HNHacker News
TopNewBestAskShowJobs

tombrossman

3,861 karma · joined December 14, 2012

Bailiwick of Jersey

tom at tom brossman dot com

submissionscomments
tombrossman··on Tighter Control Over Your Referrers
Good point, but those paid webfont services were already blocked by my NoScript extension, so I see no changes from my end.

As far as sites which require a referrer header, it has been my experience that these are very few and far between. I get one occasionally and if the content is worthy, I'll briefly disable then re-enable my setting.

Not for everyone, I know, but it works well for me.

tombrossman··on Tighter Control Over Your Referrers
No need for an extension, in about:config you can toggle network.http.SendRefererHeader from the default value of '2' to '0', which will disable all referer headers.
tombrossman··on Falsehoods programmers believe about addresses
> (40% of the economy is evading tax)

Citation needed. You are welcome to pay maximum taxes where you live if you like, but jurisdictions with lower tax rates keep the pressure on governments to deliver a good return on investment to their citizens. When I moved from San Diego to Dallas after the dotcom bust I slashed my taxes which was great (no income tax in TX). This wasn't tax evasion, it was common sense. San Diego was no longer a good investment.

Also, you totally missed the Gigabit fiber-optic broadband plans[0]. I have a 1GB unlimited plan from their competitor for £55/month[1]. Standard fair use clause applies but I've never been throttled and I use massive amounts of data every month.

[0] http://www.jtglobal.com/Jersey/Personal/JT-Fibre/Fibre-Tarif... [1] https://web.sure.com/jersey/internet/home-internet/unlimited...

tombrossman··on Falsehoods programmers believe about addresses
Sorry I didn't spot your comment sooner.

I have an unlimited Gigabit fibre to the home connection here at home, and I pay £60/month for it. My 'high score' so far was 1.4TB transferred one month but typical use is 600GB or so.

We are in a pretty unique situation here with a government minister betting big on switching our entire island's copper telephone lines over to fiber optics, part subsidised with taxpayer funds.

If you are fortunate enough to have piles of cash you can gain residency here through a special programme for attracting inward investment http://www.locatejersey.com/HighValueResidency/Pages/Jerseyf...

tombrossman··on UBlock defaults to blocking Google Analytics tracking
I think it's a mistake to think that people who visit your site somehow 'owe you' and should permit third-party tracking code from your site to run in their browser. I understand your points about wanting metrics to learn from, but when you bring in a third party all bets are off and individual visitors (like me) will choose not to run that tracking code.

Don't forget there are other ways of achieving what you want too - you can use something simple like GoAccess[0] or even run a Piwik install off your server logs[1] for a nice pretty GUI experience if you prefer.

As more and more people become privacy-conscious I hope you will see this as an opportunity to learn how to do more yourself and outsource less to Google. They don't even give you all the data they collect from site visitors, you are giving them free data for little in return!

[0] http://goaccess.io/ [1] http://piwik.org/log-analytics/

tombrossman··on Falsehoods programmers believe about addresses
Picking an arbitrary starting point like 'country' still has problems. I'm in Jersey Channel Islands, which isn't a country at all (much like Vatican City & other territories).

We are British but not part of the UK nor members of the EU. We're served by the British Royal Mail system and use UK-style postcodes, but sometimes when I input my address I must chose a country, so pick UK, which triggers UK VAT on my order. We're exempt from UK VAT so dealing with this is frustrating. Some retailers do waive it when I raise the point but I have to remember every time.

Total edge case I know, but I hope it demonstrates that even picking a really broad starting point like 'country' can still fail sometimes.

tombrossman··on Something New in Garage Doors
Sure, the motor powering the door will not be able to overcome the resistance of even a few inches of snow outside. Think of the bottom edge of the door as the tip of a lever's long side. It is the opposite of what you want when using a lever. The long side is for applying power and the short side gives you the extra torque you need.

Put more simply, the door won't be able to push snowdrifts out of the way if it has to swing outward to open. Your 4x4 with snow tires will remain stuck inside the garage, unable to exit.

EDIT - After re-reading the question I now realise the comment above was about modifying this particular design to open outward at the top, and I was (incorrectly) assuming it was about a traditional outward-opening door like you might see in southern California. Sorry for the confusion. That may still be problematic, but not for the reasons I gave here.

tombrossman··on Something New in Garage Doors
Great idea if you live in a sunny, temperate climate.

