deejaybog

I'm curious about the technical implementation behind Nextdoor's address verification process.

"To verify your account, your phone plan’s billing address must match the address you used to join Nextdoor."

Does anyone know how they actually accomplish this?

A Document is not the same as a Surface, it is a special case of Surface with formatting and positioning restrictions. So while you could "toggle" from Document to Surface, it can't be done the other way around without losing spatial placement information.

The landing page says "Write, sketch, and embed on an infinite canvas." Why not stick to the promise? I'll reiterate my suggestion: make all pages infinite and remove Document as a "root" page style. Its functionality can be exposed as a "rich text" block.

Congrats for the launch, it all looks very polished!

"Surface" is the killer feature for me. Been waiting for someone to build this for a while.

Conceptual question: isn't Document just a degenerate case of Surface? Can we just have one type of page ("Leaves" ;))? Document-like functionality could be exposed through the Text tool or as a separate "text editor".

In the same vein, Favorites can be just a Label.

Ironically, TV tweeted recently:

"January 28 is Data Privacy Day! TeamViewer is a Data Privacy Day Champion. As an organization, we understand the importance of being open and honest about how we collect, use and store your information."

Didn't intend it to be funny but good for you.

Hating ads is misguided. Ads aren't going anywhere and network effects keep users and advertisers coming to Facebook and Google. The solution we see is going after the ad money with a different business model and use cases that give users control over their personal data while serving advertisers needs. That is disruption and idlewords could leverage sorry use his success and relative fame to more impact sorry effect on changing the status quo.

Care to share what you found so funny?

Ah, thought for a moment you have relatives there or something. Was born nearby (Iași) and have good friends/college mates from Botoșani.

Ever thought about leveraging your skills/instincts/fame for much bigger impact other than through politics ;) ;) ? I'm in Seattle tired of big corp, cooking up with other ex-pat Romanians a service to disrupt the traditional ad model while preserving privacy and data ownership. Email is in my profile if at all interested.

What with the Botoșani reference, what were you doing in Romania?

Works for http/s only I believe.

Yeah, "incidentally" would be a better qualification.

I implemented something similar for tic80. Works fine on two browsers on same machine,but it gets uglier the more remote the peers are. My take is that you can’t simply retrofit a game whose engine wasn’t properly architected for RT network play. Good project for learning WebRTC though.

Tesla entertained this for a while. The investments in building relatively costly (initial+maintenance) swapping stations plus the capital tied in replacement batteries makes this option less attractive when you compare to their supercharger station.

Looks like a Google India initiative, which would explain the spelling.

Chronocrystal? Chronal?

$X/mo + $y/kCalls. X is for license to the code, y is for API hosting costs. i don't know why we don't see such a cost structure much, it seems the fairest for consumer.

All the while they're paying $80+ for bundled cable service. Penny wise, pound foolish.

OWASP top 10 is as close as it gets to a checklist: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Proje...

There are definitely methods of limiting the damage of a front end being taken over. A proper threat modeling process was obviously never performed.

It's the drive for personal growth, known as "self-actualization". It's an interesting topic to think about, assuming an AI order of magnitudes more evolved than a human brain, what would its drives and motivations look like.

Yes, for purposes of issuing certificates I'm sure they are OK wrt auditing (I was just establishing my "credentials" with the CA comment).

The threat models targeting anti-Google malicious actions obviously worked since they have traces of the Otto guy's activities. What I am asserting is that these forensics logs they use as evidence can be attacked in court as not being sufficiently protected from tampering by an internal Google party interested in fabricating evidence.

It would require a prohibitive amount of engineering resources to be done right, i.e. a chain of guarantees that from creation time to the moment they are inspected it can be proven that the logs cannot be tampered with by nonauthorized users. There are other requirements e.g. separation of roles that are expected on audit subsystems. I am positive it would not pass an adversary expert analysis.

Even if they do, it is very unlikely they were built with provable nonrepudiation requirements. From personal experience designing the security of a PKI CA that passed gov security certifications, the audit subsystem is the most challenging part to do right. Could probably consult for the defense in tearing down the evidence :)

> By the way, if some good soul from Microsoft reads this and has a license to spare for Visual Studio Pro 2010, I'd be happy to check it works just as well :-) I have Microsoft Imagine but for some reason they don't give license for old version of VS

contact me deejaybog at live com