yukichan

Zapier is also good with lots of integrations, but it's a little pricey. Yet if you calculate what your time is worth and include the amount spent on making this work plus customizations, it's probably less. Depends on if Zapier can do what you want.

> This is yet another alarming signal that the whole idea that your SSN/SIN or credit card number is somehow secret and can be used for authentication is flawed.

Secret information is required for practical authentication. Some examples:

Private keys (ssh, gpg, SSL/TLS certs, bitcoin wallets)

passwords

session ids

api secrets

auth tokens

> There is no legal way to distribute software including parts you have only under APGL and parts you have only under OpenSSL license.

If you modified AGPL code you have to release it. If you've mixed up GPL or AGPL code such that you can't release it you've violated the license for the hard work of others. You sound confused, to phrase it charitably.

uh if it's GPL, don't you have to release it?

I don't think I've worked anywhere where there was a simple way to switch cloud providers with the push of a button. Even migrating to different locations within a cloud provider isn't trivial. You'd have to invest a lot of engineering time from the beginning to get this kind of capability, and you may never realize any value for all the pain.

I'd like to see Akamai create a CloudFlare style challenge using their patch and a compromised version of OpenSSL and see if anyone can get the private keys from it.

Knowing the difference between functions and statements is not pointless nitpicking. Not in the least.

I believe you're wrong, it's not blocking otherwise it would be terrible. I remember testing this before. Fibers is inline non-blocking.

The readme explicitly even mentions that it yields:

https://github.com/laverdet/node-fibers/blob/master/README.m...

"Again, the node event loop is never blocked while this script is running."

This SO answer agrees:

http://stackoverflow.com/questions/10282828/node-js-modules-...

I don't remember what my test was, but I tried it, it doesn't block. Try to create something that you think doesn't block to freeze node while using fiber, it won't block, that's what makes fiber awesome. Fiber doesn't block. If you think it's blocking when it isn't it can kick your ass because you will assume incorrect order of events. It's just inline non-blocking.

If I'm wrong I would be happy to be corrected about this.

EDIT:

A perfect way to test this would be to loop through a bunch of HTTP requests that can take varying lengths of time to return and print when they finish, you're going to see they finish out of order. You'd have to write the loop such that each http request fires indepently of each other, which is tough in fiber, but a settimeout could do it (Checkout the sleep example in the fiber readme). If those http requests blocked other ones you'd have a pretty shitty situation, but they don't. And so if you assumed those HTTP requests completed in the same order you made them you would be in trouble.

I'm near 100% certain you are incorrect.

The disaster that is unicode in Python 2.7.x is enough for me to use Python 3 for anything I do in the future. And as you said there are enough compatible packages now to make this doable so yay for Python 3, and I say that as a former Python 3 skeptic.

Akamai's patch is older than the heartbleed issue in OpenSSL so it wasn't a response to heartbleed, and they were still vulnerable for non-key data.

> I was shocked to learn innocent people get convicted because they talked to the cops.

You should read up on Project Innocence casefiles:

http://www.innocenceproject.org/know/

Dennis Fritz in particular, he volunteered to give hair samples which were used to create circumstantial evidence against him:

http://www.innocenceproject.org/Content/Dennis_Fritz.php

Had he not done that, had he not gone in to talk voluntarily to the police he probably would not have lost 11 years of his life, lost seeing his daughter grow up. All for talking with the police. Do not talk to the police. The cost can be unimaginably high.

It's just just inline non-blocking right? When people say "not async" I think blocking, but it's actually async in that you can have other operations happen in between execution of lines of code. Like if something that would traditionally be async in node executes, you don't have to wrap a callback in a function, yet it's still async, kind of like yield statements in python Twisted. If you think it isn't async and it is you're going to be in a world of hurt some day.

Stutnex used zero day flaws so when they make a statement like:

"When Federal agencies discover a new vulnerability in commercial and open source software ... it is in the national interest to responsibly disclose the vulnerability rather than to hold it for an investigative or intelligence purpose."[1]

I have to scratch my head because I can't reconcile this. I also can't reconcile what meaningful impact the White House statement will have since it has such a vague loophole. The White House statement reminds me of when Putin plays lip service to democratic processes inside Russia. Lots of words, little if any meaning or change.

[1] http://blogs.wsj.com/digits/2014/04/11/nsa-says-it-wasnt-pre...

This sucks, but seriously never talk to the police. Don't write anything down. Don't say anything. Don't sign anything. Tell them your name and otherwise just stay silent. They are never trying to help you, they're trying to close their case.

What are people using Facebook for these days? I share images with Dropbox and use WhatsApp to talk with people. I haven't seriously used Facebook in years and when I do log in it's just a bunch of spam. I just don't see myself ever needing to use something like Facebook again. I think maybe there was a time when creating profiles was a thing, but is it still a thing? I don't want to share pictures with a million people anymore, just my family and really close friends.

