HNHacker News
TopNewBestAskShowJobs

SchizoDuckie

1,296 karma · joined March 13, 2012

submissionscomments
SchizoDuckie··on Ask HN: Examples of reliable software you enjoy using
Total Commander. I've been using it since the first versions that came out for Windows 3.1 and it provided a smooth Windows transition from Norton Commander for DOS.

The changelog goes back all the way to 2002, but it's been there for waaay longer. ( http://ghisler.com/whatsnew.htm )

I hope he continues to make a healthy income from it. It's litterally the best piece of shareware in the world in my eyes, that i've happily bought a license for.

Super Awesome Footnote: I just found out that you can still get the version 6.5, which is every bit as stable as v8.51a, built for Windows 3.1 : http://www.ghisler.com/wcmd16.htm

SchizoDuckie··on What ORMs have taught me: just learn SQL (2014)
I, like many other people, also took a stab at my ORM / ActiveRecord lib (First for PHP on MySQL, later ported it to Javascript on WebSQL) and I've been following exactly the sentiment that a people here seem to have to: Don't make your ORM want to do everything. If you are going to need computed N+1 queries, write a View, or use custom SQL.

ORM / ActiveRecord is a great pattern imo, but if you want to make it do everything, like so many other techniques, you're gonna end up with a behemoth of a thing.

I've tried many different ORMs in the last couple of years, and while mine may not be the most complete or have a sexy API for joining custom query parameters into the results, I still feel my own provides the one and only syntax / workflow 'as it should be' in Javascript:

    var serie = new Serie();
    serie.name = 'Arrow';
    serie.TVDB_ID = '257655';
    serie.Persist().then(function(result) {
      console.log("Serie persisted! ", result);
    });
I've got loads of examples with jsfiddles if you want to find out more :-)

https://github.com/SchizoDuckie/CreateReadUpdateDelete.js

(browser that supports WebSQL required, obviously)

SchizoDuckie··on Paperwork: A Personal Document Manager for Scanned Documents
I'm working on something similar like on-and-off but i'm trying to remove the limitations in usability (e.g. unpack and run)

Features that I for myself want / nearly have:

- My mom should be able to install it.

- Scan from phone, upload to central server / nas

- Everything AES Encrypted when not logged in, decrypted on use (including sqlite database on shutdown)

- Documents can be decrypted with plain openssh, without having the original program.

- Fulltext search through invoices (by extracting PDF text and putting them in SQLITE fulltext indexes)

- categorisation

- built-in PDF reader / printer

SchizoDuckie··on Jailbreak firmware turns cheap digital walkie-talkie into DMR scanning receiver
I've only found out about it a couple of weeks ago too via some infosec dudes i follow on twitter. It's hugely technical and full of awesome shit and easter eggs like the microdots in this version.
SchizoDuckie··on Simulating Website Thumbnails Using Iframes
Or just use what chrome itself uses:

http://chromeutils.appspot.com/t/?url={{::site.url}}

http://chromeutils.appspot.com/t/?url=news.ycombinator.com

SchizoDuckie··on Show HN: Tufte's line graph sparklines with D3.js
d3js + underscore + jquery for a 20*100px sparkline. Sounds like you only want to use that if you're already using d3.
SchizoDuckie··on Show HN: Patchwork – Real-time notifications for OSS vulnerabilities
This article sums it up better than i can do. http://www.seancassidy.me/dont-pipe-to-your-shell.html
SchizoDuckie··on Show HN: Patchwork – Real-time notifications for OSS vulnerabilities
This just sounds like a bad idea to me. Why would you publish all this very sensitive machine info to a third party to retrieve that list? This would be a goldmine if they got hacked.

Also, don't tell your users to blindly pipe curl to sh, ever.

It would be a much better design if it worked the other way around: Aggregate recent security patches into a database and send those to the servers, and have them do a local compare of vulnerabilities. You could charge for the database access and still keep your business model.

SchizoDuckie··on Dafny: A Language and Program Verifier for Functional Correctness
Eruhm

Is it just me, or is describing the functional correctness of a program with another programming language asking for more problems?

SchizoDuckie··on Bug 647959 – Add Honest Achmed's root certificate (2011)
That means it's up for grabs, although dyndns.org now asks $40 A YEAR?!?!?!
SchizoDuckie··on Android Full Disk Encryption Cold Boot Attack (2012)
That was not the 'Cold Boot' I was expecting. Awesome.

The paper is really nice and readable. TL;DR: Freezing the phone makes the RAM static and not clear on reboot, giving you time to sideload their custom recovery image that iterates the ram and looks for AES encryption key patterns.

SchizoDuckie··on Ask HN: Will you pay 1$/month for?
Seriously? I just added the people important enough to congratulate outside of facebook to google calendar with a yearly returning reminder (oh, and birth year, not unimportant)
SchizoDuckie··on Notify by Facebook
Uh, no facebook, no thanks.

