HNHacker News
TopNewBestAskShowJobs

anglebracket

150 karma · joined January 13, 2013

Security Person.
submissionscomments
anglebracket··on IntelliJ IDEA 13 Brings a Full Bag of Goodies to Android Developers
I haven't messed with my xmonad.hs in a long time, but adding

  setWMName "LG3D"
to my startupHook fixed most of the issues for me.
anglebracket··on Chromium: I just wanted to quickly hack an iframe blocker for personal use
Yeah, that's a design issue in RequestPolicy that I'd like to see fixed. I never use the full domain option because it's such a pain to use on sites with many subdomains.
anglebracket··on Chromium: I just wanted to quickly hack an iframe blocker for personal use
> https://addons.mozilla.org/en-US/firefox/addon/requestpolicy...

I like and use RequestPolicy on a daily baiss, but unfortunately the version on AMO hasn't been updated for some time now. There are a number of long-standing issues (like clicking links in the view source view,) including one that allows bypassing the whitelist entirely [0].

>this one has better granularity (you can specify the type of content [...]

Mmm, RequestPolicy's meant to allow or deny cross-domain communications full stop. It doesn't care too much about what happens once it's allowed.

The granularity offered in HTTP switchboard is better suited to dealing with cross-domain "annoyances" than RequestPolicy.

>[...]for each (sub)domain).

Not quite the same, but RequestPolicy allows you to use the effective TLD, full domain, or scheme + full domain + port for your rules (it's under preferences.) By default it uses the effective TLD.

[0] http://blog.saynotolinux.com/2013/11/bypassing-requestpolicy...

anglebracket··on Nordstrom Finds Cash Register Skimmers
Credit card readers may use PS/2 connectors[1]. There are POS keyboards with integrated card readers that use PS/2 connectors, as well [2].

[1] http://support.quickbooks.intuit.com/opencms/sites/default/I...

[2] http://www.ebay.com/itm/CHERRY-MY8000-BEIGE-PS-2-KEYBOARD-CR...

anglebracket··on How to crash IE9 with some simple CSS
>XML Data Islands come to mind as something that has legitimately anchored companies I've worked with to IE6

Looking at the pages describing XML data islands, it looks like it would be a day's work to make a shim for other browsers using jQuery.

What other "features" would you miss out on by not using IE6?

anglebracket··on “The AT&T Hacker” Sentenced To 41 Months In Prison
>Sounds like a bunch of victim blaming

Ironic that you should say that, considering that Weev's defense is essentially "her parameters were all hanging out and it was just so easy."

anglebracket··on SSL + CNAME + static files hosting on GAE: almost free
How does this handle the majority of users who use webmail clients?
anglebracket··on Stanford Female CS Student: I Fight Impostor Syndrome
>Is it really so insulting that she didn't say "girls and boys"

Agree. There's nothing in the article that even suggests that this phenomenon only applies to, or more often applies to women.

The "to all the girls" part is clearly due to the fact that the article is written by a woman and posted on a site mostly directed towards women.

EDIT: It looks like the article's been edited since it was originally posted, and that it used the wording "this experience applies to women (...)." I still don't think this is a major issue since the article was meant to assuage the concerns of someone who's experiencing impostor syndrome, and again, the article is written by a woman and posted on a site mostly directed towards women.

anglebracket··on Diablo in JavaScript
The click handler is registered on the canvas and it checks e.offsetX. On Firefox, some people use e.layerX, but it's not exactly the same thing [0]. Someone posted a useful polyfill on JQuery's bugtracker [1].

Firefox should just support offsetX as well, but they don't, for whatever reason.

[0] https://bugzilla.mozilla.org/show_bug.cgi?id=122665#c3

[1] http://bugs.jquery.com/ticket/8523#comment:16

anglebracket··on Ember.js or Angular.js?
John Lindquist's videos are a godsend when it comes to learning Angular. His videos finally convinced me to switch to doing all of my web development in IDEA (since I had a license anyways) with the AngularJS plugin.

I found out about his videos through the other ones he put on JetBrains TV[0]. If you're looking for an absolute crash course in AngularJS, the ones on JetBrains TV are the best.

[0] http://tv.jetbrains.net/channel/webstorm/angularjs , http://tv.jetbrains.net/videocontent/angularjs-custom-compon...

anglebracket··on Chrome Displaying Advertisements On Dashboard Page
Sorry, I should have read the parent post more carefully. However, I still think that's it's valid to compare Chrome and HN strictly on "freeness" regardless of whether or not they're the same kind of product.

We're talking about advertisements and the advertisement's only one one page. The scope of the actual advertisement is roughly the same as it is on HN. The fact that an advertisement in the default tab of a browser is likely to have more viewers is irrelevant.

anglebracket··on Chrome Displaying Advertisements On Dashboard Page
I don't see what reach has to do with making HN "free" and Chrome "not free" if they both use space in their interfaces to deliver advertisements. Arguably, Chrome would be more "free" since HN displays its advertisements more prominently than Chrome's and they masquerade as user-generated content. Is there more to your metric?
anglebracket··on I’m Tired Of Companies Ripping off our site, So I’m Calling Them Out
If minification and obfuscation were the only things being done, then your analogy would be sound, but tricks like this also have the effect of degrading the experience for legitimate users with javascript disabled.

Adding a dependency on javascript for static content doesn't seem like a good idea to me.

anglebracket··on Iceland Kicked Out FBI Agents Who Flew in Unannounced to Investigate WikiLeaks
Especially since the actual visit was in 2011.
anglebracket··on Goodbye Jody. You Really Were Awesome
I can't say for sure, there's not a whole lot of info about the circumstances.

Reading into the last couple of paragraphs, it sounds like may have comitted suicide, but that's just speculation.

anglebracket··on JSTOR Statement on Aaron Swartz
He did return the data, in a sense. He gave JSTOR the hard drives containing the articles he copied and assured them that it was the only copy.

Source: https://www.nytimes.com/2011/07/20/us/20compute.html?_r=0

You're right in that return is probably the wrong word though, because it implies that they were "gone" in the first place.

← PreviousPage 2 of 2