jfroma

Or if you experimented an economic measure that froze your account like this one [1].

They froze all accounts and they even threatened the population with opening the safe deposit boxes.

[1]: http://en.wikipedia.org/wiki/Corralito

Yes, but it is not the same if I can reply with 400 directly without further inspection.

I imagine github can do this at the reverse proxy level, instead of doing 20 queries to mysql and overload the ruby application.

I was wondering if you can prevent this by looking at the "Accept" header in the request but it seems accept is "/" for scripts. I'd expect the browsers rather to send "application/javascript".

Then the answer from my server will be 400 because I don't have a javascript representation of this url.

Why the attacker will run the content loaded as an script instead of just dumping what they get?

Edit: I think is the dataType: "script" part. From jquery docs:

> "script": Evaluates the response as JavaScript and returns it as plain text.

it will be nice if I can choose the license on the tool and the tool make a PR automatically

It uses a theory called Operational Transformation [1] which is roughly the base for most collaborative tools like google docs.

My first attempt was using a library called ot.js [2], I changed it to support an async db since it only supported a in-memory store and I adapted to use mongodb. The experiment is in [3] and it has some bugs still.

Then I found out the guys at firebase adapted ot.js client side to work with their own db, and created something called Firepad [4]. So, I used that instead which was more stable and I added auth and authn.

[1]: https://en.wikipedia.org/wiki/Operational_transformation

[2]: https://github.com/Operational-Transformation/ot.js/

[3]: http://github.com/auth0/mdocs and http://mdocs.io

[4]: http://www.firepad.io/

Shameless plug: I worked on a similar tool mdocs [1]. The main difference is that is opensource, it supports authentication and authorization [2] similar to Google Docs. The authorization part allows you to share documents at company level.

It is a 100% client-side application, it uses Firebase as backend and Auth0 for authentication.

[1] https://auth0.github.io/mdocs2

[2] https://dl.dropbox.com/s/w6bmji4t698v8qn/ss-2015-03-25T10-40...

I think history and culture play a big role in this.

Eg: in my country automatic cars are not popular and it not about the price, even in top segments cars people think that automatic cars are bad

I wonder why CNG[1] is not that popular in other countries. It is very cheap, it can be installed on any car (gas and even diesels) and AFAIK it produces less pollution.

"CNG may be found above oil deposits, or may be collected from landfills or wastewater treatment plants where it is known as biogas[2]."

In Argentina most gas stations have Petrol and Diesel and I'd say ~60% of them have also CNG. It is very easy to find a CNG station on cities, but harder on rural areas.

[1]: http://en.wikipedia.org/wiki/Compressed_natural_gas

[2]: http://en.wikipedia.org/wiki/Biogas

Thanks for the clarification, that's what I though but my comment was quite vague

Can't find a better source but it was announced few months ago:

http://www.infoworld.com/article/2838008/javascript/nginx-ha...

Yes, I think is better to put nginx in front to handle this and sooner or later you will need some kind of reverse proxy as soon as your application grows. The reasons might be load balancing or just to map components of your app like "app.com" and "app.com/api" being different applications.

One big difference to note is that nginx link to the local openssl while node binaries embeds an openssl. If there is a bug in openssl I can apt-get update/upgrade and I get the patch very early.

Personally I think nginx is awesome. They are going to support JavaScript soon, but I have done things with LUA and is great too.

Agree, I really like this one http://semantic.gs/

BTW my grand parent is 87 today and is very healthy.

My father told me that my grand parent used to cut Coke with carbonated water when it first appeared in Argentina because of two reasons 1- it was very sweet and the people wasn't used to that. 2- because it was very expensive.

He said that the 750ml bottle was enough for the 4 member family, one glass per person. When the 1L bottle came out, it was a problem they didn't know how to hand out the remaining, so they decide to have another child, my uncle.

> It runs your tests as you type

I write a lot of tests and I've tried this a lot of times (since it can be done with any test framework plus a file watcher on any language) but it doesn't help on my workflow.

The integration with the code editor looks nice as long as it has a way to "jump to the first broken test", and show all the details of the error. I remember when I used to work on c# the test runner of resharper integrated and it was great. My current workflow is, I run the tests in the console and if some test is broken, I search the name of the test across the project to inspect.

Parallel test execution in javascript hasn't worked for me, most of the time I depend on some "state" call it DOM (browser), or call it a test database (node). The fact that I can assume that the runner run one test at the time makes my tests and the before/after code simpler.

This is exactly my though process as a software developer. I work remotely so I dont speak out loud (most of time), but i think it helps too. It is similar to when you have been debugging something for hours and you figure the solution right away when you start explaining the problem to a coworker.

Yes, I've installed a gitlab for my company and I'm extremely happy with it, I feel like I've much more control: authentication, authorization, how our projects are organised, etc. We are currently using both private repos on github and gitlab on aws.

Regarding mercurial, I used it a lot and hosted lot of things on bitbucket 4 years ago, but now I use git a lot more, just because it is what most of the libraries and opensource projects I use are using.

While I agree that Google Code, as it is right now, isn't needed anymore, I believe there is still room for innovation in this space and I wish there were more players than github, pushing the boundaries harder.

As a software developer is a tool that we use all day.

Yes, you can see it, but you can't select it and copy it.

Yes, I use that a lot but something I miss from Windows Explorer is that i can actually copy the path. The widespread suggestion is that you can drag and drop the icon in the title but I prefer the other thing.

I saw "Pet Sematary" when I was ~10 and I regret. I haven't seen the movie again but I remember that as a traumatic episode.

I have seen a lot of movies rated for adult with my daughter but not horror like that. I think every person is different, use the common sense.

Also is well known that segmented sleep was the norm before electricity.

https://en.m.wikipedia.org/wiki/Segmented_sleep

Nice tips, thank you!

I use pssh [1].

  pssh -H h1 -H h2 -P "tail -n 1000 /var/log/x.log"

It is very easy to install on every platform since is on most package managers.

[1]: http://linux.die.net/man/1/pssh

I don't ser bitcoin right now as a tool for savings, maybe for transactions.

Lets say you work from Argentina for a company abroad. You have three options to get paid:

1. Wire transfer, the compay send you dollars or euro and you get pesos at the oficial rate.

2. There is always people trying to pay things outside, you can give him your dollars outside in exchange of dollars inside arg por pesos at the blue rate.

3. Buy bitcoins outside sell inside.

1. You lost 30% exchange rate, you will not be able, to buy dollars back at the oficial rate.

2. Is 3%

3. Is 10%

Since 2 and 3, are not 100% legal, you will have problems buying things since you cant justify your income.

Same with some OTP solutions that works only through SMS, for instance BofA safepass can only send sms to phones in the US.

It is the best use of push notifications I've seen.

It is a big issue, but these facilities are becoming more common. One trick that works for me: put used batteries inside an empty bottle when the bottle is full take that to the facility.

Yes, and it is very hard to show a generic error during sign up.

"There is an error with your data..." WHAT ERROR? I've typed 10 fields.

I think a better approach is to rate limit wrong usernames / emails during sign in.