HNHacker News
TopNewBestAskShowJobs

nandhp

844 karma · joined May 30, 2013

submissionscomments
nandhp··on Life Is About to Get Harder for Websites Without HTTPS
Does Hilton actually block VPNs on their standard internet, or is "VPN access" just code for "we'll give you a public IP so that IPsec traffic won't get swallowed"?
nandhp··on Life Is About to Get Harder for Websites Without HTTPS
Many captive portals operate as a LAN service, where you may be expected to type a password. If the public Wifi has a roaming agreement, that password may even be for your ISP or mobile phone provider.
nandhp··on Turn any link into a suspicious-looking one
Yes, I found that, but that's not even an inadequate error message -- it's just wrong. Firefox has no way to tell if the connection is encrypted or not because the connection is being dropped while the encryption is being established.
nandhp··on Turn any link into a suspicious-looking one
Is there any way to get SSL error messages in Firefox?

https://irc.verylegit.link/0x8c*download()194mobiads(windows... is supposed to redirect to Facebook, and it does if you use HTTP. However, over HTTPS Firefox just gives me a very generic "Secure Connection Failed" message. (Chrome is rather more helpful, giving me "ERR_CONNECTION_CLOSED".)

nandhp··on Lost Joys of the Screen Saver
XScreenSaver's closest equivalent is "rocks"; you might try something like this (unfortunately, when you ask for one color it's not white)

    rocks  -no-move -no-rotate -colors 1
nandhp··on Chipotle Reports Findings from Investigation of Payment Card Security Incident
Well, they basically have no idea -- it says in bold letters "Please note that not all locations were identified."

For reference, Wikipedia claims Chipotle has 3,010 restaurants. So at least 75%.

nandhp··on IBM, a Pioneer of Remote Work, Calls Workers Back to the Office
http://www.foxbusiness.com/features/2017/05/18/ibm-pioneer-r...
nandhp··on Google and Paint.NET need to stop misleading users (2013)
Ninite has the advantage of being self-contained in a single executable, though. Chocolatey looks like something you have to install, which makes it poorly suited for quickly installing something on a machine that's not yours.
nandhp··on Software Developers after 40, 50 and 60 Who're Still Coding
> To do it, we're using C, maybe C++, maybe Python or even perl and bash, not Java, definitely not JavaScript or any of its variants, or Erlang, or Clojure, or whatever. Not always, but much of the time. The things we need to know are scantly represented on SO.

The languages you mention using are all in the top 20 tags. Yes, JavaScript, Java, and C# are the top three, but Python is #7, C++ is #9, and C is #18. Bash is on the second page and Perl on the third, but there are a bunch of other, less trend-sensitive, tags in between (e.g. regex, string, and multithreading). http://stackoverflow.com/tags/

nandhp··on What Happens When You Send a Zero-Day to a Bank?
It was discovered today that Wells Fargo passwords are case-insensitive:

https://www.reddit.com/r/personalfinance/comments/66n4li/i_j...

nandhp··on Google Earth Redesigned
["other browsers in the near future"](https://blog.google/products/earth/welcome-home-new-google-e...), so maybe there isn't one?
nandhp··on Teeny Tiny Mansion: text adventure game formally proven to have no dead ends
[SPOILER]

It gets worse -- there are a bunch of tools you go by throughout the game. If you fail to pick up any of them, that one will be the one you need to open one of the final doors.

nandhp··on Over the Air: Exploiting Broadcom’s Wi-Fi Stack
According to GSM Arena, the 2nd generation Moto G uses a Qualcomm MSM8226 Snapdragon 400 chipset, so it shouldn't be affected by this issue.

http://www.gsmarena.com/motorola_moto_g_(2nd_gen)-6647.php

nandhp··on Tim Berners-Lee wins Turing Award
Thunderbird can also do this.
nandhp··on Google Fiber Was Doomed from the Start
> The only business model for fiber that will work to produce the competition, low prices, and world-class data transport we need — certainly in urban areas — is to get local governments involved in overseeing basic, street grid-like “dark” (passive, unlit with electronics) fiber available at a set, wholesale price to a zillion retail providers of access and services. There’s plenty of patient capital sloshing around the US that would be attracted to the steady, reliable returns this kind of investment will return. That investment could be made in the form of private lending or government bonds; the important element is that the resulting basic network be a wholesale facility that any retail actor can use at a reasonable, fair cost.

