Hacker Newsnew | past | comments | ask | show | jobs | submit | my8bird's commentslogin

sager quad core, 4gig ram, 500 gig hard drive. that was three years ago and my next will be a sager also as the to power/cost ratio is great. with Ubuntu on it things hum beautifully. having the extra cores is great so that I can builds, watchrs, and a movie all running why working.


While I like 2 step authentication I wish Google would get rid of SMS password reset. With this enabled all a person needs is your phone to gain access to your account. Given that police can grab you phone whenever you are stopped this means they can "hack" your account at the same time. Another example could be a cleaning person at a hotel finding your phone. Just two examples off the top of my head. Basically, SMS password reset makes your phone the golden key.

http://support.google.com/accounts/bin/answer.py?hl=en&a...


As long as you have a pin lock on your phone, the cleaning person nor the police will be able to do anything with your phone.


It's not that hard for law enforcement to get your PIN. e.g. http://blog.agilebits.com/2012/03/30/the-abcs-of-xry-not-so-...


What about if the phone can be rooted?


How is that light weight? let's see it has scripts for skeloton projects/models/etc, has it's own orm's, and even ships with its own package manager. that seems like a lot of stuff is you're looking to light weight.


"How is that light weight?"

Look at the description:

"Monorail.js will never force you to install anything not needed for your project. The goal is to use what you need."

Plus, it's definitely lighter than express.


As far as I can tell, this actually uses express.


Ah, I stand corrected. I apologize.

I think if I were to use a node MVC framework built on express, I'd go with Matador: http://obvious.github.com/matador/


Matador actually looks pretty sweet.


[deleted]


The M in MVC has nothing to do with database persistence. That is a wonderful perception that rails and its ilk have given us, for better or worse. You could build a complete system that fully implements MVC without database persistence, or really any persistence at all.


For your enlightenment MVC isn't what you think it means.

http://andrzejonsoftware.blogspot.ca/2011/09/rails-is-not-mv...

Even if you are using the Rails version of the term MVC, as one commenter was keen to point out, it still has nothing to do with having data persistence or not.


I think he meant

    [ u s e r @ma c h i n e E x amp l e ] $ . . / mo n o r a i l . j s i n s t a l l mo o t o o l s


Wow, what a hostile response.


the big issue I see with this system is that the audit ballots are invalid. this means the developer only has to ensure that the audit system works. they can do whatever they want with the rest if the ballots since they can not be audited


I'm glad you raised this question, because I'm sure most people will think that. The fact is, that the system doesn't act any different in the 2 cases (audit and real), in both cases it FIRST prints the encrypted vote (and now the voter can actually see the his vote hanging out of the machine, but he still can't touch it), and now it asks the voter if he would like to verify (audit) or not (real), if he chooses to verify, the machine will print the key to decrypt the encrypted text and then the voter can verify that what was encrypted was really what he voted for. If he chooses not to verify, it will print the cleartext (unencrypted). Notice that for the machine to "fool" the voter it needs to predict when a voter will choose to verify or not in 100% accuracy because if 1 voter finds that what was encrypted wasn't really his choice, then the whole election is a shame and can be closed ignoring all votes.


while this was a good response to their security issue a little heads up would have been good. they broke all of our auto builds and by the time we figured it out the guy who's key was used for the builds was gone on his vacation. luckily, we got ahold of him prior to him turning his phone off.


I keep seeing people post their dislike for "bootstrap" sites so here is one that I think changes the base styling enough to be "not another bootstrap" site.


I wrote timeit for this exact reason. It is based on python package.

https://github.com/my8bird/nodejs-timeit


maybe dropbox should run security checks on uploaded content that goes in the public folder. if they are going to host it they should make sure it's safe.

of course this makes an assumption about why IE flagged Dropbox.


utter failure in mobile safari


is it possible to have things called pure CSS actually be pure CSS. this is definitely a JavaScript library that uses CSS, nothing more


I have to admit, I was also slightly irritated when I actually checked out the repo. The title is deceptive. "Donatello, a JS drawing library" - which is what it is - would probably not rack up as many points. Interesting tool, I hope to check it out sometime, but the OP should have been a little more honest. Just call it what it is.


Its pure CSS in the same way most pure 'HTML5' demos are


The title inside the main file is a little more honest: "A pure CSS vector drawing library" meaning that the vectors created are CSS only (not Canvas).


It produces CSS. It should probably have HTML+CSS export, then it won't need Javascript.


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: