david_a_r_kemp

Whilst I applaud the effort, I think there needs to be PCB layouts and the like before this can be considered open source. At the moment the source code is there, and probably enough resources to give you a jump start on building your own, not detailed enough to build your own.

It's like me calling a program open source and ownly making the roadmap/initial spec publicly available.

how do you get the labels back again? sometimes my browser or password manager fills in the wrong fields, and, once there's something in the fields, there's no labels.

Does anyone have any idea how well this works with corporate enviroments where the typical workstation is a clone of all the others behind the same (NAT'es) address?

You could have an obvious way to click the images and go to the big size (maybe in a lightbox?)

I think the issues with Stack Overflow are:

1. People don't search properly before posting

2. There are a lot of "low quality" questions that could be answered by reading documentation (also see 1)

3. Most of the questions that apply to 1 & 2 have already been answered on StackOverflow.

4. It's overwhelmingly (US) English, so people who are not fluent pendants are down-voted.

5. The people who need the most help are those who are least suited to post, as they rarely give enough detail ([example][1] - where to start?), ask very generic questions ([how to build a website][2]), or ask questions that have been answered before

When StackOverflow started, I spent a great deal of time on it as it felt like a good way to help and share knowledge (or just show off). Nowadays, I'll vote when I find an answer (usually via Duck Duck Go), but [the last question I asked][3] is still unanswered (allowing Facebook to use this as a support forum is a joke).

I feel that it's become a victim of its own success, and is getting to the point where it's as bad as the sites it tried to replace.

[1] http://stackoverflow.com/questions/9395670/dataset-getting-m...

[2] http://stackoverflow.com/questions/87305/how-to-build-a-webs...

[3] http://stackoverflow.com/questions/8077747/what-are-facebook...

I really like the loosely coupled approach.

However, I think that sprinkling andro.eventer all over the place is a stumbling block to me - it's essentially a global variable.

I realise that you don't want to polute the objects too much, but why not just add bind and emit methods to the composed object? Either that or pass andro as a parameter to the mixin's setup method?

Also, the bind(this, "touch", function...) to me looks like you're binding to the "touch" event of "this". Is the closure tax really so high that you can't store "this", or use something like jQuery.proxy()?

Like I said, I think this approach has a lot of potential, and seems to fit quite naturally the eventful model that the DOM uses.

my todo list: cat todo

my done list: git log

EMI Partnership Developer FAQ

----------------------------

What’s the elevator pitch?

EMI is making some of its artists' content available via an API. Developers can work with the content in a sandbox environment and propose ideas for applications. If a proposal is taken forward, EMI will handle the tasks of clearing the necessary rights and marketing the application. Revenues will be shared between the developer, EMI, artists, The Echo Nest, music publishers and any other rights holders.

I read this as EMI want me to take the risk of developing an application, and then, if they think it's going to make money, they'll take it on and make money out of it. Sounds like they're trying to apply the same model to developers as they do to musicians.

Personally, feature-wise they're best of bread. IntelliJ is the best Java IDE I've ever used, and ReSharper makes Visual Studio brilliant.

That said, they aren't always the fastest, and don't do anything to dispel my hatred of Java UIs.

I used WebStorm to do node.js for a while, but haven't renewed my subscription as it didn't provide me much extra from vim. The jQuery/Web stuff I've done with WebStorm was pretty good though.

See the little up arrow next to the original post? Use that please.

Neither is neglecting to restrict the number of attempts to type the correct password.

I use LastPass with the 2 factor-authentication. It doesn't have my email password in it (which also requires 2-factor authentication).

But one can get a list of usernames from this site. One can then see which passwords are on a known password list, and then one has a list of usernames and passwords to try against other services. Bagcheck doesn't seem to have a limit of the number of attempts you get to type the correct password, either, so one can run a full dictionary attack on the passwords too.

There's a reason no-one else does login like this.

readable http://readable.tastefulwords.com/ makes a reasonable job of it, but it's clearly not built to be read.

If someone committed any of that code to a repository I was working on, then I'd hang them up. It's 2011 and people are still using one and two letter variable names.

An interesting article, but I don't have time nor the inclination to understand the code, which is the core of it.

Please give us a cli linux client, so I can run it on my NAS

You can't claim it's Open Hardware and then not publish the layout files.

To this, this seems like a lot more unix-y way of doing things, and certain for someone like me who prefers to keep their hands on the keyboard, this is top-banana (yes, I know there's ctrl+alt+shift+X to doing something in one app or other, but remembering every combination in every application is a PITA). If you've used Cloud9IDE's command line, I see this more like that -> you type git, and a popup shows you the completions for git. There's a lot of haters, but I'm really keen on unity. It's like having gnome-do baked in. Sure, it's not quite polished, but at least it's trying different things than the identikit window managers out there.

This looks like an ad for a load of iPhone apps. So much for innovation.

How is this a CI Server? it looks like a hubot interface to Jenkins

Simply put: The rules of web development still apply when building sites with new technologies.

The original paper is based on use of `eval`, which people using NodeJs wouldn't do (I've not seen one example of it) -especially when V8 has an efficient `JSON.parse`.

The attack against NoSQL databases is a Sql(JS?) Injection attack - and not even a sophisticated one. Sure, services like iriscouch open themselves up to this kind of attack, but the way the paper describes it is pretty much by design.

At least Javascript isn't having problems with incompatible language versions

__call__; __new__; __getattr__ and __getattribute__; and __metaclass__ - you can do some black magic in Python straight out of the box that takes a lot more work in statically typed languages.

To be honest, node.js isn't the kind of place for a complete beginner - it changes fast and there's a lot of outdated information available (which doesn't say which version it was meant to work with).

Even as an experienced programmer, I'm still reticent to use node in any real projects, (mostly because I'd spend half my time updating it to work with the latest release).

Of course, it can be fun to hack on a fast moving platform, but it can be annoying too, when you spend your evening trying to get an environment set-up on an obscure platform rather than writing any useful code.

Marco - thanks, but your API still says it's BETA. If I want to develop an app - and provide integration with social networking sites - having a stable API for the core product is a must.

I may be going over old ground, but don't the CSP violations reports ( see https://developer.mozilla.org/en/Security/CSP/Using_CSP_viol... ) open up another attack vector?

I know people who actually implement this are going to have their heads screwed on around the right way, but having a page where you know you can generate server processing, and that is potentially not going to have much security around it screams out to me to be a good place to start an attack from.

Especially as the spec is a bit vague about exactly what happens when (no head specified for example, doesn't say about including cookies or any other information). Also, fiesta.cc's CSP Report URI returns a response that says to keep the connection open.

And, if you manage to get a script injected to a popular page, the site itself acts as a distribution system to enable distribution to multiple users.

Something about this says it's not been thoroughly thought through to me.

Yeah, I got annoyed by that too. The fact you have to guess what calls they used makes this distinctly not a bug fixing challenge.

Am I being stupid? If you use your ISP that "DNS Blocks" TPB, then surely all you need to do is switch to using Open DNS (or similar) and suddenly what your ISP does to their DNS server is irrelevant.

I'm growing to understand "the cloud" not as AWS/Rackspace/Heroku/whatever, but as a mindset where: 1) you're not tied to hardware 2) your application scales horizontally 3) you can easily (and dynamically) add (computational) resources as needed, preferrably managed by your application. 4) you build fault tolerance and redundancy into your application

This article basically takes the approach that "the cloud" is AWS.

Yeah - Fiddler2 http://fiddler2.com/fiddler2/ does this too. It's really neat for debugging http based API calls.