11–20 of 32 posts
Perhaps supporting ssl and/or tls across their infrastructure isn't a priority. Why is that a "fail", as you so succinctly put it? In addition, I'd like to ask the entire world to stop using 'fail' as a noun. It's lazy and incorrect.
Perhaps supporting ssl and/or tls across their infrastructure isn't a priority. Why is that a "fail", as you so succinctly put it? In addition, I'd like to ask the entire world to stop using 'fail' as a noun. It's lazy and incorrect.
I guess you missed the big story today about Firesheep: http://news.ycombinator.com/item?id=1827928
The costs must be weighed against the benefits. Calling FB out as a "fail" is failing to understand all of the issues.
Earlier quoted context omitted.
I guess you missed the big story today about Firesheep: http://news.ycombinator.com/item?id=1827928
That doesn't invalidate my point. Supporting SSL is certainly more costly when you're serving content on the scale of FB. The costs must be weighed against the benefits. Calling FB out as a "fail" is failing to understand all of the issues.
"all of our users use HTTPS to secure their email between their browsers and Google, all the time. In order to do this we had to deploy no additional machines and no special hardware. On our production frontend machines, SSL/TLS accounts for less than 1% of the CPU load, less than 10KB of memory per connection and less than 2% of network overhead. Many people believe that SSL takes a lot of CPU time and we hope the above numbers (public for the first time) will help to dispel that."
This particular entry, however, uses the worn and now ridiculous "fail" meme five different times. Fail.
Earlier quoted context omitted.
This. I was trying to explain to my co-workers that this issue has existed for as long as the web has existed and they didn't really understand what I was talking about. Not until they saw a demonstration video did they believe that it was as bad as I was telling them it was. It is hilarious as a security guy watching "new" exploits come out and watching them go into serious mode since this is a new exploit and it is…
> Plenty of places to find hosted VPN services Care to recommend one? I've had a few unsatisfactory experiences (terrible bandwidth, unreliable servers, etc.) and would love a good recommendation.
that dovetails nicely with other posts today on HN about how one can be a great programmer without knowing and understanding the systems fundamentals (ie. C, low level networking...) . Such programmers and their companies are fast in building cute web apps, yet fail to understand/model and as result correctly engineer what happens outside of the web app box supplied by the framework (for example like in this case, ho…
that dovetails nicely with other posts today on HN about how one can be a great programmer without knowing and understanding the systems fundamentals (ie. C, low level networking...) . Such programmers and their companies are fast in building cute web apps, yet fail to understand/model and as result correctly engineer what happens outside of the web app box supplied by the framework (for example like in this case, ho…
But it's not exactly low level though. I mean, any web developer is surely constantly exposed to this in their day-2-day work - e.g just from using HttpFox. How can you build a web site and not know how a session is managed over HTTP?
that dovetails nicely with other posts today on HN about how one can be a great programmer without knowing and understanding the systems fundamentals (ie. C, low level networking...) . Such programmers and their companies are fast in building cute web apps, yet fail to understand/model and as result correctly engineer what happens outside of the web app box supplied by the framework (for example like in this case, ho…