mrsaint

It's PHP 5.7.0-dev right now. You can download and compile the development branch yourself: https://wiki.php.net/phpng

I added a quick guide how to setup Cloud DNS for your domain.

https://www.zeitgeist.se/2014/05/01/google-cloud-dns-step-by...

Costs and reliability - very good points. Regarding reliability, couldn't we say the same about BDXL technology? Certified discs for BDXL have a 50 to 100 years media longevity, or so it's said. Question is, how accurate are these numbers? The first rewritable 100GB BDXL discs hit the market in 2011. Would three years real world experience be sufficient to extrapolate the findings to the next 97 years?

And let's not forget holographic technology. The first enterprise hardware is geared towards 2015, where one recordable optical disc reaches storage capacities of at least 300GB. Both Sony and Panasonic are working on that. The future is plenty... plenty of gigs that is. If Amazon was indeed using optical disks for their cloud storage, then this could only mean even lower prices for us in a very foreseeable future.

When Google replaced other search engines like Altavista back in the last century, one thing that made it so special was that it was fully automated and didn't seem to favor anyone. Nowadays, post-Panda, things seem to have become a lot more murky, and I am not sure whom to thank for that (overzealous SEO folks perhaps who had tried to game Google's algorithm?). I mean seriously, have you ever received one of those "Please remove the link to our website from your website because the link hurts us" requests? At the same time as this article pointed out the new rules don't seem to apply equally, making things even more murky. Curious where we're heading with that...

I'd love to offer ChaCha20 server-side, but I am currently using the default package of OpenSSL from Debian Wheezy which doesn't support the cipher. Are there already official OpenSSL builds available with ChaCha20 enabled, or does it still require running the patch from the Chromium team? If available, it'd be nice if someone could backport it.

It's safe to say that GitHub won't depend on the partnership with Ada... private repositories were offered for free to select individuals/women - that doesn't sound like a big deal to me, at least. If anyone is looking for private repos for free, they could get them @ https://bitbucket.org/.

Why, I think he raised a very important point. HW is not one person. People have different backgrounds and different needs. Sometimes, C macros are the the best you have. Just because they're generally to be avoided doesn't mean they should never be used.

Well, given for how long Dual_EC_DRBG has been under suspicion, one cannot congratulate NIST for a proactive stance on security. For what it's worth, just go to this page on the NIST homepage:

http://csrc.nist.gov/groups/ST/toolkit/examples.html

And it still says:

  Random Number Generation
  [...]

  - Recommendation for Random Number Generation Using Deterministic Random Bit Generators
  [...]

  - Dual_EC_DRBG (link)
  [...]
  
  CryptoToolkit Webmaster, Disclaimer Notice & Privacy Policy
  NIST is an Agency of the U.S. Department of Commerce
  Last updated: Jan 30, 2006

Time for an update or what?

Yes, it's very popular with JS to make code more modular. Remember that, although JavaScript is a object-oriented language, it isn't a class-based language - it's a prototype-based language.

The best way to grasp the idea is by following various code examples (and how and why they were implemented that way). Also, I found Douglas Crockford's video presentations on JS _extremely_ helpful. I have a list of them here:

https://www.zeitgeist.se/2014/03/26/list-of-helpful-javascri...

Wow, this is seriously cool! No doubt it will mean more switching back and for between Firebug and Chrome DevTools. Or am I the last one still using Firebug?

bl.spamcannibal.org is notorious for a higher error rate (false positives). It'd be crazy if a popular mail service provider like Yahoo categorized incoming mail based on results from Spam Cannibal. If I added them to my MTA, I'd rank them fairly slow to diminish the effect of their false positives. See here: http://dnsbl.inps.de/analyse.cgi?type=monthly&lang=en

And see here how to add them to your checks (and rank them accordingly) if you're using Postfix: http://www.postfix.org/POSTSCREEN_README.html

Any reason KVM is not included in the analysis? I suppose it'd be also open to this attack?

Why? Because it cannot just die yet! One of my most frequently used Windows app is in Delphi. Total Commander. ;)

Hey, it comes with a cooling fan even! ;)

So it has USB 2.0 + 3.0 and eSATA. According to this chart, r/w performance seems quite good (and certainly above USB 2.0): http://core0.staticworld.net/images/article/2014/04/wrt1900a...

