<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">

 <title>David Lynch</title>
 <link href="http://davidlynch.org/atom.xml" rel="self"/>
 <link href="http://davidlynch.org/"/>
 <updated>2013-04-30T00:08:14-05:00</updated>
 <id>http://davidlynch.org/</id>
 <author>
   <name>David Lynch</name>
   <email>kemayo@gmail.com</email>
 </author>

 
 <entry>
   <title>Hosting Switch</title>
   <link href="http://davidlynch.org/blog/2013/04/hosting-switch/"/>
   <updated>2013-04-05T00:05:15-05:00</updated>
   <id>http://davidlynch.org/blog/2013/04/hosting-switch</id>
   <content type="html">&lt;p&gt;Recently I switched my personal hosting from &lt;a href=&quot;http://dreamhost.com/&quot;&gt;Dreamhost&lt;/a&gt; to &lt;a href=&quot;http://www.webfaction.com?affiliate=kemayo&quot; title=&quot;I get a referral bonus if you click this&quot;&gt;WebFaction&lt;/a&gt;. I'd been butting up against the resource limits on Dreamhost's cheap plan for ages, and an annoying multi-day outage was the last straw.&lt;/p&gt;

&lt;p&gt;The outage was actually pretty interesting, in its way. I discovered that all sites served from a particular user account were having their host processes instantly killed. Okay, I assumed that I was being hit by some crazy-aggressive spider, and I'd have to go throttle something. Then I tried to &lt;code&gt;ssh&lt;/code&gt; in, and discovered that my login shell got insta-killed. Problem.&lt;/p&gt;

&lt;p&gt;Eventually, via their web panel, I migrated all the sites on that user account to a different user account, and thus discovered that there was no unusual load at all. The process killer had just gone mad, and was killing any process owned by that user, without any reason. Dreamhost did eventually restore access to that account, but it took something like three days.&lt;/p&gt;

&lt;p&gt;In that time I did a bit of research about alternatives! &lt;a href=&quot;http://www.webfaction.com?affiliate=kemayo&quot; title=&quot;I get a referral bonus if you click this&quot;&gt;WebFaction&lt;/a&gt; came highly recommended from some of my coworkers and had a 60 day money back guarantee, so I felt they were worth a shot. They've turned out to work very well.&lt;/p&gt;

&lt;p&gt;What I get out of this is:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Less resource constraints. For one thing... CPU and memory consumed by the server-wide Apache/MySQL/Postgres instances don't count against your plan limits.&lt;/li&gt;
&lt;li&gt;Less heavily-loaded servers. &lt;a href=&quot;http://gustavonarea.net/blog/posts/server-load-dreamhost-vs-webfaction/&quot; title=&quot;Despite being five years old...&quot;&gt;This article&lt;/a&gt; is accurate, from my own tests.&lt;/li&gt;
&lt;li&gt;Focus on long-running apps. Dreamhost was very much a PHP host. You &lt;em&gt;could&lt;/em&gt; run other stuff on it, but it clearly wasn't what they intended.&lt;/li&gt;
&lt;li&gt;Memcache installed on all servers. Thank &lt;code&gt;$deity&lt;/code&gt;.&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;I've lost:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;A bit of hand-holding. Dreamhost was pretty good at doing things for you with a checkbox, like redirecting &lt;code&gt;www&lt;/code&gt; to the subdomainless domain if you wanted. With webfaction I had to write my own little www-remover app for it. (Which was simple, but still.)&lt;/li&gt;
&lt;li&gt;Sites hosted under multiple user accounts. I always liked that as an extra little burst of security.&lt;/li&gt;
&lt;li&gt;(Related to that last point...) a collection of cracker backdoor scripts that had been installed via some compromised WordPress themes and eventually been neutered by me.&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;All in all, I think I'd still recommend Dreamhost to relatively non-technical people. If all you want is to host a generic PHP package, WebFaction is going to be confusing.&lt;/p&gt;

&lt;p&gt;One final note: it having been a long time since I last switched hosting plans (I'd been on Dreamhost since 2005), I was slightly amused to notice that it took me longer to bzip up a multi-gig database dump than it probably would have to just scp the uncompressed file across.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Startup Knowledge Ruined A Movie For Me</title>
   <link href="http://davidlynch.org/blog/2013/03/startup-knowledge-ruined-a-movie-for-me/"/>
   <updated>2013-03-30T17:04:17-05:00</updated>
   <id>http://davidlynch.org/blog/2013/03/startup-knowledge-ruined-a-movie-for-me</id>
   <content type="html">&lt;p&gt;I was at the gym the other day, and a movie called &lt;a href=&quot;http://en.wikipedia.org/wiki/The_Darkest_Hour_%28film%29&quot;&gt;The Darkest Hour&lt;/a&gt; came on. Now, this turns out to be a movie which has general consensus as being Not Good (12% on Rotten Tomatoes, etc). However, the thing which first threw me out of my suspension of disbelief was an early scene to do with startup economics.&lt;/p&gt;

&lt;p&gt;I now have to recap the first 15 minutes of the film. Sorry. Our protagonists were set up as being some sort of web/mobile developers. They had developed a site/app that let travelers find fun nightlife in new cities, and meet up with one another. They were flying into Moscow, because they had developed said app up-front with the intent of selling it off to some Big Russian Business. When they land they mention looking at the site, and seeing 50 active users in Moscow that day. Showing up at their meeting, it turns out that their partner has sold them out, and is presenting their Big Idea to the Russians, with them cut out of the picture. Notably, he's not stealing the actual &lt;em&gt;app&lt;/em&gt; from them, just the idea. They are now incredibly discouraged, feel he has won, and make comments about how they guess their app has to shut down.&lt;/p&gt;

&lt;p&gt;That's the point where it lost me. These people have (a) an working application, which (b) has a noticeable number of active users despite their only having just launched it. Their ex-partner has an idea for a rip-off of a site with first-mover advantage. Assuming that they have any idea at all about how they want to monetize this service, they're in a clearly good position. Either they perform said monetization themselves, or they find a new business partner to sell to. (If they don't have any idea how to monetize, of course, there's a problem. But if that's the case I'm not sure how they hoped to sell to the Russians.)&lt;/p&gt;

