nmjenkins

13 ms·

91.
How U2F security keys work(blog.fastmail.com)
3 points by nmjenkins 10y ago|0 comments
92.
by nmjenkins 10y ago
The "Secure" flag has nothing to do with protecting against XSS. It protects against anyone who can proxy your requests (i.e. when you connect to dodgy wifi) being able to steal your session simply by injecting <img src="
93.
by nmjenkins 10y ago
This is not security theatre. Secure => Attacker can't simply inject an img to a non-https version of the site and then intercept the cookie sent by the browser, therefore stealing the session. HTTP-only => An XSS attack can&#x27
94.
by nmjenkins 10y ago
Thanks, fixed (will be live in a minute or two). Should have double checked that rather than just writing it from memory!
95.
Controlling the ‘referer’ header(blog.fastmail.com)
86 points by nmjenkins 10y ago|30 comments
96.
Free VPN integrated in Opera for better online privacy(opera.com)
224 points by nmjenkins 10y ago|127 comments
97.
Opera Software Gets Agreed Takeover Offer Valued at $1.2B(bloomberg.com)
2 points by nmjenkins 11y ago|0 comments
98.
by nmjenkins 11y ago
Err… a quarter means 25%, not 15%.
99.
by nmjenkins 11y ago
This will be way too slow, and is not at all feasible on a device like a mobile phone where you want only the recent email cached locally, but want to be able to stream on demand the rest with minimal latency (so it appears to the user as t
100.
Sanitising HTML – the DOM clobbering issue(blog.fastmail.com)
1 points by nmjenkins 11y ago|0 comments
101.
The anatomy of a good date and time widget(blog.fastmail.com)
1 points by nmjenkins 11y ago|0 comments
102.
by nmjenkins 11y ago
We have no speed problems using this in production at FastMail (we're kind of known for our speed in fact…). We use it at render time, both on desktop and mobile.
103.
by nmjenkins 11y ago
You can turn this off in Settings -> Preferences -> Auto-save contacts.
104.
by nmjenkins 11y ago
> The only way to keep non-numbers out of your number input is to cancel keydown events selectively There's a much simpler way: monitor the "input" event, and whenever fired, do this.value = this.value.replace(/\D&#x2
105.
by nmjenkins 11y ago
> Why not just use text input? Because on iOS, `type="number"` is the only way to show the number keyboard Actually, this isn't true. It will also show the number keyboard on a normal type=text input if you add a pattern=&
106.
by nmjenkins 11y ago
I mean things as simple as bolding a piece of text. The way to get the browser to do this for you is to using the document.execCommand method, but the results are inconsistent between browsers. Worse than that though is stuff like hitting &
107.
by nmjenkins 11y ago
Looks decent. The approach taken is the right one: we do something very similar with the Squire rich text editor ( https://github.com/neilj/Squire ) which I wrote for FastMail's webmail. Basically the browser can&#x
108.
by nmjenkins 11y ago
That's because flexbox is still prefixed in Safari 8 (see http://caniuse.com/#feat=flexbox ). Just add -webkit- versions of all of the properties as well and it will probably work. e.g. "display: -webkit-flex"
109.
by nmjenkins 11y ago
Well, Overture was created several years before React came along (it actually predates Angular and Ember as well), so it would have been hard to make it as plugins to this! It's not actually as monolithic as it first appears: a small c
110.
by nmjenkins 11y ago
You have to be a high volume sender with a good reputation (low spam reports) to get access to these tools.
111.
Enraged US man shoots his malfunctioning computer(bbc.com)
3 points by nmjenkins 11y ago|0 comments
112.
by nmjenkins 11y ago
What I don't get is, why did they dismiss the plans out of hand 200 years ago when the guy that wrote them was literally famous for producing a revolutionary clock? I mean, with that kind of track record, you'd have thought someon
113.
by nmjenkins 12y ago
Each call is tagged by the client and the same tag is added to the response by the server, so you can tell exactly what error corresponds to which call. Caching is pretty easy: you just keep a cache of each object type. The delta update mec
114.
by nmjenkins 12y ago
So you're assuming that an independent encryption layer that has to be reimplemented by every email client dev is going to be more secure than a widely studied protocol, implemented at the OS level. Right…
115.
by nmjenkins 12y ago
I presume you mean extending native prototypes? If you're in complete control of the code in your page there's no problem doing this and it makes some code much neater and more readable. The only other global is "O", whi
116.
by nmjenkins 12y ago
Yes. Everything is a single codebase, desktop and mobile, and it's all powered by Overture.
117.
by nmjenkins 12y ago
As mentioned in the article, the core object system was inspired by SproutCore (4 years ago), which was in turn inspired by Cocoa, so yes there is a heritage. However, Overture is designed to enhance web tech rather than turn it into someth
118.
by nmjenkins 12y ago
If you have a way of reproducing this, please file a support ticket. We've not come across this issue so far. Thanks.
119.
by nmjenkins 12y ago
It does support this. The demo being linked to is not a particularly great integration and using an out of date version of Squire. Try it in FastMail.
120.
by nmjenkins 12y ago
iOS supports CalDAV natively. Just follow the instructions at https://www.fastmail.com/help/clients/iphone.html (scroll down for calendar section).

More ›