HNHacker News
TopNewBestAskShowJobs

dsingleton

311 karma · joined February 23, 2009

http://dsingleton.co.uk @dsingleton
submissionscomments
dsingleton··on Change your Last.fm password
They have some older APIs that depend on MD5(password) being used directly, to compare against auth credentials or to derive other hashes to verify API requests.

Though older APIs they're still used by many older or infrequently updated clients, such as hardware devices with sold with Last.fm integration.

Unfortunately, the longer you've been around the more likely you are to develop dependencies that make it more difficult to upgrade your password hashing.

A new site can do whatever it wants with password hashing, but it becomes harder for older sites with more legacy dependencies to make that kind of change and Last.fm has been around for almost 10 years.

This isn't to say "MD5 is cool, don't worry", but to try and illustrate some of the reasons behind this.

dsingleton··on Stop Paying Your jQuery Tax
> There are only 2 groups who don't have JavaScript support

That's not entirely accurate. While those are two of the most common cases there are plenty of other contributing factors (http://developer.yahoo.com/blogs/ydn/posts/2010/10/how-many-..., this comment makes a good case). Errors stemming from network congestion, developer error and even CDNs failing - only a few weeks ago the google hosted version of jquery (iirc) failed leaving lots of sites with broken JS and an effective no-JS experience.

Personally I think building a site that works well without JS and then progressively enhancing it is the Right Thing to do. It means you're building a robust site for the real web and the multitude of clients and conditions that comes with. In your example I wouldn't want JS failing to prevent a checkout process, it should be robust and continue working, albeit less smoothly.

> honestly don't see the point of degrading the experience for everyone based one these two demographics

IMO If you're doing progressive enhancement well then this is not the case. I don't think the iOS/Android comparison is accurate either. The web is much more varied, the differences less well defined.

You're right, it does depend on what you're building and for who. But I don't think the general case is as binary as you've make out.

dsingleton··on Everything you need to know about Silicon Roundabout in 10 links
FYI the map is rapidly filling with non-tech, non-startup companies,including galleries, art, fashion, nightclubs, etc.
dsingleton··on Everything you need to know about Silicon Roundabout in 10 links
sigh

This article is mostly bullshit and certainly doesn't "help grasp what Tech City UK is all about", notably:

"which started as a government effort to rejuvenate East London" is laughably incorrect. Silicon Roundabout was a jokey term coined (by Matt Biddulph) to describe a bunch of companies working and socialising in the area. That was a few years ago, since then it's become a big PR thing for local companies (mostly co-working spaces) and now government.

Sure, there's tech growth, but an much is from pre-existing companies and people. Gov involvement has brought some attention to the area, but also a lot of sycophants and opportunists.

Another good skeptical read: gigaom.com/2011/11/11/is-london-tech-citys-phenomenal-growth-just-spin/

dsingleton··on Tower Bridge bot killed by Twitter, replaced with marketing
Careful with that, I can already see that person getting abuse whether they are involved or not :/
dsingleton··on How long is Last.fm gonna last?
They're a) lovely, b) just down the road from us, and c) share some of our old staff.

We see them in the pub quite a bit.

dsingleton··on How long is Last.fm gonna last?
There isn't a Facebook style "Give me a chuffing great zip" option, but there are lots of API wrappers to pull down your scrobble history (for example). It could be friendlier to non technical users, but it's entirely possible.
dsingleton··on How long is Last.fm gonna last?
That's the easy bit :P Copy wikipedia, disambiguate by genre and/or country .

It gets harder when someone scrobbles a track by "Felt", to which artist do you attribute it? There's a whole host of problems like that to solve too.

dsingleton··on How long is Last.fm gonna last?
I can entirely understand that, and kind of agree. We have more data that anyone could know what to do with, but we should be doing more, I'd certainly like us to be.

To try and explain the apparent lack of activity; the last couple of years have had a lot of sorting-house, changes in product (moving away from on-demand, charging for some services, etc) and some technical "house keeping". Last.fm has been around for ~8 years, that is a long time and comes with a lot of technical debt, it can slow you down.

PS: One of my favourite things about Last.fm is our approach to openness of data, our API makes it totally possible for hypem (who are awesome, especially Anthony) to use your scrobbling data, even the recommendations we generate for you, on hypem.

We believe that if the data is visible on the website then there should probably be an API for it, because if there isn't, then someone will have to scrape it anyway.

dsingleton··on How long is Last.fm gonna last?
(I work at Last.fm)

Spotify is trying to be the perfect on demand music service, Last.fm isn't. It's something we tried and ended up moving away from a year or two back.

On demand music is a very difficult market to be in. There are lots of companies trying but many failing or hitting difficulties, like Spotify in the US. There are real challenges in a) being profitable and b) stay on the good side of labels.

Personally I believe that the on-demand part of music streaming is commodity and more can be easily replaced, where as scrobbling provides a richer and more personal experience. However, I do agree with parts of the article, Last.fm hasn't moved as fast as it could have, some features need adding and some improving. That's part of the plan for this year.

dsingleton··on How long is Last.fm gonna last?
It's not ideal, but artist-disambiguation is also a non-trivial problem to solve. The effort of which needs to be balanced against a) how many people it affects and b) what else needs doing.
dsingleton··on My first tiny "weekend project": readable text hosting. Useful?
> For that matter, what is your character set? Are you using just letters, or alphanumeric characters? Again, I'd prefer the former since you aren't going to get a significant boost from the extra choices. You might also want to take out 'O', 'o', and 'l' so its unambiguous when written out.