&lt;p&gt;So. 15 minutes in, and I'm forced to either break suspension of disbelief or conclude that our protagonists are idiots. I don't think the writers wanted either of these outcomes.&lt;/p&gt;

&lt;p&gt;I'm used to losing immersion due to computer-related mistakes. But I think this is the first time it's happened because of a more general tech-industry issue.&lt;/p&gt;

&lt;p&gt;My operating theory is that this is a case of screenwriters assuming that every industry is like screenwriting. Presumably if you've written a script on spec, and you show up at a studio to try to sell it, and it turns out that your backstabbing partner is already there selling a script based on the same idea... you're kind of screwed.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Maphilight for jQuery 1.9.0</title>
   <link href="http://davidlynch.org/blog/2013/01/maphilight-for-jquery-1_9_0/"/>
   <updated>2013-01-21T15:49:37-06:00</updated>
   <id>http://davidlynch.org/blog/2013/01/maphilight-for-jquery-1_9_0</id>
   <content type="html">&lt;p&gt;jQuery 1.9 was &lt;a href=&quot;http://blog.jquery.com/2013/01/15/jquery-1-9-final-jquery-2-0-beta-migrate-final-released/&quot;&gt;released&lt;/a&gt; recently, and removed &lt;a href=&quot;http://jquery.com/upgrade-guide/1.9/&quot;&gt;some things&lt;/a&gt; that have long been labeled as deprecated. This broke maphilight slightly, since it was still doing a few checks on &lt;code&gt;$.browser&lt;/code&gt;.&lt;/p&gt;

&lt;p&gt;I've just fixed that. As always, &lt;a href=&quot;https://github.com/kemayo/maphilight&quot;&gt;the latest version is available on github&lt;/a&gt;.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Switching from Android to iPhone</title>
   <link href="http://davidlynch.org/blog/2012/09/iphone-android-switch/"/>
   <updated>2012-09-22T01:26:30-05:00</updated>
   <id>http://davidlynch.org/blog/2012/09/iphone-android-switch</id>
   <content type="html">&lt;p&gt;Back in March-ish of 2011 I &lt;a href=&quot;http://davidlynch.org/blog/2011/06/random-recommendation-virgin-mobile/&quot;&gt;got an Android phone&lt;/a&gt;. It was an Optimus V, which means it was cheap (about $150, no carrier subsidy) and limited, but was available with an actual reasonably-priced no-contract plan ($25/month). Since I can't bring myself to pay the crazy rates you Americans seem to pay your phone carriers, this was a good deal.&lt;/p&gt;

&lt;p&gt;In July of this year I got myself an iPhone 4S. Virgin started offering them, but I wound up going with Straight Talk instead, since Virgin only offered the lowest storage capacity and wouldn't let you activate a phone you didn't buy from them. I'm paying a little more for the service, but it's still reasonable ($45/month, unlimited everything).&lt;/p&gt;

&lt;p&gt;I feel like talking about the experience of switching. What I liked about Android, what I like about the iPhone. I know some people who are really &lt;em&gt;invested&lt;/em&gt; in their phone OS, but I am not one of those. I think I can be relatively unbiased here.&lt;/p&gt;

&lt;p&gt;Still, this is all utterly subjective. It's what I like and didn't like, and what matters to me.&lt;/p&gt;

&lt;h3&gt;Hardware, with an asterisk&lt;/h3&gt;

&lt;p&gt;A big caveat: I had a cheap Android. It had poor performance, low memory, almost no onboard storage space, a so-so screen, a not-overly-large battery, and all in a flimsy plastic case. I've not used any of the higher-end Android devices. By all reviews it was fantastic &lt;em&gt;for the price&lt;/em&gt;, but still... I'm not going to dwell greatly on the hardware differences.&lt;/p&gt;

&lt;p&gt;I do think it's fair to note that you can't get that sort of experience with an iPhone. The worst iPhone out there is, at least, that way because it's 5 years old.&lt;/p&gt;

&lt;p&gt;So, up-front, the device quality of the iPhone is a lot higher. Better performance, lots of storage, good battery life, &lt;em&gt;ridiculously good&lt;/em&gt; screen, vastly better camera. Also, as a personal-taste matter, I think the iPhone has &lt;em&gt;much&lt;/em&gt; nicer industrial design, but your mileage may vary.&lt;/p&gt;

&lt;p&gt;Mind you, I sort of liked knowing that my phone was cheap. It might have been flimsy plastic, but I didn't have to worry about dropping it the same way I do this $800 lump of crackable-glass.&lt;/p&gt;

&lt;h3&gt;Now, the stuff which I think is fairer to compare: software differences!&lt;/h3&gt;

&lt;p&gt;I rooted my Android and ran &lt;a href=&quot;https://github.com/inferiorhumanorgans/android_device_lge_thunderc_common/wiki/Binary&quot;&gt;a custom ROM&lt;/a&gt;. I like that I could do that. I &lt;em&gt;don't&lt;/em&gt; like that it was the only way I had of getting a sort of up to date version of the OS. At the time I switched, Gingerbread was still the most-recent Android version available for the Optimus V, even with custom ROMs. So I like knowing that, for the next few years, I'm guaranteed to get updates promptly and without having to fiddle around with warranty-voiding matters.&lt;/p&gt;

&lt;p&gt;iOS and Android feel about equally flexible to me. Technically this is false, since Android has a &lt;em&gt;lot&lt;/em&gt; more flexibility, but for my purposes they're equivalent. Rooting your android and running a custom ROM feels about the same as jailbreaking your iPhone. It's true that I can't easily switch to a different keyboard layout &lt;em&gt;without&lt;/em&gt; jailbreaking... but I stuck with the default keyboard on Android anyway, and I &lt;em&gt;like&lt;/em&gt; the iOS keyboard.&lt;/p&gt;

&lt;p&gt;I liked the account manager on Android. Setting up my iPhone involved entering passwords repeatedly, whereas on Android I just had to enter them up-front and apps would ask permission. This is improving a &lt;em&gt;little&lt;/em&gt; with Twitter and Facebook integration, but my Google credentials were the real killer.&lt;/p&gt;

&lt;p&gt;I miss the Google integration. GMail and Google Voice are &lt;em&gt;so much better&lt;/em&gt; on Android. Google Maps on Android was a vast improvement over the Google Maps app on iPhone. The new Apple Maps app looks promising, and finally picks up parity on the turn-by-turn navigation, but may also have some teething issues to work out.&lt;/p&gt;

