elliotanderson

5 ms·

1.
That Old Certificate Expired and Started an Outage. This Is What Happened Next(shopify.engineering)
9 points by elliotanderson 5y ago|0 comments
2.
Jack Dorsey steps down as Twitter chief executive(theguardian.com)
6 points by elliotanderson 5y ago|0 comments
3.
by elliotanderson 9y ago
We migrated from serving production JS assets off our .io domain to .com after we found a number of corporates/schools in Ireland blocking the domain at the TLD level. Since then, the number of inexplicable error reports has droppe
4.
by elliotanderson 10y ago
You can use the new AWS-EC2 auth backend in Vault 0.6 https://www.vaultproject.io/docs/auth/aws-ec2.html
5.
by elliotanderson 10y ago
You should have a look at Deis v2. Built on Kubernetes and has push to deploy.
6.
by elliotanderson 11y ago
You might be interested in ember-paper and ember-cli-materialize if you are looking at Material + Ember.js - https://github.com/miguelcobain/ember-paper - https://github.com/truenorth/ember-cli-mat
7.
by elliotanderson 11y ago
> I've seen proofs of concept that trivially lift the secrets from Google Authenticator. Android specific?
8.
by elliotanderson 12y ago
Looks like the certificate and encrypted private key has been found in "Visual Discovery.exe" - http://pastebin.com/N42Qfm5p (credit to @paul_pearce) More context at https://twitter.com/supersat
9.
by elliotanderson 12y ago
If not DNS, then via Server Name Indication (SNI) http://en.wikipedia.org/wiki/Server_Name_Indication
10.
by elliotanderson 12y ago
I bought your Math & Physics book a few months ago. Only got a chapter or two in thanks to time constraints, but I really enjoyed the approach. Hopefully I can finish it in the coming months. Cheers!
11.
by elliotanderson 12y ago
$70 is hefty?
12.
by elliotanderson 12y ago
... Because nothing communicates over HTTP except for crawlers, bots and malware droppers...
13.
by elliotanderson 12y ago
Not a Google employee - but the linked file looks more like a simplified DSL for analysts.
14.
by elliotanderson 12y ago
He ran into trademark issues with http://www.plastiq.com . Same payment space, and they beat him to filing a trademark by a year (by his account he was waiting to secure the domain name first, which cost him that year). Ended up
15.
by elliotanderson 12y ago
For websites there is a $19 listing fee and a 10% success fee.
16.
by elliotanderson 12y ago
Filing a patent application costs around $180-$280 [1], not including the other Patent Office fees for Examination/Maintenance. Add onto that the legal fees for marking up the claims, charged out in the $XXX/hr range and you are l
17.
by elliotanderson 12y ago
Based on what evidence?
18.
by elliotanderson 13y ago
Chris took over the role as GitHub's CEO from Tom at the end of January. Given the timeline in the TechCrunch article, these events unfolded under the previous CEO's tenure so it would be appropriate to reinvestigate the claims in
19.
by elliotanderson 13y ago
Bit of a risk, considering that impersonating a federal employee is a felony.
20.
by elliotanderson 13y ago
It's because you can have "good" NPE's. Take ARM Holdings for example, they do not manufacture their own chips but rather licenses their designs to other semiconductor manufacturers.
21.
by elliotanderson 13y ago
Out of curiosity, what would you consider "revolutionary"?
22.
by elliotanderson 13y ago
Plenty of third parties already filling that space - I don't think Apple sees the need to move in that direction.
23.
by elliotanderson 13y ago
Bruce's article on staying secure from the NSA[1] talks about using an air gapped computer to avoid being compromised via the network. If he hadn't been keeping his keys on such a machine previously - recent disclosures may have c
24.
by elliotanderson 13y ago
I don't see how a company being involved with this "initiative" affects the core concept - it's a net benefit for both API consumer and producer in moving to a subscribe/push model. Less requests, less load, closer
25.
by elliotanderson 13y ago
Try viewing meta.discourse.org without Javascript on then look under the hood - it's a pretty easy problem to solve with some <noscript> tags. Other approaches use PhantomJS to create a "rendered" copy that is accessibl
26.
by elliotanderson 13y ago
Kinda scary, considering this is the developers website (hosted on the same server as zamfoo.com) right now: http://meccahost.net
27.
by elliotanderson 13y ago
How would serving everything through SSL and "enforcing" workstation locks on people mitigate XSS and CSRF attack vectors? Requiring additional privilege elevation drastically reduces this.
28.
by elliotanderson 13y ago
If you are after something similar to run on a TV without having to buy an TV + Apple TV + iOS Device - the guys over at Librato [1] have a post about how they turned a $50 Android mini PC into their office dashboard 1. http://blog.librato
29.
by elliotanderson 13y ago
I've had a tank on my wish list since I first saw it on Kickstarter. Sadly, we only have one distributor in Australia and they mark the price up 110% for just a basic tank setup. There's an untapped market over here, only problem is in the
30.
by elliotanderson 14y ago
I've done something similar with a Symfony2 application I'm working on, but with a tweak. The app is basically one big REST endpoint, but it does some header sniffing to handle requests with a "text/html" Content-Type. If it encounters one,

More ›