I'd suggest using New Base 60, which has some smart readability built in: http://tantek.pbworks.com/w/page/19402946/NewBase60

dsingleton··on Spotify artists earn $167 per 1 million plays.
Honest question, not addressed by the TF article (and unfortunately I don't speak Swedish for the original);

Is $167 for all Spotify Lady Gaga plays, or those plays made in Sweeden (and thus under the remit of STIM)?

As I understand music licensing Spotify would be required to pay royalties to the collection society relative to the location of the play.

dsingleton··on NSFW: Don’t bullshit a reformed bullshitter
Although I'm not a huge fan of Paul Carr, he did work for the Guardian, and now for the Telegraph, so I wouldn't judge him by TC association alone.
dsingleton··on Ask HN: What programming language are you currently learning?
Python
dsingleton··on Last.fm founders quit
It's getting a bit trite that every time Last.fm is mentioned (in good or bad light) that someone mentions libre.fm.

Don't get me wrong, it's a nice project, but it's as annoying as constantly plugging your startups alternative to a popular service, the fact it's open-source doesn't dull that.

dsingleton··on Last.fm founders quit
I would say given the constraints on founders being tied to their companies, the turnaround for leaving is far greater than the length of the TC debacle.

(I work here, and have had no indication that the TC allegations are true)

dsingleton··on Are hackerspaces growing because companies don't tap their engineers' creativity?
I work with a couple of guys who've been doing a lot of work to organise UK (specifically London) hack spaces.

http://hackspace.org.uk

I think the reason for the popularity is a mix of work discontent and people wanting to do radically different things than their day job may offer them.

dsingleton··on The Great Spotify Mystery
There's an interesting comment about "passing information back to record labels" especially given: "It was stated that the labels own 30 per cent of Spotify through equity investments. It may be higher."

I'm not implying it's some big conspiracy, just that keeping user data private when you're (part) owned by the companies a lot of your users are scared of is _hard_.

dsingleton··on Sweetcron: The Automated Lifestream Blog Software
I wrote a moderately useful lifestream hack a year or so back, just checked on it and it's slightly broken, but usable;

http://dsingleton.co.uk/code/lifestream/dsingleton.co.uk

The beautiful thing is that it's entire generated from a single URL. This requires the site to have implemented the microformat rel="me" link as it uses the SocialGraph API to scrape connected URLs. All matched pages are checked for a rel="feed" style link, those are all scraped and merged together to form the timeline.

Programatic is nice, but also a huge mess. I never got around to grouping/bubbling interesting content, and it unfortunately seems that my SG data is a bit corrupt, my URL has been linked to various things that aren't me.

edit note: I only resurrected this the other day, the code is awful garbage, but it is due a refactor and release soon if someone else wants to hack on it.

dsingleton··on Ask HN: Keeping track of stuff on the net
Careful tagging on Delicious, combined with a personal Wiki/notepad web app that pulls in links, photos, etc, based on the wiki page/tag.
dsingleton··on What happens to data when a Web start-up dies?
"Pogoplug has put the source code for its servers in escrow. If the company goes bankrupt, the terms of the escrow dictate that the code be released to SourceForge as an open-source library."

This I like. It wouldn't fly for all companies, especially as you get larger (or get bought), but it's a really nice simple idea. I'd imagine it creates an awful lot of trust between the company and the users, which is always a good thing.

dsingleton··on Twitter Porn Names Scam
Be careful doing this for a service with an offline/telecoms aspect. Both my bank and credit card companies ask to verify that information when I phone them,
dsingleton··on Twitter Porn Names Scam
It really frustrates me when sites require a question and secret answer like "hometown" or "mothers maiden name".

Those are both very easy to find pieces of information. Let me select the question myself too. By forcing me to give you answer here you're potentially making my account _less secure_.

Right now I have standard fake answers to those questions, let's hope they never cross reference those with anything else. I'm not sure how I'd convince someone my mothers maiden name is "<insert comedy name here>"

dsingleton··on An approach to fair ad blocking
A lot of advertisers don't want to reach those people though. They want to get their brand in front of influential 20-somethings, not to get clicks, but to generate brand awareness.
dsingleton··on An approach to fair ad blocking
There was some discussion on Reddit recently about ABP usage figures (http://www.reddit.com/r/programming/comments/8j4c7/we_create...). My rough estimations came out at 6% of FF users having ABP installed, sounds like that was about right.

Out of curiosity, what kind of audience does your site have? Particularly tech savvy?

dsingleton··on An approach to fair ad blocking
I actually was looking at this recently. There used to be some foolproof ways to identify ABP, but they removed them - as a bug fix IIRC. They definitely don't want to be identifiably.

But there are a few heuristic methods, basically just loading an image from a blocked domain (it's a sure thing double click will be blocked), waiting, then checking the DOM to see if the element has been removed. Not fool proof, or specific to AdBlock but good enough.

I have a couple of detection demos (including flash block) here:

http://dsingleton.co.uk/code/firefox-plugin-test-suite/

dsingleton··on An approach to fair ad blocking
By nature only a small subset of ads will be engaging and fun. If all ads were "that good" then they'd all be equally mundane. Ads are an arms race for attention, it's not about being better, but better than the rest.