Not so good the first time you try to open the door somewhere snowy.

tombrossman··on The Interview
I don't see how providing this to a tiny minority on a global network is 'beating piracy' at all. I'm outside the US and happy to pay to watch. I even have a US credit card ready. What are my options now?
tombrossman··on This Verbal Confrontation Shows Why Walmart Will Never Accept Apple Pay
In the US you would typically get one of these debit cards automatically with your checking account, and it works as you describe. If you want a credit card you would have to submit a separate credit application at the same (or different if you like) bank and that would be a completely different card with its own account and terms. I think this is the same in most countries.
tombrossman··on This Verbal Confrontation Shows Why Walmart Will Never Accept Apple Pay
Same here on Linux. I don't have Flash installed but it claims to work with 'either the Flash Plugin or an HTML5-Video enabled browser'. Both FF & Chromium (HTML5 enabled for sure) won't play it. Disappointing to see them outsource video with such poor results.
tombrossman··on Ask HN: Alternatives to Google-Apps Custom Domain Email Hosting
For clients that are after 'free' email I set them up with an account at Gandi (transferring the domain if necessary) and for those willing to pay a little bit more, the Fastmail business account is definitely the way to go.

Both options are very inexpensive and if the client still wants cheaper I would probably refer them to someone else for advice.

tombrossman··on Ad blocker that clicks on the ads
Blocking the referrer in Firefox is easy, just go to about:config and search for the string 'network.http.sendRefererHeader' then modify it from the default 2 to a 0 (zero).

For the search links, I use this Add-on and it works perfectly: https://addons.mozilla.org/en-US/firefox/addon/google-search...

tombrossman··on Ad blocker that clicks on the ads
I would prefer not to as I find this useful. What I'm really trying to determine is whether this setting alone is responsible for leaking history metadata.

I'm using Firefox with NoScript and I have Firefox set to clear everything except saved passwords when I close it (which I do frequently). I'm hopeful that is good enough because it looks like JavaScript is needed for the leak to occur, right?

tombrossman··on Ad blocker that clicks on the ads
As a workaround, you can use custom firmware (like DD-WRT) on your home router with a custom hosts file to block all ads. It takes some work and is only good for when you are home and connected to WiFi, but after you set it up it's great because all devices on your LAN are protected.
tombrossman··on Ad blocker that clicks on the ads
When you say you disallow CSS history, how are you accomplishing this? Is it a side effect of disallowing scripts?
tombrossman··on Ask HN: Anyone need a landing page photo for free?
He's offering photos which he presumably retains copyright for, to people wanting them for business use and not a personal collection or their kid's lemonade stand.

I raised a legitimate issue, offered realistic and superior alternatives, and wished OP good luck.

If this offended your sensibilities or came across as negative to you, I think you should re-read my comment and reconsider. Maybe we'll just agree to disagree.

tombrossman··on Ask HN: Anyone need a landing page photo for free?
What are the terms and conditions you are providing these 'free' photos under please? You should consider it unlikely that a serious startup would use your photos based on 'genbit on HN said they were free - seems legit'.

Also, have you considered submitting images to sites like unsplash.com or skitterphoto.com, which basically offer the same thing but with a CC0 license?

And if it is just feedback you need there are plenty of photo communities online like Flickr where you can post images and solicit critical feedback.

It is a nice offer you make but posting something like this to HN is really limiting and cannot last long. I think you are better off looking elsewhere, so give it a try and good luck.

tombrossman··on Massive Moniker.com Breach, Valuable Domains Stolen
If you are moving domains to a different registrar try Gandi. I have no affiliation with them except as a happy customer.

They also support two-factor authentication and delegation of limited permissions to other Gandi accounts. For example, if I'm doing a website for a client I have them purchase from or transfer the domain to Gandi, then delegate only technical rights to me for administering their DNS.

This all helps with account security, or damage control for when things go wrong.

tombrossman··on Why Apple's iPhone encryption won't stop NSA
I think cost can be looked at in terms of money, time, risk, effort, or any number of other things and this is what is being referred to above. That point is probably moot though, as all will translate to additional financial costs as you mention.
tombrossman··on Poll: Did you “drop Dropbox”?
Do continue to support ownCloud financially by purchasing their Android client, but you should know that since it is free and open-source software the Android client is available on F-Droid for free: https://f-droid.org/repository/browse/?fdid=com.owncloud.and...

Paid Android apps are not available in most countries so this is why you'll see some released in both markets like this.

