storborg

So do it, and render the entire line of discussion pointless. This argument comes up often when discussing JS crypto, and while I agree it's silly for any system that actually has assets worth protecting--personal or financial info, for example--there are plenty of attackers that don't have financial motivation, resources, or knowledge, and just want to use the easiest crap available to them to mess with other users.

And how do you do that at the corner Starbucks without using the command line?

Edited to clarify since apparently I can't reply to a child comment: There are tools that require next-to-no technical expertise to passively observe HTTP sessions. There are no such tools that I'm aware of to execute an HTTP MITM without control of the network infrastructure.

I think what the original poster meant was basically just "in a situation where you absolutely, definitely, cannot have SSL, javascript crypto is an iota better than nothing, because at least it breaks Firesheep and Wireshark".

You're talking about computational difficulty. He's talking about practicality for people who aren't experts. AFAIK there is no browser plugin that you can download that will help you MITM an HTTP session, whereas there is a browser plugin that will let you passively capture plaintext from said session.

I agree that it's disappointing that the article didn't mention reddit, but the compete.com data doesn't exactly support the notion of digg users flocking there:

http://siteanalytics.compete.com/delicious.com+digg.com+redd...

True, but let's not conflate the issues of identity vs. verification vs. permanence. People can still lie on their social networking profiles, and anything in the real world can still be recorded. Even if social networking companies didn't push to make their data persistent, any viewer of that data could cache it for all time.

The author's example of screaming in the street is moot: most meaningful social interactions happen in a setting with far more information about the people you're interacting with: e.g. a college bar, a tradeshow, a cocktail party, a museum.

You're very rarely interacting with no context at all, and most interactions are among friends, where you have much more information than is contained in a Facebook profile.

As well as the enormous "Maker Shed" tax. My company made a product that was sold there, and Make wanted a >60% margin.

I just verified that it works in IE8 without Chrome Frame. I think what they mean by "legacy support is enabled" is "it's fugly but it works."

This is a really cool performance hack. However, doesn't this restrict the effectiveness of the browser cache to just the exact set of images requested at one time? For example:

  - On page load 1, I request images A.png, B.png, and C.png.
  - The JSON for [A, B, C] is returned and cached.
  - On page load 2, I request image B.png.

I can't use the original file, since it was cached for [A, B, C]. So I have to re-request just B.

Is there something I'm missing? Otherwise, it looks really cool.

Sure, but halfway decent web sites aren't the ones hosting malware.

The two assertions, taken alone, are not contradictory. If Joe makes $250,000 a year, he may think that he pays too much in taxes, but that the entire portion of society that makes over $200,000 pays too little. It could be that he thinks that only the top 0.1% pays too little, and everyone else pays slightly too much.

Also, what is "upper-income"? Is that the top 50% of earners? The top 1%?

You can hack these up yourself from the "Real 3D" glasses given out at most 3D theaters.

    1. Obtain one pair of glasses
    2. Pry apart at the seam with a putty knife or small flathead
    3. Remove one of the gel lenses
    4. Flip it over and put it back in, note the areas that need to be trimmed
    5. Trim with scissors
    6. Reinsert gel, stick the plastic back together

There will be a slight bit of ugliness where the gel filter doesn't quite take up the entire cutout area in the plastic frame, but they work well.

The author makes some great suggestions, namely to cache heavily and throttle requests. However, they lost a lot of credibility for me with "screen scraper traffic should be indistinguishable from human traffic". Sorry, but that's BS--socially responsible scraping leaves control with the publisher. If the publisher doesn't want you scraping their content, you shouldn't try to fake a human in order to be able to.

According to the CNN Cost of Living calculator which was passed around in other threads (http://cgi.money.cnn.com/tools/costofliving/costofliving.htm...), $100k in SF is equivalent to $67,887 in Portland. It's a huge difference, and you can't expect companies to be blind to that.

My company used it too. Honestly, I can't imagine people not using it, particularly since there's no way to hide low-priority issues otherwise.

The new interface is somewhat frustrating in this respect because there is now no way to hide low-priority stuff at all. It would be nice if you could show all issues sorted by milestone due date, or anything to that effect. It's made even more frustrating by the fact that you can't seem to change the number of issues shown per page.

