mSparks

Yep, I went through the process of replacing all our XML objects into json ones about 6 years ago now. Smaller files and much easier to read, manipulate store and transfer.

And while I personally quite liked XSLT, javascript is a much more flexible and reliable option.

Like where? Who for? For what purpose?

I cant think of a single example that this would be useful.

{"notes to self":["Don't edit config files by hand","use a decent hierarchy"]}

//Http://jsoneditoronline.org

How does json "not support comments"?

{"comment":"default values for this object"}

I wonder if this is rand corp finding a chink in the armour.

Increasing block size will only postpone the problem and splitting the network will introduce a whole raft of unknown vulnerabilities.

At a minimum it seems like a fairly cheap and easy dos attack vector.

The best has to be V97.33XD Sucked into jet engine, subsequent encounter

Just in case you survived.

Its probably worth pointing out, that in either 1 or 2, the correct/professional way to do it (if the client wants a fixed price but providing one requires additional work) is do a go/no go first.

in this case, a hundred or so $ to work up a spec, deliver that to the client along with an estimate of the time that should be involved. They can either give it to you, someone else, or abandon it.

Actually, while I generally agree with everything i'm reading - this one part I don't quite agree with. (He exchanged a few emails with a potential client, saw a red flag, and then decided not to work with him)

The moment he accepted the username/password he engaged in a transaction - upwork rules or not.

He "should" have had the price and work agreed before accepting anything, and if they sent it unsolicited his immediate reply should have been "you need agree before I touch this".

Not The client eventually gave me login details, alas, still no job.

Then

After 3 weeks of sporadic talks, the client trying to get me to work without actually giving me the job.

->The client was incredibly unprofessional (but not unprofessional enough to be named and shamed I see), but if you are taking login details without a job assignment you are asking for trouble.

While this sounds like it "should" be true. I think managing that will turn into something of a nightmare. IPFS is making awesome inroads into achieving that, but its not clear of the benefit over something like say freenet (other than freenet is very slow because it prefers privacy and resilience over speed).

I can see it being "really" useful as a backbone for something like Open Cobalt - http://www.opencobalt.net/ And I'm really looking forward to seeing that mature.

But the last time Open Cobalt seems to have been updated is 2010 - that's quite some time ago.

I wonder if it's being held up by patent trolls, but really all of them feels like more like a solution looking for a problem. That can take a very very long time to mature. Which is a shame.

Back in the day. i used an Orange contract nokia 8310 ir modem and the free phone 0800 number that came with BT internet to give my laptop intenet.

Lasted around 6 months of near 24/7 use before Orange started detecting data and charging contract customers to call 0800 numbers.

rapid unschedualed disassembly event.

"Safe/Secure" code - by definition must be slower than unsafe code.

Because every operation must pass over a series of hurdles to make sure it is safe. - does the code have permission to do this, is everything being supplied within bounds, is the system in a stable state.

Every language is about the same with all these checks in place. In fact C is quite possibly slower, because so many of the memory jumps will be so far away, and compilers are much better at optimising for this than people.

In my opinion not having these checks is only acceptable when the permissions of all developers and all users - potential and actual are identical. While there are rare cases this is true, much to many developers chargrin, in nearly every case it is not.

The whole point of SSL is that developers, users and users of the users permissions are totally different.

It's not a case of blaming. Its a case of choosing https://www.libressl.org/ or https://www.openssl.org/

Applying best practice development processes or Pretending someone else can do it all for you, and you can "bolt it on" at the end.

The article lists: Future plans and lessons learned: At the top of the list for future development is support for TLS 1.3.

Like adding yet another protocol to the already hacked mess of protocols is a "good" thing.

Tell that to your bank manager when they make a mistake....

It is NOT the bug itself that is at issue here.

It is the "mistake" of an ENTIRE INDUSTRY relying on a security module with haphazard, proven flawed development process, and impenetrable code.

Then trying to pretend the exact opposite.

Unfair, attract me down votes - sure. True - without doubt.

