idlewan

You seem to have a weird understanding of web services.

All of pinboard's servers belong to pinboard. All of pinboards hard drives belong to pinboard. All of the bits on those hard drives belong to pinboard.

Your private data on pinboard's server belongs to pinboard. This is how web services work. If the web service couldn't access its own data, it wouldn't be able to operate.

You can only assume that some bits are yours (to use your terms: your private belongings) when it runs on your own service/when your programs are the only ones with access to it.

Pinboard is not a hosting company (a la DigitalOcean), it's a web service, i.e. it's not a hotel, it's not a bank giving you a safe.

It's not possible to be guilty of treason against a country that is not your own.

Or just don't have flash installed.

If he wanted for the code to be available, though, he could give it to someone else (who doesn't work for a GPU company), and that person would then release it (and would own the copyright).

He would not gain more "reputation points" because his name wouldn't be linked to the project, but that would avoid for the code to be forgotten in the cellar while nobody cares.

Those three opinions are heavily oriented towards an acceptance of totalitarism, and that's probably why most of the HN crowd is not fond of them.

- Snowden is a traitor: all hail secret laws! Burn the dissidents! All hail totalitarism! We should never be able to say to anyone what's wrong when we discover illegal and illegitimate actions!

- Piracy is not okay: leads to "we should stop piracy", which leads to horrible things like either "trusted computing" and willingly or not willingly executing malware on your own machines, or censorship and total global surveillance.

- The NSA snooping is not so bad: you discover that some government agencies have more power than the president of those countries (the intelligence community have the ultimate power to blackmail anyone and their mother), but it's not so bad, they are obviously "good people" so they don't misuse it.

When you are a hacker, you know that anything has flaws (especially humans) and that we don't live in the teletubbies world, so you can't trust an entity that has so much power.

Yeah, no wonder those opinions are shunned on HN.

Those who don't have CA-signed certificates can still use HTTP/1.1, I don't think it's that big of a deal.

> If no negotiations were needed, then anyone could have picked up and done a low-budget adaptation and called it a day.

And? Anyone can do a low-budget adaptation of Alice in Wonderland and call it a day.

Copyright is supposed to incentivize authors to create more work (by having a return on 'investment'/time put in). Not to restrict those who can create 'work inspired by others' to the uber-rich.

It's very interesting to consider the effects.

But why should we link death with the release of copyright? While temptation of assassination is probably reduced with extra-long copyright duration after death of author, it's a lot saner to assign a fixed-duration copyright from the original release date, not from (whole life of author + fixed duration). The problem goes away if you have a fixed duration from the start.

Django makes queries that are quite readable (and optimized! It makes good decisions to reduce the number of queries), and you can see exactly what SQL is run with the Django Debug Toolbar.

So "[ORMs] make performance diagnostics much harder" is just not true. "Some ORMs make performance diagnostics much harder" definitely is.

visionmedia mentions a settlement here [1].

[1]: https://github.com/strongloop/express/issues/2264#issuecomme...

If you were on the open web, his app would be a page with youtube's embed code for each video.

I doubt you would use a DMCA takedown request for this. You'd just disable embedding of your videos in your youtube options. Youtube probably already knows when a video isn't requested from either youtube's website or the official youtube app.

Duda is also a good alternative: http://duda.io/

Clickable: https://bitbucket.org/yarosla/nxweb/wiki/Home

Yes, it uses lots of strcpy and sprintf instead of strncpy, snprintf or strlcpy. It's bound to be exploited.

    Java servers get around 900K requests/s [...] while Rails squeezes out 6K

Yes, but that's for the /json test, which serves a static object that the framework converts to json.

I'm not sure it is really representative of the overall speed you'll get with whatever framework you'll be using: how often do you have a static page that's best served by your framework instead of leaving nginx serve it directly?

I prefer watching the test results that actually involve the database (/db, /queries, /fortunes and /updates), as it shows less raw speed for serving static things and more overall speed for your dynamic pages.

With /queries for example, Java does ~11.3K, while php (on hhvm) does ~10.7K, Python is at ~7.7K and Dart ~12.8K (For the fastest framework of each language. Rails still does bad though).

If you present lots of tables, some colour coding (green for high performing, red for slow, and some ranges in-between) might make it easier to parse visually.

To me, this library tastes more like too much salt.

I like the concept of the web jumping to the next device/interface.

After the desktop, after mobile, there might be VR in a few years. The pattern will surely repeat itself, with faster experiences for native, compiled applications, but I wonder if the "good enough" will come quicker thanks to webgl.

