HNHacker News
TopNewBestAskShowJobs

robtoo

704 karma · joined June 8, 2011

submissionscomments
robtoo··on The Making Of Dwarf Fortress (2008)
Tarn supports himself primarily with donations from Dwarf Fortress enthusiasts.

He's been doing the donation model for years, and it looks like he receives about $3000/month: http://www.bay12forums.com/smf/index.php?topic=87996.0

robtoo··on Developer open-sources 200+ hr project after client refuses to pay
The client wouldn't pay, so he gives it to them for free anyway?
robtoo··on Microsoft Responds To Google’s Response To Microsoft’s Response
From http://puck.nether.net/~rtucker/faq/funny/amazonbn.html the B&N press release which elicited the succinct reply:

NEW YORK, NY--(BUSINESS WIRE)--November 6, 1998--The following is a statement by barnesandnoble.com

With regard to the acquisition of the Ingram Book Group, Barnes & Noble, Inc. is amused to read Jeff Bezos' quote, where he describes himself as an independent bookseller: "Goliath is always in range of a good slingshot."

Well, Mr. Bezos, what with a market capitalization of some $6 billion and more than four million customers, we suppose you know a Goliath when you see one. Your company is now worth more than Barnes & Noble, Borders, and all of the independent booksellers combined. Might we suggest that slingshots and pot shots should not be part of your arsenal.

robtoo··on Google Are Pussies
Originally discussed here: http://news.ycombinator.com/item?id=2845485
robtoo··on Security researchers hack Google’s Chrome OS
From the outline presented here, it sounds like generic web vulnerabilities, rather than something ChromeOS-specific. But with content like "hackers could have a field day accessing data on Chromebooks. [...] With Chromebooks, no data is stored on the device" it's hard to tell.

eweek has a slightly better write-up:

http://www.eweek.com/c/a/Mobile-and-Wireless/Google-Chrome-O...

In his demonstration, a friend shared a folder containing a note with malicious code, which was then accessible on the CR-48 through the ScratchPad extension. Once the note was opened, the note was able to then steal all his contacts saved in Gmail because he was already logged into Google's services.

Sounds like poorly-filtered ScratchPad notes (which presumably aren't supposed to contain executable code) combined with xss or csrf.

EDIT: Does ChromeOS give apps access to all cookies for all sites?

robtoo··on Techies Turn to Body Hacking to Ditch the Founder 15
What this article calls "body hacking", the rest of the world calls "good diet and exercise".
robtoo··on Calling Google's bluff: Which patent is bogus? Why not open source their code?
Something to do with pussies, I think. Also...

Apple working on a touchscreen smartphone? [So Google] spend billions from another business and copy everything you can, down to swipes and apps.

Apple used profits generated in one business area to fund a different one, swiping wasn't a novel concept, and "apps" is just another name for "programs".

I also particularly enjoyed that paragraph where he rails against Google for scraping content, claims that it isn't possible to block Google from scraping content, and then complains that if you do block Google from scraping content then it's unfair that they don't show that scraped content to their search users.

Or something like that. It's really hard to tell.

robtoo··on Free icons for any object in the world
Thanks.

It was interesting to see how strong my expectations are for what a search box looks like that I will simply not see something right in front of me if it breaks the established conventions.

Also: putting it on the front page only doesn't help.

robtoo··on The Nortel Loss Was Just The Beginning.
There clearly is a market for patents at the moment because large numbers of them have been changing hands, often with multiple bidders.
robtoo··on Free icons for any object in the world
No search facility? Really?

Yes, I know you can URL-hack, but a search-engine with stemming would make the site a lot more usable/useful.

robtoo··on The Nortel Loss Was Just The Beginning.
I'm getting tired of lazy reporting gushing about how many patents are involved in this or that deal, but with little or no discussion of which patents these actually are and what they cover.

A few good patents trumps a big pile of trash any day. (e.g. the current Apple/Samsung spat is about just 7 patents.)

Also...

Google is clearly willing to pay to acquire patents, but they’ve reiterated time and time again that they won’t overpay for them. “This anti-competitive strategy is also escalating the cost of patents way beyond what they’re really worth. Microsoft and Apple’s winning $4.5 billion for Nortel’s patent portfolio was nearly five times larger than the pre-auction estimate of $1 billion,” [SVP and Chief Legal Officer] Dummond wrote today.

