News for hackers. Stuff that matters.

Revisor

> Unfortunately, I inherited some Symfony applications recently. Unfortunately, because the whole stack is terribly slow and held together by an insane amount of YAML and XML configuration files. Add "annotations" (that are parsed out of doc blocks and compiled into another bunch of PHP files) to the soup and party like it's 1998.

That sounds like a wrong configuration and/or architecture. Symfony is in my experience fast if you follow the best practices.

Maybe you should find out the bottlenecks before you blame Symfony.

> just DON'T do long running processes with PHP.

We run long-running workers just fine.

> You want to enable a module? Good luck finding the right php.ini.

That depends on your OS. In Debian/Ubuntu you just run phpenmod module and restart the service.

I don't know... Your criticism seems to stem from not looking at the issues closely, or maybe you were stuck in a really old, abandoned system. But that woukd have been ugly regardless of language.

Re:PHP 7 Virtual Machine on Tuesday April 18, 2017 @04:00AM (#14137145)
Deprecated 9 years ago.
Re:Tencent buys 5% of Tesla on Thursday March 30, 2017 @03:46AM (#13993635)
> Millennials are also coming of age now through the next decade.

Millenials start from 1981 so some of them are nearing 40. Generation Z is coming of age.

Re:Introducing unlimited private repositories on Thursday May 12, 2016 @05:22AM (#11682274)
Why don't more people use Assembla? We've used it for years and it has so many more features than Github. Tickets, milestones, time tracking, standup, wiki, unlimited repos with protected-branch merge rights, file sharing, discussions...

There is no free plan but the pricing is fair in my opinion: https://www.assembla.com/plans

Re:GitHub responds to Dear GitHub letter on Saturday February 13, 2016 @08:55AM (#11093914)
We haven't switched an existing project, but we're looking around for a place for a new library we're going to publish in a few weeks. It will most probably be on Assembla or Gitlab.
Re:Django Awarded MOSS Grant from Mozilla on Saturday December 19, 2015 @06:46AM (#10763329)
I'm too late in this discussion, but they are really going to use the majority of the grant, namely $10k out of the $15k, to replace the word "slave". See

https://supybot.buildbot.net/meetings/buildbot/2015/buildbot...

> Buildbot's MOSS application: $10k to remove slave from all code/docs, $5k to work on stability/handling shutting down EC2 slaves when buildbot master crashes/exits/restarts (djmitche, 16:39:19)

> Yearly sales cycles create a toxic incentive to focus engineering time on flashy demo-friendly features

I understand that argument, but what incentive does DRM with a killswitch create for the software company, if its customers must pay in order to keep the product running at all? Might it not create different perverse incentives, for example trying to close the ecosystem in order to make a switch a painful experience?

Or in other words: What incentive to improve the software (other than the threat from competitors) does subscription DRM provide, if you can just collect the rent, because the cost of switching is too high anyway and the customers are at your mercy?

Re:Fix Windows 10 on Tuesday August 25, 2015 @01:22PM (#10118081)
> If cortana wants to automatically recommend appointments from emails? Guess what? She has to read your emails.

"She"

Re:Trapped in His Body for 12 Years, a Man Breaks Free on Saturday January 17, 2015 @08:48PM (#8906296)
The story is remarkably similar to this Polish movie, based on a real story:

http://en.m.wikipedia.org/wiki/Life_Feels_Good

Please add public pricing to your website.
You're welcome. A direct link is here:

https://www.dephormation.org.uk/?page=81

Just bear in mind the default installation can break some pages (Soundcloud) or worsen your user experience (many web sites, Google, Wikipedia or Ars Technica among others, redirect you to the mobile version if you have a certain user agent).

I would love it if there was a plugin that combined the blacklist part of Disconnect/Ghostery with the learning algorithm of Privacy Badger and the anti-fingerprinting features of Secret Agent.

There are many trackers that are known in advance and there is no need to analyse them. Stop them right away.

New ones crop up, or old ones change domains, watch them and block them.

And randomize my headers so even if cookies are blocked, they can't fingerprint me statistically.

Btw. what is the point of Privacy Badger without the Do Not Track header?

Re:When two-factor authentication is not enough on Thursday April 10, 2014 @04:15AM (#7564804)
This article really should have been called "Security hole in Gandi's processes". Why would they change the account email address if you didn't reply to a single email within 24 hours? Who thought that was a good solution?
Re:Is Google crippling Firefox? on Monday April 07, 2014 @11:37AM (#7547099)
Opera used to be routinely blocked on Google properties years ago - Google Adwords as well as Google Analytics. There was no fallback, just a block message. When you changed the user agent, the site worked ok.

I'm not sure about today, but it was definitely a real thing.

Re:Penny Arcade’s Insultingly Horrible Job on Tuesday November 26, 2013 @08:39PM (#6805639)
What's a perk in USA may actually be standard in other countries.
Re:Can anyone tell me what these services do? on Wednesday November 20, 2013 @02:54PM (#6770678)
I understand that it's pretty nifty in corporate environments. At the same time, however, it sounds an awful lot like a backdoor that works even with the PC turned off.
Re:Can anyone tell me what these services do? on Wednesday November 20, 2013 @12:51PM (#6769610)
Today I found out I inadvertently bought an Asus motherboard with a service called "Intel Management Engine Interface" (mei) which "enables remote accessing to the PC including the management, monitoring and maintenance irrespective of the operating system state and PC power state as well".

http://intelmanagementengine.com/intel-technologies/all-abou...

It sounds to me like an official backdoor and I only found out about it because it conflicted with suspend to RAM. I removed the kernel modules for this service but couldn't find a way to disable it in BIOS.

Surprisingly - the product page doesn't contain any information about the presence of MEI whatsoever.

Needless to say, I'm not very happy about it.

Re:Password hack of vBulletin.com on Monday November 18, 2013 @10:25AM (#6754706)
Could you please post some details about what you mean with them monitoring your site's traffic and performance?

I found the code for the "anonymous survey", but you have to submit it manually.

Edit: I think you might mean the news loaded remotely in the Admin CP upon every login. It's injected in the page as is.

The author ('s server) could serve as a perpetual seed. Or someone would step up for seeding, Internet archive or similar.
Re:Web Giants Threaten End to Cookie Tracking on Thursday October 31, 2013 @10:33AM (#6646999)
Why do you use them at all if you know that they leak your readers' privacy?
The family sharing on Xbone would have been only a time limited demo, nothing of the sort what Steam introduced a few weeks ago.
Just because someone else is already doing it doesn't make it right.
Re:NSA Codebreaking: I Am The Other on Friday September 06, 2013 @08:15PM (#6343370)
I am the spied upon Other, because I'm not an American. I don't have a voice in your debate, no representative, no senator, no amendment. My only hope is that privacy becomes a generally accepted human right.
Maybe today is the right time to ask the question again.

Older »