Looking forward to what Vladimir Vukićević and Josh Carpenter ([0] from Mozilla) and Brandon Jones ([1] from the Chrome team) are doing!

[0]: http://www.roadtovr.com/firefox-gets-vr-api-browser-based-vi...

[1]: http://blog.tojicode.com/2014/07/bringing-vr-to-chrome.html

    pure gesture input just doesn't work (as repeatedly demonstrated with Wii, Kinect, and Leap Motion)

That's just untrue. I'm not saying that, from a gameplay-oriented perspective, gestures are better/more adapted (which is definitely wrong to say at the moment anyway). But for a data visualization and/or 3d world manipulation use, gestures are really promising.

The devices themselves and their lack of general use don't prove anything: The Wii and Kinect don't track the fingers, and the Leap Motion is a lot more spatially restricted (which might bring incomfort after prolonged use, and is unpractical for wide movements). Besides, developping new ways of interacting reliably with gestures is not something you can do in an afternoon, so it might take time for pure gesture input to prove its worth.

In the meantime, I've noticed that it 'really quits' more often when using ctrl-q to exit firefox instead of closing the window.

Herm... I just want to point out the elephant in the room:

A new proprietary plugin is coming (which might reduce the need for Flash, but still), the EME CDM (content decryption module).

I'm afraid you'll never have "just Flash and nothing else". W3C EME is coming, unfortunately.

Note: If I'm not mistaken, most other browsers won't have CDM as a 'plugin' per se. Because they are proprietary browsers (IE, Safari, Opera, and Chrome, too), they can afford to make deals with devilish entities to make your machine execute code that makes your computer slower for no good reason (Because video decryption is useless. Come on, everything is already torrented anyway! This is so that CDM deciders can allow or disallow playback devices at will for the default user, and have power over device vendors). I don't know if Chromium will ever support EME, but it is in the same boat as firefox: plugin necessary. So the proprietary browsers will integrate directly the CDM in their code, while for open-source browsers this would be repugnant (and impossible).

That's the exact path I've taken in another language (Nimrod).

Mongrel2 is a really good way to have all the nitty-gritty of http handled while you worry exclusively about two ZeroMQ sockets (from and to Mongrel2). It makes it a whole lot easier and safer.

You don't see many people hating DRMs?

Anyway, the point you were answering to specifically mentioned "make it hard to read text on a web page". "music, ebook, software" aren't web pages, it's not the same end goal (the browser displaying stuff on your screen).

This is definitely wordy, but the right way to summarize it is not "they do it for the lulz". They do it to stick it to The Man.

You can allow everything by default too with HTTPSB (it still will use blocklists and protect you), so that you won't have to enable stuff for a website to work.

For every use-case you'll encounter, there is so many answers.

There is no "when you want to do X, use language Y" guide, because it would be pretty stupid. Every good programming language can be used for nearly all your programming needs.

The only thing you need to keep in mind, is where the target program should run (and the list is very small):

- should the target program run in a browser? Use Javascript or a language that compiles to it (Coffeescript, Dart, TypeScript, ...)

- should the target program run on an embedded board (very low memory footprint, very low CPU cycles available)? Use a language with manual memory management: C, C++, Nimrod, Rust, D ...

- should the target program takes the most performance out of the hardware (games, HPC, performant system library, ...)? Use a language that makes fast executables: C, C++, Nimrod, Rust, D, Go, ...

- should the target program runs on a web server? On a desktop computer? Any case that doesn't fit the previous three? Use whatever language you want or are familiar with, they all can do it, and there is no "best choice".

I'm betting this is not an easy task.

It however would be really awesome for HTTPSB (which I just installed on chromium and fallen in love instantly with) to be ported to firefox.

Seeing all the privacy-related features treated, by domain/site/everywhere rules, being able to block separately js/plugins/cookies (and by the way, the matrix is a great idea, a lot more useable than anything else out there)... in one extension only. Great work already, gorhill!

Please do write about it.

I used noscript for a while in blocking everything mode, then requestpolicy for better filtering, but got tired of having to allow stuff for most of my browsing (now I'm on adblock privacy + ghostery + privacy badger + cookie monster + biscuit + self-destructing cookie + smart referer).

I'd love to read about what others do and their usage, how they get around.

The website is wrong, because you are not currently helping people in censored regions with FlashProxy.

The proxy cannot work when the enclosing page uses https. See FlashProxy's FAQ: https://trac.torproject.org/projects/tor/wiki/FlashProxyFAQ

If you're interested in Nimrod's performance, it's really good: http://codegolf.stackexchange.com/questions/26459/how-high-c...