tombrossman

You generate a new CSR + private key and reissue the cert through the vendor. All the ones I've purchased allow reissuing as often as you like. The expiration date never changes obviously, but reissuing is a common practice.

Same here, I was happy to keep smoking and had no intention of quitting. I just thought e-cigarettes were a cool new gadget to try, and I liked the idea that I could now 'smoke' even more places. I fully expected to continue smoking but over the course of about three months, I just stopped all of it very gradually. It wasn't the expected outcome at all, but it's nice. Haven't smoked for at least eight years now, but I tell people (only half joking) that I would start again if medical science advanced far enough to counter the health risks.

From the article: "...most ad servers (not just Google-owned DFP) will be able to send ads in AMP pages. Some work remains to be done on the formats that will be deemed acceptable in AMP pages." Deemed acceptable by who, and doesn't this indicate it will become another walled garden?

I get this too, because I refuse to send referer(sic) headers and have disabled them in my browser settings. To use the 'one weird trick' of doing a Google search, you need to send the referer info saying you came from a Google search link.

Try checking your browser's privacy settings, or test using a site like this: https://www.darklaunch.com/tools/test-referer

Reading the blog post, it definitely does not 'debunk' the Washington Post report. All it does is take issue with Snowden's blanket claim that all mobiles are vulnerable (which is a good point and is one I'm inclined to agree with).

Good point, asking for a citation. It's an extraordinary claim and so requires something to back it up. A quick search turns up this quote from a 2013 Washington Post story "By September 2004, a new NSA technique enabled the agency to find cellphones even when they were turned off. JSOC troops called this “The Find,” and it gave them thousands of new targets, including members of a burgeoning al-Qaeda-sponsored insurgency in Iraq, according to members of the unit." Source: https://www.washingtonpost.com/world/national-security/nsa-g...

Here is what the comments look like on FF for Android: https://i.imgur.com/5e7hIMK.png

Does it look the same on Chrome, with no indentation for comments and replies? I've removed Chrome so I'm unable to test but I thought this was just a bug.

No smoothing at all, just bigger blocks. Here's what the page looks like on Firefox on Android: https://i.imgur.com/BZnlqfs.jpg

Someone needs to give the marketing team a 'budget' just like how they have a financial budget they must stay within.

300ms average load time added by the marketing team, or 200kb JavaScript, or whatever. Split it all up however you like, and let them fight amongst themselves for what goes live on the site.

That won't work for the developers who lack the authority to make this a rule, but that's what you go to management with along with any of the various studies showing how important speed is to users.

It is still a minority of users (though this varies a lot by demographic). PageFair's annual reports are very thorough if you are looking for stats: https://blog.pagefair.com/2015/ad-blocking-report/

I would also add that since OVH own and operate a large physical network[0], they can't really be compared to a hosting-only provider like DigitalOcean. This isn't 'like for like', and is only marginally useful for ranking either company.

Also, for those of us looking for server space to serve a primarily Western market, OVH and AWS are most definitely comparable. AWS have a huge and impressive range of features, most of which I simply do not need (though I'm a happy OVH, AWS, and DO customer because I'm not one to put all my eggs in one basket).

[0]http://weathermap.ovh.net/

You can also drop the leaves into a large trash can and use a string trimmer lowered into the can to chop them as finely as you like. Works just like a giant immersion blender, plus it's cool to take a huge pile and reduce it down to almost nothing.

I think your question was answered at a link provided elsewhere in this thread[0].

What you might or might not need to hide cannot be reliably determined in advance. It is not a constant, it is a variable and you don't get to pick which way it goes. Consider the plight of the gay Russian blogger using LiveJournal, which was later sold to a Russian company.

[0]https://news.ycombinator.com/item?id=10849248

This is a good time to remind readers of this Upton Sinclair quote, too: "It is difficult to get a man to understand something, when his salary depends upon his not understanding it".

Flip it around, don't accept the questioners' premise that you need to defend your position. Challenge them to explain why they think a third party should be granted access to your info. And be ready to tell people 'no thanks' and that you are not willing to explain why. Resist taking a subservient position when you have what they other party wants, make them justify the need (this is obviously less practical advice for gov't surveillance than for corporate).

I do this frequently and while it can be a bit awkward when dealing with marketing or PR types, as long as you are polite about it things work out. And anyone pestering you with repeated requests for data or an explanation can receive a less polite response.

Businesses might be missing out on customer money if they don't support obsolete browsers, but the people developing the webapp/website/whatever are definitely missing out if they don't start with 'we support all modern mainstream browsers' and then supply a separate bid for old IE support. Let the business decide whether the significant extra cost is offset by the extra income from these users.

