mje__

Or sometimes 10s, or never, or partial results, or dropped connections, or...

The network is not reliable.

assert() is a macro that is usually disabled in production builds. Input validation is obviously most important in production, so assert() should never be used for validation.

That's not true at all. Lightroom can add photos at their current location, or import them to a location of your choice. There's no "hidden directory".

Lightroom supports sidecar (xml) changes, or syncing metadata to the files. Your choice.

All that dithering! I don't miss that at all.

The smallest EBS snapshot you can create is 1GB

I'm not sure what you mean?

Yeah, me too. I opened up a bunch of tabs from the front page (as is my usual habit here, reddit, etc), and by the time I got to this it had changed to Gmail and I was totally fooled. I've gotta be more careful!

Fascinating article. I also really enjoyed the presentation - the mix of writing, video and images worked well together. This is the first time I've seen the "BBC Magazine", and the experience is great.

I'm really impressed with the amount of effort that has gone into this study, but those charts are just awful. Those line charts should be bar charts IMHO, I'm immediately scanning the chart left-to-right before I realise that the x-axis are actually categories

Agreed. The last thing you want is to have to debug those weird "it worked on my desktop" issues that come from having a really weirdly configured system

Sure, but Prime Music is also only a few weeks old

Agreed. It's also a question of complexity. Xen (for example) has a significantly smaller attack surface than the linux kernel because it just has less stuff to do

I generally understand the motivation of these companies, but damn I really hate that they all build IDEs. I wish they would focus on command-line tools or libraries and integration with (say) eclipse for those that really want an IDE. Having a different half-assed IDE for each hardware platform makes for a frustrating day at work

Build automation for embedded systems is such a PITA. My previous job we had a build step that used AutoHotKey to click through the manufacturers 'proprietary tools'. You can imagine how reliable that was

It will cost you if you have a malicious uploader. I'm pretty sure S3 is not free just because you had objects in there for less than 24h.

S3 supports pre-signed urls for exactly this use-case.

EDIT: Nope, my bad. Doesn't look like S3 supports pre-signed urls for multipart uploads

If you write anything that communicates over a network (e.g. anything using HTTP), you need to know at least some of this stuff, otherwise you're not going to be able to explain why (for example) your service call latencies have a big spike around 200ms.

Wow, as someone who uses rubygems all day and is not in "US and EU only", I'm glad you're not involved in this project.

It seems one of the biggest costs of fiber is installation; i.e. trenching. Why is it not hung from poles? It must be much cheaper and quicker, surely?

Also useful for authenticated downloads - don't tie up an app thread, but have your app redirect to a pre-signed url

Nope: http://www.quora.com/Amazon/How-and-why-did-Amazon-get-into-...

I found a similar thing happening in Yongsan - Seoul's electronics market. I visited recently after a 5-year absence and was saddened to see so many shuttered stores.

Isn't this because the US wouldn't export crypto software that supported keys > 40 bits to Korea in the 90s, forcing them to develop their own stronger algorithms?

Anyway, it's so bad that my (technophobe) wife refuses to shop online anymore because she is forced to use IE (and vastly prefers to use Chrome)

Is Github still running Ruby 1.8? vmg mentioned at last year's Rubyfuza they had "one of the largest 1.8 deployments in the world".

Without doubt, this is the most important lesson I've learned in my professional career.

It doesn't mitigate untrusted software, but an interesting approach to tamper resistance can be found in Infineon SLE78 security controllers (for smart cards, etc). They run dual CPUs out-of-sync and compare results after each instruction.

http://www.infineon.com/cms/en/product/chip-card-and-securit...

"In the end, Zdenek had a single-server CouchDB installation on the order of hundreds of megabytes of metadata stored."

I think the title is a little inflammatory, no?

Yeah, it "literally" kills me every time

I would disagree with your assertion in the case of PV guests in Xen - they have an extremely small attack surface. The hypervisor may be "on the front line", but is a far simpler beast than the kernel.

Certainly Xen has its fair share of vulnerabilities, but vastly fewer than the kernel.

Did anyone else notice the stock price? From $35 in March to $138 today; that's pretty impressive growth

SIM's use a derived key - which means that getting your hands on that key would only affect that specific SIM, and generally the Km (master key) exists only on an HSM.

There's not much point in the intelligence services going after these keys, if they can just put a box in the operator's data center and capture unencrypted traffic

+1; I worked on SIMs in the past, and all our customers were using 3DES. They also all required OTA messages to be signed, so I think the chances of half a billion being accurate is crazy talk