_puk

JSON is not inherently schemaless, it's just generally not used with one.

Initiatives like JSONSchema go some way to restoring some constraints to the format and prevents unchecked deviation over time.

Interesting point on the UK laws, but I doubt PII is kept alongside login data, just referenced, and removed as needed without removing a user's login credentials.

Far from an expert, but hasn't flagging an account as needing a password change on next login been used as a way to migrate to properly encrypted passwords in the past?

I read it as perhaps some old dormant accounts never got migrated out of an ancient DB, and may have been picked up with the rest of the data.

Yahoo is an old company, I'm sure procedures have changed drastically over the years.

Not entirely true.

Pretty much all the major browsers implemented websql, which then never made it into a standard as there were no competing implementations [0]. Nice while it lasted.

0: https://en.m.wikipedia.org/wiki/Web_SQL_Database

Love the fact that I can't use the automated global entry when I visit the states as there exists someone else in the world with my name and a different D.O.B..

I do still try it each time though as it's still quicker to fail and then get a wistful comment from the guy checking my passport about the issue with the system.

"AWS is overpriced service for people that do not have time or resources to do things on their own and pay massive prices for that."

Isn't that the point of AWS?

The time / resources cost to build (monitor and maintain..) your own infrastructure isn't zero.

Did these companies have spare teams lying around the place, such that no new hires were needed to make the transition? If not, then it's not so much of a saving at the current cost of dev / ops personnel, just now on a different balance sheet.

"As social beings, one of the things we do is subject our fellow humans to subtle tests of their trustworthiness. If they show signs of empathy, that increases our faith that they will not seek to actively harm us."

You could have left it at that, the rest of your comment comes cross as pretty hostile.

And as for the use of the word Sperglord. Had to look it up[0]. Strikes me as a horribly derogatory term.

0: http://www.urbandictionary.com/define.php?term=sperglord

Actually missed this point about the FDA visiting on the tip-off, hence my surprise.

The FDA can only respond with the information they have, so as it took the FDA actually visiting Castle (on a tip-off no less), they must have been lied to as well.

Surely, a FOI request can't realistically trigger someone jumping in a car to verify data held on file.

30 years of $x million annual sales of essentially counterfeit product results in "up to" a year long sentence and $100,000 fine. Madness.

Though I find it ironic that they responded honestly to the FOI request.

Could they not have mocked the payload?

Whilst great info, unfortunately most of the sites that one would actually try to use this on don't accept addresses containing a "+" as valid.

Another Google Mail trick is to use periods. Not as useful as the +, but for those sites that don't accept +, one can usually add in a few extra periods to place sites into buckets (multiple adjacent periods don't work).

m.y.e.m.a.i.l@example.com

Similar to above, check the recently deleted album and then select remove all to actually free up the space.

Some must recall the drama that was the launch of Steam.

If I recall, it was optional for CounterStrike1.4, but then required for CS1.6.

The PC bunch were crying that they'd never use this DRM'd buggy POS.

That must have been 16+ years ago. Steam has come a long way since then, and has been credited [0] with helping reduce PC game piracy over the years. Likely because steam just works for the most part, and is as easy if not easier than the alternative.

I just don't see how Facebook can really disrupt this given Steams head start and positive mind share (not to mention the libraries of games that users have likely accrued over the years)

0: http://www.digital-digest.com/news-62904-PC-Gaming-Piracy-On...

The argument I've heard for why steam requires a custom 2fa is to do with trading on the marketplace [1]

The custom component makes sure that marketplace activity is valid (somewhat like the custom banking dongles you get that require both your pin and some transaction identifier).

They'd be better off allowing the option of standard TOTP auth for login, so users can use a standard authenticator app, and then layer on a custom app for trading if needed.

1: http://steamcommunity.com/discussions/forum/0/49463187366895...

I got the impression that Yahoo's Smart TV platform was outdated, and being eroded by Opera's HTML5 platform.

Given that this is pretty much all that is left of Opera after the Chinese buyout [1] it may well be a chance for Yahoo to get back in the SoC game.

1: http://www.newsweb.no/newsweb/search.do?messageId=406030

Funnily enough I can get emails on my mobile, even when my landline is down..

Not sure if it is a complete outage, I'm having issues with many sites, but HN works fine - which usually points to a DNS issue cough

Whilst I agree with your points, I wouldn't conflate the remote pull over with the right to repair, other than as a reason not to allow it.

As you say, if it is open source it may well be modified, and likely the remote pull over will be removed.

I can't really imagine a scenario whereby the remote pullover is implemented, and then allowed to be removed by individual owners.

The UK has always had the "islander mentality". The development of a European Superstate would either have had to drag the UK along unwillingly (barring apathy), or happen without them.

The positive I am taking from it all is the fact that for once people are actually talking politics again.

The next general election won't be as apathetic as the last few, which is likely why Boris won't call one if he becomes leader of the party.

This article pictures a gig economy built upon a universal income as a pre-requisite, which I just don't see happening.

