Infoman

Member since 2017-07-15T03:50:57Z. Last seen 2025-01-02T20:05:01Z.

2729 blog posts. 128 comments.

Followers: 0 Following: 2

Posts by Infoman

• 
  

  Infoman

  The big stores that track your every online move

  5 jrs235 2 hrs 1

  https://www.engadget.com/2017/11/24/big-stores-that-track-your-online-move/

  http://news.ycombinator.com/item?id=15784846

  So before you get all hopped up on eggnog and go hogwild doing your Black Friday or Cyber Monday shopping, you might want to find out which sites are seriously spying on you.

  Using "session replay scripts" from third-party companies, websites are recording your every act, from mouse moves to clicks, to keylogging what you type and extracting your personal info off the page. If you accidentally paste something into a text field from your clipboard, like an address or password you didn't want to type out, the scripts can record, transmit and store that, too.

  What these sites are doing with this information, and how much they anonymize or secure it, is a crapshoot.

  Among top retail offenders recording your every move and mistake are Costco, Gap.com, Crate and Barrel, Old Navy, Toys R Us, Fandango, Adidas, Boots, Neiman Marcus, Nintendo, Nest, the Disney Store, and Petco.

  After publication of the study, called "No Boundaries," both Bonobos and Walgreens said they would stop using session-replay scripts.

  The study is the first in a series from Princeton's Center for Information Technology Policy (CITP). They were examining the world of "session replay scripts," software that runs on a site that records everything you do. This can include your mouse moves, hovers, clicks, and typing -- even if it's something you wrote and deleted. The researchers examined seven of the most popular session replay companies: Clicktale, FullStory, Hotjar, SessionCam, Smartlook, UserReplay and Yandex (the Russian search engine).

  It's not a new thing, but few people know it's happening. If you're a privacy nerd -- and who isn't these days? -- the study's data release was especially fascinating in its breakdowns. It's a who's-who of companies, news outlets, stores, services and even a few porn sites. All of which know way too much about what you did and didn't do on their websites.

  Tech and security websites spying on users include HP.com, Norton, Lenovo, Intel Autodesk, Windows, Kaspersky, Redhat.com, ESET.com, WP Engine, Logitech, Crunchbase, HPE.com (Hewlett Packard Enterprise), Akamai, Symantec, Comodo.com, and MongoDB.

  Other sites you might recognize that are also using active session recording are RT.com, Xfinity, T-Mobile, Comcast, Sputnik News, iStockphoto, IHG (InterContinental Hotels), British Airways, NatWest, Western Union, FlyFrontier.com, Spreadshirt, Deseret News, Bose and Chevrolet.com.

  Even passwords are included in these session recordings, according to Princeton's Center for Information Technology Policy, and in one instance involving SessionCam, they were sent to one of the companies providing session-replay scripts. "We found at least one website where the password entered into a registration form leaked to SessionCam, even if the form is never submitted," wrote CITP.

  In a blog post one day after the study's release, SessionCam founder and CEO Kevin Goodings wrote, "Everyone at SessionCam can get behind the CITP's conclusion: 'Improving user experience is a critical task for publishers. However, it shouldn't come at the expense of user privacy.' The whole team at SessionCam lives these values every day."

  The session-replay scripts used by these websites are rather insidious. "These scripts record your keystrokes, mouse movements and scrolling behavior, along with the entire contents of the pages you visit, and send them to third-party servers," CITP's writeup on the study explained. "Unlike typical analytics services that provide aggregate statistics, these scripts are intended for the recording and playback of individual browsing sessions, as if someone is looking over your shoulder."

  If you want to look up a specific site, Princeton's researchers released the data in a handy searchable database, complete with its methodology and caveats. For instance, they note that appearance of a website in their database "DOES NOT necessarily mean that session recordings occur, as website developers may choose not enable session-recording functionality."

  However, they add that for some sites they do have clear evidence of session recordings occurring. "We mark these with the tag 'evidence of session recording.' For these sites, our measurement bots were able to detect a recording in progress, as detailed in our detection methodology," they explained. "For sites not marked with this tag, it does not mean that recordings don't occur -- simply that we don't know if they do."

  All the sites listed above are among the sites found by the study to be actively recording sessions -- there is no ambiguity as to whether or not sites like Old Navy are spying on your every move, and your every mistake. They are. (We've reached out to Gap/Old Navy for comment.)

  Session replay scripts are made palatable by selling themselves as useful for finding web-page mistakes and problems with user interactions with a page. But according to Princeton's research, a whole lot could be going wrong here.

  More specifically, the study notes that "Collection of page content by third-party replay scripts may cause sensitive information such as medical conditions, credit card details and other personal information displayed on a page to leak to the third-party as part of the recording. This may expose users to identity theft, online scams, and other unwanted behavior." They add, "The same is true for the collection of user inputs during checkout and registration processes."

  There's supposed to be a sort of checks and balances for safety in place by companies that provide session-replay scripting as a service. "The replay services offer a combination of manual and automatic redaction tools that allow publishers to exclude sensitive information from recordings."

  Indeed. But the onus is on companies such as Petco to redact that information, and it's not as simple as it sounds. Princeton's Center for Information Technology Policy wrote that "in order for leaks to be avoided, publishers would need to diligently check and scrub all pages which display or accept user information. For dynamically generated sites, this process would involve inspecting the underlying web application's server-side code." To our collective dismay, they add "this process would need to be repeated every time a site is updated or the web application that powers the site is changed."

  Shopping online with credit card

  That's right: The sites snatching your information before you even have a chance to agree to any Terms of Service are the same ones responsible for administering a redaction process if they decide to do so. And if we've learned anything about company responsibility and user safety and security, it's that if something can go ignored or be sloppily done, it already was and got covered up, and we're all screwed, thanks.

  Not only do Princeton's researchers say that our data can't reasonably be expected to be kept anonymous in these conditions. "In fact," they state, "some companies allow publishers to explicitly link recordings to a user's real identity." As in, they're linking the recordings of you to your account on their websites.

  The session recording companies themselves were found to have troubling security practices. The researchers wrote:

  Once a session recording is complete, publishers can review it using a dashboard provided by the recording service. The publisher dashboards for Yandex, Hotjar and Smartlook all deliver playbacks within an HTTP page, even for recordings which take place on HTTPS pages. This allows an active man-in-the-middle to inject a script into the playback page and extract all of the recording data.

  Worse yet, Yandex and Hotjar deliver the publisher-page content over HTTP — data that were previously protected by HTTPS is now vulnerable to passive network surveillance.

  To counter session replay spying, you'll need to use an ad blocker browser plugin that addresses these scripts. At the time of the study's publication, CITP noted that "two commonly used ad-blocking lists EasyList and EasyPrivacy, do not block FullStory, Smartlook or UserReplay scripts. EasyPrivacy has filter rules that block Yandex, Hotjar, ClickTale and SessionCam."

  Those lists, notably EasyPrivacy, are included in the AdBlockPlus plugin. In the days following the release and subsequent press, EasyPrivacy was changed to block FullStory, Smartlook and UserReplay -- so AdBlockPlus is a good solution for some, but not all of these pernicious privacy purloiners.

  Since the study's publication, session-replay companies are scrambling to counter the negative press. Like SessionCam, they're suggesting the study was overly dramatic and clinging to the spin that their tools are simply data collection for the purposes of improvement. SessionCam's CEO exclaimed, "Using behavioral analytics solutions to understand website visitors better is more often a sign of good intent -- the company wants to get it right."

  Unfortunately, for most of us, the "to make your experience better online" is too tough to swallow in the era of Facebook.

  I don't know about you, but I don't feel like helping any of these companies do their jobs right by sitting quietly as they take my personal information without my ability to say no. Especially not because I just happened to land on their websites. No one should.

  Images: PA Imagess (Girl on Laptop); Getty (Holiday shopping)

  2017/11/27
• 
  

  Infoman

  Ask HN: How to become the first result of a Google search for a name?

  114 vojnovski 12 hrs 71

  news.ycombinator.com/item?id=15782327

  A while ago, I decided to write a simple personal landing page. I went about it as any average HN reader would, I googled what the best free way to deploy static html was. I went with Github pages + Cloudflare, as using S3 + Cloudfront did not justify mulling around with paying AWS. The ssl certificate is shared between several site, but oh well, it'll do. I reused an old domain (vv.mk), that I had previously used for a Blogger blog, spent some time playing with latencies, as my page loaded in a second and a half, and Cloudflare didn't seem to cache it. Lesson: Cloudflare does not edge-cache html, and you need a Page Rule to enable it via their interface.

  I learnt a bit about webfonts, and finally decided to host the fonts myself (on Github pages), rather than do a roundtrip to google, as it added about 300ms on average to page load, using a setup that would work for most recent browsers (https://google-webfonts-helper.herokuapp.com).