This is a good overview of how the money might be used to influence, and not be a purely altruistic gesture: http://newint.org/features/2012/04/01/bill-gates-charitable-...

You can stop reading at the second paragraph which has your TL;DR "No one outside Facebook knows for sure how it does this, and no one inside the company will tell you." but it is an interesting article so maybe give it another shot.

Bottom line is that it constantly changes just like Google's algorithms for search change, and if you find one person to explain it to you correctly one day they will likely have it wrong next week.

American living in Europe here. In some ways, having no credit history is worse than having bad credit. For example, when I signed up for my first 'post-paid' mobile contract, I had to put a much larger deposit down than my friends with bad credit did. Theirs was about $500 and mine was $1000.

Look at ways to establish at least some credit history sooner rather than later, as this will make things easier in the future. For example, even if you do not need a store credit card, you might get one and charge routine purchases and pay the full about each month. This avoids any extra costs and builds credit history.

When you say "Firstly, the stark popularity of those services would seem to suggest that for most people, they have done the cost/benefits analysis, and figured out it doesn't make sense. The effort involve simply doesn't make sense for them." do you understand that for many people, decisions are not carefully considered after collecting and reviewing all the pros and cons before arriving at a scientifically rigorous conclusion? It is far more likely that users just choose what their friends or work colleagues use, based on word of mouth recommendations. The 'network effect' is what this is called.

There isn't much 'miscalculation' happening in these scenarios, there may be little to no calculation at all.

> I'd rather bet that real Dell outsourced tech support to some company in India, where very often business ethics towards customer records is virtually non-existent.

Can you provide a citation to support your claim about business ethics in India? That's a rather negative statement about a large number of people. I've downvoted your comment but I'm happy to reverse that if you can back up your claim.

Tracking server-side is fine, it is assumed the server logs contain a record of my visits and I have no problem with that. I think what most people object to is the third-party tracking that so many people use.

Company A tracking my visits to Company A's website = OK

Company A using Google Analytics to track my visits (while also enabling Google to track me across multiple sites) = Not OK

EDIT: (replying here as we've reached max comment depth) - I was unaware that it is possible to use Google Analytics server-side only (is this true?) but I hope my original point is still clear, DIY tracking is fine.

You most definitely can sniff traffic between Google and students, this is widespread and completely normal behaviour at schools and also on many corporate networks. School computers have a MITM certificate installed which allows decryption and re-encryption, usually for the purpose of content filtering and malware detection.

This article is actually far less helpful an overview then the earlier article mentioned at the top "Google is tracking students as it sells more products to schools, privacy advocates warn"[0]. It is really only introducing one new angle to the debate which is interesting enough, but I recommend reading the earlier one first.

It raises the far more interesting point that Google's Apps For Education policies are very granular and services such as Google Search and YouTube are allegedly not covered under the primary agreement - they carry completely different T&C's and may be used for advertising and data harvesting. It is highly likely that students logged in to GMail or Google Docs and doing schoolwork will be doing searches and watching (hopefully) educational videos to learn more about a subject. Those activities may not be covered by the educational use privacy policy.

What percentage of parents know this, even among those that bothered to check the T&C's? Did they notice the exception? What percentage of teachers or school administrators take the initiative and disable all non-core Google Apps For Education services like Google Search (which are enabled by default)? This is the conversation parents and school administrators need to be having.

I don't begrudge a advertising giant like Google from relentlessly collecting and data mining users to manipulate them, that's what ad companies do after all. Savvy users and regulators know this and can take appropriate action to guide the less-technical with safe defaults. I do think the defaults here are not safe from a privacy perspective, and I wonder if the time has come to re-examine whether the non-core services not covered by the educational privacy terms should be disabled by default.

[0]https://www.washingtonpost.com/news/the-switch/wp/2015/12/28...

My takeaway from the article was that the driver was actively trying to spot the car prior to changing lanes, and because the car remained in their blind spot for an extended period the trucker went ahead and changed lanes only to learn too late that the car was there. I didn't think there was any intent to do harm to the car.

