misterdai

A bargain for 20,000 operations.

I'd love to be on the beta, signed up and have been waiting patiently but can't pass up a queue jump ;) Docker ID = misterdai

I think it's brilliant that this gives security more prominence with setting up the unprivileged user. Pretty much every Docker post / article I've seen tends to skip over details like that.

One of my pet hates about Docker was the hassle with volume mounting on the Mac and permissions. So glad this is being worked on and can't wait to try it out myself. Makes local development a pain if you can't get your databases to mount a volume and all your dev data disappears ;)

Would be interesting to play around with. Imagine having a "Twitch plays Fallout 4", but with someone playing the game properly but Twitch gets to control the inventory, armour, weapons, map etc... all via the pipboy api.

Signed up to take a look but apart from the lovely interface, it seems to be lacking in unique features that'd turn my head away from Trello.

While I do love Trello, I find it is missing support for some aspects of Kanban such as swimlanes and list limits. If something out there could match Trello on the majority of features, add in the classic Kanban stuff (optionally) and have a nice looking interface + mobile client, I'd be sold.

The GitHub site also states that it's available for Chrome, Opera and Safari (not yet in the extension gallery).

Chrome: https://chrome.google.com/webstore/detail/cjpalhdlnbpafiamej...

Opera: https://addons.opera.com/en-gb/extensions/details/ublock/

Safari: https://chrismatic.io/ublock

Haven't tried it out myself yet but it's nice to see effort put into lowering the memory & CPU usage of such blockers.

I can understand the point of view. In a world where they produce children's toys based on adult videogames, there is always going to be content that crosses the age boundaries and make it difficult for parents to cope with.

Disappointingly, she isn't their audience probably because her demographic don't buy enough comics or comics of the right theme. The same could be said for people with Wheat / Gluten allergies in most shops, which is why they have little or no products available in most general stores, because they aren't a big enough demographic to make money out of.

Those comics weren't aimed at her (due to the age rating), which meant that they shouldn't have been a factor. I'd also be curious about which Batman comics were actually suitable for his young son. What should have been a factor was the lack of content available for his daughter (which was mentioned), instead of the focus on the unsuitability of content which isn't even aimed at her. Too much focus on his daughters age and older themed comics.

I would have sided more with the author if they spent more time researching and promoting alternatives and encouraging parents to be more careful with the content they children are consuming (due to the closely related adult versions).

They fixed one of the issues I reported. I don't believe I had official confirmation of the other issue I had with Railo being resolved. I probably should try it out again on their latest version, but I don't use Railo and haven't found myself with much fondness for ColdFusion either.

But I should probably pull my thumb out and check ;)

I do find it worrying the amount of parents who dismiss a form of entertainment as "for kids" in their mindset. I've seen it a lot with video games, where a parent will buy a game for their child who is not even a teen and the game itself is rated for adults only (Call of Duty a prime example, once I saw it with Saints Row).

It's a shame the article author didn't bother to take this into account.

That's a reasonable point. As a store owner he's probably trying to target the demographic that's buying the most comics. If the majority of his custom comes from male teens then that's the type of comic he'll stock.

Of course there's nothing stopping him from trying to stock comics for other groups, as he had stock of younger comics and those aimed at girls, but it can't be expected that he provides equal footing if he's simply trying to make money from his main group of customers.

When I go shopping, it's nice when I see a shop that has a gluten / wheat free section. But I don't expected them to have a large aisle dedicated to it if they're not seeing enough custom to validate it.

While I can understand how part of his post is about the way women are portrayed physically in those comics. I'm not so sure on his examples he picked in reference to his children and their unsuitability. I already commented on how I wasn't sure if Batman was suitable for his 5 year old, given the nature of some lines, but some examples he picked in reference to his 7 year old daughter were a stretch.

Power Girl: Haven't fully checked but appears to be part of a line rated T for Teen.

Harley Quinn (Batman Detective Comics): Rated T for Teen. http://i.ebayimg.com/00/s/MTYwMFg5MDA=/z/axsAAOSwD0lUlJHV/$_...

Perhaps comic book stores should designate areas for different ratings of comics. Or comic companies should agree to make the rating larger. Or some parents need to become more aware that comics are just for kids, the same way that computer games aren't either.

A bit shocked that he seemed to be allowing his 5 year old son to buy Batman comics. I recently played catch up on the New 52 Batman series and found them pretty violent in places, enough that I wouldn't let any young child read them.

