HNHacker News
TopNewBestAskShowJobs

gtcode

53 karma · joined October 22, 2010

"Ok, he's listening now. Henry."
submissionscomments
gtcode··on LibHTTP: Open Source HTTP Library in C
Your described use case for a "friendly / internal" system has a limited definition in any non-trivial sized organization. It would only apply when all users of the embedded webserver already have root access to that server. This might make sense, for instance, in a small development team with a flat security hierarchy, but would be a red flag, security wise, otherwise.
gtcode··on Tell HN: Apple Store wifi attempts https MITM
Based on your description, it seems your approach has a number of flaws, which would lead to "closing out" the report of a security hole, which is a catastrophic failure in your approach.

Someone would have to go to the store in question to investigate further, in any case. Whether I offered the cert here publicly or not won't change that. I've given enough indication of a serious security problem that it merits investigation. Someone is trying to insert their own cert on a particular URL I was visiting when using the Apple Store Kahala Mall wifi.

Whoever performs the investigation can easily look into the specifics of the cert itself. Your response was detrimental to the process in addition to coming across as abrasive, and your follow-up simile related to the mechanic is further insulting. I recognize you are an expert in your field but it's not a way to work with colleagues. I offer this criticism with only the best of intentions, as someone who can well-relate to your line of thinking on such matters.

gtcode··on Tell HN: Apple Store wifi attempts https MITM
Might I suggest another approach, friend?

"Thanks for reporting. However, without details of the certificate or why it was "invalid", it will be difficult to investigate this issue further. Could you return to the Apple Store and get a copy of the invalid certificate and any other details you can gather?"

Otherwise, you come across as abrasive, at a minimum.

gtcode··on Tech Giants, Once Seen as Saviors, Are Now Viewed as Threats
How is BTC centralized? Someone did decent research on this: https://news.21.co/quantifying-decentralization-e39db233c28e
gtcode··on Global Demand for Bitcoin Shifts Wildly in Response to Regulation
No, if you are taking the long view, then Dollar Cost Averaging or other strategies are recommended. This eliminates the risks involved with trying to chase the trend.
gtcode··on EPA photos show what US looked like before pollution regulation
This might be a grammatical error, but the USA is not currently a third world country by any stretch of the imagination.
gtcode··on Ask HN: Disclaimer for limitation of liability?
Ahh, very nice, thank you for the boilerplate liability disclaimer and other advice -- will use the liability wording as an excellent starting point for a standard contract to use with future projects.
gtcode··on Ask HN: Disclaimer for limitation of liability?
Great, your comments are very helpful, thank you.
gtcode··on Ask HN: Disclaimer for limitation of liability?
This makes sense, thanks. No, I do not have it, but I am going to look into it.

May I ask how much you pay for yours, and what kind of coverage does it provide? Just looking for some type of baseline. Any recommendations on insurance companies to research?

gtcode··on Poll: Ask HN: Which web application framework programming language do you use?
PHP - Yii. Excellent.
gtcode··on Ask HN: What's your favorite IDE?
I use Komodo Edit as an IDE, and Notepad++ for miscellaneous edits. It's nice to have Notepad++ as a second editor on a second monitor for comps and the like. Netbeans and Eclipse are nice, but a bit kludgey for my taste. I do use Qt Creator for the random C++ project.

No IDE is perfect -- if it were feasible, I would love to take bits from each of the above programs and mash them up into one master IDE.

gtcode··on Epiphany, a RESTful micro PHP framework I wrote/use for my startups
Yii has Gii, which is a code generator that can be customized. Thus, the heaps of code can be created to your liking.
gtcode··on Proggit has a mini-challenge up: Word ladders
Neat little challenge. I used it to improve my Python skills. How fast can you get both programs to run? Post here!
gtcode··on Interview with Markus Frind, founder and sole-developer of Plentyoffish.com
This interview does not reveal much. This is more of a teaser than anything. It would be nice to see more technically-oriented answers beyond just some basic stats and why he uses MS technologies.
← PreviousPage 2 of 2