Getahobby

This is not a concession. For my essentials plus license I get 256gb RAM under 4, but now even under the amended new licensing I only get 32gb. Still not happy.

The right thing to do when you make a promise without fully thinking it through is to still follow through with it, no matter how big of a pain in the ass it turns out to be. This is how people (should) learn to keep their mouth shut and stop over promising and under delivering. Jobs is not one to over promise so this instance is interesting.

edit: wow, lots of grammar errors.

True. Thanks for the correction.

The sample PHP code can be done with one call to the header function using the second parameter which allows you to set the http response code. Nice article though, learned something new today.

Or the mindset where NBC will bother dedicating time in their nightly news to cover iCloud (stop looking at me that way, yes some people still watch the nightly news) and voila, the general public thinks apple invented the idea of the cloud. Great for Apple, annoying for us that think Jobs doesn't walk on water.

So the message AAPL is sending to app developers: do your job well enough and we will bake it into the OS.

You also need to get the PIN that the specific user is using in addition to the access code from the token. You can use it without a PIN but that is reducing it to a single factor auth solution.

These two arguments are separate. A malicious app that steals credentials (wait, in Gruber's world these apps are vetted, right?) is going to steal credentials whether it uses xauth or oauth. A non malicious app that uses xauth could in theory be exploited to reveal credentials whereas if it just used oauth it wouldn't be an issue of the same magnitude. It is a security win. You can argue the magnitude of the win all you want.

He goes out of his way to say it doesn't increase security.

Couldn't agree more. As much as I dislike Gruber's style (all snark, all the time) the man is intelligent. How he does not see that less sharing of credentials equals better security is beyond me. This is clearly a security win. Definitely a usability loss but welcome to infosec. That is the battle.

I have heard multiple Facebook engineering discussions centered around moving things out of mySQL and into mongo, Cassandra and hadoop. I think this article over emphasizes the Facebook and mySQL connection.

On an unrelated note, does ACM really still use Cold Fusion? And people like to knock PHP.

This post is old. And it doesn't matter one bit.

I like the fastball question. To me a fastball is directly challenging the batter. No trickery. Your best against my best. Hit it if you can.

Every time he uses "APT", take a drink.

This is actually probably going to be great publicity for Samsung - who even knew they sold workstations and laptops?

The math in these algorithms is not the vulnerable part of the process. It is almost always the implementation or the implementers that are exploited.

Does anybody find it ironic that this guy from the TOR project (great work by this guy) uncovers this and we take it at face value that the IP address that this attack appeared to be coming from is the actual attacker? The attacker couldn't possibly have been using a proxy, could he have? </sarcasm>.

Oh, I don't know - the chart ten years ago would have had fewer columns. :)

When you need to have charts like this for almost every single html5 feature then the current state of web development is a DISASTER.

I will see your rule of 72 and raise you the time value of money. http://en.wikipedia.org/wiki/Time_value_of_money

I think we are on the same page. In this particular article I was referring to the paragraph regarding paging results which is ancillary to the main point.

I know noSQL is all the rage with the crazy kids these days and I know it has its place but why is half of the literature regarding noSQL about solving problems that are trivial in an RDBMS?

Tldr of the tldr: practice does NOT make perfect. Perfect practice makes perfect.

This may be a gross understatement but this is going to end very badly and probably have negative repercussions long term for nuclear energy in this country.

Apparently there are people I insulted that still use that terminology. It really makes you sound, umm, managerial and pointy haired when you use those.

Please, please, please STOP referring to networks as class a, b, c, etc. The 1980s called, they want their networking jargon back.

I think the underlying cause was the same - unescaped output that was supplied by the (malicious) user.

Hmm. I think these functions escape output, not sanitize input.

"These statistics obviously cover just the kernel. The Linux environment is much larger than that..."

Being strict, actually isn't Linux just a kernel? Just being a BSD troll.

Hmm, sounds like Redhat is really looking for a BSD type license.