RossM

I'm on that all-you-can-eat tariff with Three as well, but tethered data is normally limited to 30GB/month or so. Did you make any account changes to get unlimited or are you bypassing the tethering detection? I haven't seen unlimited tether plans, but it would mean I could work virtually anywhere.

Sorry, I break things :-) I actually wanted the questions to think about how our company would respond to them since we don't implement many of them.

Entering my email gave me the error "Substitution data too large"; probably because I ticked all boxes.

    {"response":{"name":"SparkPostError","errors":[{"message":"Substitution data too large","description":"Transmission-level substitution data must be less than 100000 bytes","code":"2002"}],"statusCode":422}}

Interesting if that's the reason - my 6s had a battery replacement last year because it was one of the affected devices. The device has notably slowed down since iOS 11.

Yes, everything does need to be HTTPS. If not for user privacy then for response integrity - to be sure the response hasn't been MITMed.

You might think most sites are innocuous, but it depends on where you live. I could see this site getting classified as "hacking/encryption-related" by something like sonicwall's firewall (HN too). What if your government tasks your ISP to round up all those trying to bypass state firewalls? Heck I live in a western country where our government is misguidedly angling to ban encryption. For the minimal effort involved, I believe all sites should be https.

I see this behaviour in Chrome as well. Unfortunately it doesn't seem to work, as the common name for the certificate is a *.edgecastcdn.net, which doesn't match up with huffingtonpost.co.uk.

There's a ton of SAN in there, including:

DNS:gp1.adn.edgecastcdn.net, DNS:gs1.adn.edgecastcdn.net, DNS:ne1.adn.edgecastcdn.net, DNS:www.uship.com, DNS:www.bluefly.com, DNS:www.belleandclive.com, DNS:is.belleandclive.com, DNS:connections.cochlear.com, DNS:assets.pokemon.com, DNS:www.shopperschoice.com, DNS:www.biznessapps.com, DNS:cdn.shocho.co, DNS:secure.hibustudio.com, DNS:www.stardoll.com, DNS:adn.wiredrive.com, DNS:www.speedtest.net, DNS:www.cduniverse.com, DNS:ak-site-origin-cover.cduniverse.com, DNS:cover.cduniverse.com, DNS:g.cduniverse.com, DNS:www.renttherunway.com, DNS:cdn2.navexglobal.com, DNS:www.chdist.com, DNS:www.thefanorama.com, DNS:cdn2.mediasilo.com, DNS:cdn.citadoncw.com, DNS:www.woodcraft.com, DNS:marketing-admin.upsight-api.com, DNS:www.edgecast.com

Did some research as I was interested.

Win32/Lineage[0] is a bit of malware (or perhaps a characteristic of malware) that steals credentials. It looks like other software has had false-positives for this before (i.e. optipng[1]). You can also submit eul as a false-positive here[2].

[0]: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclo...

[1]: https://github.com/madskristensen/WebEssentials2013/issues/5...

[2]: https://www.microsoft.com/en-us/wdsi/filesubmission

> No reason why this shouldn't be a path that the user can edit to go one level "up"

While I find it more visually pleasing, this is my issue with this style: traversing up would first include /search/product/couches/color, which doesn't make sense. I've seen alternatives like /color:red/ before - which takes away the pairing-problem but feels odd..

Love the build quality, feels very portable; unfortunately the trackpad lets it down. Are there any laptops with comparable trackpads to an MBP?

"Be our guest" is a song used in the Disney version of Beauty and the Beast; and I'm sure I've seen it used as a tagline. They know what they're doing.

I've been reading up on localisation SEO lately - as far as I understand, Google only uses "server IP is located in X country" as an indicator of where a site might be localised for, if it can't get any better information.

For example, if you're using a ccTLD for the domain, or if it's a generic-TLD and you declare a country in Google Webmaster Tools, that will be a much stronger weighting.

Of course, if that's wrong I'd love to know!

I've been thinking about this as well - it seems like it would fit in nicely with other CI jobs. With database backups, for example, you should be able to script the restore procedure and apply some assertions to check it worked. Bonus with this is that you now have a script when you actually need to restore.

Probably because it is neither new or provocative of discussion.

My morning routine consists of asking Alexa:

> Stop

To cancel the alarm

> Ask National Rail to get my commute

The clunkiest of commands - the built-in "get my commute" skill only works for road commutes. My journey involves an overground and an underground train. The National Rail skill is good, but has this weird (I think, platform dictated) trap where you have to tell it "No [I don't want any more info]".

> Do I need an umbrella? / Is it going to rain today?

My experience with the weather skills is hit/miss - I'll get a weather report but not an estimate answer to "do I need an umbrella" (probably/unlikely would be fine).

> What time is it?

I don't have a visible clock at the moment, so I ask this repeatedly to keep track of time.

--

Overall, the conversational interface feels a bit clunky, and I'll be building a smart mirror in 2017 because I feel it's a better way to communicate status-y information. That said, having to ask for info has been a great way of discovering what information I really want in the morning.

