kevinday

If you're looking at this and not seeing any difference between the "before" and "after" versions, it's because HTTPS Everywhere is redirecting all github urls to their SSL version, so http://jessepollak.github.io/card/ redirects to https://jessepollak.github.io/card/ then can't load any of it's javascript dependencies due to the http/https mismatch.

Bonus points for the form still working right through all of that.

I've had really good experiences with Amadi Systems as a Supermicro reseller. http://amadisystems.com/

I've stopped buying Dell/HP entirely now, because the price of Supermicro's stuff is so much better and you don't get into warranty arguments like you do with HP about running non-approved OSes.

Is this also why when I hover over the menubar icon I get a beachball until it's done animating? I didn't see in this in the old version, but with today's I couldn't access the menu bar at all until it was finished fading.

For the lazy: the interesting part is on line 630.

I know you say you're not storing the password on your end, but what prevents you (or a hacker who somehow gets access to your server) to suddenly start logging the passwords as they're sent to the server when someone logs in?

You've got what looks like a good approach to storing things in an encrypted way, but it's still requiring the user to trust that the server is actually doing what it says it's doing and no more.