Tell the employees to grab it there, and make a donation to ownCloud if that's easier for you.

tombrossman··on Poll: Did you “drop Dropbox”?
Same here, though it helped that they appointed her about 10 days before my paid renewal was due.

I miss the ease of use and I've had to put much more work in to (mostly) match the features I gave up. Owncloud, cron, rsync, and a few other tools are all tested and working now, but it isn't as slick and requires occasional maintenance.

I miss using Dropbox but there are some things that are unacceptable to me, and require a permanent change even if burdensome. It isn't that I trusted Dropbox before - I used client-side encryption for most files. It's appointing her and the huge 'fuck you' message it sends to those of us who care about privacy. There's just no overlooking it.

tombrossman··on U.S. Law Enforcement Seeks to Halt Apple-Google Encryption of Mobile Data
Let's not overlook the fact that the law doesn't actually have to be applied, it can be a bargaining chip. The prosecution mentality is to 'throw the book' at defendants and then the defendant has to try to negotiate down from that starting point.

Firearms might be a good analogy here. You don't need to actually shoot a robber for your firearm to be effective. The mere presence of it is often enough to scare them off.

tombrossman··on Signaling Post-Snowden Era, New iPhone Locks Out N.S.A
The message seems to be that Apple are 'locking out the NSA' which is nonsense of course, but both may be counting on the fact that a typical consumer won't really look too closely at the claim. Their takeaway is that Apple's phones are perceived to be safer.

Apple gets to sell more phones due to this perception, the FBI get to continue hoovering (no pun intended) up iPhone user's data, and everyone goes home happy. It seems to be a manufactured controversy, with Apple & the FBI both playing their parts and knowing full well the rules of the game haven't changed one bit.

tombrossman··on Landing Page in a Day – Get a custom landing page that converts
Neither your site nor the 'Case Study' contain a privacy policy and both use Google Analytics. Both are in breach of the TOS which is problematic, especially in pro-privacy jurisdictions (like Germany for example).

From their Terms of Service at http://www.google.com/analytics/terms/us.html the language is crystal clear "You must post a Privacy Policy and that Privacy Policy must provide notice of Your use of cookies that are used to collect data. You must disclose the use of Google Analytics, and how it collects and processes data..."

I'm surprised by the number of sites that ignore this. I wish you good luck with the product launch but privacy and legal compliance are hot topics lately and I think you should consider bring your site, and especially your client's sites, into compliance.

tombrossman··on New York City's Most Accessible Ruins
Sorry, I posted this and went to sleep so missed the replies. We have one complete and open to the public. We were allowed to dig out the bunker entrance to explore & recover anything interesting, then it had to be sealed back up. The last time this was done was in the 70's, as it is beach-side in an environmentally protected area.
tombrossman··on Email IP Leak Test
Wow, it sure is. The subject is HN worthy but I'd hope a moderator would edit the submission to point at your site instead.

And send GoDaddy a DMCA takedown notice for this copycat site. It was just registered a few days ago and given that they shamelessly ripped your content off, I'd have serious reservations about trusting them with my data.

tombrossman··on New York City's Most Accessible Ruins
Interesting to see this on HN as we dug out an entrance to a WW2 German bunker yesterday afternoon here in Jersey (the British island). Like urbex and WW2? Photos here: https://plus.google.com/photos/105983129534664287827/albums/...

Some videos also on our group's YouTube page, with a quick walk-through. We already have one of these restored and open to the public, and we were after parts and a bit of exploration.

As for the accuracy, WW2 guns were good enough. This Youtube video on mechanical fire-control computers is very interesting and I've seen it come up on HN before several times. https://www.youtube.com/watch?v=s1i-dnAH9Y4

Lots of this equipment survives today. It was built to last and many people still collect it. We've also got about a dozen French and German cannon dumped from cliffs that we'll recover some day.

tombrossman··on Security for the people
I know the Piwik recommendation gave some a reason to chuckle but I was dead serious. This initiative was promoted by Dropbox (who recently brought Condoleeza Rice on board) and Google (an ad company currently removing privacy-enhancing apps from their mobile marketplace) and so this group will need to distinguish themselves to appear credible.

It's that or be dismissed as just another iteration of Microsoft's 'embrace, extend, extinguish' plays.

tombrossman··on Security for the people
This thread has some great 'Shit HN says' lines. We are truly a tiny little bubble.
← PreviousPage 20 of 25Next →