.
by jtheory 14y ago
I've never understood why the common line is that any good hacker can pick up a new language and be just as effective as someone who has used it for year in a short time. I've been thrown into overdue projects in languages I hadn't used bef
591.
by jtheory 14y ago
I remember tinkering with invisible frames, but went pretty quickly to Java applets, which could open sockets (back to the origin server, anyway) and handle plain old HTTP from right within the page. Getting an attractive UI was rough going
592.
by jtheory 14y ago
Worse: it's been more than fourteen years since Gore's original awkward wording, and surely the jokes about it weren't funny for 4+ years.
593.
by jtheory 14y ago
The really tricky bit is always figuring out how to apply the idea to the general public. Where would all the users who find websites by typing domain names into Google ask mydogfriends.com to send their audit entries? People running websit
594.
by jtheory 14y ago
All of the problems I mentioned are solved for technical users, or special situations with the right equipment available (like a CAC reader... I certainly don't have one of those integrated into my mobile phone, or laptop for that matter)
595.
by jtheory 14y ago
The first problem with myaudithooks.com is the vulnerability of the audit site, especially if this is a hosted service accepting login reports streaming from lots of different sites. I know, the actual usernames/passwords aren't part of t
596.
by jtheory 14y ago
There are a lot of comments touting using public keys for this. So, you have one laptop and one mobile phone. How do you set up your "password" on both? Assume you're not "technical". Next: your car (or apartment, etc.) is robbed. You lo
597.
by jtheory 14y ago
Not that it completely undercuts your point, but you have to limit your numbers to the population that sees R-rated movies in the theater. There's a chunk of your "population that can't be bothered to watch" that were too young, or who were
598.
by jtheory 14y ago
There's no other way it can work, really. If you're a creator, and collect a lot of money to make something (with some level of risk), there's a chance you'll spend the money trying but still fail -- this is a very real prospect especially
599.
by jtheory 14y ago
And which books are easily available to you in prison? Obviously the tech world is worse than most for how rapidly information goes stale, but still -- compare working with a few copies of things like Netscape 3 For Dummies, Learn Windows 9
600.
by jtheory 14y ago
Further: the article is about browsers adding a feature for HTML5 developers that formerly required tinkering with HTTP headers on the server-side. There's nothing in there about disabling Save-As.

More ›