nickfrostatx

> acting solely out of greed.

That's a weird thing to complain about. In a capitalist country, how would you prefer companies act? Not greedy? The whole point of a free market is that everyone tries to maximize profit. There are a lot of things you can point at to claim that Uber is evil, but I don't think greed is one of them.

Okay, so don't associate the SSN hash with the account. Come up with a mechanism to store anonymized SSNs to detect duplicate accounts.

You can always drop out if you feel the tuition is too high. We can talk all day about how much it ought to cost, but clearly you feel it's worth it to stay enrolled.

I agree with most of what you're saying, but I'm not sure about shifting the cost of textbooks to the school and charging for it through tuition. In my three years of school so far, I haven't bought a single textbook, and I've only had to pirate two. And I only pirated those two to have the questions for mandatory homework problems, didn't really use the material.

I think that if a student can find better alternatives to their assigned textbook, making the school buy it anyway and charge it through tuition just seems wasteful.

They usually set the content type to that of an image so the browser won't execute the JS.

They've messed this up in the past, see this legendary bug bounty report [1]

1. https://whitton.io/articles/xss-on-facebook-via-png-content-...

Given how important domain names are for security, it would be concerning if domain names get truncated.

I could craft:

evil.net/this-is-a-very-very-long-path/bankofamerica.com/account-settings/blah/blah/blah

Which, depending on how this is implemented, might render to

...bankofamerica.com/account-settings/blah/blah/blah

One problem I have with this tool is support for pre-computed public keys or CSRs. The client prefers to generate a new key pair for every certificate. Automated renewal that works the same way for existing CSRs as it does for regular certificates requires undocumented hacks.

Using the same key pair for multiple certificates is necessary for public key pinning, since Let's Encrypt only issues certificates that last 90 days. I would love to see this feature get developed further.

See also: http://bettermotherfuckingwebsite.com

This is exactly the problem that Uber's rating system solves, but without all the arbitrary factors that tipping incidentally includes.

The article admits that information from eight drives is "a hopelessly anecdotal number"... then goes on for several paragraphs to imply that these eight drivers are evidence to systematically disprove Uber's claims about racism and sexism.

Completely bogus.

Your comment was seen as pedantic and nonconstructive.

The S3 Free Tier can be a good alternative as well. https://aws.amazon.com/s3/

"Do you mind" would be counterintuitive. I see analytics and want to respond "n", for no analytics