The first and only two humans to visit the Challenger Deep did so in 1960, and in recent years not a single submersible has existed that's rated for that depth. We, as a species, have not gone back since. In contrast, twelve humans have walked on the surface of the moon.

Now we're finally going back! This is so cool!

I don't get all the whining about 99Designs. If you don't like it, don't use it. It's not like it's going to turn good designers into bad designers, or make companies that used to hire good designers hire bad designers instead.

I too wish I had a shitty product like that. However:

> And I even use it regularly to find stuff I want, locally, and cheap.

Are you really successful at that, though? 9 times out of 10 when I use craigslist the transaction is a horrible experience--for example:

    - the buyer of an item claims it, then flakes out
    - the seller of an item jacks up the price at the last
      minute, when I'm there in person, saying, "oh well
      there are 5 other people that want it"
    - potential rideshare flakes out, or changes plans at
      the last minute
    - potential landlord turns out to be unreliable

The one area where I have had great success with craigslist is hiring, which I suspect is due to craigslist charging for job listings (which keeps the bar high).

Who said it was a startup?

And totally believable... not.

I have four core files:

    reset.css    - I use eric meyer's
    elements.css - Global defaults for things like body,
                   h1, h2, h3, p, a, input, strong. All
                   or almost all selectors in here are
                   just tag names.
    layout.css   - Just sets up the global layout with
                   containers: e.g. header, footer, left
                   column, right column.
    blocks.css   - Reusable chunks.

In addition to that, I use a separate file for each "page type". For example, 'article.css', 'index.css', stuff like that. Some larger sites merit additional files like splitting off 'forms.css', 'tabular.css', etc.

All files get concatenated and minified before serving, obviously.

While I'm not generally in the habit of defending Apple's decisions, I'd argue that all of those examples have tradeoffs that improve function. I don't necessarily agree with the tradeoff, but improvements to function do exist.

* The new style keyboard (with bezel between keys) is vastly more reliable for me. On the older keyboards, keys would come flying off all the time. I'd have to replace the keyboard every 8 months. My unibody macbook has lasted almost 2 years with no signs of wear.

* I can't comment on the reliability of the new ones, but I had an old iPod shuffle that was flaky as hell, especially when covered in sweat. Button clicks would get ignored or falsely triggered frequently.

* The Mighty Mouse is optimized for multitouch gestures, and having no seams on the top surface of the mouse makes that experience fantastic. Personally, not my style, but I see why they did it that way.

* The glossy screens have much better color and contrast than matte, and stay cleaner. Yes, glare is a problem in the sun, but I'm using an apple glossy LCD in an office right now and I can't find any angle or spot of the screen where there is even the slightest hint of glare.

The title is inaccurate here: they didn't add ads to the paid app, they added recommendations for other games made by the same company. The original title, with "ads" in quotes, is more appropriate.

Seriously? I think those are the types of people that get taken the least seriously by anyone that matters.

If there were a <noads> tag to serve different content to people who will never ever click ads, I'd love to use it.

Not to mention that she gave a lot of personal history surrounding her parents and family history. That might not uniquely identify her, but it does narrow the search considerably. My guess: if he/she is even a single real person, much of this is fabricated.

I actually think the explosion of software engineering salaries (led by VC-funded SF startups) is responsible for this work attitude, not just glamorization of startup life.

Larger companies (and even smaller companies that aren't ultra-rapid-growth) have to pay much more to compete on salary, and as a result, they now have to get much more productivity out of each employee than before. Hence, more accountability, more ridiculous schedules.

Lots of states, but not every state. California is also of particular importance because it's so big: nobody would care as much if Delaware had laws like this.

However, in California, even if you only have a physical presence in some remote part of northern CA, suddenly that affects your ability to sell to 37 million other people.

They probably won't ever change their policies--I would venture to guess that the margin they gain from the affiliate program is less than 8% of their total revenue (which is very approximately what they would lose if they were forced to collect sales tax).

That's because California has tax-hungry laws concerning what defines a "nexus" (a business's presence in the state). It's difficult for many companies to avoid creating a California presence, so they're stuck collecting California sales tax as if they were based there.