jensenbox

Nothing really: https://security.googleblog.com/2018/03/distrust-of-symantec...

Interesting... This is the email I got when I requested an S/MIME - Symantec - seriously?:

Dear customer,

Your order request for Symantec Digital ID for Secure Email(S/MIME Class 1) for the email address christian@perspecta.ca is received.

You need to approve or reject the request using following URL:

https://alwaysonssl.com/id-verify/GX5aT6H2vG8s-Td2CLOBBEREDC...

For any further queries please visit:- www.symantec.com

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication.

I cannot tell if this is a practical joke or what. At first, I tried to learn it in earnest but then I fell totally apart and virtually threw my hands up. Either I have some sort of learning disability or this is there to simply waste my time.

Is this a real thing?

Somewhere in my ancestral line I have a relative that can read and write the sort of math that is in this paper.

I have given myself the OK that I will never be able to do a gosh darn thing even close to what I just saw.

I just hope that somewhere in my life I am able to do something that is just as awe inspiring to someone else.

So I had a few minutes to think about my response and am going to respond to my own question... With a potential solution.

Much of what I am reading is that it has better thread handling - I will assume that it does. I have also read the part where it is better for new team members - I get that, a new member can pop in and see the trail (how often that would actually happen? - unknown). I also read the sync vs async argument - sure, I like async but at times I need sync, like hard sync with red lights and bells (sms and whatsapp + phone calls and knocking on doors at night).

I think at the core there is a kernel of greatness that can be built upon: Everything is a 'topic' and has potential triggers to external systems. I think this could be a system that has everything in it eventually. If a topic is a lazy topic then it could be tagged as such, for example a message about next weeks dev lunch, but if the site is down then tag it with a critical tag and the alarms could go off. I see the real power here is that it can be connected to external things much better than email can without significant rfc822 parsing. There is opportunity here to supplant your current email stream.

The other coolness I can see is the potential for archiving everything - I think in certain circumstances Hangouts is too ephemeral. Daily standups should be recorded for remote teams or brainstorming sessions for SR&ED (Canadian tax thing). Even whiteboards and phone calls should be archived against a topic. Connect the system to a SIP service and all calls about a topic could be logged. Perhaps WebRTC would be the cool kids way of doing things.

I would use a service that recorded everything (that I wanted to be recorded) and had ways of moving from async to hard sync fluidly.

I hate to say it but I concur... mostly.

The idea that is different here is that it is an invite only system - meaning no spam.

The first question that came up for me was 'who do I invite' - I had to think who in the team is an early adopter and would be receptive to trying something new. Then my next thought was to Hangouts them and tell them what I was doing so they did not see an invite for something unknown... then I thought... Why don't I just email them... and lastly... Why am I doing this again? I have already everything I need to talk to them... What is the advantage of this service?

As it stands, I get very little spam.

So what is the value prop?

I know it sounds nuts, but why not merge into Canada? Just get Oregon on board and you are golden.

One search engine per country seems like the wrong way to slice the problem up to me.

Locality is missing from many queries because the data is generally not relevant or is relevant but not available.

I would propose that instead of breaking it per country, breaking the search based on what sort of content you are looking for.

Programming data or food recipes have nothing to do with locality but finding the nearest place to get chocolate covered coffee beans is.

I know this is going to seem like total self-promotion but this article caught my eye and thought that it would be valid to say I have been thinking about this problem a while, which is why I built https://www.closient.com/ - mind you I am still building it but it does work.

Maybe I am not seeing the same problem as the author is but I do see locality as being a critical part of merging the logical/virtual world with the physical.

I tried to browse to the article using the link on the headline and was presented with an odd message:

Bad Request

Your browser sent a request that this server could not understand.

Request header field is missing ':' separator. Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chro Apache/2.4.7 (Ubuntu) Server at sdtimes.com Port 80

A better link is: http://sdtimes.com/red-hat-releases-ansible-2-3-network-auto...

Looks like the poster is trying some special tracking that is breaking on Chrome on Mint.

I find myself asking questions that could easily be answered with a demo or some sort of try before signup.

The idea of everything I click on going to the signup page really is a huge turn off and personally I consider it to be a poor user first experience.

You should add some sort of something that allows me to see what you are about before making me sign up. I don't even know what I get if I sign up.

Otherwise, I am sure you have done a great job.

Does decommissioning mean that they will be dropping it out of orbit? Will it be visible?

I fully and unequivocally concur.

Personally, I like this a lot. What are the potential downsides?

Why not tunnel IRC through this and get all the benefits of a seasoned IRC server?

What if you stop using Hz and use something else?

They are clearly a mac shop - their CSS requests the 'menlo' font only for their code examples.

Looks like Times Roman on everything I own :)

I know it is cheap but really - what am I paying for?

I miss WebTV :(

It is not just you.

Not available here in Victoria, BC either.

I wonder what an injection attack on this would reveal :)

I would assume that the main reason for doing a commit to the repo is for the most part to distinguish a developer from a standard layperson - as opposed to any easier methods using a database.

I don't mind this approach but from what I can tell, you need to automate your pull request to deployment process - ideally keep it down to a few seconds and even email the committer to indicate that their pull has been accepted and can be seen on the site with a link.

I should have been more specific...

Their repo is under DDoS

http://crunchbang.org/forums/viewtopic.php?pid=339366#p33936...

These guys have been under a DDoS for days now. I have tried to get them to flip over to Cloudflare but no response. Even now, their forum is getting a HNDoS.

Does signup work for you guys?

I get this in the console:

Uncaught TypeError: Object #<error> has no method 'call' jquery.validate.min.js:2

I was pretty annoyed by that as well.

We use Sentry as well but I have yet to see a full stacktrace come out of it... unless I have it misconfigured or something.

lame.

Wouldn't you need at least 2 mirrors to correct the image?

Can't wait to hear the post mortem on this one :)