somesay

Too late. Their database is hosted somewhere online and now gone.

Oh, come on. No https. No way to change your credentials (email/password) later. No way to delete your account. Weeks start on Sunday, only English time format. Haven't tested further.

Though BitTorrent always includes uploading, too. That's the really risky part.

Manipulating websites that way is likely illegal in a lot of countries.

There was some similar discussion in Germany last year. The major ISP announced to throttle monthly traffic above 70 GB in the future. Funnily enough they told that 70 GB are enough for every user while telling everyone that Internet traffic has a high increase every year.

Fact is, that their backbones aren't on any limit at all. The real bottleneck of the Internet connection is actually the last mile, the subscriber line. And that cable is exclusive per customer, so no shared medium and throttling wouldn't improve anything than making it possible to earn more money by selling premium contracts. To be fair, this is different for Internet over the TV cable which is indeed a shared medium. Still, throttling on the basis of a monthly limit doesn't make sense since it is reset for the beginning of every month.

Oh, and also that ISP was the only one not interested in doing a direct peering with Google's local CDNs for free. In France Google is actually paying for getting YouTube better routed.

The important thing is that these ISPs just try to make money on both ends of the cable while actually arguing with the power of the opponents. "Hey enduser, here you'll get YouTube! - Hey Google, wanna have more satisfied users?" And that they are often actively lying for achieving that.

:D

So why do I need that app at all if I could just go to work in time? Why should you come late if you specifically want to be punctual?

Go to Twitter settings and remove the access for that app. Bypassed. Uninstall or flight mode might be another idea.

Seriously, all those todo/productivity/alarm apps that try control you are just bullshit. At least as a techie you could circumvent them all. In the end, it's all about your habit and your will and going to bed earlier etc. and the use of that app is, if any, only some creative reminder. It's important to get that the app itself doesn't solve anything for you.

Also note that if there is any unjustified punishment (in this case e.g. a huge traffic jam, canceled trains, ...) or just misbehavior of the app or the hardware itself (e.g. no location data) the effect might be rather counter-productive.

reCaptcha was always a free captcha service based on one simple idea: one part is the classical one, hopefully only readable by humans, the other one actually supports Google on doing OCR-like jobs. Previously it were undetected words from Google Books scans, now they are mostly using house numbers.

More interesting is the other change: reCaptcha now tries to detects real users and then only generates a simple number captcha for the classical part. Likely they are using your Google Account cookie or Google Analytics for that.

I'm still not sure what exactly your plan is. Just moving your landing/marketing page or the whole ecommerce frontend?

WordPress is nice if you need a blog or at least a CMS for luser or if you need some framework to build on. Is that the case?

Maybe it's a useful abstraction (e.g. uptime, maintenance, development) and maybe it's good that someone without developer knowledge could work on it, but you told it would need a lot of integration work? Sounds like you should create an API then. If you need an API anyway, than this actually would be a great way to test it in a real environment. Otherwise likely unneeded effort.

To speak about WordPress plugins, please mind, that most of them are rather simple. Hook some button code and JavaScript somewhere and offer some simple configuration backend UI. Deep integration for any features the user might see often needs custom CSS work, editing the site template or even coding within the plugin. At least that's my experience with my personal requirements. Or to say it in different words: Integrating Facebook buttons isn't that hard anyway, but a professional newsletter would be a lot of work anyway. Also you could likely reuse the plugin code and transform it into Rails code.

Am I the only one who would prefer "cursor: pointer" on these buttons?

I rather think this is an America phenomenon where they actually banned words from public media like I never seen it in other developed countries. [1] Nobody here has a problem with vile language as long as it isn't within a children's program. It would be strange in professional ambience like news or classic radio, but that's all. If there is a beeping sound, then just because they are dubbing an English movie or anonymize some names or trying to look more interesting by self-censoring their bullshit program.

Seriously, words like "shit" or "penis" aren't offensive at all these days. Other are just collegial and unprofessional. For someone from Europe this really looks like needless uptightness. It's like a kid isn't even allowed to see her naked mother.

Also, from some educative point of view, I think it's likely the worst solution to simply conceal them from your kids. As a parent you could easily explain their meaning, that it might be rude for some etc. Actually, the important point is to be reflective when learning those words. Those rather simple words are not like showing hardcode porn to children. I don't wanna say that you couldn't be verbally offensive, but that's not the point here.

[1] https://en.wikipedia.org/wiki/Seven_dirty_words

Typical DRM/crypto problem. As soon as one party is out of your control (e.g. client on end-user device) you already lost. Even on the iPhone you could do a jailbreak. You could only make things more difficult, in worst case you would have to open the device and directly access the RAM or something.

