321 reputation
18
bio website jefflunt.com
location Evanston, IL
age 35
visits member for 3 years, 6 months
seen Dec 8 '12 at 23:03

I'm that guy who fundamentally loves to tinker and build stuff. I code because it's the single greatest creative outlet I've ever discovered, and I can't get enough of it.


Nov
4
comment How can you prevent someone destroying your app if they get into your account on heroku?
You know, after thinking it over for a couple of days, I'm going to take back what I said earlier. I've come to agree with you much more in general. Because of possible problems such as password database theft (even if unlikely) I do support two-factor authentication in all mission-critical software. So, in the case of Heroku, two-factor authentication would protect your app from being destroyed if someone was able to steal, and decrypt the authentication database, because if someone was able to break in and steal your password, they would still need your second factor to do damage.
Nov
2
comment How can you prevent someone destroying your app if they get into your account on heroku?
Recent, very serious social engineering example: krebsonsecurity.com/tag/fortune-100
Nov
2
comment How can you prevent someone destroying your app if they get into your account on heroku?
All the more reason to take password security very seriously. It's great that you're thinking of all the possible ways someone could get in. The other (arguably more likely), scenario is that someone breaks in using social engineering. I.E. if your password security is sufficiently good, then the likelihood that someone will get in with a compromised/brute-force password attack is effectively zero, but that doesn't protect you from employees inadvertently providing information that results in compromised security. After you solve your password problem, move toward educating your employees.
Nov
2
comment How can you prevent someone destroying your app if they get into your account on heroku?
If you're working on a team where multiple people need to have access, does heroku provide key-based authentication, whereby users would each have their own access key which you can revoke?
Nov
2
comment How can you prevent someone destroying your app if they get into your account on heroku?
Well, maybe that's crossing how easy it is to login, with how easy it is to get your password - they're definitely not the same. I agree that two-factor authentication would be very nice. I suppose my point is, password-based authentication is still extremely strong - it just puts the burden of secrecy on the user, whereas two-factor authentication can allow your password to get free, but you would still have the safety net of the second factor. There's no reason that, if you're able to keep your password absolutely private, that it isn't every bit as good.
May
28
comment Tips on hosting a non-web framework based application on a Windows host (i.e. - not IIS, Apache, etc.)?
Is this something you can build on a spare machine in your house, and see what performance bottlenecks you run into there?
May
26
comment What can I do if someone is spoofing my site?
I might also suggest you check on the more business oriented site (also on the StackExchange network), answers.onstartups.com
May
23
comment Getting the filename associated with a sample in the “Downloadable Information” area in Magento
Sweet. Even better!
May
23
comment Getting the filename associated with a sample in the “Downloadable Information” area in Magento
So I modified your answer to include the working code. I don't know if you have to approve it before it shows up, but you definitely got me going in the right direction, and I found the code that does it thanks to your help.
May
23
comment Getting the filename associated with a sample in the “Downloadable Information” area in Magento
Nope, the getURL() function returns the URL (e.g. example.com/samples/01), which (a) doesn't include the filename, and (b) just delegates to your browser to handle the view/playback of the sample appropriately. For example, the URL, if the sample is a PDF, will launch whatever your default PDF viewer is. In the case of .MP3s, for me the URL was launching my default media player, locally on my machine.
May
23
comment Getting the filename associated with a sample in the “Downloadable Information” area in Magento
This got me headed in a good direction, but the best I could do with the methods mentioned above, as well as other ones that I found in the API, was get the base directory for the samples, e.g. /path/to/app/samples, rather than /path/to/samples/1/sample.mp3. I may just have to add this functionality. Luckily (I think), Magento is open source.
May
22
comment Getting the filename associated with a sample in the “Downloadable Information” area in Magento
I'll give this a shot tomorrow and let you know. Looks like the getSampleUrl() and/or getSamplePath() will get me what I need. Thanks!
May
19
comment Previews for audio e-commerce site
This is a really cool solution. I think I'm going to wind up modifying the Magento product page so I can get an embedded player (after thinking it over, that's more akin to the functionality I'm looking for), but you've definitely answered my question. Thanks!