Benferhat

I might even incorporate the request rate into a bot detection algo, maybe have it trigger temporary hellbans.

I've used GAE since its inception, never even heard of anything like this happening. Any updates?

I believe he's talking about Diablo 2 (the timeframe works, and the game is notorious for duping), in which Blizzard provides shady third party companies with items, which are then sold to users.

If I'm not logged into a site a that I regularly use, I'm probably not logged into my email, either. In order to log into my favorite site with Passwordless, I have to log into my email as well. With my password. One login for the price of two, and I'm still using a password.

Each plugin is a potential confounder.

They seem to have done a small early beta over the summer, I guess they got in early.

I'd like to hear arguments for why it would be unfair competition for Google to put spammy ad agencies out of business.

Thanks for the heads up, I missed it due to adblock. I made the link non-clickable and added a warning.

I found a demo[0] via this old forum thread from August[1].

Obviously there are privacy concerns. That being said, this looks like a boon for anyone interested in bot detection, as you can periodically challenge your users' humanity without getting too much in their way. Nice one, Google.

From the thread:

Implemented it successfully for a website. I have to say, it works great!

it also checks if html pages are changed at runtime and how many times you "reload" the page where the captcha is. When it thinks you are a bot a captcha popups, when entered, it got checked on googles servers if it's right and fills in a hidden input. When the user submits the form, the filled in captcha coded, again, will be verifed. [sic]

[0] http://www.google.com/recaptcha/api2/demo

[1] Edit: don't go to this url without adblock (see comment below). http://forum.ragezone com/f144/googles-captcha-recaptcha-1023607/

McKenna is more famous for his excessive use of psychedelics.

Terence McKenna: "There are only about 1,000 of these GBMs a year, so it's a rare disease. I never won anything before - why now?" Like everybody else, he suspected a lifetime of exotic drug use may have been to blame. [0]

[0] http://archive.wired.com/wired/archive/8.05/mckenna_pr.html

The price of bitcoins has already dropped 10% since the news.

> In the checkout flow it is best practice to offer as many payment options available because it increases the likelihood of a successful conversion.

Are you sure about that? Too many choices sometimes leads to no choice at all. [0]

[0] http://www.ted.com/talks/barry_schwartz_on_the_paradox_of_ch...

"My bitcoins are stored in our safe deposit box, and my son and daughter are tech savvy. I think they're safe enough. I'm comfortable with my legacy."

You love the phrase "regulatory capture", don't you? :)

This Event Has Been Deleted

mirror, please?

How are users protected from malicious exit nodes, assuming they're visiting sites unprotected by SSL?

"Commercial" means the site contains ads

Your idea started out good. Sometimes I want to research a product before I go looking for a merchant. Blocking all sites that contain ads? Just use adblock if you're that fanatical.

tl;dr: LED bulbs get too hot, lowering their life expectancy. Manufacturers need to include cheap thermistor circuits, which automatically dim the light to a safe thermal equilibrium.

add &yt:cc=on to the YouTube URL [0] to enable subtitles.

[0] https://www.youtube.com/watch?v=gHGDN9-oFJE&yt:cc=on

Firefox is more performant on my Ubuntu box than Chromium, even for things like Gmail and Google Docs.

I'm not even asking for automatic alternate routing. How about letting me switch to a better route manually, without exiting navigation?

The new Google Maps on Android is terrible, as well. It's missing features, most notable of which is the ability to search for alternate routes when you hit traffic.

Why throttle them? Let them hit the caps and pay for more data.

Did you mean: recursion

Try something like this, off the top of my head: http://pastebin.com/srYteiXQ

Sure, sometimes their usernames are their primary keys. Even if the actual primary key is arbitrary, the primary identity is still exposed to the user, in that they know what their user account is, and which email addresses are linked to it.

> But it's one that's never exposed to the actual user.

Why not expose it to the user? Because then they'll want to change it? Are you talking about browser fingerprinting?

We already expose this on the user/email level, where users can link and log in with as many email addresses as they like, under one account (identifier).

I blame ruby for being a great way to go for people that don't know a single thing about programming.

> GAE in October?

AppEngine's deprecation policy:

7.2 Deprecation Policy.

Google will announce if we intend to discontinue or make backwards incompatible changes to this API or Service. We will use commercially reasonable efforts to continue to operate that Service without these changes until the later of: (i) one year after the announcement or (ii) April 20, 2015, unless (as Google determines in its reasonable good faith judgment):

# required by law or third party relationship (including if there is a change in applicable law or relationship), or

# doing so could create a security risk or substantial economic or material technical burden.

[0] https://developers.google.com/appengine/terms scroll down to 7.2

sessionStorage won't work across tabs. You have to encrypt sensitive data; I use securecookie [0].

[0] http://godoc.org/github.com/gorilla/securecookie (Go)