616 karma · joined August 11, 2010
It's certainly a reasonable position that self signed certs should not have such a scary warning, but if you install the lolroot root certificate as a trusted certificate, you will now be completely vulnerable to MITM attacks.
Anyone can pretend to be, for example, your bank, by generating a lolroot self signed certificate for your banks domain name. You've said you trust them, your browser won't put up any warning.
I'm sure most people realize this but in case you didn't, don't install it.
Does look awesome though.
To continue, please type the following phrase in the text box:
I UNDERSTAND THAT ENABLING THIS FEATURE WILL CAUSE HACKERS TO STEAL ALL MY MONEY
Type the phrase: _______________________________________________________
[Ok] [Cancel]
Sure, this will skip over some tricky bits of getting started with programming, just as a MIDI keyboard can make it easier to make violin sounds without having to learn all that pesky fingering.
However, as with playing the violin, those bits aren't really the hard part to learn; the easiest to use keyboard in the world won't make you a composer and flow based programming is not going to make you a programmer.
There may be higher levels of violence, but two incidents does not show that in my opinion.
Doesn't steganography mitigate this issue if used properly?
Ultimately this is not about technology, it's about economics. Surely the restaurant should raise their prices until not enough people want to book 2 months in advance to make bots and make this an issue. Or PAX should raise their prices so they don't sell out in 23 minutes but still sell all their tickets before the show. Or either business should increase their capacity. Or perhaps they are capitalising on the fact that they are oversubscribed as some kind of marketing device. Either way, any time there is a limited supply of something people are going to figure out ways to get some, and if the limited supply is available on the web, people who understand the web will have an advantage.
That being said, I can think of some cases where this service would be really useful, such as one of tests on live systems for example.
Different UI toolkits make doing certain things hard, certain things easy, and some things damn near impossible without large effort on the part of the developer.
So when the parent commenter says "Nobody on OS X wants a Qt app", I'd argue that yes, although you can make a "well designed QT app", it's much harder to make a "well designed OS X app" with QT.
Why will it be less likely to be a well designed OS X app? Because it will be different to a Cocoa app made with interface builder, in subtle and sometimes not so subtle ways. Sure you can code around these and make adjustments, but the level of effort and investment to get to the stage of if you'd just built it with a more suited tool for the job (Cocoa / Interface Builder on OS X) is quite high.
This is why there is some truth the the admittedly generalised statement made above that "Nobody on OS X wants a Qt app".
"Remind me to renew my insurance next monday at lunch time" takes a lot less time that manually entering a date, time and task. 5 seconds as opposed to 30 seconds to a minute.
And whilst cooking, setting a timer quickly without having to navigate through menus with greasy hands is great.
It did take quite a while to actually remember to use it.
Whilst this looks useful, it's questionable if it's ethical and furthermore it may even be illegal in certain juristrictions with strong privacy laws.
It may currently be for innocent purposes (check URLs, thumbnails etc as you said). However the fact is that they can make these requests at all show that the encryption is not end-to-end, otherwise they wouldn't know the URL to make a request to at all! The request isn't being made from the client, the IP shows it comes from Microsoft's servers.
So, you're talking about voice, but this is proof that the textual chat connection that should be secure end-to-end is decrypted and routed through Microsoft's servers.
I spoke to them at their hack day in London at the beginning of April, and they said they expected to solve this in 1-3 months. So hopefully within the next 6 weeks if we're optimistic!
int isPopupUseful()
{
return FALSE; // 96% accurate
}If you're not confident enough that you can write code well yet, then practice. Build side projects. Contribute to open source. Although a CS degree is informative, useful and enjoyable, it's absolutely not required currently.