1,036 karma · joined September 28, 2017
No, I said "careless" rather than "incompetent".
Lot's of things could go wrong and cause that, I don't comment on the detail until the reason of why the password end up been pushed to GitHub is explained.
Also, I suggest Please REMOVE anything that MAY help to locate the stolen information, including content of the advertising post (Can be keyword searched).
Wait, from what I've heard, the programmer just uploaded a configuration file that contains the password of the database?
And oh boy, he's not the only one, Maybe GitHub can do something about it.
To the topic: This is the exact reason why I don't support any sort of system that log users personal information without user's control.
Because regardless how strong and secure you think your system is, all it takes is one careless action, then everything blows up.
Which is a good thing, does it?
Plus, give the future a little bit more time, when science and technology become advanced enough, maybe the problem can be resolved naturally?
One thing many people misunderstood is that "PHP are for newbies".
No, you need to have some serious knowledge on PHP to be able to navigate yourself away from all those pitfalls that language provided. For example, use ===, be careful with "0e123" etc.
All those pitfalls combine, is annoying enough to out weight most the good things that PHP also provide.
Wonder why, care to explain?
KMT is actually doing very poor at the time when they are ruling the whole China, which is something our (P.R.C) text book love to talk about. And it's the main reason of why many people are actually the fan of CCP at that time ... Just so you know.
Sadly we didn't end up with a two-party government like the U.S. did, so we have to argue with each other about who is the rightful government of the China all along.
If you change "have" to "could", then maybe it's true again, according to this video at least: https://www.youtube.com/watch?v=3iMlOH6hdOw
It's quite sad to see politicians make space exploration this hard.
Even more sad after you find out politicians also the source of so many wars on the Earth.
Isn't this (Encrypted SNI) was the one been extensively discussed here: https://news.ycombinator.com/item?id=17538390 ?
This is great. I hope CDNs like Cloudflare etc deploy it ASAP. Also, deprecate previous TLS versions as ASAP so it can be more effective.
Wried, don't just mention the censorship reason. The bigger picture is [0][1]:
1. China government demanding content deletion by "Red-Header Files" (Government document) rather than law (As it will make the censorship too apparent), and it's violated Google's policy. NOT because of Google is an anti-censorship enthusiast as many people think they are.
2. During that time, Google (including Gmail) also under attack (with possible internal help) by a group of hackers who Google claims are sponsored by the government.
Now, 8 years later, things changed a lot. Especially after the implementation of the China Internet Security Law (中华人民共和国网络安全法)[2] which makes censorship a public responsibility ...
[0] https://techcrunch.com/2010/01/12/google-china-attacks/
[1] https://www.theglobeandmail.com/report-on-business/google-pr...
[2] https://en.wikipedia.org/wiki/China_Internet_Security_Law
So I guess I'm not join the team of doubt this time for now.
(Before you click, grab yourself a translator first)
[0] https://www.zhihu.com/question/277693647/answer/396254674
Maybe this is the exact reason + some data mining bonus (Not important, but Google can still do it).
Also, if Google is an ISP, without hosting it's own DNS service (Have to rely on other ISP's service) is dangerous.
Assuming your government (the justice department at least) still functioning, electronic banking transaction MAY actually reduce random street robberies. Because those kind of transaction will almost certainly leaves some kind of trace behind, which gives law enforcement a chance to discover illegal activities.
I found myself having the same problem, luckily I don't know how to write a language.
I'm currently working on a part-time project in Go, it involve a HTTP service.
As you may already knew, there is a built-in HTTP server that came with Go, so I COULD just took it and go ahead directly start to implement my service logic.
But hell no, it's too slow. So instead, I made my own HTTP/1.1 server, which is bit faster than Go's.
It was pretty fun to write that server indeed, but I don't think it's worth the trouble. In fact, I really really hope somebody stopped me when I was creating that `http.go` file.
Now, I'm wandering around, thinking the `html/template` is too slow ...
Off topic but, you know what, maybe it eventually will. Just like in the movie Ready Player One, nothing says it couldn't be done.
Maybe the reduce of physical interaction between people are not caused by social medias, maybe just because people don't want to spend time and energy (or, lazy) on those physical interactions.
If meet with friends face to face cost 2 bars of power, and interact with them on social media cost 1 bar, I think many people will rather to save 1 bar, so they can do more tings (like, take a nap).
How about to build an underwater tunnel between the mainland and Hainan[0]?
Oh wait somebody mentioned it[1] at 2010, and someone else did it[2] again at 2018.
Well, then good luck to that tunnel.
[0] https://en.wikipedia.org/wiki/Qiongzhou_Strait
[1] (Reference) https://en.wikipedia.org/wiki/Qiongzhou_Strait#cite_note-Soh... (2010)
[2] (Reference) https://en.wikipedia.org/wiki/Qiongzhou_Strait#cite_note-4 (2018)
No, it's ethical in the government's views.
However, then why do people in China would going to use such search engine knowing it's as bad as Baidu currently is?
