r1ch

56 ms·

571.
by r1ch 11y ago
Seems possible. Pretty much every Android device has disk encryption disabled by default for performance reasons.
572.
by r1ch 11y ago
Chrome has become awfully slow in the last year for me, culminating in the last few updates where the entire UI will randomly freeze for seconds at a time and bring up the "not responding" dialog on Windows. Sadly the alternatives
573.
by r1ch 11y ago
Never heard of these. How do they compare to Lightroom's built in features?
574.
by r1ch 11y ago
Good to hear! Bring this to Europe and I can see it being very popular, credit cards aren't as common or easy to get here and ordering outside of your local country often requires one. I imagine that's still a long way away though
575.
by r1ch 11y ago
Any way this works without a browser extension? I'm assuming such an extension has full access to every single page in order to do its job, which is a huge security risk. You don't need to be reading my emails or passwords.
576.
by r1ch 11y ago
I thought their DNS was supposed to be rock solid since they use Cloudflare Virtual DNS. Oh well, lesson learned. Back to running my own DNS servers on each droplet, if the DNS is down the droplet is likely down regardless :).
577.
by r1ch 11y ago
I think it's more developers getting lazy. Why bother with SIMD and GPUs when you can write in a high level language like javascript, design with HTML / CSS, deploy your app with embedded libchromium and have a faster time to mark
578.
by r1ch 11y ago
"Fast enough" still isn't fast enough for mobile devices. I have a high end phone and still get multi second freezes from all the JS parsing and executing on modern websites.
579.
by r1ch 11y ago
I'm curious what happens if a free website is on the receiving end of a L3 attack, since only business plans and higher are advertised as having "Advanced DDoS support". Does CF dynamically adjust DNS and send the malicious t
580.
by r1ch 11y ago
I got an email from Eyeo, "the company behind Adblock Plus, the largest Adblocker". They wanted to talk about "business potential associated with our Acceptable Ads initiative". Doesn't sound like a conversation I&#
581.
by r1ch 11y ago
I don't like it because it puts too much useful information on one domain. Will the researchers still be paying for the domain in 5-10 years?
582.
by r1ch 11y ago
SSLv2 and SSLv3 are dropped at compile time in Jessie.
583.
by r1ch 11y ago
SPF doesn't really do anything to prevent this. It can only protect the return path address, the scammer is free to use whatever From and Reply-To headers they like in the email itself - they don't really care if a bounce goes to
584.
by r1ch 11y ago
The CSRF token should be tied to the user session, so you'd need to perform session fixation for that to work.
585.
by r1ch 11y ago
Same-origin policy.
586.
by r1ch 11y ago
Another good reason for login CSRF tokens is to prevent a malicious page from submitting lots of invalid logins and getting an account / IP locked or rate limited.
587.
by r1ch 11y ago
Unless you statically link glibc, updating glibc is enough.
588.
by r1ch 11y ago
It's bad enough that FB have to offer a "Lite" version for people lacking high-end smart phones. It's basically a wrapper around the mobile site + push notifications. I recently switched to it and don't really miss
589.
by r1ch 11y ago
I definitely wouldn't recommend DO's built in backup service in production based on my experience. It brings my site down every week since all I/O freezes during the backup. Sometimes the droplet doesn't recover and need
590.
by r1ch 11y ago
If my 3 year old Nexus device isn't getting Android M from Google themselves I have little hope for other OEMs.
591.
by r1ch 11y ago
How about "Ads over HTTPS, please"? Can't upgrade our sites if our ad revenue drops through the floor.
592.
by r1ch 11y ago
From my read of the docs, try_files expands aliases, so the alias directives in your location blocks are unnecessary, causing nginx to look for /home/mysite/www/js/js/whatever.js
593.
by r1ch 11y ago
and significantly lower ad revenue for ad-supported sites.
594.
by r1ch 11y ago
You can always put Cloudflare in front of a site to get the same CDN benefit.
595.
by r1ch 11y ago
In order to make my completely static non-JS site AMP compliant do I have to include the amp JS library or is Google smart enough to realize my site is plenty fast enough as-is?
596.
by r1ch 11y ago
Still no mention about ads. Using HTTPS means you have to load ads over HTTPS and a huge number of ad networks are not reachable over HTTPS and another large number of assets / tags are hard coded to fetch HTTP resources. For any ad su
597.
by r1ch 11y ago
Wouldn't this make modern browsers vulnerable to a downgrade attack via an active MITM?
598.
by r1ch 11y ago
Being on the false positive end of this system, it's incredibly frustrating having my site repeatedly flagged and not being able to do anything about it. There doesn't appear to be any way to contact a human except through the &qu
599.
by r1ch 11y ago
On residential ISPs it's generally not so easy, but I think pretty much every dedicated server provider I've used has allowed spoofed source IPs.
600.
by r1ch 11y ago
The background image choice clashes with the font color which makes it hard to read. http://i.imgur.com/epctfAh.png Any plans to support subresource integrity?

More ›