  I confirmed I had a blazingly fast site via http://www.webpagetest.org/ and https://tools.keycdn.com/, and then it was time to make Google return it when people searched for my full name.

  To my chagrin, this does not seem to be easy. I added my name to the title and the description HTML meta tags. I added the domain to the Google Search Console in all its versions (www, no-www, http, https), asked the Google crawler to cralw it and update its index. I added links to it to my social networks profiles where they hadn't been already added.

  A day after, the Google index is not updated, my site, along with the description of the content that it had up to a day ago, is buried well into the 4th Google results page. My google searches on SEO of personal websites have been completely unfruitful. The 1st Google results page is still populated with useful info (most of my social network profiles), but it seems logical that a personal website would be returned as the first result.

  Any tips?

  edit: Most of the comments suggest this is due to the lack of content. While I accept this might be a cause for the bad ranking, the lack of content is quite intentional, the page is meant to be a sort of a personal landing page with links to social networks profiles, workplaces, etc.

  amelius 11 hrs Change your name into something more unique. For example,

  a975c295ddeab5b1a5323df92f61c4cc9fc88207
  

  Bromskloss 10 hrs Wait a minute…

  https://static.iseeme.com/photo-upload-templates/BKC400/dedi...

  esnard 7 hrs sha1("date\n") == "a975c295ddeab5b1a5323df92f61c4cc9fc88207"

  Bromskloss 6 hrs Haha, this is even more baffling! How did you know that?

  PS: Might it have come from a botched attempt to hash the current date?

  sixhobbits 10 hrs It definitely helps to have a unique name, but it's possible without. A lot of good advice in this thread, but as someone who achieved what you want, some extra points:

  • Don't focus on one site. Spread your content around on as many sites as possible and link each one back to your home page. This is easier than you might expect -- nearly all tech sites are looking for content creators, whether or not they explicitly advertise it.

  • Don't expect it to happen in a matter of days. It took me months/years to push "Gareth Dwyer" the poker player off the front page of google, and all he had was some YouTube page. It takes weeks for Google to update their indexes sometimes (even changing a big site over from no-www to www recently took several weeks to properly reflect on Google).

  • The URL is important. Get a .com or another 'more official' domain. This is a grey/changing area, but people still have pretty big biases based on TLDs, and this affects click-through and therefore ranking. I wouldn't click on vv.mk unless I was actually in Macedonia and expecting it.

  • And as others have said, put more content on your site. Even if it's only a landing page, you want people to spend a minute or so looking around. If it has a high bounce rate, it'll hurt your rankings.

  Good luck :)

  tedmiston 6 hrs I'll second the point about creating a hub. I've pushed my personal site + blog to the first page for my name using this technique.

  https://www.google.com/search?q=Taylor+Edmiston&ie=UTF-8&oe=...

  I link back to it from everywhere, especially my social profiles.

  The blog is more important in terms of content, so I'm planning to transition to that being my main hub with everything else as a profile page on that site eventually.

  I also previously had the rest of the first page with my social profiles until someone with the same name as me got arrested and convicted of murder, and that press sunk my links to page two. On top of that, another person with the same name is getting married and their marriage sites are ahead too but I think that's temporary and they'll sink afterwards. I've started including my middle initial in social profiles which helps differentiate.

  eccfcco15 3 hrs FYI, it looks like you have an expired SSL cert on your website.

  Mz 10 hrs Your site is basically empty. Current content:

  Welcome.

  Hi, I'm Viktor. More to come, in the meantime you can contact me via twitter, linkedin, or via email at at .

  More links and a pgp key at Keybase.

  Made with ️ in Nice.

  Should say something more like:

  Welcome.

  Hi, I'm Viktor Vojnovski. I do (stuff you do, reasons why people would look for you online). You can also find me on twitter @vojnovski. Here is my linkedin profile. You can email me via ViktorVojnovski at .

  I can also be found on Keybase.

  Made with ️ in Nice, France.

  As others have said, it really should be ViktorVojnovski.com.

  Edited to reflect updated location info.

  Re your update. My suggested edits don't add a lot more words. But they do replace completely empty fluff ("More to come, in the meantime ...") with actual useful info. That empty fluff is apparently also a lie if there is no intent to actually add more info.

  kostarelo 10 hrs Fyi, it's "Republic of Macedonia".

  r3bl 9 hrs If you wanna be correct and not upset the Greeks, it's "Former Yugoslav Republic of Macedonia".

  janesvilleseo 5 hrs Ironically, this post will actually help you achieve what you are looking to do. As another has mentioned it is now on page 1 for me. And as another has said search results are now personalized.

  So how do you get it to #1 for your name. Content can help but is not 100% needed in this case. Your name is rather unique. I am in the similar situation as I have a fairly unique name too.

  So what I recommend is making your site a destination. Make sure all your social profiles link to the domain. Reference your name in the link where possible. LinkedIn, Facebook, Twitter, Youtube, Github, etc.

  Lastly as someone else has mentioned, give it some time. It will move up as you build up the importance of the website.

  And if you want, while you could change domains to include your name, you could also just have a page (url) that has your full name in it.

  kough 11 hrs 1. Get your full name as a .com (victorvojnovski.com) 2. Put any real content on it. Maybe a blog? Helps to have links back. 3. Wait a few years. 4. Success!

  tobltobs 11 hrs

  Get your full name as a .com (victorvojnovski.com)

  Do this NOW. Seriously.

  saas_co_de 10 hrs Full name is very important because google gives heavy weight to exact matches on domain names for search terms and names tend to be pretty unique.

  The other important signal is backlinks to your domain from social networks with your name. These will indicate that the domain is authoritative for the name on the social profile.

  patja 9 hrs I dunno if it is so important these days.

  I've had my full name as a .com for about 20 years now, with plenty of content on the site. Over the years I've watched it slip down the search results and it is now on page 10 when you search for my firstname lastname where my domain is firstnamelastname.com

  But then again I have a more common name than victorvojnovski including a D-list celebrity, evangelical country musician, and retail store with the same name.

  vojnovski 10 hrs Done. It seems it can't hurt, even if it only redirects to the .mk tld one.

  8ig8 10 hrs I’d do it the other way around. Redirect .mk to .com.

  saas_co_de 10 hrs definitely.

  35bge57dtjku 10 hrs

  Most of the comments suggest this is due to the lack of content. While I accept this might be a cause for the bad ranking, the lack of content is quite intentional, the page is meant to be...

  The reason for you omitting content isn't going to magically increase your pagerank.

  cdibona 11 hrs To some degree, this is a Sisyphean task: Google doesn't have one solitary index or signal anymore, it's extremely personalized. So even if you are number one for you, it's extremely likely that you won't be for much of the rest of the world.

  And this assumes you have a unique-ish name/site/project.

  SOLAR_FIELDS 7 hrs You could at least get a better idea by searching with the !g bang through DDG. It won't solve the problem of other people's personal filters, but at least you'll get an objective result not based on your own.

  tedmiston 5 hrs Since !g just redirects to a normal Google search url, I don't see how this would be any different than searching Google directly.

  chenshuiluke 9 hrs Don't worry about making your personal site the first result. Having your name spread out across multiple sites can help give searchers a more wholistic view of who are and what you have done in the past that makes you stand out.

  Here's what I did: I negotiated with my parents before I was born to give me a unique name.

  I made a github profile with lots of projects.

  I wrote a short crappy book for Amazon Kindle.

  I was involved with a local organization's student opensource initiative (like a small Google summer of code) and they have me mentioned in various articles.

  I made a LinkedIn profile.

  I made a youtube channel from when I was a kid in 2008 and have many videos.

  I wrote a piece of fan fiction way back when.

  I probably should add my name to my various personal project sites...

  perryprog 4 hrs

  Here's what I did: I negotiated with my parents before I was born to give me a unique name.

  Yeah, this is really helpful for SEO, so if you haven't done this yet for your personal site, go do that!

  jakub_g 9 hrs Just to counter all the advice in this thread:

  my personal website was whole 2 pages of static content (landing page with not much content + 1 blog article) until very recently, and hosted under .github.io domain (bought a custom domain only recently), and it very quickly became top-3 google search under my name.

  However I think the problem here might be due to using .mk domain and Google thinking that it's not very international. Note that when you search on https://www.google.mk/?hl=mk then it shows up on the first page.

  Getting .com/.net/.io and putting just a bit more unique content is probably a good way to get started. Put a 301 redirect from old domain to the new one. Put a link on LinkedIn etc. if not done yet. Then just be patient.

  BTW Hello from Nice - 230 fellow here.

  hluska 11 hrs Hey Viktor....

  I googled your domain (vv.mk) and, if I were in your shoes, I would wait for a few days and see if your website ranks. The cached version still seems to point at Blogger. I don't read Macedonian (assuming that Google Translate picked the correct language), but the cached title is still "Free your mind".

