datr

The upside is that it will become much harder to blackmail people for the same reason.

It's designed to try and avoid a moral hazard where a rogue police office may choose to suffer the consequences of an illegal search (if indeed a case could be brought) in order to get the evidence he or she needs.

Couldn't the agent be referring to a http header, in which case it doesn't seem that improbable.

I've worked on sites before where if you logged in as the admin it started attaching a header with the ip of the application server responsible for generating that page to help with debugging. It's not outside the realms of possibility that something like that could break and start leaking ips.

KeePass 2 can be run under Mono on both Linux and Mac OSX.

I'm having trouble understanding this article. If the count down timers show pedestrians the amount of time they have to cross the road (as they do here in London) why would the driver be watching this and think they only have a few seconds until the light goes red and they can't get through the intersection. Surely, the opposite is the case?

I can see that you could potentially form a similar explanation around that scenario too but it doesn't seem as convincing.

Presumably there is a way to challenge this though. If the court ordered Microsoft to produce a square circle could they still be found in contempt for failing to do so?

There is an advantage to using firstname@lastname.com and that is if google decides to block your gmail account you aren't completely screwed. You can simply change the MX record for your domain, point it at a different service provider and continue getting the email sent to you.

I don't know if there's an equivalent for OSX but if you're running linux you can use x11 forwarding to do this:

  ssh -x example.com
  cat /var/log/syslog | grep event | xclip -i

Your X clipboard will be shared with the host so the output will be placed into your local clipboard.

I've worked around this by creating a ~/.ssh/config.d directory and splitting my configuration out into multiple files (normally by project). I then use dotdee[1] to watch that directory and automatically rebuild ~/.ssh/config anytime there is a change.

[1] https://launchpad.net/dotdee

Is Tarsnap going to drop prices in response to the AWS S3 drop?

Me too. We gave up trying to get new hires to reliably create smb shares in the end so have started packaging a smb server with the vm and instead have them mount the shares in windows. It will be nice to rip all of that out and replace it with this.

To be fair, this depends on the implementation. Java, JavaScript and PCRE will only match ascii characters.

The link to the HD version should be: http://www.austinheap.com/assets/rsaconf2014/Stephen%20Colbe...

Yes it does. Your dns request for the hostname and the ip address you connect to might give away the fact that you're reading wikipedia but the actual path will be encrypted.

Sphinx

Well, I suppose I mention some of these as the article likens package deployment to Capistrano in the opening paragraph.

Using Capistrano, for (1) I can just mark a target server as the update server to run these commands. With packages, I assume I either have to have a different version of the package or rely on some sort of environmental variable which the package reacts to?

2) Yep that would be slightly ridiculous for production, but I was thinking more along the lines of UAT, staging and other shared testing/development environments. It's not ideal but I have been in the situation where this was required.

3) True, but with Cap I can just issue a rollback and it will revert to a database snapshot that was taken from the last version. I can't see how we could do something like this with packages alone.

Maybe you mean that these problems are outside the scope of packages and that I should be using packages with something like capistrano to solve them but then why wouldn't I just use Capistrano on its own?

I suppose (1) could be set by solved by having an environment variable where a server can be nominated as the "update server" but this has the down side of it still being possible to accidentally have multiple marked servers.

How does this work with:

1) Clusters of application servers, where I will only want operations on shared resources to fire from one of the servers? E.g. database updates, shared file changes, etc.

2) When I want to deploy the code to a different location on the server so that I can have multiple versions of the application available? Do I have to spin up new servers for each version?

3) You mention roll back by just specifying an earlier package but I don't see how this would work with stuff like database changes either.

I've often wondered if there is a terminal which supported the "jump to previous input" functionality described in the stackexchange question but I've never seen anything better than what is mentioned in the answers. I've heard Plan 9's Rio supported something like this but searching around, I can't see any mention of it.

I wonder what the employee perks are like at Netflix? Any chance of getting an invite to the awards ceremony? Was there the opportunity to meet Kevin Spacey when they were filming House of Cards? I'd find stuff like that to be a huge selling point if so!

There's a more recent tweet now saying the same thing as well: https://twitter.com/keithmadams/status/422945745528819712

I'd change 2 to "resolving merge conflicts in all SCM systems is necessarily difficult."

As far as I know there's no SCM system which can understand the /intent/ of the change and without being able to reconcile the intents of two conflicting merges there's no way of reliably merging the code (at least as far as I know).

I agree and I'm still not really sure what the difference is between Trunk Based Development and Mainline development. I searched around a bit as well.

My guess is that trunk based development is the idea that all commits pushed to the canonical repository are pushed to trunk (rather than a remote branch) with incomplete code being hidden using feature toggles?

In contrast mainline would push incomplete code to long lived remote feature branches and those branches would only be reintegrated into trunk once the code was complete.

However, I don't really see how this relates to a lot of the rest of the article which seems to be more to do with versioning, dependency management, and testing.

There's also some more specific points I'd like to pick up on:

Is it really easier to rebase my local branch than it is to merge from one remote branch to another? Seems like half a dozen of one and six of the other to me.

The article contrasts Google's & Facebook's model with the pull-request model of Etsy and Github but again I don't really see much of a difference. Facebook sends a patch to phabricator for review, someone looks over it and then it gets committed to trunk.

Linux, Firefox 25.0 seems fine.

They're using the term "index".

You might also want to take a look at https://github.com/madscientist/msjnc. I found it a lot better than Juniper's manager for linux.

I wonder if the crackling sound could be related to this: http://askubuntu.com/questions/157891/skype-and-vlc-sounds-s... ?

I too, would really like to see a comparison between Docker and Vagrant with an LXC provider (https://github.com/fgrehm/vagrant-lxc).

I don't want to undermine this piece too much as I think it is an important issue and what I'm about to say doesn't address all of the details. But I also believe it's an issue that will be partially solved by automated cars. As soon as it becomes palatable to live further from the city and commute; and, to a lesser extent, free up space from car parks, this problem will be dramatically reduced.

You've calculated the probability that _some_ individual will be assaulted. The probability that a given female will be assaulted though would be (I think):

P = 1 - \sum_{m=0}^K \choose{m}{K} (1-beta)^m (1-alpha)^m alpha^{K-m}