&lt;p&gt;I like knowing that if an app is mentioned, it'll be available for me to use. On Android, a lot of apps were restricted and not flagged as available for my device. This is sort of a &quot;cheap Android&quot; issue, but it came up enough that I want to call it out separately.&lt;/p&gt;

&lt;p&gt;I like that installing apps on the iPhone reliably works. &lt;em&gt;Fuck&lt;/em&gt; &quot;package file invalid&quot; errors. I got those all the time on Android, and as far as I can tell they happened because there was insufficient room on a partition to uncompress a downloaded package file. I would call this another &quot;cheap Android&quot; issue, but Google's utter failure to write a Market app that could notice the problem and provide a helpful error message or workaround just leaves me bitter. This error, on its own, was a major driver in getting me to upgrade my phone... and in persuading me that moving away from the OS that had this as a persistent issue was worth a shot.&lt;/p&gt;

&lt;p&gt;I kind of miss Intents. Being able to set default apps was useful; the iPhone locks you into things like Mail, Maps, Photos, and Safari. They're perfectly servicable apps, mind you, I'd just like knowing that if I discovered something vastly better I could seamlessly switch.&lt;/p&gt;

&lt;p&gt;I like Siri. I find I mostly use her for the &quot;remind me to do X when I get home&quot;, or &quot;add Y to my shopping list&quot; features, rather than the search-related stuff. I could probably get an app to do the same on Android, of course.&lt;/p&gt;

&lt;p&gt;My shopping list being shared with my wife over iCloud as a built-in feature is awesome. I had an app for that on Android, but it's something I had to buy. That said, my having to visit the iCloud &lt;em&gt;website&lt;/em&gt; to set up this sharing is ridiculous, and I &lt;em&gt;bet&lt;/em&gt; almost no non-technical users have ever noticed it.&lt;/p&gt;

&lt;p&gt;I'm a fan of the iPhone's lock-screen camera mode. You can start taking pictures without having to unlock the device, which I never saw an equivalent of on Android. My 3 year old daughter uses it to take pictures of me sleeping if I didn't put my phone away the night before. :P&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;http://kellielynch.org&quot;&gt;My wife&lt;/a&gt; switched as well, and asked her if there was anything she had to add. She says she likes &quot;knowing that things will just work&quot;. I'd say it's a bit of a cliched point, but then I remember what she went through while trying to make a bluetooth keyboard work reliably on Android. Another example would be plugging into car stereos: the iPhone works easily, since almost everything has support for it, while the Android functioned as an external USB hard drive of MP3s... which is rather more awkward. Syncing music with your iPhone is also far, far easier than syncing music with an Android device, if only because there's a clear default &quot;this is how you do it&quot; state.&lt;/p&gt;

&lt;h3&gt;No, there is too much. Let me sum up.&lt;/h3&gt;

&lt;p&gt;Android:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;good: accounts, Google apps, changing default apps, &quot;freedom&quot;&lt;/li&gt;
&lt;li&gt;bad: experience depends vastly on the exact handset you own, long-standing Market bugs, upgrade schedule is atrocious&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;iPhone:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;good: app availability, Siri, retina screen, iCloud, no bad devices, reliable upgrades, &quot;it just works&quot;&lt;/li&gt;
&lt;li&gt;bad: Maps not up to Google's standards yet&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;I'd say that I'm happy with my iPhone. Next time I want to get a new device I'll still consider an Android. I gather that a Nexus is the way to get iPhone-equivalent upgrade support, so I'll certainly look at that. Still, unless something on Android looks like &lt;a href=&quot;http://www.smbc-comics.com/index.php?db=comics&amp;amp;id=2628&quot;&gt;more than just a quantum leap ahead&lt;/a&gt;, I'd imagine I'll be sticking with the iPhone.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>I am not this hotel's customer</title>
   <link href="http://davidlynch.org/blog/2012/09/hotel-customers/"/>
   <updated>2012-09-04T23:26:28-05:00</updated>
   <id>http://davidlynch.org/blog/2012/09/hotel-customers</id>
   <content type="html">&lt;p&gt;I'm on vacation at the moment, in Chicago, and my experience of staying in a &lt;a href=&quot;http://www3.hilton.com/en/hotels/illinois/hilton-chicago-CHICHHH/index.html&quot;&gt;hotel&lt;/a&gt; here has caused a fairly predictable reaction in me. It has made me realize: &lt;em&gt;I am not the customer here&lt;/em&gt;. Or, to be more precise, I do not represent the primary demographic this hotel considers its customers to come from.&lt;/p&gt;

&lt;p&gt;First, a few observations:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;In-room wifi is not free. (This is really the big one.)&lt;/li&gt;
&lt;li&gt;The hotel maintains a few restaurants/bars which sell really over-priced and under-alcoholed drinks.&lt;/li&gt;
&lt;li&gt;The hotel maintains a convention space. It's been hosting things most nights I've been here.&lt;/li&gt;
&lt;/ol&gt;


&lt;p&gt;From this I conclude that the hotel has geared its offerings to appeal to people who aren't paying for their own room. People with an expense account. If my employer was covering my travel costs here, I'd be fine with charging wifi to my room, and adding on meals/drinks regardless of whether they're reasonably priced.&lt;/p&gt;

&lt;p&gt;The customer is a business that can afford to send employees out to travel for some reason. Thus the purchasing decision will be made based on factors that &lt;em&gt;I&lt;/em&gt; don't care about, like whether there's meeting spaces, or how close it is to some convention. In particular, the customer &lt;em&gt;isn't&lt;/em&gt; the person who'll be staying at the hotel, or even who'll be directly paying for anything involved with the hotel.&lt;/p&gt;

&lt;p&gt;Interestingly, if I go to an objectively &lt;em&gt;worse&lt;/em&gt; hotel, say a Motel 6, I &lt;em&gt;am&lt;/em&gt; the customer. I'm a probably cost-conscious consumer who is picking between similar options, and since I'm also the person who'll be using the service they have an incentive to directly appeal to my own irritations. Free wifi, free breakfasts, etc.&lt;/p&gt;

