News for hackers. Stuff that matters.

divtxt

Re:Using logs to build a solid data infrastructure on Thursday May 28, 2015 @12:19AM (#9616046)
You're quite right. Switching from a db to a log as the "master" loses the simplicity of the app-to-db model.

As the article says: "For now, a better option is to extract the log from a database" - i.e you use some tooling to generate a log from the db.

Indeed, you can now see tools that go in this direction usually by using the replication stream. (eg https://github.com/shyiko/mysql-binlog-connector-java and https://github.com/xstevens/decoderbufs)

Re:How to avoid the Emacs Pinky problem on Friday August 16, 2013 @05:05AM (#6222928)
Have to agree - despite the good reviews, the keypress on the 4000 feels wrong.

I was on the Microsoft Natural Elite for a long time. Unfortunately it's been discontinued so I need to find a replacement.

Re:Apple Developer Website Update on Sunday July 21, 2013 @10:52PM (#6081486)
> if it turns out to be negligence on Apple's part, I'll be very angry

I doubt you'll need to get angry - because if it's negligence, you/we won't be told.

Re:Nexus 4 Unusable for VoIP Calls on Wednesday April 10, 2013 @12:15AM (#5523179)
I just polled some friends on chat:

- iPhone + Vodafone Bangalore - SMS notifications - inconsistent frequency

- Galaxy Y + Airtel Bangalore - SMS alert only

so it seems carrier/plan dependent to me!

> it sends whenever there's 3G transaction and the usage period ends

Sure - what I was guessing is that sometimes the phone is on a "single" 3G connection all day & there's no alert, and some days the phone makes "many" 3G connections & there are lots of alerts. (or perhaps it does not work this way & there's some other cause - not a telecom expert!)

[EDIT: oops both friends say they get SMS not USSD alerts]

Re:Nexus 4 Unusable for VoIP Calls on Tuesday April 09, 2013 @11:39PM (#5523089)
I have to say that it's (mostly) the carrier's fault.

I have the same issue sometimes with Airtel India, and I'm pretty sure this notification was turned off 2 years. [edit or maybe i just had a good data connection then]

Also, this issue is not consistent. I'm guessing what happens is: carrier sends usage alert when you "turn off" data + bad connection that keeps dropping => many notifications even though you never turned off data.

There are a few apps that convert USSD alerts to notifications - try these - but it would be nice if this was a built-in feature.

Re:Google Android Director on Nexus Strategy on Friday November 02, 2012 @11:08AM (#4732968)
I & millions of others will be proving you wrong this winter.

Though I can afford a $500-700 device, but I can't justify it. Meanwhile, one of the big battery life tips for smartphone owners is to disable 4G. So, no Google has not screwed up.

Re:MVC is dead, it's time to MOVE on on Monday July 02, 2012 @02:14PM (#4190068)
And callback "events" have been renamed to... "events".

I'm going to have to agree with the parent here. Without example code to compare, how is this different than MVC? (or "MVCE")

Re:Tech press misses Google/Amazon name grab on Friday June 15, 2012 @07:51PM (#4119325)
"Tech press ignores expected next phase of ICANN's gTLD sales."

would be a more accurate title.

Like a public good, the dilution costs of issuing gTLDs is externalized and paid by everyone (other than ICANN).

ICANN has an exclusive license on this valuable virtual real estate, little accountability and a well demonstrated intention of making all the money they can.

Don't blame smart buyers who get in early - they're not the ones who created the situation.

Re:Take my money, HBO on Tuesday June 05, 2012 @09:37PM (#4071954)
Also, take my money, Showtime!
Re:Reasons to Learn Markdown on Wednesday April 18, 2012 @10:14PM (#3861099)
Texts - a Markdown editor for Mac & Windows - http://www.textseditor.com/

I like that it's a true wysiwyg editor in that you actually edit rich text instead of typing the markdown syntax.

Re:Is There a Y Combinator Valuation Bubble or Not? on Monday April 16, 2012 @11:44PM (#3850965)
Better to ignore revenue and be thought worthless, than to attempt to make money and remove all doubt.

(paraphrasing)

Re:Ars Technica flagged by Chrome for Malware on Tuesday April 10, 2012 @04:45PM (#3824323)
Possibly similar: I accidentally had flashblock disabled, and a malicious flash ad on wired.com performed many MB of requests and then redirected me to another site after 5-10 seconds.
Cmd-` only switches windows of the current app. So, even if you see your window, you can't switch to it with Cmd-`.
The window is the unit of focus (not apps), so I can rightly argue that switching focus should work on the unit of focus i.e. windows.

Note that I'm not arguing against having an app concept or a "switch app" action. The problem is killing the "switch window" action.

> Having the application's functionality split across two completely separate menus does not constitute a usability improvement.

That's putting it mildly. A split menu may be correct from some design point of view (e.g DRY principle) but from a usability point of view, it's recipe for frustration.

On a more general note, does no one else consider Mac-style "alt-tab switches apps" and "global menu" usability mistakes? (on grounds of being modal)

With both Unity and Gnome adopting these, I no longer have a compelling reason to switch from Mac back to Linux.

Which is a pity really, because Gnome 3 is one of the prettiest and most usable desktops I've seen: I love how the windows key gives you access to the dock, all windows, workspaces and search at the same time.

Re:#1 CSRF Is A Vulnerability In All Browsers on Friday March 30, 2012 @08:57PM (#3778888)
Thank you for pointing me to X-Frame-Origin!

