A little more info, but not alot. More monitoring.
Equally discovered PHPIDS, reading how it works. Im not sure this would have picked up on this attack vector, as it would have been legitimate traffic. Just rapidly used.
81 karma · joined August 14, 2009
Please feel free to get in contact chris@learnalist.net if your real I will reply.
A little more info, but not alot. More monitoring.
Equally discovered PHPIDS, reading how it works. Im not sure this would have picked up on this attack vector, as it would have been legitimate traffic. Just rapidly used.
What I am specifically after, methods to know that this one computer ( keep it simple ) has sent x 1,000 requests in a short time ( ie to quick to be human ).
Before some of you lay the blame purely on AT&T for having poor code.
Other scenarios which are similar but different.
Perhaps we want to use this to throttle api requests, or to tackle a brute force attempt on the login.
But surely, as the "webapp" you can also revoke a users subscription.
I have been thinking about "recurring payment" with an agreed, "we the webapp" will cancel your paid access if you have been absent of the site "x days" or more likely 2 months.
I have lovingly crafted ( wasted ) a system which is still in its infancy to handle a form of automated test driven development and from what I can see so far, the times I break it or discover a bug ( logic bug ) in my code later it is usually due to week tests.
Clearly I am not a large site like wordpress.com, a part of me thinks its the right thing to do. It certainly makes deploying a breeze and gives a little more "confidence" that the system didn't just fall over.
The sad part, at least in the PHP world, there are no libraries with an explanation on how best to use it with your site / application structure.
The database part is the biggest hiccup. My solution is a duplicate database with no data. First it confirms that the "fake db" matches the "real db" and warns if the table structure is different.
Then with my blank "fake db" using functions in my tests to "setup" and "destroy" I purposly build data to test with.
Once my site is operational, I will look to using live data in the "fake db" to simulate with real data. But so far it has been an interesting journey.
Clearly, TDD would become a bigger issue if you have to test sphinx/couchdb/mongodb etc setups but like with all creations its starts with a blank.php. ( in my case )
Not that this covers "Optimise for security".
But my test suite, after the first "test time" the test has been run, will warn if the "library","model", "controller" it is linked to has been altered without the "test" file changing, which at least warns me to the idea that maybe I need to refine my test.
All very padantic, but reading from the side lines of patio11, I can't help but see logic in "automating" things to make your life easier, more efficent and less likely to add human error into the equation.
I leave with what I consider a valid point.
Once upon a time, people looked at the "MVC" approach as time consuming and wasteful. At least from my understanding of watching the web evolve from the earlier days.
Google "site:http://news.ycombinator.com/ snailpad" for more on his app. It was easier than listing all the links.
I have to say its one of the better interviews of recent times. There are some real gems of information in there.
What am i missing?
Based on the blog post they mentioned igoogle ahead of games. Could it be linked to creating a more igoogle game marketplace.
Also couldnt help but notice how a game for igoogle would be constrained to small dimensions, just like those of a mobile.
Granted I have only skimmed over the following ( ie this stuff is hot off the internet press )
http://cebp.aacrjournals.org/content/17/1/183.full This is a full text article discussing how regular exercise whici I consider running and marathon training to be part of, is useful in the fight against colon cancer, yet they are not 100% sure why.
http://jnci.oxfordjournals.org/cgi/content/full/96/24/1805 Still getting my head around this article, yet it is a fascinating read.
Marathon runners are at risk of skin cancer. http://www.ncbi.nlm.nih.gov/pubmed/17116838 http://archderm.highwire.org/cgi/content/abstract/142/11/147...
http://www.msnbc.msn.com/id/15817212/ ( first found via msnbc, I wasn't happy with msnbc as my source )
If anyone else has more links on cancer linked to marathon running please add, as I would like to read more on it.
As with anything on the internet, this article or the papers above, always read up from multiple sources and see what lies between the lines.
My biggest problem with this essay, knowing it was part of a research paper, im saddened by his lack of citations.
"revenge by china" slightly more on topic im struggling to belive they only have one load balancer for the whole of YouTube.
I am dipping my toes into couchdb, just to see what all the noise is about.
Still getting my head around map,reduce and the fact im writing in javascript. All that aside the biggest exciting factor for me.
It is so much easier to write custom functions for it than SQL. ( Mysql, and yes I only tried via phpmyadmin )
But I use FIELD() http://dev.mysql.com/doc/refman/5.0/en/string-functions.html...
SELECT FROM x WHERE id IN(9,4,22,38,4,..) ORDER BY FIELD(`id`, 9,4,22,38,4,..)
That said, I dont know if sql or php is quicker.
Enough of cricket.
This is a huge event for youtube, its infrastructure and its a glimpse into where we might be going with sports events in the future.
Just had an ad, a friend in another country, saw a different ad to me.
Equally, maybe its just in this instance, but the "Official Community" is linked to googles social network, even tho they are showing live streaming of twitter.
As you can tell, im quite excited about this. Am I alone in thinking this is amazing use of technologies.
a) Get access to paid content.
b) Highlight the fact that search engines are allowed to see free content.
If its "a)", I disagree with your suggestion.