  If I were in your shoes, I would:

  1.) Assume that it will take at least a week or two to re-index your site and start ranking your new content.

  2.) Add some content. One of the most surefire ways to get Google to respond to content changes is to add a metric shit tonne of new content.

  codebeaker 11 hrs Your site is all but completely devoid of content, no wonder Google isn't ranking it as relevant. Try writing some content first.

  rampage101 11 hrs There are no simple hacks to get to the top. You need people to be searching for your name, find your link, and then spend time on the page. It helps a lot if you have posts that show up on Reddit, or other social networks.

  Since there is no content at all on your site there's no way anybody will stay on your page.

  throw_away2 11 hrs How does Google figure out if visitors stayed on the page? Chrome telemetry (creepy)? Google Analytics (are you required to use this to get a good ranking)?

  slig 10 hrs If a user clicks on a link on a search page, stays a few seconds on the new page and then press 'back', and clicks on another link on the search, that's a pretty strong signal to Google that the first link wasn't that good.

  tedmiston 5 hrs Usage of Google Analytics doesn't affect your PageRank, but it is one way to find out what people that clicked through to your site searched for to find it.

  sirwitti 11 hrs The domain name itself is one of the most important factors for google. Apart from that your h1 says welcome and has an

  ---

  inside. If you put your name in the h1 it's gonna help your ranking.

  There is no content at all on this site. If you want to get up in the rankings you need to provide content that is relevant to your name.

  Btw the html entities you're using miss a semicolon which is invalid html. I think google likes valid html better :)

  Hope that helps, Martin

  Hasz 10 hrs Is there a significant penalty to having a domain name where the ccTLD finishes the word (youtu.be)?

  vojnovski 10 hrs The Google Search Console has a International Targeting section, where it associates your site with a country, which influences "how your site appears in search results, and improves our search results for geographic queries." This can be disabled.

  They have some ccTLDs which do not automatically associate your domain to a specific country as specified here: https://support.google.com/webmasters/answer/62399

  .be is not in the list.

  saas_co_de 10 hrs in my experience, google does not include the tld for purposes of a full word match on the domain. Last I tried this was about a year ago.

  elorant 10 hrs Since we're in the SEO land let me ask a relevant question. Say I have an e-commerce site. If I buy an expired domain from some other e-commerce site which was in the same market as mine can I have any benefit whatsoever?

  michaelbuckbee 10 hrs Yes. This is now a common white hat tactic. That instead of paying someone to try and build links for you (blindly email a bunch of sites and ask for links). You purchase a site and then direct all of that traffic to a subdomain of your site / 301 the entire domain over / 301 specific URLs over to the new resources (which one of these that makes sense is case specific).

  dhruvkar 10 hrs or you just use that domain for your site, as it (supposedly) already has built Domain Authority and Trust Flow. Redirects pass on some linkjuice to the redirected domain. But not as much as using the domain that HAS it built up already.

  A grey/black hat SEO tactic is to use that domain as part of a PBN (private blog network). Basically manufacturing backlinks to boost your money site.

  elorant 9 hrs Nice. So how much should I pay for an expired domain in case it's already taken? Up to say a couple hundred bucks or more?

  michaelbuckbee 9 hrs Like everything -> it depends.

  This is part of why people buy sites on Flippa or Borderline.biz or whatever. There's a lot of factors that go into it: is it still getting traffic? Is it reputable? Is it listed as a malware site? How closely related to your own site it is, etc.

  If you're starting out on a new project and would like to get almost any organic SEO traffic in the first year of your existence, you should probably buy a domain (domain age is that strong of a ranking factor).

  slrz 7 hrs This is considered "white hat" behaviour? Both approaches look like straight out of internet scum 101.

  jrs235 10 hrs I thought Google looked to see if domain entries have changed and if so took that into account and counted against the prior ranking score.

  nsgi 9 hrs Wouldn't that mean a website that has been transferred to a new owner would have to start from scratch? Unless Google has a way of distinguishing an old site from an old domain.

  kelukelugames 11 hrs Sort of related. In college when facebook first started, we had a page called "The Michael Lees of Berkeley" with dozens of members. One of the Michael Lees is on the no fly list which has been a hassle for the others.

  foopod 11 hrs Do all the things.

  1. Full name as a .com helped me. Put your name in the page content too, whether it is a heading or a footer.

  2. Content. Content. Content. Google needs a good reason to put your site at the top.

  3. Site needs to be mobile friendly.

  4. Use webmaster tools. Use Data Highlighter to show google what parts of your page are important. Make sure structured meta data is okay too.

  5. Google Products, why wouldn't google prioritize sites with Google tag manager where they can learn even more about your sight and their customers.

  Proof: https://www.google.co.nz/search?q=jono+shields

  tyingq 2 hrs Interesting that you didn't mention inbound links. Despite all their anti spam efforts, Google rankings are still mostly about who has the most inbound links from the most prominent sites. Pagerank[1] still seems to trump everything else, content, relevance, etc.

  [1]https://en.m.wikipedia.org/wiki/PageRank

  egypturnash 5 hrs The first link I get for "Viktor Vojnovski" is what I assume is your twitter. Which has a link to your site. Isn't that good enough? https://twitter.com/vojnovski?lang=en

  And your site is like link number five on the first results page for me. So that's climbing the ranks pretty fast.

  I have done absolutely zero SEO and my personal site (egypt.urnash.com) is the first result for every search for "egypt urnash" I've ever done on any search engine. I have also had this URL be my main presence on the internet for at least a decade, I've lost track. There's a ton of content on there with lots of links pointing to it, too. Have patience. And put some stuff on your site.

  FightingTaco 11 hrs I've struggled with similar issues. From what I've read, it's all about getting other more established sites to link back to your page. I believe the easiest way to do this might be to start blogging or host original content in some form.

  SXX 10 hrs As others suggested full name in domain name and title might have something to do with it, but I'll also suggested to add few external links to it even if it's just links from random internet forums you rarely usimg and such.

  And yeah not that it will improve position of your page, but adding google analitics and veryfying your page in google webmaster always help with getting it indexed faster especially if page might get some visitors. And if you dont like Google you can always remove it afterwards.

  Nothing of sort would work of you were John Smith, but considering your name about as unique as mine this should work.

  tonymet 9 hrs just buy paid adwords for your name. the cpc will be rock-bottom (no one else is buying) and you won't pay very often. Prob $5/mo tops

  UweSchmidt 8 hrs Can you elaborate? Does google reward you if you pay up? It cannot possibly be about the ad that is generated somewhere?

  tedmiston 5 hrs He's saying that you'll be able to easily get the ad space that appears above the list of unsponsored results. Since your name is a relatively unique phrase, it's unlikely other people would compete for those ads, so your cost should be low.

  tobltobs 11 hrs If your target are also users from outside of the Republic of Macedonia then forget the .mk domain. Use a generic tld.

  pvtmert 7 hrs first of all, i think you made it over complicated. just gh-pages and cloudflare would work very well. you might need raw storage for your images and stuff use something like imgur.

  increase those: - number of external links in your website - number of links to your website from external resources make them available in your public profile, fb, twitter, linkedin, github etc.

  make your site multi paged somehow. so it will seen as resourceful (eg. you can make intro in the main page but add pages that explains how you did in some project and link them with first page)

  include links of websites of companies you worked for

  for fonts use googlefonts or some cdn, use same stuff for external resources this will have your site linked with billion visitor domains

  have proper mobile version have https properly configured with hsts ^ these are important, use page speed insights to increase those

  btw i didnt do anything much but when searched my domain comes in #3rd place, first 2 are linkedin and github. name is "mert akengin" domain is n0pe.me for reference.

  ronilan 11 hrs Like this: https://www.google.com/search?q=ron+ilan

  (Best is to get a dot com domain a decade ago and add some links. Works for every name noun and adjective.)

  laksjd 11 hrs Your full name does not appear at all in the human readable text of your website...

  seanwilson 11 hrs Your website needs to have high quality content and you need high quality websites linking to your website to rank better. Tweaking the speed and server setup isn't productive until you've done this.

  hayksaakian 6 hrs I see it on the first page, so it seems like google has come around to it by now.

  meatsock 10 hrs a good way to do this is chosing a very unique username.

  - sincerely, meatsock.
  

  nnd 10 hrs Does Google still prefer .com TLD over others? I moved from it to a country-based TLD and have similar problems with indexing now.

  stevekemp 5 mins I think it depends - I've owned "steve.org.uk" since the nineties and I used to be the first result for searches for both "steve" and "steve kemp" in the UK.

  Now I've relocated to Finland and I happened to do so just as steve.fi was expiring. So I've migrated to that domain as the lack of nested domain is easier to handle.

  I'm still in the top five for "Steve Kemp", but personalized searches make it a little hard to tell. (My biggest problem is that there are a bunch of sites that link to the baseball player, who shares my name, including wikipedia etc. Hard to outrank that!)

