medmunds

13 ms·

91.
by medmunds 10y ago
> each subsequent time a user logs in you have to hash the password twice with two different hashing schemes The first time such a user logs in, you can upgrade their hash to the latest scheme, so there's no extra work on later logi
92.
by medmunds 10y ago
I used AWS Route53 at a previous employer where the domains were stuck at a different registrar, and thought it worked well. FWIW, though, we've been using Namecheap on side projects for years, and had generally positive experiences. (
93.
Namecheap.com emergency maintenance(status.namecheap.com)
12 points by medmunds 10y ago|6 comments
94.
by medmunds 10y ago
How far back are you willing to look? "The Video Privacy Protection Act (VPPA) was a bill passed by the United States Congress in 1988 ... to prevent what it refers to as "wrongful disclosure of video tape rental or sale records..
95.
Security Myths and Passwords (2006)(cerias.purdue.edu)
2 points by medmunds 10y ago|0 comments
96.
by medmunds 10y ago
I think the distinction is Google has specifically said they won't correlate Google Public DNS data for targeting advertising [1], while Comcast is specifically saying that's exactly what they do want the option to do. If you
97.
by medmunds 10y ago
Tom Scott also covered this last year: "The Fictional Bridges That Became Real" https://youtu.be/S9E1wsxOSzM [video]
98.
Protecting Free Speech: Why Yelp Is Marking Businesses That Sue Their Customers(yelpblog.com)
192 points by medmunds 10y ago|89 comments
99.
Django email backends and webhooks for Mailgun, Postmark, SendGrid, SparkPost(github.com)
2 points by medmunds 10y ago|0 comments
100.
by medmunds 10y ago
Looks like they just added a notice at the top of the status page, including "We apologize for any inconvenience this has caused."
101.
by medmunds 10y ago
Try the chat option -- it's more immediate. (Though the chat agent did mention they're pretty backed up.)
102.
by medmunds 10y ago
If you're using Django, I created django-anymail[1] earlier this year to simplify switching between full-featured transactional ESPs. This was a direct response to Mandrill's (relatively) short notice of major changes -- I used to
103.
by medmunds 10y ago
> Suggesting that it's ok to wait a few days for our transactional email to deliver is frankly offensive Another SendGrid customer here, in exactly the same situation (low-volume, purely transactional, paid "Essential" pla
104.
by medmunds 10y ago
> Most useful extensions require access to all sites That may be true for "always-running" extensions like ad blockers, but there's another useful class of "on-demand" extensions that don't need full access
105.
by medmunds 10y ago
I believe you can explain some common cases in Postmark's weekly digest like this (but would really appreciate confirmation from an actual specialist in the field): 1. "Trusted sources" (DMARC fully/partially aligned),
106.
by medmunds 10y ago
I believe that DMARC requires SPF. Since I want DMARC, I need to provide a compatible SPF, which means ~all. (And I do want to implement DMARC. Not so much to improve deliverability of my own email, but rather to prevent delivery of malic
107.
by medmunds 10y ago
Most clients seem to respect the Reply-To header, but they're not required to [1], and some popular MS ones in particular seem to ignore it, at least in some cases [2, 3]. There are a bunch of arguments for avoiding "noreply"
108.
by medmunds 10y ago
You're doing it right. The important part to avoid DMARC filtering is that the actual email address in the From field match your actual sending domain. The display name doesn't matter (for DMARC filtering). However, there's a
109.
by medmunds 10y ago
Implemented all of these on a bunch of my domains a few weeks ago. Two cautions related to whether your email can be forwarded by your recipients: 1. SPF -all can break forwarding with DMARC p=reject. If your recipients tend to forward your
110.
by medmunds 10y ago
If you use DMARC with a reject or quarantine policy, SPF hardfail ("-all") can prevent recipients from successfully forwarding mail you've sent them. Some best practices for DKIM, SPF, and DMARC (as of mid-2015) in [1], inclu
111.
by medmunds 10y ago
PostMark also has a helpful (and free) service that parses and summarizes the DMARC reports: https://dmarc.postmarkapp.com/ . (And you don't have to be using PostMark to use this service.)
112.
by medmunds 10y ago
(I believe you've swapped the labels: process color mixes dots of CMYK inks to approximate other colors; spot color uses an ink pigmented to the precise color you want. https://en.m.wikipedia.org/wiki/CMYK_color_mo
113.
by medmunds 10y ago
> if you tell people that the only way they can make more money is by being manager or senior managing level... This is actually a separate issue. A healthy engineering organization needs to have parallel technical and management tracks,
114.
by medmunds 11y ago
This report's from Feb, but I've seen more hacked electronic freeway signs in SF in the past week. Seems like CalTrans might need some security assistance.
115.
Anti-Theft Sign in Alamo Square Hacked, Rewritten in Praise of #Yogabut(hoodline.com)
1 points by medmunds 11y ago|1 comments
116.
by medmunds 11y ago
Apparently apple pie has been a significant source of false positives in NSFW detection -- it mimics both flesh tones and contours. (Or so I was told by a then-major image hosting company pitching their filtering tech several years back.)
117.
by medmunds 11y ago
There's even a badge for answering your own question ("self learner"), if your answer is a good one. http://meta.stackexchange.com/a/12519
118.
Taking back your Mandrill click-tracking links(gist.github.com)
1 points by medmunds 11y ago|0 comments
119.
by medmunds 11y ago
Nice! Glad to see mobile support is on the roadmap [1]. So many browser rich editors seem to be virtually unusable on touch devices, it's the first thing I check now. [1] https://github.com/substance/substance#beta
120.
by medmunds 11y ago
On original site: http://www.mojoptix.com/2015/10/25/mojoptix-001-digital-sund...

More ›