dbond

Developer here, thanks for posting our new project, if anyone has feedback or bug reports we'd love to hear it.

We plan to enable sharing fiddles soon.

Thanks for the bug report, we'll look into it

Napkin math incoming... Say you only used a-z in your token, at 1 character long you have 26^1 combinations, at 6 you have 26^6 or 308,915,776 combinations, which could easily be scanned. Increase the length to 26^ or 95,428,956,661,682,180, a big ass number, if we reserve 1,000,000,000,000 for actual items and create them over this range then the odds of guessing a correct token is 0.000000010479, then ban all the hosts which trip more than the average number of 404s.

Bankers created the sub-prime market by offering mortgages to people they knew couldn't afford the repayments, they then packaged these bad debts with a few good quality debts on top and passed the resulting package off as good. They then sold these packages off to other banks or investment groups to make a profit and export their exposure.

Banks which gained exposure to the bad debt employed bankers who were either negligent in investigating the contents of the debt they were acquiring and invested their depositors money without due care and attention, or knew the risks of what they were doing and continued to gamble with their depositors money while skimming large amount off as their own. These banks had then lost their depositors money and demanded that the public bail them out, while still taking large salaries and bonuses.

There will of course be other factors in something like a global financial "collapse" but this is my understanding of the sub-prime situation and why you should be angry. Somewhere along the line the actions of some of the bankers should be criminal.

Two options I'd go with:

1. Use a static site generator to build the site, ensuring I have indexes available, piggyback s3's SSL as a custom endpoint through to cloudfront and use SNI for my custom domain.

2. Use Heroku (or similar provider to remove most of the maintenance burden), piggyback their SSL to cloudfront+SNI+csutom domain.

This is the choice I made (UK based) and 5 years later I can say I'm doing fine and have no regrets. But what does concern me is the way college[1] staff reacted to this decision, from warnings in one to one chats down to outright scaremongering that I was throwing my life away even though I had explained that I could not find a course that I felt would be of value or advance my knowledge in what I WANTED to do. This is the same situation my younger sister is currently facing, she would much rather pursue the apprenticeship route to gain practical experience (she is wanting to pursue events management) but her college keeps pushing her back to the university route offering little to no support for her choice and the provided tools for finding apprenticeships or opportunities are next to useless.

Thankfully my family has a history of self-employment so for us convincing family that it is the right path is not difficult, but with colleges acting as very persistent recruiters for universities this will be a very hard decision to make for a lot of people as the advisors parents listen to are saying it is not a viable option.

[1] For those unfamiliar with the UK system college is attended separately before university.