Actually, to understand the problem here, you need to know who are the main user of Google in China: The progressives (maybe overly simplified, but these people are who actually sicked with Google for a very long time). And most of them also very sensitive to those bad things Google did in the recent years.
Plus, in the long run, a local Chinese company (Baidu for example) can bring far better benefit to the government compare to a foreign one, AND without causing any headache worrying about the company could become too strong to control.
So, Google just can't win the battle with local giants.
If Google re-enters China, the only thing they can probably be succeed, is to make Baidu fear again thus stop doing it's shitty business.
Maybe it's language related.
I'm Chinese, and I can tell you there are many people in the dark corners of China's Internet are talking about similar kind of things: Spy stories, military secrets, dark politics & histories, rumors etc. Basic human nature. But if you don't read Chinese and look into the right place, you'll simply unaware of their existence.
I don't think all English speakers can also speak or read German, so maybe that's the reason, rather than "They just don't care".
So, hi kushalpandya, jmiserez and svesselov (For some reason I cannot reply your comment)
Looks like you guys didn't understand what I just said: The problem is the UX design is NOT very good. I think you guys should re-think about how user will interact with your interface.
For example (since I discovered the 'fluid' setting): Even if a user have a super wide monitor, when the user turn on the fluid setting and maximized the browser, should they saw an interface like this: https://screenshotscdn.firefoxusercontent.com/images/324e117... ?
Also, from my point of view, 1200px is still too wide for that list. If you take look the version that I've modified, you will notice it's only about 400px wide, and with that width, I can scan every results on the page without moving my eyes too much.
The magic thing is, with 400px, YOU can also scan every results on the page without moving YOUR eyes too much, even your monitor is wider than mine. And THIS, my friend, is the so called compatibility. The goal here, is to provide the same level of user experience -- GOOD user experience, NOT to fill the whole width so the page look like the same in every resolutions.
Again, the key point here is NOT about just the width of the page, it's not a problem between 400px and 1200px and 100%, it's about how you guys think how users will feel about the UI -- Will user feel tired when using it? Can the UI effectively helping user to get what they want? etc.
If you have no idea, go checkout some list designs on https://dribbble.com/ (By the way, dribbble.com itself is very well designed, go learn from it)
Don't worry though, I'll keep using your product and patiently waiting for improvement :)
You see, there are many many best practices in the UX world, just like those in the programming world. And seems to me, GitLab is not following many of them.
For example, the width of the content area.
I've once read an article that trying to dig into that topic, and one opinion that article has brought up was that users eye should not move too far up and down and more importantly left to right. I deeply agreed with this because I found myself feel very tired after reading a width page.
The solution is of course to limit how width the content area is, according to many factors (front size for example).
Now if you look at the user's home (project list) page on the GitLab, you will found that the page and the list (which is the main content) has been designed to fill 100% width of the view point.
On the left side of the list, is the name and description of my projects, and on the right side is the counters + update date.
The information on both left and right side are significant, so I may have to scan it from time to time, and it's exhausting.
If you're thinking, "Oh it's just the user's home page, no big deal". No No No, the search result page is the same deal, same design language.
Now, if you take look GitHub, you will found that they're not only limited the width of their page, they've also limited the width of the project list by adding a sidebar on the page. Which makes me 10 times more comfortable when using it.
Also, since we're talking about project list already, let me also remind you that the front is also very important.
Currently on the project page, the project name text is bold'ed, and underneath it is the description text. Problem is that the size of both text is the same, which makes them muddled together when doing a quick eye scan. GitHub on the other hand, use white space, front size and color to differentiates those elements which makes their list far better.
I did a little re-design to the project list to clarify what I've meant.
Before: https://imgur.com/klrah5A
After: https://imgur.com/wcHBVCe
And these just two examples, there are many of them. So please GitLab, design your web interface better. I'm currently mainly use your product now and I don't want to have many struggle with it :)
This got me thinking, maybe about 64000 years later we will see the first group of elephant programmers :D
Well, for me, it's just like to saying "Oh, Chinese people just do that sometimes".
It's a quite ignorant view actually, because when you look at Taiwan and Hongkong, it's very easy to found that Chinese people can adapt to many systems rather than the 'good' old authoritarianism.
Mainland China current running by the Communist Party is actually because of many historical reason, rather than a choice of Chinese people.
Also, one thing some people from the west don't understand that the Chinese government lead by the CCP also generates many many benefits to the Chinese people, and doing a not-bad job protecting their citizens. And those benefits are not easy to be ditched away.
Another thing that I want to mention is, China will never be 'Westernized', it will instead to be 'Modernized'. And you can clearly see modernization everywhere in China during these 7 years.
In fact, for me, the word 'Westernized' is pretty arrogant: It assumes the 'West' should set the rule and standard for the world. And you just can't assume that, just like you can't assume all your neighbors one day will follow the exact schedule like you do. They just don't.
Also, about Han[0]'s superiority: First thing is, you maybe don't know that the Chinese government provide better benefits[1] to those ethnic minority groups than Han people did.