So, in the context of this discussion, why don't the browsers make X-Frame-Origin: DENY the default behavior?????

Re:#1 CSRF Is A Vulnerability In All Browsers on Friday March 30, 2012 @08:14PM (#3778762)
I don't want the legitimate uses prevented. The default behavior should be to prevent, and the legitimate uses should explicitly opt-in. That way, you only have to do security analysis for those explicit points.
Re:#1 CSRF Is A Vulnerability In All Browsers on Friday March 30, 2012 @08:10PM (#3778747)
I have no problem with cross-site GET requests because I know GETs should behave as 'read-only' anyway for lots of reasons.

What I don't get is how arbitrary cross-site POSTs with malicious values are allowed. As far as I can tell, anyone can post this form:

<form action="http://bank.com/send_money><input name="to_account" value="SCAMMER-1234"></form>

Worse, one article will tell you to only allow Referrer == "bank.com", and then another will tell you that even that is no longer enough?!!!

Why can't we change the browser or the web server layer to prevent this by default?!

Re:#1 CSRF Is A Vulnerability In All Browsers on Friday March 30, 2012 @07:41PM (#3778673)
CSRF is like a kafka-esque joke.

Here's my take away from every CSRF article:

A malicious site will load your site in an iframe, fill in your form and post it. Fixing it requires some a token in your form, but I can see you don't understand how an extra hidden field in your form will make a difference so you're clearly not going to handle it correctly. You're screwed. Go home.

As far as I can tell, CSRF should have existed since javascript & frames. How have the browser vendors not fixed such a huge insecure-by-design flaw?

Re:How can PrivateSky not see your data? on Friday March 30, 2012 @11:26AM (#3776383)
The real short answer seems to be: encryption is done client-side by Javascript.

I'd worry about the extra attack vectors because of that - man in the middle, snooping browser extensions, etc (or even just strong-arming them into silently changing their javascript do no encryption)

To his credit, he writes about this as well:

> On a trust scale, is it better to use PGP or PrivateSky if you want to be 100% sure that no one can see your data? Answer: There is no question that [...] a system such as PGP is better [...]

> There is only one problem. PGP and the current state of the art are too damn hard for the general population at large to use. [...]

Re:Dropbox rival Space Monkey puts 'cloud' in your house on Thursday March 08, 2012 @12:00PM (#3680498)
What I meant was: I wish they had gone with at least 2 copies offsite. Sorry for the ambiguity.

And you're right - 2 copies would mean 1TB out of 3TB.

Re:Dropbox rival Space Monkey puts 'cloud' in your house on Thursday March 08, 2012 @11:02AM (#3680185)
I wish they had gone with At least 2 copies offsite - that was one of my first thoughts too.

Then I remember that I used to do backups at most once a year until I moved to the Mac and Time Machine.

(edit: clarify sentence)

Re:Dropbox rival Space Monkey puts 'cloud' in your house on Thursday March 08, 2012 @10:47AM (#3680100)
Yes, bandwidth is a concern, but it should be easy to let users choose bandwidth limits. The question then is whether the product is still useful if it takes 10/20/30 months to fill the hard drive. I suspect that there's a segment of the population for which it will.
Re:Say Goodbye to the Menu Button on Friday January 27, 2012 @02:19AM (#3517445)
Off-screen buttons ruin the "touch the app" magic of touchscreen direct interaction.

The screen is the app and the app is the screen. Therefore, any button outside the screen is not part of the app!

BTW, I used to agree with you but experience changed my mind: I once used an Android timer app for months without pressing the menu button.

Re:Introducing the HUD. Say hello to the future of the menu on Tuesday January 24, 2012 @04:19PM (#3506852)
I had written off Unity partly because of the top-bar menu decision. This post shows me that they do have a grand vision to justify that change.

> power users say things like “every GUI app now feels as powerful as VIM”

A UI designed for keyboard power-users? I suddenly care about Unity again!

Re:Why 37signals Doesn't Hire Programmers Based on Brainteasers on Thursday January 05, 2012 @11:08AM (#3429156)
Unit testing is another simple topic that provides insights into how a person thinks about code.

Exercise: give them a class with empty functions, and some unit tests. Ask them to write the class and add some more tests. Also, one of the tests you provide must be subtly buggy.

Re:Scientists' proposed calendar synchronizes dates with days on Thursday December 29, 2011 @12:48AM (#3402696)
Pretty nice! Too bad a non-trivial segment of the population won't be happy with 13. You might as well call the new month Deviluary. :D
Re:Why C Is Obsolete on Wednesday December 28, 2011 @11:41AM (#3400324)
My bad - "the world has moved on" was too strong.

I meant something like: other languages have risen in popularity because they are better than C++ for many types of projects.

Re:Why C Is Obsolete on Wednesday December 28, 2011 @09:45AM (#3399858)
> He explains that the languages should have been merged into one, so that C would have been a subset of C++ instead of nearly a subset of C++.

Thank the stars this didn't & won't happen!

Bjarne has been stuck in "C++ is the best & only language anyone needs" long after the world has moved on to Java, C#, Python, Ruby, JavaScript, etc.

C occupies a sweet spot combination of:

- low-level with "no magic"

- small enough for most people to "hold in your head"

C++ matched these conditions for a brief time in it's life - the early 90s aka "Stroustrup 2nd edition" - when the only "magic" was basic virtual functions, and templates where just a promising experiment in an appendix.

Older »