talklittle
Joined 17 years ago
Karma
316
Submissions
75
Member since
Oct 16
[ my public key: https://keybase.io/talklittle; my proof: https://keybase.io/talklittle/sigs/irMqDQP7g42TuSoIY-9P6kh-Ub29pcxKBaRu8aE_57w ]
View on Hacker NewsRecent submissions
Comment · 9 years ago
> You can try an Ajax request or loading a picture over SSL and then redirect with JS if it doesn't fail.
Neat idea, but wouldn't this still be exposed to ISP-level attacks? Since the user is still loading the page initially in plain HTTP, so the ISP could still inject code, remove the JS redirect, etc.
Comment · 9 years ago
For one, GitHub and DigitalOcean both had Series A investments led by the same partner at Andreessen Horowitz.
https://www.crunchbase.com/organization/digitalocean/investo...
Comment · 9 years ago
https://en.wikipedia.org/wiki/Surgical_stainless_steel
> There is no formal definition on what constitutes a "surgical stainless steel", so product manufacturers and distributors apply the term to refer to any grade of corrosion resistant steel.
Comment · 9 years ago
A bit misleading. The maintainers have been working on large experimental features like a self-hosted "signaling server" which helps sync notes without storing any note data on it, and without relying on third-party hosting like Dropbox [1].
Also if you look at the dev branch [2], they have been making sweeping changes to the codebase; most recently it appears they have been removing "old" JavaScript libraries like Bower, presumably to move everything to an NPM setup.
Comment · 9 years ago
How is expiration of files achieved with IPFS? I thought files stored on IPFS were available forever.
If my impression was correct, then Firefox Send supports different use cases than IPFS.
Comment · 9 years ago
Not really. "Introduced a bug" is fairly common (just do a Google search and see), and clearly does not suggest intention.
Comment · 9 years ago
The work vs. business question is simpler than that. Business = working in US for a foreign company. Work = working in US for a US company.
Presumably Basecamp has set up business entities abroad.
https://travel.stackexchange.com/questions/2272/about-differ...
Comment · 9 years ago
Sounds like dehydration. Do you always drink enough water before and after exercise sessions?
Comment · 9 years ago
Firefox Test Pilot [1] is a more recent approach to testing new UI in Firefox. It's entirely extension based. I think this is a smart approach because it lets Mozilla quickly test new UI features without building it into the core browser before it's been vetted.
However its full potential is not ready yet, since Firefox has been migrating to WebExtensions, and this has not fully stabilized yet. Long term I think the WebExtensions move also makes sense, since it gives extension authors a stable API to work with, instead of XUL which can break with each Firefox update. And the architecture makes it easier to optimize threading performance and some form of security sandboxing.
So the point is, I think more UI experimentation is on Firefox's horizon, but they have to first stabilize the technical architecture before they can go full throttle on that.
Comment · 9 years ago
Interesting. I wonder how many self-driving car researchers incorporate car crash videos into their AI (anti-)learning datasets?
Comment · 9 years ago
IMO the simple reality is they need to diversify their income sources to avoid putting all their eggs in one basket, and they decided Pocket makes sense. I'm still a huge Mozilla fan, the whole Pocket episode is not a big deal to me.
Comment · 9 years ago
That much is unclear. http://www.ghacks.net/2015/12/05/mozilla-has-a-revenue-share...
Comment · 9 years ago
> by visiting one of the vulnerable sites repeatedly
I mean, how could CloudFlare, or anyone, possibly differentiate this from normal scraping/polling/ manual F5 refresh behavior? This sounds like a PhD thesis.
I guess you are asking CloudFlare to quantify the amount of distinct bytes of unauthorized data sent to any particular user agent? But then, any sophisticated attacker would rotate IPs, UA identifiers, and probably even between vulnerable websites, if they had known about this vulnerability.
I don't think it's reasonably possible to rule this out, even with a massive dedication of investigative resources. Like the other commenter said, it's wisest to assume it happened.
Comment · 9 years ago
> 2. I agree $60,000 is a very low minimum. But how is $130,000 reasonable? Even in this industry that's a significant salary.
The current administration is businesspeople. They know $130k sounds too high, it's anchoring for negotiations. It'll go lower.
But also it's kind of the point of the reform being pushed, right? If somehow $130k is passed, it will obviously disqualify most foreign workers from acquiring these visas, and maybe the current quota of visas wouldn't be met. Then the quota may be lowered in the future, further limiting the visa program.