&lt;p&gt;Note: it's not really the money that matters to me, it's the sensation of being nickel-and-dimed. I bought a room, and you're not giving me an amenity that the cheapest motel will throw in for free? Really? That's why I don't think the explanation is that the hotel expects its visitors to be people well off enough to not care about the extra fees. Even if the money's no object, the attitude is a pain.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Losing Weight</title>
   <link href="http://davidlynch.org/blog/2012/01/losing-weight/"/>
   <updated>2012-01-14T17:49:33-06:00</updated>
   <id>http://davidlynch.org/blog/2012/01/losing-weight</id>
   <content type="html">&lt;p&gt;This is a slight departure from my normal choice of topics, I'll admit.&lt;/p&gt;

&lt;p&gt;Last year I decided that I wasn't happy about my weight. I'd been slowly gaining weight for the last few years, as a fairly predictable consequence of a sedentary lifestyle and liking for food. I topped out at 240 pounds, which left me rather... &lt;a href=&quot;/blog/images/2012/01/chunky.jpg&quot;&gt;chunky&lt;/a&gt;. Realising that I hadn't seen a picture of myself I felt happy about for some time wasn't fun.&lt;/p&gt;

&lt;p&gt;Despite all the social features built into the apps I've been using, and my relatively active twitter use, I believe this is the first time I've mentioned anything about this to other people online. So now you know!&lt;/p&gt;

&lt;p&gt;In September I started out by counting calories, using &lt;a href=&quot;http://loseit.com/&quot; title=&quot;Convenient screenshot from the Lose It! website&quot;&gt;Lose It!&lt;/a&gt;. I tried a few such apps, but that was the one that felt like the best fit for me, giving me easy data entry and a convenient &quot;given your height/weight, eat X calories to lose Y lbs per week&quot; which updated itself as I updated my weight.&lt;/p&gt;

&lt;p&gt;Why counting calories? I like data, and I like how tracking data tricks you into changing your behavior. The simple act of having to write down everything I ate made me conscious of where my calorie intake was coming from, and I thus made changes in my diet to avoid having to write down something horrible.&lt;/p&gt;

&lt;p&gt;Note that I didn't really start eating &lt;em&gt;better&lt;/em&gt;... my diet is almost exactly what it was before, I'm just eating less of it. I particularly didn't try following any sort of fad diet (low carb, shangri-la, paleo, whatever).&lt;/p&gt;

&lt;p&gt;This worked out quite well. After one month I'd lost 13 pounds, which was encouraging. So at the start of October I joined a gym with my wife, who talked me into it because she wanted some company while she worked out.&lt;/p&gt;

&lt;p&gt;I mostly used the gym for running, with minor amounts of weights. For my whole life I've been someone who couldn't run for more than a minute or two, even at times when I've otherwise been relatively fit. But again an app helped me out; in this case the &lt;a href=&quot;http://sites.google.com/site/c25kapp/&quot;&gt;couch to 5k&lt;/a&gt; app. It managed to provide a sequence of running workouts that took me from running 90 seconds at a time to running for a solid half-hour.&lt;/p&gt;

&lt;p&gt;This probably doesn't sound like a lot to many of you, but I find it incredibly weird to know that I can run for a half hour at a stretch. That is seriously at odds with my self-image. In a good sort of way, admittedly.&lt;/p&gt;

&lt;p&gt;How has it gone since then?&lt;/p&gt;

&lt;p&gt;&lt;img src=&quot;/blog/images/2012/01/weight-loss-graph.png&quot; alt=&quot;Graph of weight loss from September 2011 to January 2012&quot; /&gt;&lt;/p&gt;

&lt;p&gt;Pretty well! December held steady because I spent almost the entire month out of town, eating more at holiday parties, with very few opportunities to exercise. But that plateau has ended now I'm home again, which is encouraging.&lt;/p&gt;

&lt;p&gt;As you might note from that graph, I set myself a fairly arbitrary goal of 200 pounds, on the theory that after I lost 40 pounds I would stop and evaluate myself and see how I wanted to proceed from there. I'm getting quite close to that now, and I'm &lt;a href=&quot;/blog/images/2012/01/jenga.jpg&quot; title=&quot;This is a very unfair comparison shot, but you can see the change in the face at least...&quot;&gt;happier about how I look&lt;/a&gt;, but have pretty much decided to set another goal of 180 pounds and then again stop to see how I feel. Given how it's gone so far I'm optimistic that I'll get there before too long. :D&lt;/p&gt;

&lt;p&gt;It turns out that the secret to losing weight is diet and exercise. Who knew, right?&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Vulnerable</title>
   <link href="http://davidlynch.org/blog/2011/12/vulnerable/"/>
   <updated>2011-12-09T00:15:41-06:00</updated>
   <id>http://davidlynch.org/blog/2011/12/vulnerable</id>
   <content type="html">&lt;p&gt;One of my sites got hacked. How?&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;My wife tried out a number of WordPress themes while setting up her blog a year or two ago.&lt;/li&gt;
&lt;li&gt;One of them contained something called timthumb.php, which &lt;a href=&quot;http://blog.sucuri.net/2011/08/timthumb-php-security-vulnerability-just-the-tip-of-the-iceberg.html&quot;&gt;just this August was found to have a great big security vulnerability&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;Someone exploited this vulnerability, probably by &lt;a href=&quot;http://www.planetmike.com/2011/09/09/timthumb-php-vulnerability-scans/&quot;&gt;scanning for every possible theme that contained it&lt;/a&gt; and put a cracker console in the cache directory of that theme.&lt;/li&gt;
&lt;li&gt;They used this console to find and edit every .htaccess on that user account to include a some malicious code. (This was several sites, because I was lazy.)&lt;/li&gt;
&lt;li&gt;It redirected to a quite nasty URL whenever a referrer from a longish list of search engines was seen.&lt;/li&gt;
&lt;/ol&gt;


&lt;p&gt;So that's not terribly nice. I take some small comfort in knowing that &lt;a href=&quot;http://blog.sucuri.net/2011/10/timthumb-php-mass-infection-aftermath-part-i.html&quot;&gt;at least I have a lot of company&lt;/a&gt;. Also, I feel validated in &lt;a href=&quot;http://davidlynch.org/blog/2011/10/jekyll/&quot;&gt;moving off WordPress&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;The cracker console was actually quite interesting. If you're curious, you can &lt;a href=&quot;https://gist.github.com/1450516&quot;&gt;see it on this gist, slightly expanded for readability&lt;/a&gt; (or &lt;a href=&quot;http://fc03.deviantart.net/fs71/f/2011/342/8/a/haxxor_by_kemayo-d4iki5x.png&quot;&gt;just a screenshot&lt;/a&gt;).&lt;/p&gt;