  Veen 11 hrs Content and links. If there are lots of competing search results for the same query, one of the factors that Google uses to rank them is the number and quality of the sources of incoming links.

  How do you get links? You put something on the site that's worth linking to and promote it. There isn't really a shortcut here.

  danso 32 mins edit: other people have said what would be my reflexive suggestion: a domain name that is actually your name would likely get a lot of search ranking juice. Besides having a meta title of your name, you need to have an h1 tag -- and not just the html; it should look like a major headline -- with your name, as opposed to what it is now ("Welcome").

  Here's an easy fix:

   <h1>Welcome to Viktor Vojnovski's homepage</h1>
  

  ---

  but it seems logical that a personal website would be returned as the first result.

  Does it? If I'm an employer researching a job candidate, and the job candidate has bought their own vanity domain but left it empty of worthwhile content, would visiting that page be a better use of my time than that candidate's Twitter, LinkedIn, or public Facebook page?

  The fact that your page itself lists these social media URLs makes your homepage, theoretically, more useful in a broad kind of sense. But it's not obviously more useful than just directly seeing your tweets on first click.

  And on a quasi-technical note, think of the heuristic/algorithmic hoops Google's search engine would have to resolve in order to rank a page like yours over Twitter and LinkedIn:

  1. LinkedIn page is ranked first because LinkedIn is an extremely popular site.

  2. Random webpage that links to LinkedIn page should get quality points because it also purportedly links to the person's other social URLs, and a normal human being would find that useful.

  I know Google search logic and variety of signals is quite complicated and probably handles situations like these, but think of how easy it might be to game such a heuristic that gives pages quality points based on the quality of pages that they link to. That's almost exactly backwards of the original Google BackRub algorithm.

  Other than getting legit sites to link to you (putting the URL in your Twitter bio might help, though Twitter renders it with a nofollow tag), your easiest bet to get higher is to add content to your site. A blog with intermittent updates would be ideal, but are you really unable to write a public-facing biography for yourself?

  The ultimate question is: the purpose of Google and the Web are not to make things nice for any one user. Ideally, Google surfaces results that it thinks humans actually would be satisfied on clicking on. Let's imagine that someone, anyone out of the billions of Internet users on any given day, decides to search for your name.

  Can you put yourself in the place of that user and honestly believe you'd be satisfied with landing on your basically empty homepage? Web users don't benefit from all the meta optimizations that you've added, they are there for the content.

  beavis2 11 hrs Change your name to something unique.

  vojnovski 11 hrs It is quite unique. Almost all of the results in the first three Google result pages are legitimate, mostly pointing to a plethora of social networks profiles.

  edit: put original edit in sub-comment.

  gilleain 11 hrs Quite unique? There is one other internet user with my first name and I once accidentally got signed up to a social network account meant for him.

  Your name is either unique or it isn't...

  vojnovski 10 hrs Unique as in I can't find anyone else with my name+surname on the internet. Quite, as in I can't be sure that a person with that name does not exist (short of a SHA-1/MD5 hash as suggested above, but even there one cannot be sure: https://security.googleblog.com/2017/02/announcing-first-sha...). :)

  askvictor 10 hrs Maybe it would help to have your name on the webpage (other than in the title block)?

  hnarayanan 10 hrs You need at least a bit of interesting content!

  dsfyu404ed 10 hrs Have a unique name and commit a crime that makes the news.

  Probably not the kind of advice you're looking for. You should define the scope better. ;)

  pknerd 11 hrs Make your Google Plus Profile.

  2017/11/27
• 
  

  Infoman

  Spaniards face ham shortage as Chinese market gets taste for jamón ibérico

  15 ranit 3 hrs 2

  https://www.theguardian.com/world/2017/nov/26/spaniards-face-ham-shortage-as-chinese-market-gets-taste-for-jamon-iberico

  http://news.ycombinator.com/item?id=15784508

  Having discovered the joys of French wine, caviar and truffles, China’s new rich are turning to a new gourmet delicacy to satisfy their demand for luxury goods from the west: Spain’s jamón ibérico, or Iberian ham. But demand is now threatening to outstrip supply, leaving Spaniards facing steep price rises in their most prized Christmas delicacy.

  The recent lifting of import restrictions has allowed top-of-the-range ham to find its “rightful place in the market, alongside caviar and truffles”, René Lemée, the head of exports for the famous Cinco Jotas brand, told El País newspaper.

  The Chinese, pork lovers par excellence, have now been seduced by jamón ibérico. The problem is that the best ham takes years to produce and, as demand outstrips supply, it is pushing up the price by as much as 10%. A 7.5kg leg sells at between €150 and €600 (£135-£540).

  Spanish ham comes in many forms, but to be defined as jamón ibérico de bellota (acorn-fed Iberian ham), which is what the Chinese want, it must first come from Iberian blackfoot pigs, or from 50% crossbreeds. These pigs must then spend several months of the year roaming the dehesa, a pasture planted with oaks, feeding on grass and acorns. During the last few months before being slaughtered they must live exclusively on this diet.

  Iberian pigs search for acorns Iberian pigs search for acorns. Photograph: Karen Robinson for the Observer Not only are there relatively small areas of dehesa – mostly in north-west and western Spain – but each pig needs about two hectares (five acres) to fulfil its needs. Once slaughtered, the animals’ legs are plunged into vats of salt and hung and dry-cured over a range of temperatures for a minimum of 36 months, with the best hams cured for about 48 months.

  “It’s inevitable that the price in Spain is going to rise,” said Roberto Batres, the director of Shanghai de Delaiberia Gold, which exports ham, wine and olive oil to China. “The companies licenced to trade in China don’t have enough jamón de bellota to meet Chinese demand.”

  In an effort to meet demand the Chinese have started importing raw frozen pork from Iberian pigs and curing the meat themselves, although Batres says the product is excessively salty.

  The production and consumption of top-quality ham is the subject of the same awe and mystery as the making of fine wine. Cutting de-boned jamón de bellota on a ham-slicing machine is regarded as sacrilege. The leg must be bolted on to a frame called a jamonero and then cut by hand using a long, narrow blade. Most towns in the ham-producing areas of Extremadura, Castilla y León and Andalucía hold solemn ham-slicing competitions, often attended by hundreds of spectators.

  “They have established a ham-cutting school in China and a professional association,” said Batres. “That’s a sign of how far the product has penetrated the local market.”

  2017/11/27
• 
  

  Infoman

  Facebook Is the Junk Food of Socializing (2015)

  338 dnetesn 12 hrs 123

  http://nautil.us/blog/why-facebook-is-the-junk-food-of-socializing

  http://news.ycombinator.com/item?id=15782014

  Have you ever been walking in a dark alley and seen something that you thought was a crouching person, but it turned out to be a garbage bag or something similarly innocuous? Me too.

  Have you ever seen a person crouching in a dark alley and mistaken it for a garbage bag? Me neither. Why does the error go one way and not the other?

  Klattistock via Shutterstock Human beings are intensely social animals. We live in hierarchical social environments in which our comfort, reproduction, and very survival depend on our relationships with other people. As a result, we are very good at thinking about things in social ways. In fact, some scientists have argued that the evolutionary arms race for strategic social thinking—either for competition, for cooperation, or both—was a large part of why we became so intelligent as a species.

  This affinity for social reasoning, however, has resulted in systematic quirks in human reasoning about the non-human. This happens in two ways. First, we tend to see humanlike agency where there isn’t any, a common form of pareidolia. Many people view the sun as happy, for instance, and in religions the world over, diseases are seen as curses cast by witches. This effect has been argued to be one of the main reasons religions exist at all: People imagine that there must be supernatural beings behind the scenes, making the world work the way it does.1 Second, we are more prone to believe in explanations when they are couched in terms of the everyday psychology people use to explain and predict people’s behavior. Teachers sometimes take advantage of this, using “anthropomorphic” glosses on natural phenomena to help their students learn (e.g., “the water wants to find its level.”)

  Why would we evolve to have a systematic error like this? Like most biases, it takes advantage of patterns in our environment to help us (or, more accurately, paleolithic people) reproduce and survive. In the environment where humans first evolved, mistaking a log for a lion is much safer than mistaking a lion for a log, favoring the survival of those who err on the side of seeing agency in many places. And for a hunter-gatherer at greater risk from wild animals and interpersonal violence than we face today, living things tend to be more dangerous than non-living things. We tend to see agency in everything, and children have it more than adults, suggesting that it has an inborn element.

  There are some interesting ramifications of this. In the 1990s, human-computer-interaction researchers Reeves and Nass replicated social psychology experiments, but rather than interacting with other people, participants interacted with computers (pdf). For example, the researchers put a blue ribbon around a participant’s arm and a blue piece of paper around a computer’s monitor. Participants were told that that computer was on their team, and that another computer, adorned with red paper, was on the other team. Participants believed that the spell checker on the “teammate” computer caught more errors. This is because we think about computers (or characters in fiction, or gods) using the same reasoning processes we do when we reason about other people. That experiment is just one of many fascinating (and often hilarious) examples.

