Bitcoin Forum
May 25, 2024, 11:47:45 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 [49] 50 51 52 53 54 55 56 57 »
961  Other / Meta / Re: No more signature images on: November 09, 2011, 06:05:48 PM
Like I said before, I think it's a better policy to assume that people don't want images.
From a pure usability and UX standpoint, the best policy would be to assume that people DO want images, perhaps clickable thumbnails that show the full image in a lightbox.

On the other hand, this is a privately owned website, and the owners are free to do as they please. Smiley

As for dealing with security issues (cookie stuffing and CSRF), simply host all images locally and have stringent checks to validate them as clean image files.  That's a no-brainer for me.

EDIT:  IMO, sig images are a distraction to useful discussion, but embedded images in posts can be very helpful to discussion.
962  Other / Beginners & Help / Re: Please help me crack my 7z encrypted wallet on: November 09, 2011, 05:53:16 PM
You might look at this thread (https://bitcointalk.org/index.php?topic=50519.0), especially post #5.
963  Other / Beginners & Help / Re: Whitelist Requests (Want out of here?) on: November 09, 2011, 05:51:10 PM
Can you please whitelist me so I can send personal messages? I'm having a problem with a mining pool and the only contact I have for the admin is via this forum.
What mining pool?
964  Economy / Marketplace / Re: Start your own Bitcoin Exchange! on: November 09, 2011, 04:50:26 PM
Not too worried about the code. But an audit after release would be great.
No, but I'm anxious to see it! Smiley  Not a big deal though, I can wait.
965  Economy / Speculation / Re: $/BTC Time Series (Probability) Analysis on: November 09, 2011, 04:43:43 PM
Tradehill and MtGox are not the only exchanges out there.
966  Bitcoin / Mining software (miners) / Re: jsoclbm : Browser based GPU miner (open source) on: November 09, 2011, 03:25:37 AM
This would make it super simple to setup a mining farm.

I assume there is multi-GPU support.
I hardly think Javascript & WebCL would be more efficient than C and OpenCL.
967  Bitcoin / Bitcoin Discussion / Re: like it or not, the SR is only killer application of bitcoin since it was born, on: November 09, 2011, 03:14:49 AM
Most of what casascius said would be legal (in most places).  And I think he has just touched on the tip of the iceberg.
968  Economy / Marketplace / Re: (ANN) I will form a mining company to be traded on (GLBSE) if there is interest! on: November 09, 2011, 03:08:11 AM
What is the status of this proposal?  It sounds interesting...
969  Other / Beginners & Help / Re: I have 0.5 BTC left over, does anyone have an idea to grow it to 1 BTC? on: November 09, 2011, 03:01:41 AM
Release a fork of cgminer which supports RPC calls to modify parameters and get stats for use in headless hashing farms and I will give you a 20 BTC bounty.  That's a 4000% increase in your net wealth.

If you can't do that well the general idea applies.  Do something which someone else considers valuable. 

Out of curiosity, what parameters would you want to modify? (all of them?) and what stats would you want to retrieve?
970  Economy / Marketplace / Re: Start your own Bitcoin Exchange! on: November 09, 2011, 02:55:07 AM
I'd enjoy auditing the code once it is released.  Or if you want me to start auditing it now, before open sourcing it, I'd be happy to do so.
971  Bitcoin / Pools / Re: Which is the best pool for mining? - A guide for choosing the right pool on: November 09, 2011, 02:37:27 AM
Why I use the pool that I use: (all points SPECIFIC TO ME, YMMV)
Out of curiosity, what pool do you use?
972  Bitcoin / Pools / Re: [1014 GH/s 0% fee SMPPS] ArsBitcoin mining pool! Come join us! on: November 09, 2011, 02:31:39 AM
See if you can reach it through a proxy.  I can reach it fine.
973  Bitcoin / Mining / Re: Are pools more efficient? on: November 08, 2011, 10:03:09 PM
Okay, I just wanted to make sure I understood how it works.  Thanks.
974  Bitcoin / Mining / Re: Are pools more efficient? on: November 08, 2011, 09:54:37 PM
Finding Bitcoin blocks is a lottery.
I'm still in learning mode here.