&lt;p&gt;It was obfuscated by being a big string that ran through &lt;code&gt;preg_replace&lt;/code&gt; using the &lt;code&gt;e&lt;/code&gt; flag, which executes the result. Yes, this is a genuinely &lt;em&gt;insane&lt;/em&gt; feature. That turned some unicode-escaped characters at the beginning into &lt;code&gt;eval(gzinflate(base64_decode('&lt;/code&gt;, which revealed the rest of the huge string to be a base64 encoded gzipped blob of source code.&lt;/p&gt;

&lt;p&gt;The lesson I'm taking from this is: security is hard to enforce when themes that non-technical people are expected to use can contain executable code. Or even technical people... I wouldn't have caught that if I'd been looking for a WordPress theme.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Google Reader... Plus?</title>
   <link href="http://davidlynch.org/blog/2011/11/google-reader-plus/"/>
   <updated>2011-11-01T01:05:44-05:00</updated>
   <id>http://davidlynch.org/blog/2011/11/google-reader-plus</id>
   <content type="html">&lt;p&gt;Google &lt;a href=&quot;http://googlereader.blogspot.com/2011/10/new-in-reader-fresh-design-and-google.html&quot;&gt;released their Google Reader revamp&lt;/a&gt;. Certainly prettier, though I'm not entirely convinced right now by the increased vertical space used by the list view.&lt;/p&gt;

&lt;p&gt;Puzzling oversight is not importing my existing Reader friends into a Google Plus circle. Seems like a really obvious thing to do, and yet they're giving everyone a chance to decide to jump platforms instead of following a painless migration path.&lt;/p&gt;

&lt;p&gt;I suppose that Google is in a privacy bind here. Google Plus has that nice, easy option to post things that are visible to &quot;your circles&quot;... so creating a new circle means they're exposing private information. But not creating a new circle means excluding existing relationships from their new network. Tricky.&lt;/p&gt;

&lt;p&gt;Anyway, the rather painful migration path actually provided is:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Go to the &lt;a href=&quot;http://www.google.com/reader/settings?display=import&quot;&gt;import/export&lt;/a&gt; page on Google Reader&lt;/li&gt;
&lt;li&gt;Export the &quot;List of people that you follow&quot;&lt;/li&gt;
&lt;li&gt;Read JSON enough to extract identifying characteristics and try to track these people down (importantly, it doesn't include email addresses)&lt;/li&gt;
&lt;/ol&gt;


&lt;p&gt;I rather doubt this will be widely employed.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Raking Jekyll</title>
   <link href="http://davidlynch.org/blog/2011/10/raking-jekyll/"/>
   <updated>2011-10-27T01:11:43-05:00</updated>
   <id>http://davidlynch.org/blog/2011/10/raking-jekyll</id>
   <content type="html">&lt;p&gt;I've never really touched &lt;code&gt;rake&lt;/code&gt; before, but since &lt;a href=&quot;http://davidlynch.org/blog/2011/10/jekyll/&quot;&gt;switching to Jekyll&lt;/a&gt; I'm finding that it's becoming an essential part of my workflow. In the limited area of blogging, at least.&lt;/p&gt;

&lt;p&gt;&lt;code&gt;rake&lt;/code&gt; is a version of &lt;code&gt;make&lt;/code&gt; in which you define all your targets in Ruby. Because practically anything would be an improvement over &lt;a href=&quot;http://locklessinc.com/articles/makefile_tricks/&quot; title=&quot;this is sort of cheating as a bad example&quot;&gt;&lt;code&gt;Makefile&lt;/code&gt; syntax&lt;/a&gt;, this is pretty easy to work with. I'm not a huge fan of shell scripting at the best of times, so mixing it in with something else is... not desirable. I still find Ruby less intuitive than Python, but that's my prejudices talking.&lt;/p&gt;

&lt;p&gt;To elaborate... what does posting a new entry look like for me?&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;&lt;code&gt;rake server&lt;/code&gt; to start up an automatically-rebuilding local webserver copy of my blog&lt;/li&gt;
&lt;li&gt;&lt;code&gt;rake post[raking-jekyll]&lt;/code&gt; to make a new post with the YAML front matter boilerplate&lt;/li&gt;
&lt;li&gt;Actually edit the newly created post in an editor&lt;/li&gt;
&lt;li&gt;&lt;code&gt;rake deploy&lt;/code&gt; to rsync the local copy to my hosting over ssh&lt;/li&gt;
&lt;/ol&gt;


&lt;p&gt;Any part of my routine which looks like it might be scriptable has been replaced with a &lt;code&gt;rake&lt;/code&gt; target. For example, the &lt;code&gt;post&lt;/code&gt; target:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Copies a template file&lt;/li&gt;
&lt;li&gt;Names it according to the current date and provided title&lt;/li&gt;
&lt;li&gt;Adds an expanded version of the current date into its YAML front matter so sorting will work correctly if I post multiple times a day&lt;/li&gt;
&lt;/ol&gt;


&lt;p&gt;Since I rarely know the current date without having to look it up, that certainly saves me some effort.&lt;/p&gt;

