101–110 of 156 posts
I hope Stripe developers didn't write this code. I got the movie for free, jesus ... http://imgur.com/a/hf8FZ - and I didn't get a job after my interview with Stripe earlier this year.
That you posted this comment is a good indicator that Stripe made the right decision not to hire you. It shows a lack of professionalism, judgment, maturity, etc.
The NK hack was probably just a big PR stunt.
Earlier quoted context omitted.
Sony Pictures Entertainment probably no longer has sole control over distribution elsewhere in the world. This close to the original planned release date, they likely have deals in place for nearly every other region, and thus partners to work with to arrange for release. In fact, it's entirely possible that those deals were in place before filming even began, and some money may have changed hands at that time, helpi…
Too bad for them... actually I've debated this type of thing with you before: https://news.ycombinator.com/item?id=5276226
Your position is pretty easily summed up then.
They want a credit card, they want a CVC for a $6 purchase, and they only have a domain-only SSL cert. Sloppy security, people.
How is that "sloppy security"? Honest question.
Stripe works by having pages invoke their "stripe.js" within the host page. The risk of mixing payment processing input into a general site is that anything that can access the DOM can patch "stripe.js" and tap the credit card data. Since this page is very likely to be attacked, that's a big risk here.
The page uses several off-site Javascript files. Attacks through the CDN that distributes "bootstrap.js", for example, might work.
In 2015, payment card requirements are tightening up. Sites which use third party processors like Stripe will probably have to put credit card entry into an iframe which comes directly from the third party processor. This makes the attack surface smaller.
If it's not free, I hope everyone buys it instead of waiting for a torrent. We should support online releases.
You can download this as a DRM-free file with a simple curl command. Most people probably wouldn't bother, however, because Stripe makes it so easy to just watch directly your browser, no need to go through the hassle of downloading anything or needing the hard drive space. This is a great example of content providers finally beating piracy by providing a simpler method of content distribution. I hope more movies com…
Besides other, admittedly far from mainstream movies did this a lot better - "Sleepwalk with me" or last years highly praised "Computer Chess" offered a DRM-free, 1080p download and a streaming option, both without region-lock and for a reasonable price. Still an exception unfortunately.
Earlier quoted context omitted.
>> "For the ones who don't have it available in their country (like me) are left with no other option :(" Come on. Your option is to wait. From the site: "we do hope to see the release of The Interview across the globe"
Eh. It takes more effort to regionally lock something on the Internet than not. Sony makes this sound like they'll go to every effort eventually to release this movie across the globe - doing that would require so much less effort than they're currently expending. When you say "wait" you're asking people to assume Sony will get around to considering them equal members of the Internet society. Or they can just assert…
Earlier quoted context omitted.
How is that "sloppy security"? Honest question.
See " http://pciguru.wordpress.com/2013/06/30/developers-beware-st... . If you accept a CVC or CVC2, the requirements are much stricter, because an attacker who can get hold of a card number with the CVC/CVC2 can buy more expensive items. Stripe works by having pages invoke their "stripe.js" within the host page. The risk of mixing payment processing input into a general site is that anything that can access the DOM…
It looks like it's available on Google Play now: https://play.google.com/store/movies/details/The_Interview?i... and YouTube: https://www.youtube.com/watch?v=Ed2kSuKqfz0
Not available in your country. Well I guess I won't be paying to watch this crappy movie.
It's disappointing it isn't also launching internationally, but I'm optimistic - if this makes lots of money, then it will prove that it makes sense to launch new movies online. Then in the future we may see more movies launch like this, and with more preparation time, hopefully also internationally.