cotillion

Sometimes its just laziness.

I was forced to add GTM to a site because it meant marketing could just hand over the GTM login and a pile of money to another company which could then provide them with pretty reports on what the customers were doing. The analytics company promised to not do anything bad so it was OK.

And that was after an incident where the entire site was turned purple by another external JavaScript...

Its how the local hospital here is cooled during the summer. Large pile of snow which is covered in wood chips. Apparently it generated 1345,3 MWh cooling energy in 2002..

http://www.snowpower.se/sundsvalls-kylanlaggning_en.asp

Considering the QUIC source is available this article is a bit silly. It's not Googles fault that other ad-networks have ignored QUIC.

https://chromium.googlesource.com/chromium/src/net/+/master/...

A month before they were leaked to the public. Not a month before they were leaked to another hostile actor.

When you're focusing on customer satisfaction and cost control I suspect any idea of an 'Cloud Light Control Panel' or some other such nonsense was axed rather quickly.

They'll be making plenty of money on the margins on the lamps and gateways as is.

"No fake recipient email addresses anymore, use real ones!"

This is a really bad idea. Keep PII far away from your test environments.

I run a MUD which has alot of people from all over the world as developers. Most are not technical and do simple thing like create areas for the game etc. Explaining how to convert files from CRLF to LF only has turned out to be impossible.

When they use modern FTP clients which automatically handle ASCII mode it just works. SFTP seems to work for some users. It probably depends on the clients support for ASCII mode..

The FTP protocol designers understood the need for something like ASCII mode back in 1985. Something the SFTP people had to re-discover in 2005.

Abhay Bhushan, Postel, Reynolds etc did an awesome job!

edit: wrong rfc

Things are actually looking much better now for the MUD i help run. Websockets made it possible to bring the game to a whole new crowd without requiring them to install some odd telnet thing. We had a few years when things did not look good at all and player numbers dropped every month.

CSS is powerful. It's possible to both steal data and in some browser to execute JS through CSS injections.

(JS execution is mostly possible in obsolete browser versions though)

Etsy: Founded: June 18, 2005

SASS: First appeared 2006

CSS: Initial release December 17, 1996

If they knew how to time-travel I hope they focused on implementing other future tech.

The constant Plex Pass reminders are very annoying also.

They're also designed to be confusing and to give a user the impression you have to sign up for Plex Pass to continue using Plex. Plex is awesome together with Chromecast anyway.

If nanotubes exist in car exhaust and buckyballs in candle soot then we've already performed a huge experiment on loads of people. Life expectancy is still increasing...

So they're actually evaluating all js and css Googlebot is consuming. That's insane.

Can we forget about any new competitors in search engine land now? Not only do you have to match Google in relevance you'll actually have to implement your own BrowserBot just to download the pages.

Something is very fishy. I tested this behind the evil-proxy-of-doom on the internal network and http2 was twice as fast despite the proxy barely supporting http1...

But then real http2 against the http2 server is still 2.98 sec vs 8.65 sec.

Jamming LTE to force a switch to 3G is possible.

It does imply this was in some part a TLS fail. Either none or failing to verify trust..

I belive the problem was the signature on the intermediate. The same intermediate has probably been signed again with sha2. Or maybe it was cross signed somehow...

I just replaced the intermediate cert and the warnings went away.

StartSSL have sha2 intermediates nowdays. https://www.startssl.com/certs/class1/sha2/pem/

They're still hiding behind Prolexic/Akamai. I suspect the attacker is waiting for them to drop that protection.

From a state sponsored attacker I would have expected to see a BGP attack..

It can, depending on the flight control mode.

But a pilot with time alone in the cockpit can most likely trick the flight computers into whatever mode he wishes.

I guess he's one of those who can decode both transfer-encoding and content-encoding in real time while watching tcpdump output.

For the rest of us who need tools to watch HTTP 1.1 this changes nothing.

HTML has luckily until recently been too limited to allow many of the UI atrocities well paid developers at huge software companies have managed to produce.

Take a look at the in depth critique of Lotus Notes. Half of it is still valid for the current version 18 years later. I thought I'd gone crazy the first time i tried to use the somewhat special IBM password prompt in Notes 9.

It seems even Google has found Lantmäteriets (state owned mapping company) fees to be too high. All building outlines they used to get from them are gone also.

Hemnet recently created an OSM layer just to get building outlines again.

Once you get out into the main world outside the tutorial there is a board you can post an application for wizhood on. Or just send an in-game mail to me.

I'm actually still running a MUD (Genesis, the first LPmud) and one of our main issues is that we don't get many new developers who want to help out and code. Nowdays players just want to play, getting them to go through the extra effort to learn to code and help out developing the world is very hard.

It's also hard to get new players but a web client has really helped with that. Very few new players stick around though. But enough to keep it going. The lack of developers is probably what will kill the game eventually.

   `exec #{Rails.root}/tmp/go_#{m} #{arguments}`

The escaping leaves a bit to be desired.