  The other interesting effect of this is that we treat virtual people as real people. Experiments show that, at some level, people tend to think of the characters on their favorite TV shows as personal friends—even if those characters are wizards or vampires.

  Similarly, when we interact with “friends” on social-networking sites or through texting, it can feel like we’re getting quality social contact, but we are not. It turns out that face-to-face interaction with other people—real people, right in front of us, not characters on TV or friends we communicate via text messages—is absolutely vital for longevity and happiness. In fact, it is a larger contributor than exercise or diet!2

  We need to remind ourselves of our evolutionary history, where we evolved without exposure to realistic representations of people. Back then, if you saw something that looked like a person, by golly it was a person. When you look at a video of a person, most of your brain thinks it’s real—the fusiform face area of your brain area reacts identically whether you’re looking at a real face or a picture of one (in fact, most experiments investigating this part of the brain do not use real faces at all, but photos or videos of them).

  The errors we make when we view non-human things as human satisfies our desire to interact with other people without giving us many of the benefits. In the moment, watching TV feels good; it satisfies your desire to be with other people. But it’s the visual equivalent of empty calories—delicious but not nutritious.

  Get together with a friend instead. Your brain will thank you.

  References

  1. Bering, J. (2011). The Belief Instinct: The Psychology of Souls, Destiny, and the Meaning of Life. W.W. Norton & Company.

  2. Pinker, S. (2014). The Village Effect: How Face-to-Face Contact Can Make Us Happier and Healthier. Random House Canada.

  Jim Davies is the author or Riveted: The Science of Why Jokes Make Us Laugh, Movies Make Us Cry, and Religion Makes Us Feel One with the Universe. He teaches cognitive science at Carleton University.

  2017/11/27
• 
  

  Infoman

  自從我上星期二寫過以太幣（Ethereum）呢隻加密貨幣要留意之後，至今已經升近兩成。而比起兩星期前我開始研究呢隻加密幣開始，更加升近五成。全世界每個月都有新嘅加密貨幣推出，隻隻都有特定用途，七成都係用以太幣嘅blockchain，用以太幣做交收，令以太幣有剛性需求。就係因為以太幣保持需求，有人排隊等住買，令以太幣有價有市。投機？可能係，唔排除突然間有一日全世界政府要禁絕加密貨幣，又或者封晒全部加密貨幣交易所嘅銀行戶口，咁你嘅投機隨時化為烏有。但係你預一筆輸晒都唔肉赤嘅銀両去買加密貨幣，不外乎Bitcoin同以太幣，隨時可以賺番你錯過了騰訊（00700）的機會。

  加密貨幣有機會被政府禁，但唔會由政府去主導搞隻新嘅。因為加密貨幣最大嘅特點，係沒有中央管理，分散由各參與者共管。參與者仲係不分國界、沒有地域限制。成套理念就係要反中央、反集權、反政府，邏輯上又點會可以由政府主導搞加密貨幣？如果美國政府搞Bitcoin，咁呢隻Bitcoin同美金又會有什麼分別？

  亦因為加密貨幣係反政府嘅產物，佢俾政府禁或者管係遲早嘅事，愈遲就愈難管，唔好話禁。貨幣係用嚟儲存財富同進行交易，Bitcoin同以太幣目前都可以同時做到。儲存財富你可能覺得好驚嚇，但諗真啲其實同你買啲唔派息嘅垃圾股又有什麼分別？唔單止會跌九成，仲有機會無緣無故突然被證監叫停牌，你咪一樣血本無歸？加密貨幣其實仲安全，唔會停牌，Bitcoin同以太幣都唔會跌九成。

  講到進行交易，股票唔可以當錢使，反而加密貨幣可以。你話Bitcoin同以太幣唔多商戶接受？但已經有debit card係用Bitcoin結算，商戶都唔使接受Bitcoin，你已經可以用Bitcoin消費。遠嘅唔講，就連香港，最近同科技客戶簽約，亦有指明要收以太幣，唔收港紙。有人已經願意收加密貨幣，並不限於駭客勒索。今年最佳投資，未係騰訊。雖然你錯過了騰訊，但未錯過以太幣。

  2017/11/27
• 
  

  Infoman

  創業不一定與錢有關，人愈是一無所有，創新潛能反而愈有可能被激發出來。美國史丹福大學幾年前做過的實驗，也許可以給林鄭和港人送上錢也買不到的創業錦囊。

  實驗以比賽形式進行，史丹福商學院研究生被分成14組，每組獲發一個內藏5美元的信封。這5塊錢，就是接受挑戰學員的「種子基金」（seed funding）。

  參與比賽的團隊於某個星期三獲發「資金」，所有14組必須在周日晚指定時間前完成作業。在這四天裏，各組可以於第一日或最後一日定出作戰大計，惟信封一經拆開，參賽隊伍必須在兩小時內執行𢱑銀計劃，掙得最多錢的一組就是冠軍。比賽結束翌日（星期一下午），各組不論勝負，都要向其他史丹福商學院同學講解應戰策略及背後思維，限時3分鐘內完成。

  五蚊雞挑戰

  5美元幹得了什麼？假設自己是參賽者，許多人恐怕會第一時間想到買六合彩。此法儘管慳水慳力，但以中彩票（即使是安慰獎）機率之低，這個選項跟不戰而降何異之有？美國頂尖學府的尖子學員畢竟與眾不同，參賽者大都很快便意識到不應被「種子基金」束縛，要殺出重圍，必須設想自己一無所有，這樣才可盡情釋放潛能發揮創意。

  結果顯示，接受「五蚊雞挑戰」的14組，平均資金回報率（return on investment, ROI）高達40倍，即5美元創始資本淨賺200美元，勝出的一隊純利更逾600美元，回報率百倍不止。這個數字其實也低估了學生的賺錢能力，皆因許多隊伍由始至終俱未動用過信封裏的錢，以此而論，無本生利矣！

  年輕人創業，要錢無錢要人無人，還要給家長大潑冷水，埋怨自己好高騖遠，不夠腳踏實地。在現實世界中，這些才是有意創業之輩面對的實際困難。史丹福的實驗也許未有充分考慮這些因素，但每組只發資金「五蚊雞」的構想，正是為了迫學員於最惡劣的處境下尋找搵錢機會、挑戰傳統營商思維，運用創意替有限資源爭取最大回報。從這點着眼，該校的實驗對力求在創新創業方面急起直追的香港不無啟發作用。

  調整戰略奏效

  參賽隊伍多達14組，篇幅所限，難以逐一表述。老畢揀選了個人特別有感覺的三個案例（包括勝出的一個）跟讀者分享，且以A、B、C組名之。

  A組︰隊員發現校園附近有幾家餐廳，周六晚上例必大排長龍，食客望穿秋水也等不到座位好好醫肚。A組參賽者腦子一轉，何不分批到各家餐廳「攞籌」，於店員叫出號碼前向不願輪候的食客轉售？此招果然管用，甘願付出最多20美元「買籌」的食客出乎意料地多，令A組喜出望外。

  隊員在執行「作戰計劃」時，還得出了一個重要觀察，並按所見調整策略。他們發現，女生「售籌」表現遠勝男生，於是馬上作出調動，男隊員專責在各餐館之間穿梭留座，女隊員則緊守崗位，伺機把座位售出。這招「美人計」煞食得很，大大提高了A組的作戰效果。

  老畢曾經懷疑過，像A組隊員那樣，有策略地向食客轉售享用一頓飯的權利，在法律上是否存在灰色地帶？然而，轉念一想，A組隊員的行為並不涉及以公價囤積商品或服務，然後利用供不應求抬價圖利，在概念上應有別於演唱會或電影門票的所謂「黃牛黨」活動。是耶非耶，還得請教法律專家，可是以史丹福法學人才之眾，A組的做法若有踩界之嫌，參賽者大概早已被DQ。既然無人質疑，想必問題不大。

  巧合得很，在下於剛過去的周末「舊地重遊」，與家人到早前提及的鰂魚涌商場用膳，一如以往，這次也擠滿了輪候入座的「飢民」。在同一層營業的三家食肆中，以做日式火鍋放題那家最受食客歡迎。北風初起，火鍋店門前較平素更多人，畢爸爸趨前一問，店員隨即勸離，皆因以當晚的輪候人潮，等到十一點恐怕都無得食，而火鍋店是在十點鐘打烊的。老畢舉家只好「知難而退」，另覓場所醫肚。史丹福A組參賽者的妙着若用於香港，效果看來也會相當不錯。

