rajbala

How does this work when the object stores don't support all the features of S3?

For instance Atmos doesn't have public buckets, DNS names for buckets, named keys implemented like S3, regions, etc.

But it does have features that S3 doesn't have like byte range updates, erasure coding, etc.

Non-gated MIT parking lots are freely available after 5PM on weekdays and all day on weekends and MIT holidays.

Precisely. Who would have predicted that Twitter would have been used to organize people in a meaningful way during the Arab Spring?

The overthrow of tyrannical regimes is a noble cause that a startup would almost certainly never been able to focus on as a solution to a big picture problem.

I think that's what SideCar is trying to become.

The big lesson learned here: don't pay a high cost to only operate at the margin.

That's what App.net did --- they built out a complete product offering to only be marginally different from the alternatives.

"I noticed that the email address it came from as well as the link went to a GoDaddy registered domain."

Who does a whois lookup on domains from spam emails?

Price seems a little high, but metal welding is labor intensive.

From an interview of Nathan Myhrvold on Fareed Zakaria:

Zakaria: How worried are you that the United States is no longer going to be the place that invents the future?

Myhrvold: I'm very worried. Current course and speed --- we're very good at inventing, uh, but we're also undermining our ability to do that in lots of ways.

<facepalm>

Dropbox has this permission type already.

Nope, not I. :)

I'm not embedding account credentials for Flurry and UA in my app. I embedding app keys and while those don't allow someone to take over my account they could certainly wreak havoc with push notifications.

Urban Airship actually instructs you to create a plist file for an iOS app where you specify your production app keys.

http://docs.urbanairship.com/build/ios.html

I'm not necessarily disagreeing with you, but it's not always practical and perhaps not even possible.

For example the push notifications SDK from Urban Airship and app analytics SDK from Flurry depend on having credentials stored in the app.

These examples are not unique to them. I don't disagree that it's wrong, but I don't know how to work around this to be candid.

I think that is what's happening. They would have no other way to identify my app and my AWS credentials otherwise.

I think this happens all_the_time. Amazon has a solution for managing their access credentials that I admittedly wasn't using, but how many vendors do not?

If you're using a web services API from a 3rd party that requires developer authentication keys you may be storing those keys in the code because there's not a great alternative.

I asked myself the same question and don't have an answer yet.

They clearly say that they've detected my access credentials in the app. There's no way to associate my credentials to my app without downloading the app first and inspecting it.

Reading/writing to S3 was my use case. I'm sure there are others.

What's misguiding?

No intention to misguide. I think it's completely accurate. They downloaded my app, inspected it, found AWS credentials and emailed me as a result.

Save files to S3.

They (or someone working with them) would have had to download the app and inspect it. They clearly tell me that they've detected access credentials in the app itself.

That's not conjecture.

I'm not implying that there's anything wrong. Quite the contrary actually.

I don't think they're looking for higher than average API calls for a given key because my charges were completely expected.

I often find that Disconnect can be overly aggressive in the parts of a page that it blocks. When something is amiss when using a webpage whitelisting the site in Disconnect usually fixes the problem.

The plane reportedly flew under the radar after turning away from Kuala Lumpur.

If there was indication that something was awry the passengers would have had plenty of time before reaching the open ocean to use various forms of communication.

There would have been calls/texts/tweets/facebook posts from the passengers if they were aware that something terrible was happening whether accidental or intentional.

One thing that always bothered me about the OLPC project: a laptop, and perhaps any other tech in isolation, is no panacea for an education problem.

It's a legitimate question. I understand why URLs need to be browsable.

How does a browsable API work when it may need certain HTTP headers, request signatures, etc?

Perhaps an obvious question, but why do APIs need to be browsable?