&lt;p&gt;Here's &lt;a href=&quot;https://github.com/kemayo/davidlynch.org/blob/master/Rakefile&quot;&gt;my Rakefile&lt;/a&gt;, if you want to use anything from it. It's probably not properly idiomatic Ruby, but it does at least work.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>XSS is fun!</title>
   <link href="http://davidlynch.org/blog/2011/10/xss-is-fun/"/>
   <updated>2011-10-20T15:54:45-05:00</updated>
   <id>http://davidlynch.org/blog/2011/10/xss-is-fun</id>
   <content type="html">&lt;p&gt;Pretending innocence, I ask why all these high profile websites have their homepages covered in spinning images?&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;http://edition.cnn.com/eyewonder/interim.html?src=http://davidlynch.org/projects/xss/eyewonder.js&quot;&gt;CNN&lt;/a&gt; (&lt;a href=&quot;http://dl.dropbox.com/u/1372532/Screenshots/Screen%20Shot%202011-10-20%20at%203.33.28%20PM.png&quot;&gt;screenshot&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;http://nytimes.com/eyewonder/interim.html?src=http://davidlynch.org/projects/xss/eyewonder.js&quot;&gt;The New York Times&lt;/a&gt; (&lt;a href=&quot;http://dl.dropbox.com/u/1372532/Screenshots/Screen%20Shot%202011-10-20%20at%204.40.34%20PM.png&quot;&gt;screenshot&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;http://mashable.com/eyewonder/interim.html?src=http://davidlynch.org/projects/xss/eyewonder.js&quot;&gt;Mashable&lt;/a&gt; (&lt;a href=&quot;http://dl.dropbox.com/u/1372532/Screenshots/Screen%20Shot%202011-10-20%20at%205.49.09%20PM.png&quot;&gt;screenshot&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;http://www.foxnews.com/eyewonder/interim.html?src=http://davidlynch.org/projects/xss/eyewonder.js&quot;&gt;Fox News&lt;/a&gt; (&lt;a href=&quot;http://dl.dropbox.com/u/1372532/Screenshots/Screen%20Shot%202011-10-20%20at%205.47.08%20PM.png&quot;&gt;screenshot&lt;/a&gt;)&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;Okay, obviously enough, I'm messing with them. But how can I do that?&lt;/p&gt;

&lt;p&gt;The answer is cross site scripting (&quot;XSS&quot;).&lt;/p&gt;

&lt;p&gt;XSS is surprisingly common, and nigh-universally is caused by poorly escaped user inputs. Even user inputs which, as in this case, they obviously don't think of as user inputs. It happens when content is injected into a page, which results in the loading of arbitrary JavaScript onto that page.&lt;/p&gt;

&lt;p&gt;As such, I &lt;em&gt;own&lt;/em&gt; your interaction with those sites. If I was malicious I could be harvesting your cookies from them, redirecting you to phishing sites, recording everything you type, or just snooping on everything you view. As an example of why someone might want to do this... in the case of these particular sites, stealing your cookies (&lt;code&gt;document.cookie&lt;/code&gt;) would let me post comments as you. I could thus spam those sites using legitimate accounts that I don't have to go through the hassle of creating myself.&lt;/p&gt;

&lt;p&gt;I'm not doing this, because that wouldn't be nice. All I'm doing is reversing links and spinning images, because I think that's cute.&lt;/p&gt;

&lt;p&gt;In this case, all these sites have screwed up by including a little bit of HTML from an ad network (&lt;a href=&quot;http://www.eyewonder.com/&quot;&gt;EyeWonder&lt;/a&gt;) on their site. This HTML accepts an arbitrary URL as a parameter, and loads it in a &lt;code&gt;&amp;lt;script&amp;gt;&lt;/code&gt; tag. This is quite a common way for ad networks to ruin your day, often in the name of &quot;frame busting&quot;.&lt;/p&gt;

&lt;p&gt;If you're wondering who might be vulnerable to this exact hole from this exact ad network, &lt;a href=&quot;http://www.google.com/#q=inurl:eyewonder/interim.html&quot;&gt;Google can help you with that&lt;/a&gt;. Hint: it's a lot of sites. I just grabbed the first three big names to demonstrate with.&lt;/p&gt;

&lt;p&gt;Here's the offending HTML:&lt;/p&gt;

&lt;div&gt;&lt;script src='https://gist.github.com/1302421.js?file=interim.html'&gt;&lt;/script&gt;
&lt;noscript&gt;&lt;pre&gt;&lt;code&gt;&amp;lt;script language=&amp;quot;JavaScript&amp;quot;&amp;gt;
    var cnnDocDomain = '';
    if(location.hostname.indexOf('cnn.com')&amp;gt;0) {cnnDocDomain='cnn.com';}
    if(location.hostname.indexOf('turner.com')&amp;gt;0) {if(document.layers){cnnDocDomain='turner.com:'+location.port;}else{cnnDocDomain='turner.com';}}
    if(cnnDocDomain) {document.domain = cnnDocDomain;}

    var query = window.location.search;
    var adUrl = query.substring(5, query.length);
    var clickthru;
    var failclickthru;  
    document.write('&amp;lt;s'+'cript language=&amp;quot;JavaScript&amp;quot; src=&amp;quot;');
    document.write(adUrl+'&amp;quot;&amp;gt;&amp;lt;/s'+'cript&amp;gt;');
&amp;lt;/script&amp;gt;&lt;/code&gt;&lt;/pre&gt;&lt;/noscript&gt;&lt;/div&gt;


&lt;p&gt;This would actually be pretty easy to fix, note. A little bit of checking of the input, to restrict it to scripts hosted only on known-trusted domains would be enough to make exploiting it almost impossible. (I say &quot;almost&quot; because someone sufficiently resourceful might find one of these &quot;trusted&quot; domains isn't as secure as they hoped and slip a script onto it. But it at least raises the bar.)&lt;/p&gt;

&lt;p&gt;If you're curious what I'm doing to make these pages spin, check out &lt;a href=&quot;https://gist.github.com/1302421&quot;&gt;this gist&lt;/a&gt; which includes the spinner script. Essentially it's just making an iframe which shows the root of the domain, and then manipulates the contents of that iframe, which it's allowed to do because the script is running on the same domain.&lt;/p&gt;

&lt;p&gt;In short: &lt;em&gt;never&lt;/em&gt; trust user input. Also, don't trust your ad networks to know/care about security.&lt;/p&gt;

&lt;p&gt;This post brought to you by &lt;a href=&quot;http://blog.banksdesigns.co.uk/&quot;&gt;my coworker Paul Banks&lt;/a&gt; pointing out the existence of this fun little hole on CNN. I then added the spinning myself, because it looks nice and spectacular.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Jekyll</title>
   <link href="http://davidlynch.org/blog/2011/10/jekyll/"/>
   <updated>2011-10-18T23:04:49-05:00</updated>
   <id>http://davidlynch.org/blog/2011/10/jekyll</id>
   <content type="html">&lt;p&gt;I've just redone my website using &lt;a href=&quot;http://jekyllrb.com/&quot;&gt;Jekyll&lt;/a&gt;. It is now completely static. No PHP, no database, nothing like that.&lt;/p&gt;