  B組︰參賽者於學生會門前設置「攤檔」，免費替同學的單車輪胎量度氣壓，若發現需要加氣，盛惠一蚊雞。B組隊員起初頗有不安之感，彷彿在抽同學水攞人便宜。後來發現，許多人懶得自己動手加氣，對有人代勞心懷「感恩」；就是這種便利，促使B組於執行計劃頭一個鐘（限時兩粒鐘）內決定改變策略，不為加氣定下固定報酬，轉而要求弟兄姊妹「隨心」，變成以捐獻形式提供服務。

  此一變陣大顯威力，「捐款」源源不絕，遠非定額收費可比。與前例一樣，B組參賽者邊操作邊修訂戰術，根據用家反應作出調度，從而令策略不斷優化。

  人才有價

  C組︰這是勝出的一隊，在比賽中淨賺超過600美元。從一開始，C組參賽者已沒有理會5美元或兩小時這等「旁枝末節」，極速認定手上最值錢的資源，莫過於比賽結束翌日向同學介紹計劃的3分鐘。

  該組為一家渴望招聘商學院菁英的公司製作了一個3分鐘「廣告」，同時善價沽出那3分鐘的推廣時段，就此擊敗對手贏得冠軍。C組隊員深知人才有價，跑出實至名歸。

  不管大家是否認同參賽者為脫穎而出所採用的手段，創意跟資源是否豐厚並無必然關係，接受「五蚊雞挑戰」的學生無不了然於胸。

  社交媒體一哥Facebook的故事，年輕一輩比老畢更清楚，公司發展至今時今日的地步，並非一般人以至其創辦者始料所能及。可是，強如Facebook，不也源於為校友分享生活點滴提供更佳渠道這個小小的意念？由此可見，天大的成功往往都拜無心插柳所賜，不管五蚊雞還是五百萬，年輕人都沒必要受銀碼制約。創業，最緊要仲係講個心！

  2017/11/27
• 
  

  Infoman

  美國國債孳息曲線趨平，10年期與2年期息差近日收窄至10年來最小，作為近年全球經濟復甦領頭羊的美國，是否已響起經濟步向衰退的警號，引起市場熱議。有基金經理直言，美債孳息曲線扁平化是目前主要宏觀風險，源於全球債務水平高企；亦有大行不覺得擔心，認為未必預示衰退來臨，甚至質疑孳息曲線已失去像過去作為經濟寒暑表的重要指標地位。

  長短債息差十年最小

  隨着聯儲局12月加息的預期高漲，引致近期美國短期國債孳息率攀升、長債孳息率下跌，與一個月前比較，孳息曲線顯著趨平。

  本月22日（上周三），美國10年期國債孳息率下跌超過4點子，與2年期孳息率的息差，收窄至不足0.6厘的十年最小幅度，至上周五息差仍維持0.6厘。

  歷史上每當美債孳息曲線扁平化，甚至出現倒掛（短息高於長息）時，往往是經濟衰退的警號。例如在2008年金融海嘯之前，美債孳息曲線早已日趨平坦，其後美國經濟陷入大蕭條以來最惡劣的境況。由於長債息率向下反映市場預期通脹低迷，即將卸任的聯儲局主席耶倫卻堅持在通脹未脫弱勢時加息，一直備受爭議。

  不過，對於今次孳息曲線趨平是否不景氣的凶兆，不少分析仍抱懷疑。美銀美林指出，對曲線扁平化不感憂慮，認為聯儲局或把此現象視為是利好經濟增長的金融狀況，多於衰退警號；該行又認為央行對孳息曲線的管理，已削弱其作為經濟前瞻訊號的能力。

  木星資產管理金融股票基金經理包諾賢表示，美債孳息曲線扁平化確是目前主要風險，他對扁平化原因有數個解讀。首先全球債務水平高企，債務承接困難，引發對未來的憂慮；在全球低息環境下，大量資金湧入10年期美債，「日本接近零息，歐央行繼續泵水，現時意大利10年期國債回報率為2%，但同年期的美債有2.3%，你不會買意大利國債。」其他原因包括人口老化降低購買力、人工智能等新科技降低成本，緩和對通脹的預期。

  美就業理想 企業樂觀

  包諾賢指出，孳息曲線扁平化意味銀行淨息差收窄，將影響信貸業務，但銀行可透過業務多元化抵消影響，例如拓展財富管理等收費業務，而非依賴息差收益。

  Capital Group投資總監Jeremy Cunningham承認，美債孳息曲線扁平化，反映缺乏通脹壓力的預期，亦引起對經濟衰退風險的警惕，但他覺得，美國經濟仍處於擴張期，不認同在未來12個月會出現經濟衰退，「因為就業市場及消費能力依然強勁，而從企業方面了解，對未來資本開支計劃也感到樂觀」。

  不過，他提醒，曲線扁平化影響所及，美國金融業尤其銀行業首當其衝，所以旗下債券基金組合減持美國銀行板塊。因曲線扁平化會影響銀行貸款意欲，有機會殃及依賴銀行信貸的企業。

  富瑞的全球資金流報告顯示，高息債基金連續4周錄得淨流出，單計截至11月22日的兩周內，淨賣盤便超過90億美元（逾702億港元），拖累高息債價格下跌。分析認為，近期長短期美債息差顯著收窄，反映市場對未來美國通脹及加息預期降溫，將降低高息債的吸引力。

  採訪、撰文︰ 劉思敏

  2017/11/27
• 
  

  Infoman

  Javascript FileReader Multiple Images

  Ask Question

  https://stackoverflow.com/questions/29218333/javascript-filereader-multiple-images

  I am trying to implement javascript's FileReader Interface in my project.

  The requirement: There is a file input field which is "multiple" enabled, I want the user should select a few images and should see the images on the page even before hitting submit(so that (s)he may delete it if (s)he wants!). But the problem is that only one image is displayed on the screen. The tags are created but the src is empty except for the last image.

  The code:

  $('document').ready(function () { $("input[name='abc[]']").change(function (e) { console.log(e.originalEvent.srcElement.files.length); for (var i = 1; i <= e.originalEvent.srcElement.files.length; i++) { var file = e.originalEvent.srcElement.files[i-1]; var img = document.createElement("img"); img.id = "image"+i; var reader = new FileReader(); reader.onloadend = function () { img.src = reader.result; } reader.readAsDataURL(file); $("#image"+(i-1)).after(img); } }); });

  For Example, in the image selection popup if I have selected img1. img2 and img3, only img3 is displayed. however, on hitting submit I do get all the images at the server side: enter image description here

  What am I missing here?

  1 Answer

  Have a look at How do JavaScript closures work?

  https://stackoverflow.com/questions/111102/how-do-javascript-closures-work

  Your for onloadend callback is going to fire after the for loop completes, therefore img will be set to the last image element created when onloadend fires for each FileReader you created. A simple workaround to this closure issue is to use an IIFE to return a function that uses the value of the img variable at that instant in the loop to use as the handler

          reader.onloadend = (function (img) {
              return function(){
                  img.src = reader.result;
              };
          })(img)
  

  or use JQuery's each

      $.each(e.originalEvent.srcElement.files, function(i, file) {
  
          var img = document.createElement("img");
          img.id = "image"+(i+1);
          var reader = new FileReader();
          reader.onloadend = function () {
              img.src = reader.result;
          }
          reader.readAsDataURL(file);
          $("#image"+i).after(img);
      });
  

  shareimprove this answer edited May 23 at 10:27

  Community♦ 11 answered Mar 24 '15 at 16:58

  Musa 72.8k127694

  worked like a charm, thanks a ton! – Shekhar Joshi Mar 24 '15 at 18:23 add a comment

  2017/11/26
• 
  

  Infoman

  執筆之時正值感恩節假期，美國人都在網購shopping，股市淡靜，不過中港氣氛就明顯不同，內地整治現金貸平台，實質是想清理定息理財產品，銀根緊張由債市蔓延至股市，捧上天的「白馬股」、「漂亮50」轉瞬被狂沽。

  龍頭領行業提升質素

  事實上不少理財產品，年初至今正是重押「白馬股」，市場定律有借有還，筆者相信A股沽貨潮看來要持續些時日，猶幸淡風暫時未吹到港股，不過北水受挫，多少會影響港股短線動力，由現在至年底，相信是選股中長期收集，較日日炒出炒入更合宜。

  科網股獨大令「馬太效應」為人熟悉，其實循此思路亦可在各行業發掘其他股份。

  「馬太效應」是強者愈強，弱者愈弱，只要比對手有多丁點的優勢，成為龍頭企業就可以將對手一步步逼向死角，盡得整個行業市場份額跟盈利，BAT （百度、阿里巴巴、騰訊〔00700〕）雄霸中國互聯網市場就是範例。BAT以外，中國不少行業都形成一至兩家龍頭獨大格局，例如家電有美的、格力，乳業有伊利、蒙牛（02319）等，對中國政府而言，亦樂見民生消費行業有全國龍頭出現。

