Viewing profile — int2e

Here's 30 ideas: http://ycombinator.com/ideas.html

Every non-trivial app has vulnerabilities. One indication of a vuln is not "blatant incompetence" I've responsibly reported my fair share of Twitter vulns over the years. In genera…

There are still lots of features I want to add, but any feedback is appreciated! :) There are a few internationalization issues to fix, but the basics work.

Some of the rectangle sizes look wrong. Compare "Walmart Profits" to "OPEC Climate Change Fund". Compare Google to Facebook.

webpagetest actually renders the document and all referenced items. It's more similar to what firebug/yslow will tell you, and very useful for designing a site to load quickly.

Be careful not to confuse uniques with impressions. Assuming 10 impressions per unique, that's still a very respectable CPM of $15.

Perhaps there are some interesting corner-cases where the browser will locally cache the JSON. Time to go play with it...

Yeah, XSSI has been well known for a while. This article's argument against using custom headers is a bit bunk. If you're not properly disabling proxy caching for sensitive data, y…

I think they have value for branding. Because the cost to register an account is just one captcha solution, squatting twitter names seems to becoming more common.

Any thoughts on how I should expand the tool? I can see it going two paths... 1) Add more social network sites and more features such as auto-registering your desired name once it'…

Every* web developer should be familiar with cross-site scripting (XSS) and how to prevent it. http://www.google.com/search?q=xss * If you don't have a login system or any sensitiv…

just received an email letting me know they've deactivated my account: "Microsoft contracted with us, Intrepid Consultants, Inc, to conduct the TechNet Plus Pilot Study program res…

It's definitely a useful trick for only showing certain content to certain users. For example, I wrote a script so you only show Digg buttons to visitors that have been to digg.com…

How about just using hanging gets?

It looks like some newspaper replacements are doing a fine job watching the gov (and the gov's money): http://www.tmz.com/2009/03/01/tmz-story-forces-bank-to-retur...