Let me tell you about a personal experience which may help illustrate the problem, and help you be safer when driving your car around trucks. Years ago I was driving a 'cabover' tractor-trailer (the kind with no hood, it's straight down from the front windows to the bunper). I had only five months experience but I was doing pretty good so far. I came up behind a car on a four-lane highway that was going slow, so I started to pass. The car was black and the sun was low and opposite, so as I began to pass and check my mirrors, I made a mental note that the black car riding on blacktop in the shade was harder to see than the other cars further back. No problem, I accelerated more and the car dropped back near my trailer tires. My exit was a couple miles ahead so I wanted to get back over into the slow lane. I looked in the mirrors and the car was gone. I took a long, hard look in the mirrors again and slowed down, in case the car had sped up again and was in my blind spot next to the truck. Nothing. A pickup truck in the slow lane flashed his lights, which is a courtesy signal meaning 'come on back over' that a lot of truckers and work trucks do. I started to change lanes back to the slow lane, nice and slowly, 3-4 seconds of turn signal in advance, and heard tires starting to skid. I held position and scanned all my mirrors again, trying to find where the noise was coming from. I slowed down more. No clue, just a loud skidding noise of tires dragging on pavement. It sounded like a long skid and I was waiting for the impact sound. I thought I'd better get over in the slow lane because someone was in the middle of a huge skid and was going to crash. I completed the lane change and slowed down more, and was horrified to see the black car flop around sideways in front of me, stuck to my bumper. A quick panic stop and I was relieved to see the man inside was fine. The side of his car was all chewed up from the tire lug bolts spinning against his door but he was calm and okay. When the police came he told them he was trying to stay in the shade next to me because he didn't like the low sun in his eyes, and he apologized for 'causing the accident'. It was totally my fault and the police cited me, but they gave me a really minor ticket for some obscure law because of the man's foolish decision. It was 100% my fault but he could have done more to help me avoid him, that's what I was making a genuine effort to do. His speeding up and slowing down to match my speed was dangerous, and you should never do this around trucks. They really can't see you well and there are a lot of other cars around they are trying to keep track of. Hope that helps you avoid an accident in your car some day.

I think many truckers would welcome more automation. I know I would have when I was driving. The scenario you describe happens very regularly - A truck with speed limiter going down the road with cruise control for many hundreds of miles consistently - A car driver who makes a conscious decision to become a nuisance. The choice for the trucker is to either allow the other driver to choose a new lower speed for the truck, or attempt to intimidate the car in front which is actively preventing the pass and choosing to antagonize you. Neither choice is a good one, and that's where the automation comes in, to remove human emotions from the equation.

One thing that you should remember if you are the type of car driver that does this is that truckers are communicating with each other and not all of them are safety minded, or driving a company truck with a phone number on the back. What this means for you is that you may succeed in your little power trip against the truck behind and then have an unpleasant experience with one of the trucks up ahead. It's not right but it does happen. Some of these drivers are sociopaths who would be delighted to run you off the road.

For clarity, I'm not talking about quick little misunderstandings or short periods of distraction while a car driver makes a mobile phone call or sends a text. I'm talking about the parent comment with a truck attempting to pass a slow car and that car speeding up to prevent the pass, and then repeating that process several times. This happens often and it's maddening. You have to just let it go but you do wonder about the car driver, and why they choose to have a pissed off trucker following them. Automation can help with this for sure, and the car driver can go find another person to annoy.

Good to see OVH getting some recognition here. I am a happy customer of both OVH and DigitalOcean but my usage has become strongly weighted towards OVH. The OVH web interface could be improved (I've had to open support tickets for basic things like activating auto-renewal), that's the only downside with them really. Range of products, network, disk speed and responsiveness are all consistently very good. Their new 2016 'Cloud' VPSs have markedly better disk speed than DigitalOcean's SSDs, which are already pretty fast.

For a quick side project I still like DigitalOcean's hourly billing and user interface, but any machine I plan on using for a month or more are all with OVH by default.

Definitely worth reading, but after the first 30 seconds I had to fix the 10.5px monospace font as it was not at all suitable for extended reading. Great content, but the 'style over substance' presentation means there is no chance I would buy a hard copy of the book because I couldn't override the CSS like I did with my browser.

If you like reading about this subject you should also try two earlier books "Darknet: Hollywood's War Against the Digital Generation" by J D Lasica and "The Pirate's Dilemma: How Youth Culture Is Reinventing Capitalism" by Matt Mason. Both cover similar subject matter in depth.

Have you tried Sigal? http://sigal.saimon.org/en/latest/

I use Jekyll for static sites but for photo galleries Sigal is my go-to solution as it is fast and stable and works very well for generating a static photo gallery.

Nice work on the demo, too.

Let's flip the argument around and try: 'by targeting users in more affluent regions, and using state of the art technology to deliver engaging content, you can make more money'. Does it make economic sense to go with a simpler site and accommodate users from poorer regions? How does that affect revenue versus using the latest eye candy and targeting iPhone users?

If a business doesn't care about users in developing countries, that's their call. I don't think either way is wrong but the front-end people should at least raise the issue and then go with what the client needs. So many websites target a relatively small geographic area that they can safely ignore Opera Mini users and continue to thrive.