Google Fiber had promised to operate an open access network[1], but they apparently changed their mind before they launched.

[1] https://googleblog.blogspot.com/2010/02/think-big-with-gig-o...

nandhp··on Https hurts users far away from the server
> The only difference is that they also validate the organization's information of the certificate requester.

Right, but if I go to PayPal.com and the address bar says "Comcast [US]" or "National Security Agency [US]", I'll know something's up.

nandhp··on Google Cloud Platform Free Tier
I'm confused by how they're presenting the "Always Free" tier of Google App Engine. I've used the free tier of that for years and "instance hours" have never been a thing that I'm aware of. I'm also wondering if the GAE free quota will require a billing-enabled account now, as these other offers seem to require, which would be disappointing.
nandhp··on You May Want to Marry My Husband
It's from the weekly "Modern Love" column of the Style/Fashion section. It doesn't seem very out of place in that context.
nandhp··on List of Sites Affected by Cloudflare's HTTPS Traffic Leak
You might find this script I wrote to be helpful:

https://github.com/nandhp/misc-utils/blob/master/keepassx_do...

nandhp··on API Design Guide
I don't think it disappears, it just moves into the menu button, which seems fairly typical for navigation sidebars on narrow screens.
nandhp··on API Design Guide
Or for staying logged in across sessions (or not). But it should be fine for an API.
nandhp··on A change to the sell-by dates on food
Which, incidentally, was released without a rating because the MPAA wanted to rate it as NC-17.
nandhp··on ChosunTruck – Euro Truck Simulator 2 autonomous driving solution
Video: https://www.youtube.com/watch?v=w6H2eGEvzvw
nandhp··on How Stack Overflow Redesigned the Top Navigation
> I just wish it weren't fixed.

I thought the article mentioned this, but there's a user preference to turn that off ("Disable stickyness").

http://stackoverflow.com/users/preferences/

nandhp··on Wine Running on Windows with the Windows Subsystem for Linux
True, that's a possible reason, but I don't think the X server normally comes from the store. (Is there even an X server in the Windows Store?)
nandhp··on Wine Running on Windows with the Windows Subsystem for Linux
I see from the screenshot that it's running on Windows 10, Cloud Edition. I thought that the rumored Cloud Edition doesn't run any software not from the Windows store?

http://www.zdnet.com/article/microsofts-coming-windows-10-cl...

nandhp··on Save Mozilla Firefox's Best Feature
I believe one of the key reasons for dropping XUL extensions is because they don't work very well with e10s (multiprocess Firefox). I recently had occasion to use a fresh Firefox without any e10s-incompatible extensions installed, and it really felt much faster, so I think Firefox-future may also qualify as "fast browser".
nandhp··on Hollywood as We Know It Is Over
> 5$ for a "rental". Is that a joke?

Pretty much. Redbox rents new release DVDs for $1.50/day; if you are in the US, you probably have a few boxes near you.

nandhp··on Mirroring US climate data
Is this project collaborating with Archive Team? They have quite a lot of experience with this sort of scraping+archiving project (e.g. Geocities, Google Reader, Coursera, etc.).

http://archiveteam.org/index.php?title=Main_Page

nandhp··on Firefox 51.0
> But you also need to serve the page that links to the form via https

Yes, in the limit. But current best-practices for user caution ("when you're entering personal information, check the address bar for the domain name you're expecting [and a lock icon]") would be enough to thwart that attack.

← PreviousPage 2 of 11Next →