I think it's down to open-offices - when you condition yourself to ignore and blank out the conversations and noise 3 feet away, it's no wonder it's difficult to snap out of it (it certainly is for me). That said, my experience of open offices has been of the condensed, touching-elbows variety.

Same with Daydream - odd that they didn't keep earth for the release.

Snapchat-loyal press have been well trained to highlight the spinning LEDs and not question the privacy angle. Perhaps they're "ok" with it because clips are shorter and it's not the big bad G.

IMO while it's more noticeable than Glass's single pixel it's still a concealed camera.

Snap Tech | Full time | London UK, on-site (https://www.snaptechnology.co.uk)

Snap Tech wants to redefine search. We're the computer vision company behind Snap Fashion, a mobile and web app that lets you shop by colour and shape.

We're hiring for many roles to grow our small team, including:

* Senior iOS Developer

* Computer Vision Engineer

* Business Development and Strategic Partnerships Manager

If any of these sound interesting, you can read more at https://www.snapfashion.co.uk/careers or drop an email to ross [at] snapte.ch for an intro.

Interesting - we started launching GPU workloads recently without bumping into that. Might be limited to VPC-only?

Two images from the source that aren't actually used in the rotation:

https://madeby.google.com/static/images/tenfour/extras/001.j... https://madeby.google.com/static/images/tenfour/extras/002.j... (clearly shows a phone)

I've built a fairly hacky solution to this before (for a different package manager) - it can be pretty simple:

    node_modules/
        versions/
            a@1.0.0
                node_modules/
                    c -> ../../c@1.0.0
            b@1.0.0
                node_modules/
                    c -> ../../c@1.0.0
            c@1.0.0/
            c@2.0.0/
        a -> versions/a@1.0.0
        b -> versions/b@1.0.0
        c -> versions/c@2.0.0

Object storage (i.e. s3+cloudfront) is still the correct way to store immutable files. that said, I know this will be used when the options are to rewrite filesystem access to an abstract (i.e. fs/s3/azure/etc) or just use nfs. People already use s3fs-fuse[1] which is dubious at best.

[1]: https://github.com/s3fs-fuse/s3fs-fuse

In the City at least, I think there are a number of procedures in place for this.

In order to get planning permission, developers need to do a historical/archaeological evaluation [0]. Occasionally I've seen notices to contractors at sites that warn work is to be halted if bones/pottery are found. I'm sure the nearby universities get involved with this as well.

[0]: https://www.cityoflondon.gov.uk/services/environment-and-pla...

Pretty much - I've recently been through the hiring circus - the best I saw advertised was £60k (for a team lead + full stack dev (literally full-stack - devops requirements and more)). Even for positions where I was relatively overqualified, the offers were in that range.

As others have said - the big bucks here are in contracting, but personally I'm not up for that level of risk yet. In career terms I see the later-game positions as those in management or those in consulting.

£40-45k with that experience sounds about right in my experience (startups, not sure about large companies).

It's a fairly common scenario. We're doing this with nginxbut docker'll be a good solution soon enough. The terms to search for are "reverse proxy".

Essentially you setup nginx to listen on port 80, Apache to listen on another port (say, 8080) and node to listen on a different port (say, 8081). Then have your nginx config differentiate between the two:

    upstream apache {
        server 127.0.0.1:8080;
    }   
    
    upstream nodeapp {
        server 127.0.0.1:8081;
    }   
    
    server {
        listen 80; 
        
        server_name myphpapp.example.com;
        
        location / { 
            proxy_pass http://apache;
            proxy_set_header Host $host;
        }   
    }   
    
    server {
        listen 80; 
        
        server_name mynodeapp.example.com;
        
        location / { 
            proxy_pass http://nodeapp;
            proxy_set_header Host $host;
        }   
    }   

IMO this gets a little easier to think about if you substitute your Apache -(mod_php)-> PHP setup for Nginx -(fastcgi)-> php-fpm - handing off to an appserver rather than a webserver.

Okay, that sounds more worthwhile. When I did a simple test against a LAMP server, the only information I got back was "running 5.5.25, latest 5.5.27, this is a vulnerability". I assume you're presenting that info for different software.

Eh, it just seems to compare detected versions against the latest version of software. It would be nice if it said why the installed version is vulnerable, links to CVEs, etc.

I see the need, but fear that if this became a common thing, you'd end up with websites proxying external scripts through their own domain.

Politically and practically, I'd suggest you use Windows and their tooling to start with. When you're getting started they'll likely need to help you get setup and that's going to be difficult for them if you're using other tools. Later on, you can make more informed decisions about switching tools after getting familiar with their applications.

If they run production on Windows as well, there are likely bits of the software that won't be cross-platform (file paths, encodings are common ones). We have a mix at our shop (Windows, OSX and Linux) and I think we only get away with it due to everyone knowing what to avoid (through experience). We still step on each other's toes occasionally. It wouldn't look good if you spent a lot of time at the start fixing things just to get it to work on your platform.

I think Sublime has a vim mode (or plugin) that should give you similar keybindings and it has panes a bit like vim.

As to getting back to PHP, some good links have already been posted. Get up to date on Composer and PHPUnit, look at whatever framework they're using and build some demo apps on it.