How do you get to be SVP at a $200bn company without apparently understanding that things are worth what other people are prepared to pay for them?

robtoo··on Why Van Halen had brown M&Ms contractually removed
It's not plagiarism if it's attributed.

(edit: looks like the submission url was edited. I guess it wasn't snopes earlier.)

robtoo··on Pentagon Seeks Social Networking Experts
See also: Military's 'sock puppet' software creates fake online identities to spread pro-American propaganda

http://www.guardian.co.uk/technology/2011/mar/17/us-spy-oper...

robtoo··on Amazon App Store: Rotten To The Core
Okay, fair enough.

But I do think it is exaggerating to say that "everyone downloading the free app is harboring illusions that they're supporting the developer."

I strongly suspect that the overwhelming majority of downloaders get no further than "ooh! free stuff!" click

robtoo··on Amazon App Store: Rotten To The Core
To be honest, this is true of every product that Amazon sells.
robtoo··on Amazon App Store: Rotten To The Core
thanks to Amazon’s secret back-door deals, we made $0 on that day.

These secret back-door deals that were so secret that they were written in bold in the email, so secret that they noticed this and wrote back to amazon, and so secret that amazon then confirmed them.

They were offered a crappy deal, realized this and double-checked it, but decided to go for it anyway. When it turned out that the deal really was pretty crappy, they then act surprised and self-righteous and blog about it.

robtoo··on My Standing Desk Experiment
Unfortunately, none of your image links work.

The S3 images return "Request has expired", and Twitpic is blank (and doesn't seem to be referer-checking)

robtoo··on #RefRef - Denial of Service ( DDoS ) Tool Developed by Anonymous
It sends malformed SQL queries carrying the payload which in turn forces the servers to exhaust their own resources.

SQL injection and sending slow queries? Or hammering regular HTTP pages which run slow SQL queries (such as an unoptimised search)?

robtoo··on Opinions of a middle-end programmer
I'm a Brit and have never heard "middle-end" used like that. "Middling", yes. "Middle-end", no.

And to answer the grand-parent:

building infrastructure that will help other parts of the project -- part of why I call myself a ‘middle-end programmer’.

It seems that the author is using "middle-end" in a manner analagous to the more common "front-end" and "back-end".

Exactly what this involves is not entirely clear, but building frameworks, perhaps.

robtoo··on Researchers Expose Cunning Online Tracking Service That Can’t Be Dodged
Cache clearing doesn't affect Flash cookies [LSO's]

This is coming soon to a Chrome near you: http://blog.chromium.org/2011/04/providing-transparency-and-...

Presumably other browsers will follow.

robtoo··on Researchers Expose Cunning Online Tracking Service That Can’t Be Dodged
How then are they able to track the same user using a different browser?

Flash cookies. Presumably Silverlight has an equivalent.

(And I even heard once that Windows Media Player shares cookies with IE regardless of the browser that it is embedded in.)

robtoo··on Auditor's response to "Our security auditor is an idiot" (Update 3)
grand-parent's point is presumably that bcrypt (or similar) is a better choice than md5.
robtoo··on [dead]
Not exactly.

FF4 thinks your page is iso-8859-1 rather than utf-8 (your personal homepage too, in fact.)

I would guess IE9 has a similar issue.

You could also fix it with —

robtoo··on [dead]
http://imgur.com/tuuxl
robtoo··on [dead]
"WTF", "badass", "retardedly", and "no-bullshit" aren't exactly light and un-intimidating.
robtoo··on [dead]
– You might want to fix those encoding issues in IE9 & FF4. –
robtoo··on Vandalised home puts pressure on Airbnb
Someone else did this rough math in one of the (seemingly numerous) AirBnB threads we've had recently...

2 millions nights (claimed) @ $50 per night (est.) with 10% cut (est.) = $10m revenue

robtoo··on Raspberry Pi $25 PC goes into alpha production
I'm liking that Model A as a pocket-size emulation box for early games machines (specifically the SNES and ZX Spectrum).
robtoo··on Vandalised home puts pressure on Airbnb
I'd just assume that they needed to create an account to comment and picked the first username that came to mind. Quite logically, this was a couple of words from the reply that they had already formulated in their mind.
robtoo··on Auditor's response to "Our security auditor is an idiot" (Update 3)
This works well to make sure that your new password isn't similar to your old password.

Unfortunately, it can't be extended to make sure that the new password isn't similar to the password from two generations back.

← PreviousPage 2 of 5Next →