Wow, the thing they eventually shipped doesn't look nearly as nice as what they promised[1]:

http://imgur.com/uvLJZ0r

vs

http://imgur.com/IHaX6f7

Reminds me of pictures of McDondald's foods in ads and the crap you actually end up paying for.

[1] Via: https://www.facebook.com/zerfani/media_set?set=a.10152347739...

I don't know how they feel but if they're popping champaign bottles after abandoning their product and their users then I don't give a shit how they feel.

I do understand the situation better than most however because I've been there in a startup when the end is there and you're faced with acquisition to hire talent or closing the doors. You face it every day as time runs out and your runway shrinks. You face it a thousand times until you finally make a decision you were avoiding for a long time. It's not fun. So if these guys are happy it's probably because a weight has been lifted of their chest, not because they succeeded.

An acquihire is not a success it's a failure, and instead of being excited, I'm sure the feeling is more like being resigned to at least having a place to go after closing the doors. It's sad too because their product is ace.

I just noticed that the hackerone report curl bit includes a coinbase session cookie. Doesn't seem like a good thing to include.

Yes kill your coworker's productivity by making her or him even more miserable when dealing with a bug. If you did this and I was your manager, at worst you'd end up on a PIP. If you want conduct a prank do something that doesn't frustrate the work they're paid to do.

Yes, you have to continuously improve, and also recognize that the things you learned before may no longer apply. Always know why you have to do the things you do and when that isn't true anymore.

Also I didn't understand half of what you said.

Experience is a liability. You learn all kinds of things as an engineer that quickly become obsolete. Even in the web environment. If you're still worried about hasLayout or rounding corners with images, or god forbid using tables for layout, or even setting explicit widths on your web pages instead of responsive media queries, you're adhering to obsolete ways of doing things that are hurting you more than helping.

Edit: Am I being downvoted because I'm wrong or because you just don't like what I have to say? Both are wrong reasons to downvote, but you go, you go downvote. My comment is reality. It may not be what you want to hear, but it isn't a low quality comment. I'm so tired of this silly site and it's potato filled echo chamber.

> But if what you said was entirely true, there would be no new social networking services appear, ever.

I never said that. Obviously new social networks are being created through mobile apps, like whatsapp, because they fill a need that has nothing to do with your approach. There are already thousands of whatsapp, snapchat, etc clones so attempting to copy the first mover is going to be about as effective as you might imagine.

> Thoughts?

Yes, one: this idea has no chance. Also it's been tried. App.net, diaspora, etc. If there aren't any people there there's no reason to join. If you think your engineering buddies will be the catalyst, look how well that's turned out for Google+, and Google+ is made by Google and they forced it down millions of people's throats and it's still not being used by normal people. You think selling it as "it can't be banned in Turkey" is going to be appealing to many people?

This is how it's going to go down, you're going to make some minimal app, a few people will use it once and never check it again, then you get burned out and go back to fixing some problem in your day job.

It's not a non-issue. I've been a victim of identity theft 3 times already.

I'm going to start paying cash everywhere. I already use cash at point of sale at regular stores, and I've limited my online exposure to Amazon, Netflix, Google and PayPal. Insecurity is sending me back into the 70's with financial technology.

I don't even want to use checks. I went to H&R block, tried to pay with a check to avoid giving my credit card details and they scanned the check's routing and bank number and stored that! Losing your bank info is more severe than credit card data because you have to close your account. Seriously bringing like a wad of cash next time I go to H&R block.

Aphyr has thoroughly explained what is wrong with MongoDB[1]. I'm quite sure that things aren't probably as swell with your tech stack you might imagine. A commenter here has in the past demonstrated how to cause someone using MongoDB data problems by sending too much information too quickly for MongoDB to handle in a targeted way although I can't find the link to it now. I have been wanting to try it myself to see if I could do it too. Firebase uses MongoDB[2]:

"Firebase stores all its data in MongoDB which offers the built-in capability for apps to scale automatically and gives each piece of data its own unique URL stored in JSON documents."

I was going to see if I can get achieve data consistency problems there for my own firebase app.

Also posts that malign MongoDB frequently make it to the home page [3][4].

[1] http://aphyr.com/posts/284-call-me-maybe-mongodb

[2] http://www.mongodb.org/about/production-deployments/

[3] http://www.sarahmei.com/blog/2013/11/11/why-you-should-never...

[4] http://www.aaronstannard.com/post/2013/12/19/The-Taxonomy-of...

If your comment never gets endorsed and the delete goes away, does that mean you can't comment anymore? Like what happens if a pending comment is still around 48 hours later?

How does it work? Do people with over 1K karma also need to be endorsed?

If corporations are so evil why has their pay fed my family, paid for my house and created so many amazing products we surround ourselves with. It's ridiculous. Big organizations have problems, but to pronounce them as inherently evil ignores all the good they do. Maybe you have a different idea of good in mind, in which case we'll probably never agree on anything. When people organize they can create amazing things, and that's what corporations are, an organization of people: employees, customers, and investors. And they do amazing things. Go to a country that doesn't do so well at creating functioning organizations and see the difference.