I can understand both points of view with the disclosure of the security issue. A while ago I discovered some security issues with Adobe ColdFusion and Railo. I wish I had put a deadline on disclosing the Adobe ColdFusion issues, as they dragged their feet so much (with admitting it was an issue and progressing with a fix) that at points I felt like throwing in the towel. Regrettably, instead of lighting a fire under their ass, I waited. At the time I was working on an open source side project, which would have pointed fingers towards where the issue was for any curious people.

I ended up halting development of my project while I waited for Adobe, to the point where I no longer wanted to work on it. I had stopped for too long and I didn't want to dig anything else up. Having no legal type knowledge myself or knowing anyone who could offer such advice, I was also too concerned to reveal anything for fear or any legal reprise.

So, the threat of security disclosure is warranted to pressure others into putting in the effort. However, the impact of the disclosure should be considered. If it will seriously affect others (who aren't responsible for the fix) and put them at risk, there should be the flexibility there to work with them on a deadline.

Here's the most recent minutes (2014-12-19) for the Node.js Advisory Board where they discussed Io.js (while considering their 0.12 release).

https://github.com/joyent/nodejs-advisory-board/blob/master/...

Thanks Chris, probably read into the delay a little just because I could find any mention of the meeting actually taking place or not, apart from your tweet about it starting.

Understandable though with all the other stuff you've got going on. Cheers :)

I'm finding the situation with Node.js quite frustrating. There doesn't appear to be much communication as to what's going on with the project.

It's also odd that the Node Advisory Board was supposed to meet on the 20th (2014-11-20). Chris Williams tweeted that it was about to start [1] but no minutes have appeared and I can't find any mention of what happened during the meeting.

[1] https://nodejs.org/advisory-board/2014-11-06/minutes.html#mi...)

It'd be nice to have improved support from GOG for linux. The PlayOnLinux project has a decent list of Gog.com games that it'll help install and run on Linux platforms. But I'd buy a lot more games from them if I didn't have to rely on that or manually trying to get games to work.

Only problem will be having more games to distract me, I went with Linux to avoid needing the willpower to not play games and get on with learning / working ;-)

Any idea if GitHub will ever alter the way that works so you can avoid it giving you write access. I was all ready to give Gitter a go until I saw the permissions that would be granted. Sure you're trust worthy but us IT types can be paranoid ;-)

GitHub uses its Linguist project to detect languages and index them as far as I know. I've used the list of languages from this file: https://github.com/github/linguist/blob/master/lib/linguist/...

I did pick an older version as they don't always run the latest release. Handy as you can filter out items flagged as "markup". Plus, have to watch out for languages like Mirah that are oddly indexed (same repo count as Ruby).

Interesting post, it's worth playing around with the GitHub API to see what you can uncover. Watch out with basing information off their search API, sometimes it seems to miss users or repositories from being indexed, screwing up your results. Caused me a few headaches recently as I've a little site built on daily statistics collected from GitHub. For example: Mojomdo vanished from their user results making Linus Torvalds most followed user, fixed on GitHub now but still evident on my site (boo).

Here's my site for anyone curious: http://hubreports.yougeezer.co.uk

It'd take you about 48 days :) When I checked that ID of the most recent user was 5663608. The github API will give you 5000 hits an hour if you authenticate your requests. You'd have a load of "not founds" but working up from 1 to 5663608 would get you every public user (no private accounts or banned / deleted).

5663608 / 5000 = just under 48 days worth of non stop API harrasment... maybe that explains why github keeps going down, someone is already trying this out :P

You could also get away with a search for created:>2007 Not really sure what the "@" is doing.

Interesting read. However, I helped build a web based system for the management of a bowel cancer screening programme. Considering what would be sent back on the testkits and processed into the system... it's the shittiest project I've ever worked on, but not for the same reasons :P

Only the support issue, but then I'd have thought that people using really long passwords as normally the ones who'll make an effort to remember / store them. They mention "Encrypted passwords", which would vary the amount of storage required in their database and also make the passwords retrievable if the attacker had gained access to the key / algorithm etc...

I'd had preferred if they used a one way hash instead, obviously with a secure hash algorithm, uniquely salted and rehashed multiple times. All passwords would then be the same length when stored and users wouldn't have to have such a low maximum limit.

There are worse offenders for low character limits, like Adobe with a 12 char maximum. Used to be a site that listed some, just a shame it's no longer available http://web.archive.org/web/20100526105638/http://www.weakpas...

I think this is a great idea. My own little open source projects have always suffered on the frontend design site due to my lack of skills. Having people with those skills contributing can sometimes make a huge difference to a project , especially as most would be unable to validate paying for design work for something they're producing for free.

Maybe I can't find it but there doesn't seem to be a place where open source projects can interactive with designers who are willing to contribute their time freely. Maybe something that could bridge the gap between a designer community site and something like github?