&lt;p&gt;Why did I do this?&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;It's quite soothing knowing that all my content is version controlled.&lt;/li&gt;
&lt;li&gt;I am now nigh-immune to traffic spikes. I was using caching with WordPress before, so it had never been an issue even when I was on the HN frontpage, but there's some peace of mind in it.&lt;/li&gt;
&lt;li&gt;WordPress had a history of security bugs which wasn't comforting. Since nothing on this new site is executable I feel pretty secure now.&lt;/li&gt;
&lt;li&gt;My site is now ridiculously flexible. Jekyll forces almost no structure on you, leaving you free to change things around as you please.&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;I'm happy with the end result, but the process of getting there was not without pain.&lt;/p&gt;

&lt;p&gt;The initial difficulty came from Jekyll's &lt;a href=&quot;https://github.com/mojombo/jekyll/wiki/Usage&quot;&gt;documentation&lt;/a&gt; being somewhat lacking. I found myself somewhat confused about minor details like &quot;how does a layout work?&quot;. After I'd cribbed that together by examining other sites posted with Jekyll, I discovered that the &lt;a href=&quot;https://github.com/mojombo/jekyll/wiki/Template-Data&quot;&gt;template data docs&lt;/a&gt; were inaccurate / misleading, implying the presence of a &lt;code&gt;post&lt;/code&gt; variable which failed to exist. It turned out to be something that's merged into &lt;code&gt;page&lt;/code&gt; if you're viewing a post.&lt;/p&gt;

&lt;p&gt;I don't completely blame Jekyll for this being opaque. Jekyll uses Liquid for its templating language, which claims to be aimed at designers... and I feel it would benefit from some sort of debugging mode that dumps the current scope for examination.&lt;/p&gt;

&lt;p&gt;I resorted to reading Jekyll's source, which cleared up a number of things. However, I view it as a bad sign that I felt I had to do this. Not that a command-line driven static website generator is ever likely to be a mainstream product, but still, it's the principle of the thing.&lt;/p&gt;

&lt;p&gt;Pagination worked, but was completely lacking in configuration. Since part of my goal was to have my URLs remain the same as they were in WordPress, I had to change this. I did so with a horrible monkey-patching hack of a plugin. Specifically, I made a copy of the pagination module from Jekyll's core into my &lt;code&gt;_plugins&lt;/code&gt; directory and selectively edited it to change the pagination urls.&lt;/p&gt;

&lt;p&gt;In the process I noticed a bug in the core code, and &lt;a href=&quot;https://github.com/mojombo/jekyll/pull/415&quot;&gt;submitted a pull request to fix it&lt;/a&gt;. So horrible monkey patching might at least pay off this time.&lt;/p&gt;

&lt;p&gt;Also utterly broken was the related posts feature. No matter what, it always seems to think the most recent posts are the most related to anything. It's possible that running with &lt;code&gt;--lsi&lt;/code&gt; would have helped with this, via complex semantic analysis, but that takes forever and I've seen others complain that it doesn't really help. So there's more monkey patching going on via &lt;a href=&quot;https://github.com/LawrenceWoodman/related_posts-jekyll_plugin&quot;&gt;Lawrence Woodman's related posts plugin&lt;/a&gt;, which I took and edited so it worked based on tags instead of categories.&lt;/p&gt;

&lt;p&gt;One thing I haven't fixed, which I'd like to, is making the automatic regeneration of your site during development / writing a lot smarter. Right now it notices a file has changed and so it regenerates every single bit of content on your site. This &lt;em&gt;does&lt;/em&gt; mean that the live generated site always has recent/related posts up to date everywhere... but it'd be nice to have some sort of &lt;code&gt;--quick&lt;/code&gt; option that ignored that stuff in favor of a faster development cycle.&lt;/p&gt;

&lt;p&gt;Because of the utter staticness, I naturally cannot have my own comment system in use any more. So I've switched to &lt;a href=&quot;http://disqus.com&quot;&gt;Disqus&lt;/a&gt;, which adds commenting to the site via JavaScript. It feels sort of weird to be outsourcing a component of my user experience like this... but they seem to be trustable. Widely used, and their monetization plan is fairly transparent.&lt;/p&gt;

&lt;p&gt;If you're interested you can see the &lt;a href=&quot;https://github.com/kemayo/davidlynch.org&quot;&gt;repo for my website on github&lt;/a&gt;. It contains, in its default / post templates, markup that's compatible with any WordPress theme that's based on Toolbox, which might be of use to some.&lt;/p&gt;

&lt;p&gt;Like I said, I'm happy with how it turned out. I wouldn't recommend this &lt;em&gt;at all&lt;/em&gt; for a non-technical person, but if you want to dig in and get your hands dirty then Jekyll is quite workable.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>To replace PHP you need</title>
   <link href="http://davidlynch.org/blog/2011/10/to-replace-php-you-need/"/>
   <updated>2011-10-05T16:20:17-05:00</updated>
   <id>http://davidlynch.org/blog/2011/10/to-replace-php-you-need</id>
   <content type="html">&lt;p&gt;(Expanding slightly on my response to &lt;a href=&quot;http://news.ycombinator.com/item?id=3077031&quot;&gt;this HN thread&lt;/a&gt;.)&lt;/p&gt;

&lt;p&gt;First: to be on all shared hosting everywhere. I.e. you need to be really easy to install, and preferably not involve long-running processes that shared hosts might choke on.&lt;/p&gt;

&lt;p&gt;Second: to be beginner friendly. No requirement of understanding MVC, or running commands in a shell (hi RoR!). Pure instant gratification. Someone's first step into using PHP is likely going to be &quot;I want the current date in the footer of my page&quot;, or &quot;I want a random image on my homepage&quot;, or something like that. Anything like that you can handle by taking your existing page and dropping a tiny snippet in where you want the change to happen. &lt;code&gt;&amp;lt;?=date('Y')?&amp;gt;&lt;/code&gt; is a potent thing to someone who has never programmed before.&lt;/p&gt;

&lt;p&gt;Note: For point 2 many of the things serious programmers hate about PHP are actually advantages. All the functions in one big namespace? That's great! A newbie doesn't have to try to understand &lt;code&gt;&amp;lt;? import datetime; print datetime.date('Y'); ?&amp;gt;&lt;/code&gt;.&lt;/p&gt;

