sstephenson

22 ms·

61.
`gosh` is security theater for piped shell scripts(github.com)
48 points by sstephenson 16y ago|26 comments
62.
by sstephenson 16y ago
Thanks for posting this... after reading all the FUD, it really made my day.
63.
by sstephenson 16y ago
I'd love to see a WSGI adapter for Pow! Check out Nack ( https://github.com/josh/nack ) to see how Pow runs Rack apps.
64.
by sstephenson 16y ago
Just as anyone who can spoof DNS entries could swap some other theoretical Pow installer with a malicious one. I'm not seeing how Pow's installation process is any less secure than, say, downloading a disk image from a random site.
65.
by sstephenson 16y ago
You conveniently omitted the step where you get an app running. And upgrading Passenger requires you to install a gem, then run a command, copy and paste a bunch of text into your Apache config file, and restart Apache.
66.
by sstephenson 16y ago
Hey Tom- The installation process is short and fully documented: http://get.pow.cx/ The web site and manual encourage you to read it. I think it's far more transparent than, say, an OS X Installer package.
67.
by sstephenson 16y ago
Completely understandable. That's why the installer source is fully documented and linked up for your review. http://get.pow.cx/
68.
by sstephenson 16y ago
Pow is a Node.js app written in CoffeeScript. It includes an HTTP and a DNS server and runs Rack apps by way of Josh Peek's Nack library: https://github.com/josh/nack The screencast shows how it works and why we made it: http://get.pow.c
69.
by sstephenson 16y ago
Tcl is a strangely beautiful language. For those who haven't tried it, it's a little bit like Lisp (minimal homoiconic syntax, code is data) but without closures. Which of course sounds awful until you realize you can implement lexical scop
70.
by sstephenson 16y ago
Not everyone at 37signals is a programmer.
71.
by sstephenson 16y ago
For Basecamp, probably the biggest compromise is that you can't upload files or photos from your browser. We're interested in exploring tools like PhoneGap ( http://phonegap.com/ ) for smoothing over the missing functionality.
72.
by sstephenson 16y ago
We'll definitely be open-sourcing Cinco in the coming months. There are a couple of reasons we went with the Stitch approach. For one, we found the CommonJS module system (as implemented by Node.js) to be an elegant way to declare dependenc
73.
by sstephenson 16y ago
Basecamp Mobile is written in CoffeeScript using our in-house Cinco mobile framework, which ties together Backbone.js, Zepto, the Eco templating language ( https://github.com/sstephenson/eco ), and Stitch ( https://github.com/sstephenson/st
74.
37signals Basecamp Mobile HTML5 app for WebKit browsers(37signals.com)
132 points by sstephenson 16y ago|43 comments
75.
by sstephenson 16y ago
I'm with you there, to an extent. My bet is on some sort of bytecode standard as the next step in client-side browser code. Language designers could iterate more rapidly with a common compilation target at a level lower than JavaScript. All
76.
Sam Ruby, Brendan Eich, and Jeremy Ashkenas on CoffeeScript and "JS-next"(intertwingly.net)
65 points by sstephenson 16y ago|17 comments
77.
by sstephenson 16y ago
We have open-sourced one component, the Eco template language: https://github.com/sstephenson/eco A couple of other smaller components are ripe for release, too. But the framework itself needs more work before it can be made public, and t
78.
by sstephenson 16y ago
Hey folks, there's nothing to see here right now. We spent three weeks experimenting with some new tech to see what we could build, and ended up with something that looks a bit like Rails, but entirely client-side and written in CoffeeScrip
79.
by sstephenson 16y ago
Moving canvas operations out of event handlers is the key to smooth drawing on the iPad. The queue processor's inner loop is restricted to 10ms at a time every 30ms. This ensures a full two-thirds of the time is spent receiving touch events
80.
37signals' Chalk Dissected(samisamhuri.blogspot.com)
142 points by sstephenson 16y ago|24 comments
81.
by sstephenson 16y ago
It's actually very quiet in person. The space reminds me of a university library. Most of the materials, from the carpet, to the felt paneling, to the corkboard in the team rooms, to the dividers between desks, to the tiles on the rear wall
82.
by sstephenson 16y ago
So your solution is to reimplement Basecamp on top of another database?
83.
by sstephenson 16y ago
Good observation, but not quite accurate. To-do list titles are links, but tapping them once shows the edit and delete controls. Tap again to follow the link. Same goes for any link inside a touch-selectable element.
84.
by sstephenson 16y ago
Silly, isn't it? Viddler's HTML 5 support isn't ready just yet. Here's an H.264 version of the video: http://bit.ly/dshxGa
85.
by sstephenson 18y ago
Respectfully: no, it shouldn't. :) There's plenty of libraries that do this already. Sprockets solves a different problem.
86.
by sstephenson 18y ago
I originally wrote Sprockets 1) as a replacement for Prototype's build system and 2) as a library that could be used within Rails. Just before releasing 1.0, I added a simple CGI wrapper around the library so we could use it in our marketin
87.
by sstephenson 18y ago
Cool, django-compress looks similar to the sprockets-rails plugin. A few differences: django-compress makes you define your source files and concatenation order in an array in a configuration file. Sprockets lets you define your dependencie