Given the current state welfare system, there is potential for something like this to be gradually introduced, such that those on lower/no income could start building the gig industry on top of any basic state benefits (as opposed to earn a pound, lose a pound in benefits).

That would require a huge shift in current mentalities though, possibly greater than the admission that maybe we would be better off as an integral part of any EU superstate.

So you'd be happy with a Chromecast Audio receiver built into a set of headphones?

Brings to mind the smiling with upper and lower teeth sketch from Silicon Valley

https://www.youtube.com/watch?v=KGSJ8b9raJs&t=16

App store (UK) was down for purhases for me ~1hr ago, but seems to be back up (though asked for a password after restart)

It blew my mind when Lego Minecraft appeared a Christmas or two ago.

I saw Minecraft as a digital interpretation of Lego; how meta that you can now get a physical interpretation of Minecraft.

Simply having green and brown pixels[0] is enough to elicit cries of joy, regardless of whether there is any minecraft logo visible.

0: https://www.amazon.co.uk/Pixel-Duvet-Cover-Pillow-Single/dp/...

It uses the iOS simulator, so that's likely the hard bit to port.

Just noticed it doesn't provide the option for Android simulation, which would be more portable.

This looks awesome - even has pretty documentation!

Have run the tutorial without issue, took only a couple of minutes.

There seems to be only a small number of Components available out the box, with new ones accepted via PR.

This works fine for now, but it would be great if I could import my own Components or even build new ones within the UI.

I'd like to be able to "View Source" on a Component, it's obviously available via GitHub, but that's a few more clicks away.

Does anyone know of any similar IDE for desktop React?

From the readme [0], yep, only Mac is supported at this time

0: https://github.com/decosoftware/deco-ide/blob/master/README....

In that PR the browser is running AdBlock plus.

I'm intrigued as to whether that would make a difference overall and whether there is any difference between the frameworks when using ABP.

Difference is likely insignificant, but if React is not touching the DOM unless it needs to, does it actually lead to a performance benefit when a user is running an ad blocker (constantly parsing page changes etc).

I thought that had already happened, but not with that outcome.

A few years back [0] Netflix was getting too strong, and fearing the iTunes effect the studios pushed back and stopped licensing their best stuff to Netflix.

0: http://www.dailytech.com/Hollywood+Executives+Fear+Netflixs+...

Wouldn't be surprised if Firefox doesn't have all the relevant hardware decode licences (MPEG-2 in this instance).

For a lot of codec related items support is dependent on the underlying OS, and I don't think Windows ships with a general MPEG-2 licence.

Good to know!

Twitch definitely offers HLS as well; it makes sense to support the current generation of devices, but re-use the tech stack for future standards. Clever peeps.

> DASH is adaptive streaming, and as such, when you select some stream from the client, CDN should support that in their infrastructure

Adaptive streaming is essentially a client side technology, all the CDN needs to do is ensure that it serves up files with the right mime type (not actually a hard requirement, but many players choke if you don't).

Which segment to play next is decided by the player based on current playback conditions and a manifest of available segments and bitrates; it then requests the relevant segment from the CDN, which delivers it as it would a normal file. (A segment is just a very short video file).

The CDN is not expected to keep state for each connected client, which it would need to in order to be able to make the relevant decisions on which file to serve.

For live, you also have the complication that you need to keep adding files, and updating the manifest to indicate where these new files are (The payer checks back every couple of seconds to see if the manifest has changed). Any latency at all in this means that a client may get back a stale manifest, and then not know where the next video segment is supposed to come from, causing stalling. (Numerous ways to work around this, but it is the real hurdle to easy adaptive live streaming).

This is all a gross simplification, but at its most base level, that is how it works.

You can (theoretically) do MPEG-DASH from a normal MP4 file, but that does require CDN support (and possibly a single pass to add more info at segment boundaries).

> Currently CDNs support HLS and Adobe's adaptive streaming, both of which aren't open standards and aren't part of HTML5 video.

HLS is an open standard[0], though not defined by a standards body; more Apple have documented how they do it and others have adopted it as a defacto standard.

And that is the biggest hurdle for DASH adoption - Apple devices.

As a content provider, I have* to support HLS if I want to support adaptive streaming in iOS. Transcoding to another standard (one which is still in its infancy) is just asking for non essential costs and headaches.

*Yes, it is possible to use MPEG-DASH, but not natively supported by Apple, so you are on your own.

Until Apple support MPEG-DASH you still need to provide a HLS stream.

DASH is a sprawling standard, and in theory you can use DASH with existing HLS segments (MPEG-2 .ts files), but no-one supports it (or likely ever will). DASH264 [1] is an attempt to keep it simple, and tie it down to a smaller subset of codecs (x264/5 and the like), and seems to be making headway.

It's early days for MPEG-DASH, and it is gaining traction, helped by the fact it has been learnt a lot of lessons from the likes of Flash and HLS.

0: https://tools.ietf.org/html/draft-pantos-http-live-streaming... 1: http://dashif.org/wp-content/uploads/2015/04/DASH-IF-IOP-v3....