DaveMebs

"We discovered that Microsoft’s support website recommends the use of invalid CPs as a work-around for a problem in IE. Specifically, a FRAMESET or parent window that references another site inside a FRAME considers the referenced site as a third-party, even if it is first-party content located on the same server [10]. Microsoft suggests the following invalid CP: CAO PSA OUR. This CP is clearly invalid since it does not contain any RETENTION or CATEGORIES tokens. Even if the CP were valid, Microsoft’s recommendation undermines the purpose of P3P since it encourages web administrators to use CPs that do not represent their actual data practices. We found several technical blogs recommending similar solutions [11], [19]."

So yes, a Microsoft support site did recommend a set of invalid CPs, but this is clearly not the same trick. This is a legitimate set of CP tokens that is used to workaround an issue where 1st party content appears to IE as 3rd party content. This token set is invalid because RETENTION/CATEGORIES tokens are missing, but the web author's intent here is (theoretically) honest.

Google, on the other hand, is providing no tokens whatsoever. Instead, in their P3P header they provide a human-readable string and a link to their privacy policy. This is not an invalid but intellectually honest set of tokens that is designed to comply with the spirit of the standard, if not the letter. This is an attempt to bypass the standard in order to allow 3rd party cookies, regardless of user settings.

The fact that you are equating these two practices is completely dishonest. Even a cursory glance through this document makes it clear that the Microsoft support site is advocating something completely different and is doing so in order to enable a fairly legitimate scenario.

I recognize that most startups aren't going for the full MS package (esp. Sharepoint), but I look at these tools as a suite that grows in power as you need it. With the Ribbon, you get great discoverability of these advanced functions as your needs arise.

They've got great coverage throughout Seattle and I have been very happy with their home internet plan. $50/month for unlimited data with 6mbps down and 1mbps up.

I'd imagine it does matter which architecture was being discussed.

Obviously listing a bunch of names isn't going to prove the argument one way or the other, but I think it's a bit unfair to claim that all post-WWII literature is crap mod a few exceptions. Sci-Fi basically didn't exist before 1940.

I think it is more relevant to look at the 19th century vs. 20th century.

I also don't know why you think most of his "true fan base" would have bought this already. I love Louis CK and only found out about this because I am an HN reader. Why would you think most non-HN readers even know this is available? I mean really, I think you should at least wait a week before decreeing that "today's most most popular working comedian makes less money selling independently."

(Note: I'm talking about the figurative mom, not your biological mother.)

I think it's fair to say they expect most people to be writing C/C++, not Assembly.

Now obviously lawsuits and lobbying drive some customers to choose Netflix over BitTorrent, but there's also the fact that Netflix and BitTorrent deliver completely different online movie services. Netflix serves customers a limited selection of movies that they can start watching right now. BitTorrent delivers "customers" any movie they want, but they need to wait before they can start watching it the first time. They can watch it right away any time after that, even if they aren't on the internet, however. The author assumes that, cost aside, Netflix provides a superior offering. That might be true, but if both were legal, I know what I would choose (and it's not Netflix).

The idea behind putting together a plan to keep early employees highly motivated is that you all work hard to grow the company, and in return for the risk and hard work you stand to make a lot of money. That's the whole idea behind tech startups. To grow the company and then tell these employees they don't get the rewards promised them the entire time they have worked there is ridiculous. It violates the entire idea behind vesting shares, which if it is unclear, is that you have already earned those shares. It's merely a matter of when you gain access to them.

Downloading blacklists of certs is exactly what happens. They are called OCSPs and CRLs. The operating system is responsible for tracking these through a combination of caching and downloading new OCSPs/CRLs. The database does not grow too large, because CAs use certificate chains. The cert that is vouching for some website is not the cert in your trusted root store. Root store certs are kept under lock and key - these very rarely get compromised (this is what happened to DigiNotar and they are no longer in business - their certs were invalidated by everyone in the industry and they were filing bankruptcy less than a month later).

What does happen are leaf certs being compromised. When this occurs only that leaf and everything below it in the chain is revoked, so if you have enough certs in the chain you usually don't revoke many certs at a time. Generally speaking, the lower the cert in the chain the lower the trust level, which includes stuff like the cert not remaining valid for as long a period.

You can read about how Windows implements cert revocation here: http://technet.microsoft.com/en-us/library/ee619754%28WS.10%...

I'd assume Apple does something very similar.

-A 30% default rate is absurdly high. There is no way 30% of the cards being used over the phone are stolen.

-Even if usage of the service stops, the Rolling Reserves are a permanent change to they way PayPal handles his account. He cannot turn this off, even if his risk profile goes to 0.

-PayPal is not even authorized to act as a bank in the state he lives and operates in.

EDIT: It looks like they aren't even applying a solder mask to the board, which is a really cheap way to improve quality and reliability. For an extensible product that they want people hacking, I'd be spending the few dollars to help minimize short circuits. From my experience, everyone who has skimped and not gotten a solder mask applied to their board ends up regretting it down the line.

Yeah, it's kind of fun to think about...

Oh, wait.

http://www.businessinsider.com/larry-page-just-tied-employee...