Hacker News Reader

jacopofar2on This Startup Does Not Exist

Is it my impression or lately there's a boom of generated sites? Like https://pirolisi.ml/ or Polygen

jacopofar2on 153k Ether Stolen in Parity Multi-Sig Attack

Except for that DAO of last summer, in that case the law changed...

jacopofar2on Emoji in SQL – Using Emoji as SQL Identifiers

Have you tried it in production? It would be nice to have a feedback from a DBA

jacopofar2on JSON Web Tokens should be avoided

The "none" algorithm set in header is a well known problem and, for example, nodejs most used library automatically uses asymmetric keys when one is given, ignoring the header (https://github.com/auth0/node-jsonwebtoken/blob/master/verif...)

As long as the problem is known to the developers and the key is specified, I think the biggest issue of JWT is the lack of session invalidation (that is, if you log out your already emitted tokens are still valid until their expiration), but it's a good tradeoff for not having server sessions.

jacopofar2on Show HN: Markov-Avro-tools; build Markov chains out of many common sources

Wrong link, it was https://github.com/jacopofar/markov-avro-tools