mcdoug

8 ms·

31.
by mcdoug 12y ago
It's because they are. How many times will this be brought up? The browser has no way of knowing whether gmail.com should be serving a self-signed cert (pinning notwithstanding), so it must treat a self-signed cert as a MITM attack at
32.
by mcdoug 12y ago
vim, because that's what I know. Look, very few people know both well enough to comment. Also, people are hugely biased by their past experiences. If your editor let you do everything perfectly, except it had one annoying bug, you migh
33.
Mozilla SSL Configuration Generator(mozilla.github.io)
333 points by mcdoug 12y ago|47 comments
34.
by mcdoug 12y ago
Here's what I don't get about rent control: how is it actually benefitting the renter? If a landlord has a few different units, some under rent control, some not, and some cash to spend on improvements, why would he spend it on im
35.
by mcdoug 12y ago
Why worry about stock options at all? There is a spectrum of outcomes. On one end the startup flops, or is bought for so little that your share, even if paid out, is close to 0. On the other end you have Google, Facebook, Instagram, etc. Co
36.
by mcdoug 12y ago
California in a nutshell.
37.
by mcdoug 12y ago
Exactly. Even if you postulate that today's US politician spends 50% of their time raising money, they still spend 20-30 hours a week actually doing their job, however poorly. Not many citizens can do this, so they will most likely do
38.
by mcdoug 12y ago
"Think of how stupid the average person is, and realize half of them are stupider than that." ~ George Carlin Do you really want people with 0 domain knowledge deciding whether to go to war? Or how to determine teachers' effi
39.
by mcdoug 12y ago
So what is your strategy in terms of making money here then. At $175/mo for 30 minutes a day, you are working for $17.50/hour. Is the idea that most people won't use up the entire 10 hours/month? I am going to wait and s
40.
by mcdoug 12y ago
So, first off, unlimited advice starts at $175. At $89 you get one task, not unlimited. That's like saying "the brand new 2015 Toyota Camry starting at $300". Yes, you can buy a Camry for $300 from a junk yard, and you can bu
41.
Tinder CEO: “So, the new features are pretty well received.”(imgur.com)
1 points by mcdoug 12y ago|0 comments
42.
by mcdoug 12y ago
Cooking healthy, well, and quick is a skill that takes a long time to master. I for one am not a great cook: I can make about a dozen staple meals, but don't feel like I have the time to learn to make something more sophisitcated. I en
43.
by mcdoug 12y ago
No, and this is a complex enough subject so it probably makes sense to discuss: Everything kills you. Oxygen, water, sugar, protein. You have about a billion heartbeats before your heart gets too tired. The goal is to find the right balance
44.
by mcdoug 12y ago
How? And what kind of people? Do you cold-call on reporters through it? Investors? People in your field? For me Twitter has always been a disappointment: cumbersome interface and a write-only mode where anything I say goes unanswered.
45.
by mcdoug 12y ago
I can tell you why, though I am very much against Soylent: convenience. My day is limited, such that I spend a significant portion of my free time cooking. If I had those 2 extra hours out of the 24 back, I feel I would be happeir and more
46.
by mcdoug 12y ago
Wow this is a big release! HTTP 2.0, phasing out 1024 certs, sync, will-change. BTW, is there already support for 4096 certs? Or is that coming later?
47.
by mcdoug 12y ago
For those interested in how TOTP is implemented, here it is in Python [1] and Ruby [2]. It is really simple and understandable. Oh, and did you know you can secure your SSH connections using TOTP [3]? This stuff is no more complicated than
48.
by mcdoug 12y ago
Exactly what I was going to say with 1 & 2. Your point #3 is arguable. It's more secure to encrypt a block than files, but it's not always nearly as convenient. You wouldn't want to sync a multi GB block to S3 every time
49.
by mcdoug 12y ago
I feel like if we did this we'd never get to an actual working system. How do you formally verify that a remote file system interacting with a faulty hard disk is doing the right thing? This reminds me of Hurd, which is arguably a supe
50.
by mcdoug 12y ago
Another approach is to diversify: have a second product that is targetted at larger businesses, with a nice seamless transition from Etsy to this new platform.
51.
by mcdoug 12y ago
That actually sounds like a neat app. What's the name and is it available on Android?
52.
by mcdoug 12y ago
I remember last time the concern with going from 2.x to 3.x was that version parsers would break. Is that still a concern today?