  以食品行業為例，地區山寨式公司一味靠平做生意，品牌面目糢糊，由於機會成本低，於是造假或黑心食品問題無日無之，如果是全國龍頭企業，出事後雖然官方有時處罰上會手下留情，但至少需要承擔責任，不能輕易一走了之，企業有保住招牌的意識，長遠而言產品質素亦會有改善。

  打經濟戰影響更深遠

  再進一步看，今日在內地做生意靠的「關係」，不再是與領導人握過手那麼表面，要成為行業龍頭，營運能力及執行力是基本功，同樣重要是對官方有實質貢獻，晚清「紅頂商人」胡雪巖是個好例子。左宗棠攻下新疆，軍費籌措都由胡雪巖一力承擔，亦是他由富入貴的關鍵，現代國家間不會攻城掠地，但是打經濟戰及資訊戰，影響更廣闊深遠，支付寶和騰訊支付，正進軍世界各國支付市場，當北歐路邊小攤都在用支付寶，港鐵（00066）及的士都計劃要使用，中國網絡巨頭藉此與各國銀行系統連結，長此下去會是令人民幣變成「大到不能倒」的關鍵一步。

  套用「胡雪巖思維」，土炮製造業轉移海外技術，落實製造業國產化，絕對是「做到嘢」，年代久遠是吉利（00175）併購富豪汽車，近期一點有美的收購德國機械人製造商庫卡，京東方（00710）在OLED手機面板生產開始有進展，有望打破現時南韓三星的壟斷，這類國產明星企業，經營規模在滾雪球效應下可以極高速增長，值得長期留意。

  筆者客戶持有伊利、騰訊、阿里巴巴及京東方，並可能隨時買入或賣出。

  https://www.facebook.com/fryingrice

  2017/11/25
• 
  

  Infoman

  I needed to pip install Pillow in a virtualenv on 14.04 (not using system packages).

  To build pillow from PyPI inside a virtualenv (Python 2.7):

  $ sudo apt-get build-dep pillow

  $ virtualenv venv

  $ source venv/bin/activate

  (venv)$ pip install pillow

  2017/11/25
• 
  

  Infoman

  致HR/僱主：主要提供人手(各行業) 給你 歡迎 請聯繫> 建誠物流 <

  貴公司好，本公司是一間主要是屬於提供人手公司，，現主要為香港各大物流運輸公司或餐廳和學校提供倉務員、跟車員、拆櫃員、包裝員及門市店務員文職人員派傳單等等人力服務，解決人力短缺的問題。

  [You want us to provide] [提供人手]> 倉務員 跟車員 拆櫃員 雜工人員 包裝員 理貨員 收貨員 洗衣工人 會展搬運人員 搬屋人員 學校活動人員門市店務員 文職人員 打字員 派傳單員(可印刷+設計一條龍服務)​ [每天提供時間]> 最少4小時 / 最多13小時

  試用不簽合同都可以 / 安排之前簽合同都可以

  1、人手提供服務： > manpower to provide services 方式：協助貴公司招聘優秀的員工，本司只提供持有香港身份證的人士。 優勢：迅速安排，缺席替補，降低成本，節約時間，與多間不同類型公司合作。

  2、員工素質： > The quality of staff 班底 透過本公司多方面途徑招聘、及多年來管理經驗和班底、已經在很多地方工作過 同時擁有" 豐富經驗的熟手 "以致獲取方便、達至雙贏局面。誠懇服務會為貴公司帶來優越的業績成就。

  3,合法公司 : > Legal company 登記證明 本公司持有效商業登記證明(BR)及「公司註冊證明書」此為合法及有效地經營 而本公司各大團隊在過去數多年來已經擁有豐富成熟的管理經驗 這方面絕對信譽優良。

  【散工或長工之形式均受僱於我司】 本公司派遣員工到貴公司工作，員工的合同簽訂、工資發放、MPF、勞工保險等都由本公司完成，保證貴公司業務有序開展。 如有任何業務需求，請聯繫建誠物流。

  聯繫方式：高先生 852-34898979(24小時熱線)，852-51757480(手提) Fax 3743 1997 / office tel : 31604185 Email reliable367485@gmail.com whatsapp：51757480 我們期待與貴司合作！價錢可有商洽空間！ 敬祝 。

  [ 歡迎隨時 致電 或 Email 或 Whatsap 索取報價 <<<] [Feel free to call or Email or Whatsap for quotes]

  [如果您不願意繼續接收本公司郵件，請回電郵給我們] [另外可按最底"安全拒絕接收"] [If you do not want to continue to receive our mail, please email us] [In addition to the bottom of the "security refused to receive"]

  2017/11/25
• 
  

  Infoman

  Data release: list of websites that have third-party “session replay” scripts

  In a recent study we analyzed seven “session replay” services and revealed how they exfiltrate sensitive user data. Here we release the data behind our study, specifically, the list of websites from the Alexa top 1 million which embed scripts from analytics providers that offer session recording services. The appearance of a website on this list DOES NOT necessarily mean that session recordings occur, as website developers may choose not enable session recording functionality.

  For some sites, we do have evidence of session recordings occurring. We mark these with the tag “evidence of session recording”. For these sites, our measurement bots were able to detect a recording in progress, as detailed in our detection methodology below. For sites not marked with this tag, it does not mean that recordings don’t occur, simply that we don’t know if they do. That’s because many of the recording services activate their functionality only for a sample of users, either as explicitly defined by the publisher site or enforced as part of a daily recording limit. Thus, it is possible that our bot that visited the site was not included in the sample, but other users might be.

  As such, this list provides both an upper and lower bound of the presence of session recording companies on the web. Two of the 14 companies included in the data release, Yandex and Hotjar, have a diverse set of analytics services -- many of which have no overlap with session recording. The remaining companies mostly offer similar services which include: session replay, heat maps, click maps, and form analytics.

  The list below contains sites that are ranked in the top 10,000 according to Alexa. Download the zipped CSV file for the full list.

  Methodology for detecting evidence of session recording is given below

  Some of the sites in the list stopped using session replay scripts as a response to our study. Also, the list is based on crawls made between June and September 2017; sites might have changed since the measurement. Read the blog post » WebTAP Project »

  Show entriesSearch: Rank Website Session Replay Company Info 29 yandex.ru yandex.ru evidence of session recording 35 wordpress.com yandex.ru analytics script exists 45 microsoft.com clicktale.net analytics script exists 74 adobe.com clicktale.net analytics script exists 88 coccoc.com yandex.ru evidence of session recording 102 txxx.com yandex.ru analytics script exists 124 godaddy.com clicktale.net analytics script exists 136 uol.com.br hotjar.com analytics script exists 140 indiatimes.com hotjar.com analytics script exists 151 avito.ru yandex.ru analytics script exists 164 outbrain.com hotjar.com analytics script exists 177 hclips.com yandex.ru analytics script exists 196 kinogo.club yandex.ru analytics script exists 202 upornia.com yandex.ru analytics script exists 209 spotify.com sessioncam.com analytics script exists 211 livejournal.com yandex.ru analytics script exists 228 skype.com clicktale.net analytics script exists 245 softonic.com hotjar.com analytics script exists 247 files.wordpress.com yandex.ru analytics script exists 255 instructure.com hotjar.com analytics script exists 266 wittyfeed.com hotjar.com analytics script exists 279 rt.com yandex.ru analytics script exists 282 taboola.com hotjar.com analytics script exists 284 kinopoisk.ru yandex.ru analytics script exists 288 tokopedia.com hotjar.com analytics script existsShowing 1 to 25 of 1,239 entriesPrevious12345…50Next Methodology We detect evidence of session recording by combining signals from the following sources of data:

  We detect sites which embed scripts from session recording services using the network data from the September 2017 Princeton Web Census data. The list of script URL patterns used to detect these embeddings is available here. We examine several of the recording companies to determine if they have a unique “backend” URL which is only present when a recording is in progress. We discovered such URLs for Yandex Metrika, Hotjar, Mouseflow, Clicktale, and Decibel insight, and use these to mark sites across the September 2017 Princeton Web Census dataset. We use a more targeted two-step crawling measurement based on OpenWPM to measure 50,000 sites sampled from the top 1 million. First, the crawler injects a unique string to the HTML of the page and search for evidence of that value being sent to a third party in the page traffic. To detect values that may be encoded or hashed we use a detection methodology similar to previous work on email tracking. After filtering out the recipients of the unique string, we isolate pages on which at least one third party receives a large amount of HTTP POST data during the visit, but for which we do not detect a unique ID. On these sites, we perform a follow-up crawl which injects a 200KB chunk of data into the page and check if we observe a corresponding bump in the size of the data sent to the third party.