For me, Heartbleed was much much more than: ->At its core, Heartbleed was a simple bug, a missing buffer-length check

It was a catastrophic failure of a critical internet component that highlighted the truth that these supposed crypto security experts didnt have a clue.

We're talking about the kind of "simple bug" analogous to a television with bare wires as a power switch.

Imho it will take a lot more than a couple of years and a team change to reinspire faith in that brand of security. If we should at all.

eBooks. The manual/documentation. Asking someone else working on a similar problem (who will then usually send over an ebook or other documentation I didn't have).

Could be its changed since the last time i used it.

for example. just did a search for "trump" on mobile and google search stops offering next after 13 pages.

Yeah, definately picking up a "omg he doesnt google ten thousand times a day" vibe.

Kinda guessed as much from the start (hence the - probably to forward thinking conclusion).

But probably worth pointing out. The reason i noticed I hardly used google any more last week, was because I did a search and realised it had been so long since i saw google search results on a desktop i almost forgot what they look like.

And yeah, i know that is because i spend most of my time now on places like hn, closed networks with all the technical manuals you could ever need on hand, specialist forums or tor sites that google doesn't even know exist let alone provide search functionality.

But i am definately not alone. And it definately looks like the future (or at least more like what the internet used to be). Infinately more valuable information. No spam bots or corporate advertising. Just experienced techies sharing knowledge, skills and resources.

But all that is irrelevent to the point that unlike historically techies arent earning google revenue and non techies really dont use google that much.

We went through a time when adsense completely dominated the ad market.

Yet there is another google "dependancy" I havent seen for a very long time.

And that i share with pretty much everyone techy enough to install an ad blocker.

While i'll take the compliment that you think i am that unique.

I'm pretty sure I'm not.

I said "techies like me".

Thats not extrapolating anything.

Obviously much less experienced techies still need to look up how many sides a square has at least twice a day.

I'm drawing a distinction between use/rely and how it was previously.

Does anyone still have google search as their home page? And if they do, do they use it?

When was the last time you got past the first page of results? (and btw, its so rare that that people do now did you know if you get past the first couple of pages it checks whether you are a bot).

Im contrasting how it used to be (reading google results making up a good majority of the time online) to how it is now (no more than 1 or 2 pages a day, sometimes not even that in a week)

Actually realised last week I hardly use google search anymore. And cant remember the last time i saw - let alone clicked on an ad (clickbait excluded). Not that I've switched to another search provider as much as search isn't the entry point to the internet it once was (especially with no google on tor sites).

That techies like me dont rely on them any more and non techies all share stuff via facebook must be hurting their page and ad hits.

Makes me wonder if this is more a move of desperation on their part. Food for thought even if it is a little too forward thinking.

Thanks! I missed the point the first time round, giving up watching a few minutes in. Truly beautiful, although I prefer the shifting shadows on the tree shots.

just. awesome. (+1 on no 32 bit).

looking forward to playing with this when you are ready.

What tools does go provide to track down memory leaks like he experienced?

The service is understanding the intracacies of html and webservices of any and every kind.

while negotiating a legal minefield.

So I would not echo the same concerns to any startup with a blog on wordpress or medium.

I would however echo similar concerns if an audiophile startup made an introductory youtube video with the sound so distorted and broken you couldn't understand what they were saying.

legally speaking

https://techcrunch.com/2016/08/15/linkedin-sues-scrapers/

how is it safer or how is it more fun?

The former, because it wont get you extradited, the later, well, that would be telling.

lets just say there are a lot more organisations than a few analysts in Maryland monitoring the internet and our communications, and they are interested in much more than unhappy muslims. Then leave it at that.

maybe you should.

---> When something isn't good, you needn't pretend that it is. But don't be gratuitously negative.

____

hardly "gratuitously negative". Just simple honest opinion of someone wanting to charge $1000 a month for something that anyone with an interest in already has lining their software shelves on site. Which a ton of free alternatives liter the internet. And is also now illegal.

I reckon Ive done just enough to waste their time including me in their letter :)

Playing with honeypots much safer and more fun than active hacking.