videoappeal

[quote] The bitcoin breach seems analogous to Bank of America storing your account information on Linode and trusting it as the Real Data. Does that make sense? [/quote]

//reply to tomg, but seem HN stops nested replies beyond a certain level

At the end of day you can have millions of dollar of security, auditing, PCI compliance tests passing, developers that celebrate every Friday that everything is secure, data is hosted on premise etc... But if you leave the login page javascript to a third party hosted on Linode then you might as well be BoA storing your data on a mySQL linode instance. So in a nutshell it kind of undermines the work you guys do.

Not sure about this PCI complaint stuff, but perhaps this is why major banking companies jumped from Linode to EC2? Much improvement? Although I must say I have friends working on banking websites in the UK that dont know the whole picture, its not unreasonable to assume that these things are fucked up.

Well tomg, when I researched this ~8 months ago there were at least 2 US financial websites that were using the same specialized analytic company that injected JS into banking login pages that were hosted on Linode VPSes.

All this talk about banks being safe yada yada and cloud hosting not safe for US50k. Real banking companies (with billions of dollars on hand) do use commodity cloud hosting including Linode, for even sensitive parts. Take for example Natwest online banking login. On initial login page they load a cookie via an image from www.advanced-web-analytics.com and then once you enter a customer number the next page loads a ...drum roll... javascript file from www.omni-traffic.com. Now who can tell me what one can do when you have control over the Javascript on a banking login page?

Ah crap. It looks they have been moved to Amazon EC2, ~8 months ago they were hosted on conventional Linode VPSs. Points still stands though.

Why the downvote? Did the word retard offend you?

article doesnt open for me just a blank page with word 'deft'? is this some retard post with no content or is the server overwhelmed?

What the fuck is it? Following the link /l it is immediately asking for my details without telling WTF it is - is a grade A example of retarded marketing.

Oh no... They forgot to add .svn to the .gitignore A kitten has just died...

When did we go from standard measure of per second for these types of things, you know, requests per second, transactions per second, to per minute? Statistics eh?

tl;dr - giving an article a skim read it appears these devices wont allow facebook or youtube etc... so my point is probably mute..

Learning begins? Or we further Facebook's cause (along with other activities that are complete waste of time, gaming and streaming poor comedy). In Thailand at lot kids / teenagers / young adults have a netbook or laptop or a smartphone, if you are being a mr nosy you are guaranteed to see the little blue bar at the top of the screen and face palm, the wealth of information that is out there..

Why ClojureScript? because it is much closer to feature complete, tested, supported by the core team yada yada

If complaining about the startup times of JVM then i believe a solution exists laready i.e. ClojureScript running on top of Node.Js be a better fit?

I should add "Have you been accessing sensitive sites such as your Google accounts" on a shared computer." The HN reference was to distinguish if the poster's complaint was worth of a discussion or is it one of 100k+ people a day that get caught by keyloggers/phishing/social-engineering through their own stupidity (like accessing Google wallet on a shared computer)

1) Have you been using a shared computer? 2) Did you have a weak password? 3) Do you use same password (or a small pool of passwords) for most sites and service?

Answering yes to any of the above and you really should not be posting on HN

Bad advice.

Coffeescript isnt a framework, it is a language.

So for your DOM manipulation you say you understand the quirks and difference between WebKit and IE7, what about the host of over rendering engines, mobile/tablet/desktop and different OS editions. I bet there exists dozen of bugs in your implementation. But thats how startups waste money I guess. If JQuery isnt your style use another abstraction library or a lightweight version of jQuery, combined with minification, gzipping or a CDN, rolling your own (at your current level) is just STUPID, risky and a waste of money. Typical NIH.