So this means that technically, I could turn on gen=1 in bitcoin.conf so the client tries to generate bitcoins, and if I were extremely lucky, there's a tiny chance I could solve a block 5 minutes later, right?
975  Other / Meta / Re: No more signature images on: November 08, 2011, 09:38:01 PM
Yes, hosting the images is not worth the trouble. Definitely don't do that.
But there are many ways you can prevent the linking of dynamic images, and thus prevent cookie stuffing.
That is impossible. The only way you can prevent people from linking dynamic images without local hosting is by whitelisting image upload sites where you trust that it is impossible to upload dynamic images.
In my mind, a forum is more useful when people can read through a guide with pictures without having to click on each image to display it individually.  But I guess not everyone can look past the fractions-of-a-second lost when scrolling past an off-topic picture.  Roll Eyes

Agreed.  The cookie stuffing exploit is real enough, though. It would be easy enough to add some Javascript to detect whether or not the resource loaded in the img src url is actually an image, and if not, then all users who have Javascript enabled would get a huge warning (and mods could easily see them and delete).

eg:
http://stackoverflow.com/questions/3499941/javascript-check-if-img-src-is-valid
http://stackoverflow.com/questions/3744266/how-can-i-test-if-a-url-is-a-valid-image-in-javascript

All that does is warn the user after the fact. By then, it's too late.
If the attack is cookie stuffing, then you clear your browser cookies-- problem solved.  If the attack is CSRF, then you're screwed, BUT, if there is an application/site that is vulnerable to CSRF, that's their problem, not this forum's problem.
976  Other / Meta / Re: No more signature images on: November 08, 2011, 08:11:55 PM
Fair enough.
977  Other / Off-topic / Re: 1GH/s, 20w, $500 — Butterflylabs, is it a scam? on: November 08, 2011, 07:39:55 PM
Well I disagree less is more.  
I actually agree with you 100% -- less is more.  But it still has to be well-designed and intuitive.  Google and Apple both accomplish this nicely.

Edit: Having a search box in the *header* that changes depending on context and doesn't notify the user about it is not intuitive.  Being in the header implies that it is site-wide, and nowhere is the user clued in that their search was magically limited (when they didn't expect it).

These problems would all be fixed if there was a notice on the search results: 

* "Searching in thread X, search entire board"
* "Searching in forum X, search entire board"

clicking the link would run the search again, without the limit.

978  Other / Meta / Re: No more signature images on: November 08, 2011, 07:37:30 PM
Animated avatars are the worst.   Also, I love how strong of an opinion everyone has at the moment when this topic has come up so many times yet I don't think I have ever seen this much activity about it.
pot, kettle.
979  Other / Meta / Re: No more signature images on: November 08, 2011, 07:36:50 PM
Ultimately one will need to ban avatars also.  Avatar will be the standard promotional spot if others aren't available.

BTW.  I am auctioning off my Avatar for 2 BTC for 30 days.  A steal if you notice how many posts I make.   Hurry with inability to use banners this space will go fast.

Note: I am only semi-kidding.
You're kidding, but that has been going on at webmaster/seo forums for years.
980  Other / Off-topic / Re: 1GH/s, 20w, $500 — Butterflylabs, is it a scam? on: November 08, 2011, 07:34:40 PM
Yeah, the search function only works for whatever subsection you are in, so if it's a thread, it searches the thread, or if you are on a sub-board, it'll only search that.

*puts on UX design hat*

1. Not very discoverable
2. Hinders searching whole site (you have to go back to the index to search the whole site?)
3. Many users may not realize their search had been limited by thread/forum and give up searching

Not too impressive, I must say.

Search should be a drop down with two search boxes, one to search everywhere, and a context-sensitive search box labeled "search thread" or "search forum" depending on where you are.

</offtopic>
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 [49] 50 51 52 53 54 55 56 57 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!