Indeed you could personalizes the keys for every user. So you could detect a leaked private key that is widely used and proceed against. Still that wouldn't hinder personal further use of that private key, e.g. for exporting data (similar to breaking DRM).

Why exactly is that bad? Decompiling is a common tool, not only on Android. And however, Android notices that the app is signed differently, so it's still secure.

So, you don't think that just enough people down-voted this bullshit thread? Maybe you are the one wrong on that topic. Maybe you should do your homework.

You don't wanna get it, right? I just have to trail you in the train or in a coffee or something. Every flat surface you'll touch will have you fingerprint on ... a 5 minute YouTube tutorial is all I have to follow then ... And no, the iPhone is not more secure than any other scanner used before. And as soon as your fingerprints are leaked, there is no way for you to get new fingers, right? So it's okay for replacing the PIN unlock dialog, but that's all.

I can only speak for the old Boxcryptor version which is actually a slightly feature limited, proprietary implementation of encfs. TrueCrypt uses a container, encfs instead encrypts on a per file basis. So a small change is more easily to sync, at least when the sync service doesn't use binary diffs.

Correct, Windows XP works fine with the latest Service Packs etc. Android supports it since version 2.x.

That's actually the reason why people who are blocking new transmitters are somehow dumb. Less transmitters means higher peaks for people near one. Still you have to be cautious what studies you believe.

As you said, the hierarchical system is somehow broken. You are just paying to get a cert that is trusted by the browser and therefore looks fine for the user. Also you get some insurance thing and maybe a nice button to place in your web shop. That's all. The main point is using some encryption without throwing a warning message and gain some level of security.

Also, the "potential source of vulnerability" has nothing to do with how big you are.

SSL is as save as the CA list used by the browser is. It really doesn't matter which CA you actually choose then.

To be honest, I don't get your comment. Neither does GetSSL use a EV cert nor is the usage of EV certs limited to resellers.

Just another guy who talks about SSL without knowing the basics. I don't know what annoys me more: Someone how completely ignores cryptology and its security features or these guys who have such a dangerously low knowledge that they spread bullshit the whole day.

In fact, you don't have to trust StartSSL at all. They securely give you a valid cert while you don't have to reveal your private key at any time. Your private key is either generated manually on your sever by yourself or within the browser, on client side.

The important points are: StartSSL is trusted by all modern browsers and systems and they are cheap. There is nothing more to care about. In fact, _any_ trusted CA could be attacked and generate certs for man-in-the-middle attacks.

So, stop your stupid prejudice here. Actually, a CA from the Netherlands got known for being corrupted some years ago.

I never talked about the legal part. Of course it is legal since their terms might likely allow this.

I just don't see it that wrong like you do. I wonder, if there is an argumentation to really call them stupid. And I don't even think this is relevant referring to their image.

As you said, this only affects people who aren't either informed about computer topics, don't know they had a Yahoo mail at all or who simply reregister their old mail address.

Still, we can't blame Yahoo for that, right? We can't blame them for peoples Internet incompetence. We can't blame them for the limited scope most service developers have.

As I user, I have to update my email address I use and other services should delete inactive accounts, too. Or at least notify inactive users. I know, especially the latter option is more or less inexistent. But although think of all the data that users have no access to, because of lost passwords etc. I rather see that deleted.

Also, if Yahoo is doing things right, they would only delete accounts with no activity for a serious amount of time, e.g. no access, not even POP3 since over 2 years.

Well, the Internet is dynamic isn't it? Other services are already freeing inactive accounts, email or e.g. Twitter handles, and think of changing mail service owners and domain changes, too. And why should a service hold an email forever, just because someone registered it and maybe was never even using it?

Isn't the real problem that users and services put too much trust in plain email addresses? Especially when accounts are outdated? Crypto might help here someday in the future.

We could even say: Isn't it your fault that you didn't keep track on which services you used that email? Or that you lost your password? Why blame Yahoo for that?

Exactly. Get one cert per domain including one subdomain for free, get as much as you can handle for $60 per 2 years. Compatible with every modern OS (so no old Windows XP). That offer can't really beat that.

Sounds handy, but at some point breaks the concept of not saving the main password on any platform. Still not that bad, since app specific passwords only are in use if you also have 2-factor-login.

Of course, they don't ask for a specific password.

"Encrypt synced passwords with your Google credentials" is impossible in times of app specific passwords, right?

In fact, Google is the only major company who uses TLS for mail transfers: http://i.i.cbsi.com/cnwk.1d/i/tim2/2013/06/21/Webmailencrypt...

If NSA has to ask Google to get into their datacenter, it's already as bad as if Google gives them the data (or is forced to do so).

Also some companies, e.g. CloudFare has it documented somewhere, also use TLS 1.2 in their internal network.