&lt;p&gt;It's easy to replace PHP for serious developers. We like advanced features, and care about a sane default library. We're willing to use complex tools to get a payoff.&lt;/p&gt;

&lt;p&gt;It's hard to replace PHP for non-programmers who just want to tweak their static page in notepad so it has one cool new feature, or install a blogging package on their cheapo shared hosting.&lt;/p&gt;

&lt;p&gt;To sum up: if you don't address both of these points then you haven't killed PHP. You're competing with Python or Ruby or whatever. PHP will carry right on ignoring you, because you're not addressing its fundamental use case.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Inane, random, and opinionated</title>
   <link href="http://davidlynch.org/blog/2011/10/inane-random-and-opinionated/"/>
   <updated>2011-10-01T04:30:37-05:00</updated>
   <id>http://davidlynch.org/blog/2011/10/inane-random-and-opinionated</id>
   <content type="html">&lt;p&gt;I need to bear in mind that the threshold for the &lt;a href=&quot;http://news.ycombinator.com/&quot;&gt;Hacker News&lt;/a&gt; front page is a bit lower late at night on Friday, and perhaps only submit my less inane, random, and opinionated stuff in that timeframe.&lt;/p&gt;

&lt;p&gt;&lt;img src=&quot;/blog/images/2011/09/Screen-Shot-2011-10-01-at-4.17.42-AM.png&quot;&gt;&lt;/p&gt;

&lt;p&gt;Oh, who am I kidding? It's great for getting views.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Why not just use an IDE if you want IDE features?</title>
   <link href="http://davidlynch.org/blog/2011/09/why-not-just-use-an-ide-if-you-want-ide-features/"/>
   <updated>2011-09-30T22:34:35-05:00</updated>
   <id>http://davidlynch.org/blog/2011/09/why-not-just-use-an-ide-if-you-want-ide-features</id>
   <content type="html">&lt;p&gt;After I &lt;a href=&quot;http://davidlynch.org/blog/2011/09/sublime-text-2-git-plugin/&quot;&gt;posted&lt;/a&gt; about my &lt;a href=&quot;https://github.com/kemayo/sublime-text-2-git/wiki&quot;&gt;Sublime Text 2 git plugin&lt;/a&gt; I got one response which I thought was worth responding to.&lt;/p&gt;

&lt;blockquote cite=&quot;http://www.reddit.com/r/programming/comments/ktmh5/a_git_plugin_for_sublime_text_2/c2nbsth&quot;&gt;That looks helpful, but I often wonder why not just use an IDE if you want IDE features.&lt;/blockquote&gt;


&lt;p&gt;Obviously I have a bias here, but I'll try to be fair to IDEs...&lt;/p&gt;

&lt;p&gt;An IDE is an editor that does a lot of things, many of them well. If there's something you want to do it'll almost certainly let you do it, but if you're not happy with some basic element of how it works then you're stuck having to find a new IDE. (Yes, I know, many IDEs have plugins available, but I've never had that much luck with them.)&lt;/p&gt;

&lt;p&gt;IDEs also tend to be built with a workflow in mind. If you conform to that workflow then they'll be good to you, but you want to deviate from it you may have to fight with your tools.&lt;/p&gt;

&lt;p&gt;A lightweight-but-extensible editor (e.g. Sublime, TextMate, vi, and so on) tends to focus on having a &lt;em&gt;really good&lt;/em&gt; editing experience. So you start with good editing, and then you pick and choose the &quot;IDE features&quot; that you want to mix in. If part of the editor doesn't work how you want you might have to find a new plugin for it, but since it's not a massive and complicated system it's likely to be easier to find that plugin.&lt;/p&gt;

&lt;p&gt;Neither is necessarily better, but they do tend to appeal to different types of developer. Web developers, needing to work with a number of different file types, and not generally having complicated build system requirements, gravitate towards the lightweight editors.&lt;/p&gt;

&lt;p&gt;&lt;b&gt;UPDATE:&lt;/b&gt; To be clear, I'm not saying either is better. It's a matter of personal choice and situation. As someone who mostly does web development in dynamic languages, I like using a fairly lightweight editing environment. If I wrote in Java I'm sure I'd be singing the praises of IntelliJ/Eclipse/whatever, because I understand that Java is almost impossible to write well &lt;em&gt;without&lt;/em&gt; an IDE.&lt;/p&gt;
</content>
 </entry>
 
 <entry>
   <title>Sublime Text 2 git plugin</title>
   <link href="http://davidlynch.org/blog/2011/09/sublime-text-2-git-plugin/"/>
   <updated>2011-09-27T22:34:06-05:00</updated>
   <id>http://davidlynch.org/blog/2011/09/sublime-text-2-git-plugin</id>
   <content type="html">&lt;p&gt;I wrote &lt;a href=&quot;https://github.com/kemayo/sublime-text-2-git/wiki&quot;&gt;a git plugin&lt;/a&gt; for &lt;a href=&quot;http://www.sublimetext.com/&quot;&gt;Sublime Text 2&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;I'd decided to try Sublime out for work to see how it compared to TextMate... and thus some degree of git integration was required. Given that it's been out since January, I was surprised that there wasn't already a solid git plugin.&lt;/p&gt;

&lt;p&gt;I did find &lt;a href=&quot;https://github.com/notanumber/gitst2&quot;&gt;this one&lt;/a&gt;, admittedly, but I decided that I didn't like how it fit in with Sublime. It's built around menus and keybinds, whereas I felt that setting everything up as commands in the palette and hooking as much stuff as I could into the fuzzy search was the way to go.&lt;/p&gt;

&lt;p&gt;Working on the plugin was a good exercise in getting me used to Sublime. I'm fairly sold on it as a result. It's philosophically somewhat similar to TextMate, but with some of TextMate's rough edges smoothed out.&lt;/p&gt;

&lt;p&gt;(Short rant: if the &lt;a href=&quot;http://blog.macromates.com/2011/whats-next/&quot;&gt;recently announced TextMate2 alpha&lt;/a&gt; doesn't get rid of the single-character undo buffer... I don't know what I'll do. It's certainly the biggest single complaint I have about TextMate nowadays.)&lt;/p&gt;
</content>
 </entry>
 

</feed>
