dekz

We use Pact[1], but the idea of flakeyness is interesting. Would you end up with non deterministic builds with the flakeyness? I imagine you could get enough 404's to trigger a Circuit Breaker in your application and this would propagate to tests sometimes failing.

[1]: https://github.com/realestate-com-au/pact

One of the features I heavily use from fig is controlling the runtime docker parameters in fig.yml, i.e the VOLUME, ENTRYPOINT, EXPOSE, WORKDIR sort of stuff. I see you guys made the decision to maintain the runtime commands in your Dockerfile, requiring a rebuild to change it. Everything except Environment.

I guess my question is, why did you guys choose to do that?

I am using Chrome on OSX and do not get it:

https://gist.github.com/dekz/7c911fa633e37fb130d4

The login key is in the article in the example screenshot[1]: 'hopping-smiles'.

[1]: http://notebook.ideapublic.org/wp-content/uploads/sites/5/20...

No the onus is still on the user. How does the onus move to the channel provider?

I don't see a difference in this and 'Reset your password' links in emails that are common place. They are basically the same premise, without the password.

The authentication providers are more than just email (the article mentions phone and SMS tbd).

I'm not sure what you're saying here:

> (Hashed) Password storage is moved to a third-party database (the email provider)

There is no hashed password? It's just a challenge response using an alternative path.

> Huh, I'm not sure why you say it takes "hours" Because it took me hours. I don't understand, I'm telling my anecdote and people seem to be saying it's wrong.

Just because it takes you 15 minutes doesn't mean it takes me or everyone else 15 minutes.

It took me days to be happy with my dev environment.

Yes but the parent comment is about installing in minutes vs hours vs days. I proposed my story where it took hours to download Xcode and eventually days to fully get my system setup.

I also once had Fibre then moved to a bigger city without Fibre.

Who doesn't say linux doesn't take days to setup?

I say my OSX took days to setup, if you have a counter anecdote then elaborate.

Which is why you symlink the homebrew version ontop of /bin/bash!

What makes oh-my-zsh worth being a assumed default in your opinion?

Well the largest issue by far is the fact that it overrides system blobs. Homebrew installs into it's own sandbox area and symlinks if requested.

> It is also a whole C program and Homebrew is just ruby scripts.

And that's a problem?

I would argue that it's a feature. Due to Homebrew being written in Ruby, it has easily allowed over 4,000 contributors [1]. Recipes are easy to read and inspect for verification purposes.

What is the advantage of C over Ruby?

[1](https://github.com/Homebrew/homebrew/graphs/contributors)

I use a auto-hidden dock which has nothing in it. It is populated by running programs and is not used as a launcher.

For launching I use a tool like Quicksilver or Alfred of Spotlight.

This way I get more screen realestate, I see no point staring at a dock icons all the time.

My dock resembles Command-Tab.

Can I perhaps ask why? Is it a trust issue that you don't like accepting a prebuilt binary from some random on the internet?

I recently received a new MBPr from a work laptop and I would totally agree it takes days to setup from scratch.

* It takes hours to download Xcode

* It takes hours to download OSX Updates

* Setting up Homebrew, Zsh, Vim, Browsers, GitHub, Dropbox, Mail, Rbenv, Rubies, Cloning work repos

* Getting those other smaller things you were tinkering with, Z, Go

Everyones dev setup is different. So I'd agree it takes days to get set up.

Which guy? As far as I can see this is a link to 152 different entries, spanning multiple 'guys'.

But that is in conjunction with a browser fingerprint right?

I don't follow that DDG not being able to save anonymous queries disregards their stance on privacy?

Surely for the best experience you'd want DDG to do this anonymously.

Also it should be mentioned: OSX Mavericks has 0.9.8y

SuSE Enterprise linux for example is still on 0.9.8, moving from 0.9.8 to 1.0 for a distro is a non trivial amount of work.

Some of these distros are LTS, so the bug fixes are usually back ported. The latest 0.9.8 is y which is from Feburary 2013.

I wouldn't say so, you can probably use the tool to your hearts content.

Obviously the tools are useful for debugging purposes, testing tls connections, dumping cert information and asn1.

I've now been made aware that tools wrap the openssl cli instead of using it's programmatic API.

Once I tried to use the ca functions of the tool, found the whole tool entirely too cumbersome and wrote my own using libopenssl.

What do you use it for extensively if I might ask?

Have you used the openssl cli tools before?

Apart from genrsa, what exactly have you used the openssl cli for in the past?

My answer would be the exact same as you quoted, the openssl cli tools are quite horrendous to use and you certainly wouldn't use them if you were a CA. If you are a CA or deal with certificates, openssl does provide sweet inspection dumping tools for asn1 and certs.

If you have an application which generates keys or certificates, why would you system exec openssl cli when your language of choice has a Crypto implementation, or glue to OpenSSL.

So I ask openly, run `history | grep openssl` and see. Even running `openssl help` is daunting unless you're familiar with most symmetric block modes.

The only real issue GitHub can address here is harassment during work.

I don't recall reading about an uninvited advance, so if this is something new you know about could you dump a citation here. I do recall a home visit which was 'awkward' and the offending party 'hesitated' to leave. That stuff happens, in and outside of work. Remember the parties here are emotionally invested and biased. We should not consider such details trivial, but they are considerably emotionally invested in this. The way it was phrased in the original article was he hesitated to leave. That's obviously up to the reader to interpret. Let's not dramatize that into an 'univited advance'.

At least express your opinion with this statement instead of just leaving a questionable open ended statement.

Do I see any sexism against the wife of the co-founder from GitHub's statement? No

If you'd like to continue the discussion then go ahead and provide something of worth.

This comment is ironic I know, but these kind of posts derail the debate.

Full disclosure, Presto seems to be a subsidiary of Foxtel. It doesn't stream in HD. It costs $19.99 a month (first month is $4.99). It's only movies, no TV.

OT: @cesar your account is [dead] and looks like it has been for some time.

We are, of course, talking in only hypotheticals. Unfortunately, this is a trend that is becoming more popular in the private business sector on their networks. I cannot foresee a indicator that would prevent this trend crossing over to universities.

Individuals at their workplace do also have user managed devices, they also are 'outraged'.

Yeah it would. So browers will either get that big red warning or the user can be asked/required to install the certificate to be on the network.

It's not a technical limitation but a moral one.

It doesn't matter whether you control the user environment to covertly install the MITM certificate. You simple notify your network users this is happening with instructions on how to install the certificate.

Either the user installs it or not, it's their choice.

I am in no way advocating this abhorrent system of 'security'. Simply noting that it is obviously done in the workplaces and in many workplaces. That it can also be done here under 'security' pretences.

Why would it not work in a university as it works in a corporate environment?