  2017/11/24
• 
  

  Infoman

  《怪奇物語》第二季(互聯網)

  昨天提及啟發《怪奇物語》的美國小說家洛夫克拉夫特（H. P. Lovecraft），生前鬱鬱不得志，一直只在低級雜誌發表恐怖奇幻小說，一貧如洗，四十六歲英年早逝，可謂天喪斯文。洛夫克拉夫特死後卻得大名，影響了史提芬金、伊藤潤二、阿倫摩爾等人，波赫士寫短篇紀念他，維勒貝克更為他立傳。到底洛夫克拉夫特有什麼好看呢？他繼承愛倫坡傳統，將故事寫得疑幻似真，有種瘋狂的詩意，後現代的想像出之以仿十九世紀文風的筆觸，在通俗的怪奇文學界，簡直是黑暗中的螢火蟲。影響《怪奇物語》的文本，是洛夫克拉夫特代表作〈克蘇魯的呼喚〉（The Call of Cthulhu）。故事第一句已耐人尋味：「世上最慈悲的事，我想，就是人沒有能力把腦中的所有內容聯繫起來。」（The most merciful thing in the world, I think, is the inability of the human mind to correlate all its contents）不能串連碎片般的知識和經驗，有何慈悲？看了故事的讀者自然明白，但我未看故事已明白了，因為記起亡友阿洛的一句話。初認識洛，他一來就這樣介紹自己：「我是個一邊坐過山車，一邊玩拼圖遊戲的人。」這樣拼圖自不可能成功，而看不見完整的圖畫，正是他賴以存活的原因；可惜他後來完成了拼圖，一切希望幻滅，人生過山車也就到了終站。〈克蘇魯的呼喚〉的確是拼圖遊戲：作者把幾個故事拼砌起來，重構出遠古怪物克蘇魯的傳說。克蘇魯頭部像八爪魚，全身鱗片，有翼，遠在人類出現前的億萬年已存在，曾統治大地。克蘇魯和其同類來自外太空，能以心靈感應溝通，它們是不死的，但當星星運行到天上某個位置，就要在黑暗中沉睡。後來出現人類，克蘇魯就用心靈感應入他們的夢，人類非常敬畏，把這類靈體稱為「偉大的古老者」（Great Old Ones），形成各種秘密宗教。洛夫克拉夫特把路易斯安那州的巫毒教，格陵蘭的Tornasuk崇拜──或稱Torngarsuk，是因紐特人的天神，時而像熊，時而像獨臂人──甚至中國山中的不死人（神仙？），統統追溯至克蘇魯，令我想起衛斯理的《頭髮》，把地球四大宗教都跟外星文明連繫起來，但〈克蘇魯的呼喚〉氣氛更懸疑，也寫得更逼真。洛夫克拉夫特甚至幻想出克蘇魯的語言，拼音為「Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn」，意思是：在拉萊耶的屋中，死去的克蘇魯一邊等待一邊做夢。據作者說，只要星星回到太古的位置，克蘇魯就會復生，統治世界。

  前兩天終於看了Netflix劇《怪奇物語》（Stranger Things）第二季，十分喜歡。故事以八十年代美國小鎮為背景，主角多數是小孩。去年第一季播出時，我曾撰文介紹此劇，女主角Eleven（簡稱El）影射陰謀論者所謂Montauk Project中，遭美國政府綁架的異能小童，El無意中打開時空缺口，不但令男孩Will迷失於異度空間，更引來另一維度的神秘怪物。今季延續故事，講重回人間的Will，早已感染異世界的病毒，更被貌似八爪魚的Shadow Monster控制思想…… 上季向《ET》致敬，今季則串燒《小魔怪》、《鬼驅人》與《異形》等八十年代經典電影，按此公式發展，第三季恐怕輪到《未來戰士》吧？儘管我很滿意這兩季，但真的擔心它被拍爛。不知道多少人是為了懷舊而看《怪》，畢竟不是所有觀眾都有八十年代回憶，或喜歡緬懷過去，所以向史匹堡致敬也只能是噱頭，絕不足以支撐一劇。我喜歡《怪》的主因，是它很能呈現美國志怪小說家H. P. Lovecraft的世界，其次是欣賞編劇的幽默感。Lovecraft對《怪》的影響是顯而易見的，比如今季登場的八爪魚怪物，就是影射Lovecraft筆下的星際惡靈Cthulhu──Cthulhu頭部像八爪魚，渾身黏液；「Cthulhu」這個字源自古希臘文「chthonios」（地底的，冥界的），也完全對應今季那個地下世界，甚或指涉另一維度的「顛倒世界」。 Lovecraft的另一影響，是他的小說總把宇宙描寫為恐怖的不可知的異域，人越探索，只會越害怕，這也是《怪》的母題。普通人想快快樂樂活下去，最好不要想得太多，更不要知得太多，馬馬虎虎用官方認可、群眾相信的「現實」來一葉障目，就可保出入平安。劇中Mike和Nancy的父母幾乎每次出場，都讓我們笑出腹肌：母親不是煲電話粥就是浸浴，父親不是看電視就是睡覺，永遠跟洞悉真相、險死還生的年輕人形成強烈對照，但到頭來他們又確實活得好好的，母親還有餘裕flirt小鮮肉。忍不住跟內子說：相比《十年》，《怪奇物語》更能拍出香港實況。

  2017/11/24
• 
  

  Infoman

  How do I permanently delete my [Facebook] account?

  120 cVwEq 1 hr 33

  https://www.facebook.com/help/224562897555674/

  http://news.ycombinator.com/item?id=15769275

  How do I permanently delete my account?

  If you don't think you'll use Facebook again, you can request to have your account permanently deleted. Please keep in mind that you won't be able to reactivate your account or retrieve anything you've added. Before you do this, you may want to download a copy of your info from Facebook. Then, if you'd like your account permanently deleted with no option for recovery, log into your account and let us know. When you delete your account, people won't be able to see it on Facebook. It may take up to 90 days from the beginning of the deletion process to delete all of the things you've posted, like your photos, status updates or other data stored in backup systems. While we are deleting this information, it is inaccessible to other people using Facebook.

  Some of the things you do on Facebook aren’t stored in your account. For example, a friend may still have messages from you even after you delete your account. That information remains after you delete your account.

  2017/11/24
• 
  

  Infoman

  上月舉行的第十九次全國人大代表大會（簡稱中共十九大）上，總書記習近平共花了3個多小時交代報告，儘管是次內容沒有重大驚喜，中國的整體發展目標仍然是「穩定增長」，但新藍圖卻提及了更深入的改革、強調產業升級和創新，以及嚴格的環保限制等關鍵項目，這或許不只對中國未來發展產生持久影響，同時也會左右投資者的決定。

  在全國人大代表大會上，中共領導人發表國家發展報告、通過重要決議，以及宣布多項未來改革，是奠定中國未來發展方向的重要啟示，故每次都成為全球投資者的焦點所在。

  六大經濟發展重點

  是次會議中並沒有公布具體的經濟增長目標，取而代之是首次亮相的2020至2050年長期發展計劃。習近平的目標是在2035年或之前，透過增強文化影響力、擴大中產階級規模、建立更加平等的社會、改善公共服務及創造更加乾淨的環境，令中國晉身為現代化的社會主義國家。然後，再於此基礎上不斷發展，目標是於2050年或之前，中國可成為一個先進且發展平衡的富裕國家。當然，前路仍然充滿挑戰。

  習近平重申中國結構轉型的重要性，並特別強調了6個經濟發展重點，分別是：

  （1）深化供給側結構性改革，除了消除產能過剩外，還要有效運用資源；

  （2）加快研究與創新；

  （3）大力發展農村；

  （4）實施區域協調發展戰略；

  （5）完善中國式社會主義的經濟體制，例如改革國有企業及促進民營經濟發展；

  （6）通過貿易自由化及「一帶一路」政策實現區域貿易和投資增長，實現經濟自由化目標。

  雖然有部分投資者對中共決策欠缺透明度及制衡力不足感到擔憂，但綜觀中共對於習近平的領導表達了明確的信任，意味着在政治穩定性、政策延續、深化改革和金融去槓桿等將繼續改善，因此亦應該受到市場歡迎。

  至於行業方面，習近平在中共十九大提到一些投資主題如升級消費、電動汽車，自動化、訊息技術基建設施、醫療服務和環保，在5年後的下一個全國人大前，或會成為中國市場的增長點。

  透過強積金捕捉機會

  相信很多投資者包括香港打工仔，都對中國的經濟前景感到樂觀。假如想參與相關市場，可以考慮透過強積金把握機會，例如中國股票基金就是其中一個選擇。

  不過，投資單一市場的風險可能相對較高，基金成員若想捕捉中國市場機會，亦可選擇或考慮在組合中加入覆蓋中國市場的成分基金，例如亞太區或大中華地區股票基金，既可分散投資風險，亦可捕捉投資機會。

  作者為安聯投資亞太區國際商業業務主管。他隔周為《信報》/信網撰文，分享管理MPF與投資心得。

  2017/11/23