Is it just me or does the website have issues with character encoding? I am seeing things like "Bottom Up â€".

My thoughts exactly. Sounds like a PR piece for Metascan.

- "downloaded almost 12,000 apps" - I know there are a lot of apps out there, and a lot of crappy ones, but finding 12,000 apps to download from "third party stores" not Google Play or Amazon... well, it's a lot indeed.

- "which flagged 32% of the apps as suspicious" - meaning what exactly? To me any app that queries my phone ID looks suspicious. Most apps from Google play do.

- "the majority of the apps it highlighted were marked as malware" and "many files were picked up because they had been classified as adware" - they are quite specific with the number of suspicious apps, but not very specific with apps that are supposed to be malware. If they tested 12,000 apps, of which 3800 (~32%) were suspicious, then more than 1900 (>50%, the majority) of them were supposedly malware. That's roughly 16%, which doesn't sound like a number all that impressive anymore. Regarding the adware claim - well, a big percentage of apps available on Google Play is adware. If that alone qualifies for suspicious...

Too bad the SSL VPN concentrator from this article didn't apply a HMAC key that an attacker would have needed to know before he'd even been able to initiate a TLS handshake to probe the Heartbleed vulnerability.

You can do this with OpenVPN using the --tls-auth option. See: https://community.openvpn.net/openvpn/wiki/Hardening

Very true. It's quite a difference if you talk about absolute numbers or about rates of growth.

It looks like there have been already quite a few discussions among Wikipedia editors about this article (it's quite interesting to follow the comments chronologically).

The main criticism I see is that the suggested article sounded like advertisement with links that only serve PR.

This could have been avoided had more web servers properly implemented OCSP stabling (http://tools.ietf.org/html/rfc4366#section-3.6). That way it would have been the hoster of the website rather than the issuing CA bearing the resource cost in providing the revocation status of the cert.

"It looks like you've encountered an error: Origin is not supported. Destination is not supported."

Too bad. Seems like non-US locations are not supported yet.

Where did I speak of entitlement? I merely commented on Mr. Avery's ways of dealing with unwanted accounts - those who no longer fit into his business plan. Saying that this stealth move was done to avoid users from gaming his system is ridiculous, because gaming the system would have been against the terms to begin with, and thus subject to account cancellation.

There is no reason for him not to notify existing account holders. Heck, he could have done so after the decision was made, i.e. when it would have been too late for anyone to "game" his system. It's not that Adzerk doesn't continue emailing their "Zerkers" for other matters - in November I was notified of their "new homepage with new colors and logo."

Is that how you think of your customer base? Gaming you? Aren't artificial impressions against the terms anyhow?

Hmmm, I just tried to login to Adzerk using my account that I registered back in March 2013. It doesn't work anymore. I can still enter my username/password, but nothing happens. I can even reset the password.

Perhaps it's because when I signed up, ad serving was claimed to be free for up to 100 million impressions per month. That changed: http://adzerk.com/blog/2014/01/an-update-about-new-free-adze...

"Certainly! If you signed up for an account before January 6th 2014 and were actively serving ads, you can still serve as many impressions as you want for free up to 100 million impressions per month. However, to contact Adzerk support after your 30-day trial ends, you must purchase a support app in the Marketplace."

So I guess they disabled my account because I wasn't actively serving ads? It would have been nice if I had received some kind of notification at least.

Neat! So, who is going to write Softice for Node.js next? ;)

Anything Javascript code from Crockford I highly recommend. Well structured and without "hacks" that could cause confusion.

Groceries is pretty much the last one thing I buy in brick and mortar stores. Please don't take this away from me. ;)

The article mentions, "Forrester predicts 10% of U.S. sales will be via e-commerce by 2017" -- I cannot believe it's only 10%!

Captchas were meant to keep spammers at bay. Unfortunately, that's no longer the case. Thanks to "cloud technology" like DeathByCaptcha - that is, people in countries where labor is cheap solving captchas all day - spammers have no problem getting through reCaptcha-protected sites and forums to do their mischief.

As a result, reCaptcha & co tend to be more of an annoyance to honest visitors than to spammers.

yeah, I am surprised by that, too. Haven't heard about this one until now... and I have had my fair share with various VPN implementations, from OpenVPN to Strongswan.