godfreykfc

You're probably referring to https://news.ycombinator.com/item?id=5482178

If I understand correctly, you are only asked to fill in a few of the 8 characters. (I have seen this before.)

You are presented with

* * [ ] * [ ] * * [ ]

and you are supposed to submit

* * [3] * [5] * * [8]

so neither side would have enough information to reconstruct the full password based on the user's input alone.

Wait. Doesn't that imply your bank is storing your password in plaintext, or at best salted and hashed each individual character of your password? (Which is still horrible, because it now takes O(n) instead of O(n^8) to crack stolen hashes)

The author did a talk at VanJS today, and he compared LucidJS with other events library[1]. From what I got out of it, besides the nice features it offers (set/pipe/etc), this is probably most useful for people who would like to release a library/JS API without depending on one of the "heavier" frameworks - for example, libraries like History.js would be able to use LucidJS as the events library instead of coupling with something like jQuery or rolling their own.

[1]: http://lucidjs.harp.io/#slide-30

I did something almost exactly the same[1] for a design project at school a while back, where I explained why current infinite scrolling UX is not great and how something like this could help[2]. I'm glad someone made this into a library!

[1] http://newcoursys.herokuapp.com/courses/2012sp-cmpt-165-c1/a... [2] http://newcoursys.herokuapp.com/#marking-interface

I am really skeptical (though I'd be more than happy to see someone prove me wrong) about these "framework" apps, that doesn't actualy do anything by itself, except to provide an API of some sort for others to take advantage of. They reminds me of those obscure ActiveX plugins (3D model viewers, etc) that sites make you install. I am usually somewhat hesitant about getting them on my computer unless a see great value (eg growl), but I suppose I'll be even less willing to have these on my iPhone, as an app that sits somewhere on my home screen. My users might feel differently about this, but it certainly would be very difficult for me to explain to them what is it that they are installing and the experience could become quite confusing.

What if this allows you to run faster. Should we allow this in Olympics? (I haven't made up my mind yet, but leaning towards a no.)

I smiled when I saw how you call them "unibody" terminals. We have come a long way since then. :)

I find this theory by a commenter on the original Kaspersky blog post very interesting. I certainly don't really have the knowledge to judge if it has any merits, but I still find it amusing nonetheless.

http://www.securelist.com/en/blog/667/The_Mystery_of_the_Duq...

The text-shadow trick is really clever. I think a "progressive" version could be pretty cool. Just tried throwing that together real quick by changing the blur radius in 0.5px increment. Needs some fine tuning (shadow color perhaps), but you get the idea: https://img.skitch.com/20120309-c323134j8wm7nc34pudf9r2nri.p...