tszming

12 ms·

61.
by tszming 12y ago
I think this is a good start. But it is also important to educate users that even you are using HTTPS, some companies' internal network might not be fully encrypted and therefore it is not fully secure against some three-letter governm
62.
by tszming 12y ago
Another issue worth mentioning when discussing chain cert: Should the root certificate go on the server? [1] https://community.qualys.com/thread/11026
63.
by tszming 12y ago
try SMB instead of NFS
64.
by tszming 12y ago
Very impressive. Fast and accurate under Android/Firefox Mobile, will use it in the coming project.
65.
by tszming 12y ago
You can get an authenticated Gap's Shirt (from their official tmall) for around $15-20 USD (after discount/coupons, currently $40-50 on gap.com), so the deal is not bad even you compare with the coming US holidays discounts.
66.
by tszming 12y ago
Slack is on HackerOne, better report to them next time :) https://hackerone.com/slack
67.
by tszming 12y ago
People make mistake, we all understand. (actually quite surprising as Yahoo does not have a mechanism to scan/monitor expired SSL certs). This is not the real issue here, the thing is their engineers think expired SSL cert is okay and
68.
by tszming 12y ago
>> Yahoo takes external security reports seriously Few weeks ago, I reported to your team that some of the yahoo servers' SSL cert were expired, acknowledged but no one want to fix it (until I post it here and finally get them up
69.
by tszming 12y ago
Used firechat in the area yesterday, I think there are two issues: 1. information overload, hard to catch up the messages from all the people 2. some people are spreading rumors and fake information. It would be great if we still can use th
70.
by tszming 12y ago
Hongkonger here also (now going to out to see the latest situation) For those who want a TLDR: http://www.vox.com/2014/9/28/6856663/hong-kong-democracy-pro... Lot of protesters are just TEENAGERS/ST
71.
by tszming 12y ago
MongoDB work well ONLY if indexes (and working set) fit in the memory. What are the indexes size in the benchmark? (I doubt as I see you are running a 145GB database on a 32GB instance) http://docs.mongodb.org/manual/tu
72.
by tszming 12y ago
Yes you are right, but GCE does not offer the flexibility that allow user to reboot themselves in their own convenient time. Note: I am not saying the 'live migration' in GCE does not work, I am just saying I've more confiden
73.
by tszming 12y ago
I guess if you already put your machines in different availability zones, they will not reboot in the same maintenance window. Actually AWS scheduled maintenance is the best you can get in the market already, because most of the time they a
74.
by tszming 12y ago
Cool, thanks.
75.
by tszming 12y ago
Commitment and capability are two things. I am not saying Apple does not have the capability to protect user privacy, but I trust Google more in term of their capabilities.
76.
by tszming 12y ago
If anyone from Yahoo! are here for listening: some of your servers' SSL cert was expired https://sa.edit.yahoo.com/ (expired at 7/9). I've reported to your security team (via hackerone) and they replied me as
77.
by tszming 12y ago
>> Our users, of course, won’t be charged for this insurance. So, where the money came from?
78.
by tszming 12y ago
This is the right approach to sunset an opensource project from a big company, so people don't need to discover the project is dead by checking the last commit date, which happen quite often these days especially when the key developer
79.
by tszming 12y ago
Hi, I heard that CloudFlare is now blocked in China, do you have more information?
80.
by tszming 12y ago
Stealing and copying are part of the Xiami's DNA, you will be even more suprised when Xiami's CEO copy the way how Steve Jobs anounce new product: http://cdn.unwire.hk/wp-content/uploads/2014/07&#x2F
81.
by tszming 12y ago
So is rackspace now giving up the virtualized cloud market? (Because I remember they didn't follow the recent price drop of Google/AWS/Azure?)
82.
by tszming 12y ago
What issue you are experiencing with fluentd in_tail plugin? (As it already support log rotation)
83.
by tszming 12y ago
Note: GCE live migration take place only when there is a "scheduled maintenance", it is not designed for immediate hardware failure, so it is not a silver bullet and should not rely on them for your service's availability.
84.
by tszming 12y ago
I am interested to know which part of the GCE is a lot more polished than EC2.
85.
by tszming 12y ago
It is not nonsense. It is not nonsense because people really run their applications (e.g. PostgreSQL) in virtualized environment these days (i.e. AWS, DO, Linode, Google Cloud etc.) People still need to estimate the performance they wi
86.
by tszming 12y ago
Yes you are right, there are always workarounds! But why not make your life easier by just accepting...the "www" as the default? It is a convention well understood by most people in the Interweb. Honestly, I cannot see any technic
87.
by tszming 12y ago
The issue with cookies mentioned in the article is still valid, which also affect performance.
88.
by tszming 12y ago
Chrome still does not support multiline JS console (you need to shift-enter every single lines) See: https://code.google.com/p/chromium/issues/detail?id=35487
89.
by tszming 12y ago
The last sentence of the above article is actually agreeing what dhh wanted to say :) >>So pay attention. Think about design. And if TDD is pushing you in a direction that makes your code worse, stop. Take a walk. Talk to a colleague.
90.
by tszming 12y ago
Besides the fact that you are using the free ClearDB plan which is not supposed for production use (and it is not related to Microsoft anyway), Azure website (shared) is a preview product [1], with no SLA, you should not consider them f

More ›