They don't seem to understand that their users want facebook to be a social network not a hub that controls their whole life.

SchizoDuckie··on Writing the Prince symbol in Unicode (2013)
Looks like this on Chrome Ubuntu. I'm not impressed

http://imgur.com/KlHdZ47

SchizoDuckie··on A mobile, desktop and website app with the same code
I'm doing exactly the same with http://duckie.tv/

Runs as: - Mobile (Phonegap) - Native (nw.js) - Website - Chrome extension

with exactly the same codebase.

SchizoDuckie··on A story about <input>
Now shall we talk about date pickers? With timezones? And input/output formats?

Nah, let's not :P

SchizoDuckie··on How to Pick a Front End Web Framework
> Language Checklist > > When you have answered those high-level questions, it's a good time to talk to your teammates and pick up a language!

No, No and No.

Please, just use something that's as close to plain javascript as possible. Your client will thank you because you don't have to reinvent wheels for the sake of programmer porn...

SchizoDuckie··on Show HN: Extract a unique CSS selector for any element on any page
Super cool. I can really use this for DuckieTV's custom search engine definition form i'm working on!

http://i.imgur.com/lT7hUTj.png

SchizoDuckie··on The Tenacity of Tech Recruiters
more more more :D you have me in tears here.

I recently had one in The Netherlands that was trying to look smart by using expensive words but then failed to apply the basic syntactic rules of Dutch grammar. They also always start these days by : "I can understand that you're being spammed via your linkedin profile", and then provide no excuse at all and just spam you some more.

SchizoDuckie··on The Tenacity of Tech Recruiters
Contains too much detailed information about the company and too little spelling errors.
SchizoDuckie··on Passwords are outdated, Patterns are the thing now
No. People have the same problems with patterns as with passwords. Patterns are even more predictable then passwords because a human is lazy and will create an 'easy' pattern.
SchizoDuckie··on Whenever.js: A JavaScript reinterpretation of the Whenever esolang
What is the architectural use case for passing function names as strings? You could just pass the named function around imo and not lose IDE Code completion and all that.
SchizoDuckie··on Paradeiser – An Alternative to the Hamburger Menu
Please, don't make me resize my browser for a demo, add a screenshot.

This implementation works very nice for sites that have like 6 menu items, but the reason designers loved these fricking hamburger menus is because they could stuff a shitload of content in there.

Sidenote: position:fixed still doesn't always work properly on mobile, plus a navigation bar should really be at the bottom of a page for thumb-accessibility (but that's just a matter of tweaking some css, ofcourse) Sidenote2: Why do you hide it on desktop? Mystery meat!

Good work, keep the initiatives coming!

SchizoDuckie··on BPMN 2.0 rendering toolkit and web modeler
All I wanted to know is 'what the hell is bpnm' but apparently that's a question that never gets asked.
SchizoDuckie··on Google plans monthly security updates for Nexus phones
I'm more interested in what they're going to do to push updates to android 2.x+ devices. Will it even be technically possible without vendors?
SchizoDuckie··on RobotJS – Node.js Desktop Automation
It's very suitable! (I'm using it in DuckieTV in production, works like a charm!)

Basically, you can use xmlhttp to fetch any webpage becaused of relaxed restrictions. then use DOMParser (a built-in browser component, that you can even shim) to create a virtual DOM of that xmlhttp result, and execute regular querySelector and querySelectorAlll queries on that :)

SchizoDuckie··on RobotJS – Node.js Desktop Automation
I think it would be awesome if we can somehow hook this into some API that grabs

- the process list - list of the window positions - text under a cursor - provides an interface to create specialized keyboard/mouse actions for specific apps (because why stop at chrome?)

i'm sure this is project is going to be quite popular :)

SchizoDuckie··on Mac EFI Update 2015-001: malicious root app may be able to modify EFI flash
Related CVE:

http://www.kb.cert.org/vuls/id/577140

Applies to (at least) some DELL computers as well.

TLDR: There's a bug in some UEFI BIOSes that don't set the read-only flag when a computer comes back from sleep, thus allowing a malicious program to silently reflash the BIOS

More detailed analysis: https://reverse.put.as/2015/05/29/the-empire-strikes-back-ap...

SchizoDuckie··on RobotJS – Node.js Desktop Automation
Pro tip: create a chrome extension with permissions on all http:// and https:// sites, or run it through Node-Webkit/nw.io, then you can use the generic DOMParser and querySelectorAll with a pretty fluent interface on any site you can imagine.

example here: https://github.com/SchizoDuckie/DuckieTV/blob/angular/js/uti...

SchizoDuckie··on [dead]
How does this classify as 'hacker news'?
← PreviousPage 2 of 13Next →