If its "b)". I agree, I find it highly annoying when you click on a link to discover the part you want to read is hidden from you behind a pay wall. Search engines should show what we see the non paying public, furthermore I believe google doesnt like the addition of words to raise the rank of the page, sites which do this should be penalised for this behaviour. Which is what happens when you give google access to "fuller" data.
I equally like to a point how your tracking it via excel, instead of building a system for hours. Once proven it might aid growth of revenue, then i see the system being built.
Even if the above is not correct for you, it has given me food for thought and helped solidify a few liquid thoughts.
Whilst I try and grapple with this notion and potential implications I would like to ask a question of my fellow HN'ers. ( especially those who have posted so far )
Have you been to university?
Do you have a degree or something else from a university?
I ask these questions as I think its important to get a little background of the person who is posting there views.
I do have a degree in "Information Technology no less Majoring in Data communications".
My gut feeling is, there will always be a place for universities. I further believe there will be a huge growth market in self paced study via the internet which will not be linked primarily to universities. Further more, I want to believe that universities will be geared more towards those who are able to "do it for themselves".
"do it for themselves" - I believe will get taught / inspired at school ( high school etc ) via social networks and via social / console games to a point.
I think the future is bright for learning.
I have a few friends in different fields of research and in the biotech field. I sent them a link from sciencedaily, after thanking me for the link. They politely informed me that sciencedaily is not a worth while publication and therefore deem the information from it not so exciting / important.
You could say they are being snobbish maybe even elitist. But as mentioned in the comments, this is not the first time a post to there has had words like "misleading" etc.
What if we had a peer review, prestigious website where you could submit your articles for publishing in the IT world?
Equally, does "snobbishness" exist already in peer review sites for the IT world already?
Not coming across in a negative way, at first I thought his site had a revamp. Now im just confused.
Equally makes you wonder how many of the banks are enjoying profits from such accounts when clearly it must be suspected that they are dodgy / tarnished or criminal in some way.
One:
Use an index so people can jump to a specific part. Then the index can help sell or prepare them for what they are about to see.
Two: ( more work )
Use "personas".
I am a student learning french. - then give them links to show how the site will work well for them.
I am a teacher of chemistry and I really like videoing my experiments - again a few click thrus targeting this type of user.
etc...
With your personas, dont aim to fill up all features in all personas, just think what will work for them.
I have skimmed your front page and your tour page, yet im not feeling like I have grasped what you do clearly enough.
I even went as far to skim the article by a very supportive Paul Stamatiou. He mentions you will use 30% of money made to aid 3rd world countries. Im curious what that is written on a random blog, yet I cant find such a statement on your site.
Either way top effort for attempting to tackle such a space, have you given much thought as to how your "video classes" etc will work for people in 3rd world countries, or are you only targeting them with the money you make from developed countries?
1) The potential to grow food anywhere. ( Spaceships, submarines, cave systems )
2) From a green perspective, it would reduce many a carbon foot print in terms of travelling.
Still to conquer would be the electricity bill.
A country like Iceland tho, could become a major food provider with its almost free electricity.
From this I got the idea of measurement in "wave" and then the obvious "wavelength" jumped into my head and it stuck for me. Now that I have taken a sleep, I quite like "wave energy" too.
For those struggling for ideas, you could build a "has this prize expired site, tracking these very RTs".
A lesson learnt which they failed to mention is increase the time of your competition to greater than 16days ( or whatever it was originally )
That said, for people who are not pushing competition and are using Twitter and RT's to generate leads or help users find content from them. It gives a slight indication that many many trickles might not be harmful to you. ( Well thats at least what I have come away with. )
If they take advantage of features unique to the iphone I think there is a chance it would be more successful.
What if they gave you a better "offline" search engine than they offer the user thru the browser?
Maybe submitting via your paid app you get a communication channel with "new internet tv newsreaders".
Maybe iphone submitted content gets given priority?
Yes, potentially this development can be looked as a shot in the foot, but I think creativity could make such concepts fantastic and profitable.
My plan will be as follows:
Build a simple system to offer an invite code.
I add them to the system, and see if they take up the offer.
"The invite code" will be going in emails specifically written to them.
Who is them?
Family and friends, but not everyone. People who have a specific link to the web app in one form or other.
ie, They work in that field, they have an opinion on that field, They have knowledge of that field.
Once there, my next attack will be to "research" ( more than just google ), low and high level bloggers on the internet who might fit the initial requirements. ( In the area, opinion etc )
Build up a short term relationship ( if need be ) and write them a personal email. ( Not generic ) Further to that, if any of the people I research have a post address, I do plan on paying and sending them a letter. ( written by my own hand, not one of these email to mail apps )
When I finally start this process. I will do my best to keep records of it and then maybe one day convert it into a blog post.
They have a foreground so you can click links, current web browsers do not fully support links in videos.
As for the TED site, I really like how they size up and down the image, yet I find the use of the static image a waste of time. Usually that image doesn't add to who or what is being spoken about. Hence I still feel the video could work there.
I understand why you would feel its a little over the top. But I remember the first time I saw the page, I thought that was over the top.
Yet now im used to it.