As a Han myself, I personally don't feel like that I'm superior than others. In fact, start from the kindergarten, we been educated to respect other ethnic groups and at least know what not to. For example: Don't eat pork in front of Hui[2] people.
Yes, many people still don't completely understand all those rules or just don't care about it after they grown up, but you can't deny the education is there.
Even there is superiority between Han and other ethnic groups, then that would be very similar as in C++ programmer vs PHP programmer, rather than black vs white.
Then, about Uyghurs[3]. To be honest, I don't fully understand the problem there. But I think the tight control that the government has implemented there is at some part due some terrorist attacks[4][5][6][7][8](are originated from Xinjiang). And you can think of how many pressure the center government has pushed on Xinjiang's administration, so maybe that's why they did something that not so civilized.
I'm not saying it's understandable or forgivable, they are not resolving problem from the root there. What I'm trying to say is: Maybe things happened in Xinjiang was not about ethnic superiority as some west people may think it is.
[0] https://en.wikipedia.org/wiki/Han_Chinese
[1] https://en.wikipedia.org/wiki/Ethnic_minorities_in_China#Gua...
[2] https://en.wikipedia.org/wiki/Hui_people
[3] https://en.wikipedia.org/wiki/Uyghurs
[4] https://en.wikipedia.org/wiki/Terrorism_in_China
[5] https://en.wikipedia.org/wiki/2008_Kashgar_attack
[6] https://en.wikipedia.org/wiki/2013_Tiananmen_Square_attack
[7] https://en.wikipedia.org/wiki/2014_Kunming_attack
[8] https://zh.wikipedia.org/wiki/2015%E5%B9%B4%E6%96%B0%E7%96%8... (No English version available)
Let's say that I have a Nginx on my server which serves a lot's of websites, and whose web sites can only be accessed through HTTPS with SNI, not HTTP.
Now with Encrypted SNI deployed, requests from my clients can still be dispatched to it's respective virtual hosts, but any sniffers in the middle of the connection should only be able to see that my clients are accessing to my server, but not which virtual host.
Is I'm missed anything? I haven't dig deep in to this currently.
Of course, they don't have to live with all that so they don't actually care. Next time you could ask them whether or not they're willing to renounce their U.S. citizenship and become Chinese citizen again so they can be monitored 24/7 for their own "insider" "good", then you will start to get true answers from them.
Back to the topic though, as a Chinese, I don't actually at the opposite of video surveillance in public, it made many places more safer and thus prosper.
However, surveillance cannot went too far, and certainly cannot be use to shame people. It's about respect of one's dignity, a bottom line that a government should never cross.
Plus, given the poor accuracy that system outputs, what if the system made a wrong detection and displayed information of an innocent? Chinese government probably don't care about it though.
I think the problem here is how hard people have to fight.
How about take a step back, and view the language as a completely noob, you may found many complexes in the language is unnecessary.
For example, in the sample code, you can found many #[macro_use]s, they are needed to import macros to the local scope. But hey, why I can't just `use slog::{!macro_name, something_not_macro}`?
Well, the doc said: "macro definitions aren’t namespaced within modules like function definitions are. To prevent unexpected name clashes when using external crates ....".
But why macro is not namespaced then? Why user has to learn "the macro is not namespaced" so they have to #[macro_use]? Why not just implement it in a more intuitive way?
Rust team need to consider this: How many complexities can be completely removed from the language, while maintain it's final goal (be a fast and safe system language).
Well, 'ripped-off' is too strong for this very case, as laptops now days looks more or less the same (Just like smartphones).
As a Chinese, I don't think I'll ever buy this Matebook thing (big Dell and ThinkPad fan here), but what I interested is how Apple would respond to all these 'ripped-off' products. Will they finally decide to design something that I don't resist to buy?
For example, the soldered SSD, that's a big NO NO for me. Especially when I realized that few drops of coffee can send me to the deep depression for a long while.
And also, the keyboard. I'm 100% admire those who can type on it all days and still managed to keep all their fingers at full length.
About the 'ripped-off' thing, I think it's fundamentally because one simple reason: It's not very hard to build laptops similar to Macbook anymore. Samsung, LG, ASUS etc, all started to make their own version of 'Macbook's (they call that Ultrabook).
To me, when you saw everyone is rolling out similar products, it's a sign of everybody is hitting a global glass ceiling. Only wonder is who can penetrate it first.
And of course, in the context of CA, what's truly important is transparency in the audit process and continuous monitoring. Catch them red handed will end their business[0] once and for all. And so far, most of them are rule-abiding.
[0] https://blog.mozilla.org/security/2016/10/24/distrusting-new...
First and second tier websites already switched it on long ago. Because in China we had an ancient tradition for ISPs to sniff and modify user's traffic to (for example) inject their own affiliation codes to the web request. Those websites hates it of course.
+ Ɛ:=
Add the missing ears
It actually works as long as no `gofmt` applied. Code: https://play.golang.org/p/bMDxAq_l6F0
So,
> China produces twice the amount of CO2 as the U.S. does
1,415,045,928 / 2 = 707,522,964
And
707,522,964 > 326,766,748
People in the US, please save some energy will you?