Hacker News Reader

wesleyacon Thoughts.page: hosting a small webpage for your thoughts

Hey! I'm the person who made this — I don't believe there's an actual problem here, since login cookies are set on the top-level domain (and thus are inaccessible to content on subdomains), and are HTTPOnly as well.

I do notice that Stripe sets a tracking cookie (which only happens for people who pay for the service, since I don't load the Stripe JS elsewhere), so you could track pageviews with that or something. That's unfortunate — I'll probably try to move the stripe stuff to a subdomain to avoid it — but I don't see it as a big problem.

The HTTP security model is pretty awful, so there may be something I'm missing, but I did think quite carefully about this, and allowing people to use arbitrary HTML and JS was an intentional choice.

Is there a particular threat model you see here?

wesleyacon Algorithms Interviews: Theory vs. Practice

Just FYI - in many interviews, you can just say "Sorry, I'm having a panic attack. Could we do this tomorrow?". One of my friends had a panic attack during her Google interview, left came back the next day, and got the job.

So, YMMV, but people are often able to be accommodating for things like this :)

wesleyacon Plotty Bird: flappy bird on the HP7440A pen plotter

The original pens are, AFAICT, somewhat hard to come by, but we modded the pen carousel and have a 3d printed holder to put more modern pens in. With this mod, the TCO doesn't seem to high, although I didn't initially purchase/set it up, and I haven't had to do serious maintenance yet.

wesleyacon Keyboard latency

Not mentioned in the post, but I worked with Dan on this and I'm pretty sure he's talking about the iPad pro.

wesleyacon Show HN: Sysdig, a tool for Linux system exploration

Just looked at the website, and had a very "small world" feeling:

They're located in my town O.o

wesleyacon Ask HN: Glasses that act like a flashbang?

Wearing bright lights next to your face with the intent of quickly flashing them in the darkness seems like a Bad Idea.

Just sayin'

wesleyacon The new TLDs are here, do you really need Yourname.BLARGH?

Whenever people talk about new tlds, I always think mostly about names like google.con or googl.ecom. Yeah, yeah, it's cool that you can get some awesome tld, but I don't see the point. What's wrong with .com/org/net?

wesleyacon [dead]

Upvoted just to see "And" at the top of HN :P

https://news.ycombinator.com/item?id=7405846

wesleyacon Google and Password Security

Currently, the "loophole" in 2FA is that almost no one enables it. Although it's great that Google offers it, it doesn't help when >95% (Just a guess off the top of my head, but seems reasonable) of people don't enable it.

I only know one person who uses 2FA, besides myself, yet almost everyone that I know uses GMail.

wesleyacon Google and Password Security

> Oh, you're hosting it from your home DSL line? Bandwidth is the problem. Maybe you should save everything into a Dropbox public folder and link it here.

Here you are. https://dl.dropboxusercontent.com/u/92312532/Google%20and%20...

wesleyacon Google and Password Security

Thanks for letting me know. Just installed A cache plugin for WP, so hopfuly it'll be working again soon.

Strange though, I only see the load at 0.75.

wesleyacon Google and Password Security

It's not that I am concerned about my security, as I use text message verification to recover my password. My issue with this it that people who don't give their phone number to google can be effected by this.

EDIT: Just set up 2 factor auth. Looks cool, until my phone dies and I don't have the backup codes with me.

wesleyacon Google and Password Security

That is true, but all of the things in that post are still true. All of the password recovery steps will work, no matter how the backend is done.

wesleyacon Tetris and The Power Of CSS

Aww, I was expecting a game of tetris in CSS.

But awesome all the same

wesleyacon Ask HN: Anyone want to build this mockup tool?

Awesome idea. Combine with Stylish (A firefox extension) to make it even better.

wesleyacon Poll: What OS do you prefer for Web Development?

Arch is the OS I use for everything, including Web Development, in the rare occasions that I do webdev.

wesleyacon Ask HN: Any cool ideas for an M.S. thesis involving WebGL?

Off the top of my head:

Make a 3d website.

Make a game (Easier then it sounds)

Make a scripting language that compiles to WebGL.

Good luck!

wesleyacon Boston Globe: The world record Tetris game

An old article, but good all the same.

wesleyacon Is Your Product Too Engaging?

I just started using noprocrast, and it's awesome.

If you haven't used it, start!

wesleyacon Ask HN: I'm done with Gmail (a.k.a. NSA-Mail). What's the best alternative?

Yes, but that requires meeting in person. If you want to go that far, just use PGP + OCR + Air Gap.

Much simpler.

wesleyacon Dell: No, our laptops don't smell like cat urine

I like how they think the problem is that it smells like cat piss.

The problem is that it smells like cat piss.

wesleyacon Ask HN: I'm done with Gmail (a.k.a. NSA-Mail). What's the best alternative?

Ah, but paper letters are delivered by the USPS, and thus not secure against NSA spying ether.

wesleyacon Ask HN: I'm done with Gmail (a.k.a. NSA-Mail). What's the best alternative?

lavabit before it went down. As of now, PGP.

Privacy is dead, long live security!

wesleyacon Is Your Product Too Engaging?

coughhackernewscough

Not exactly the same, the there's a reason that noprocrast is there.

wesleyacon Ask HN - An App That Does Your Homework???

Here ya go:

Math - WolframAlpha

History - Wikipedia

Science - Wikipedia

Language - Google Translate

etc.

wesleyacon Nokia phone lost underwater for 3 months, still works

Any piece of consumer hardware I have should be able to survive at the least a fall from my hand. Most smartphones use glass touchscreens, and thus don't fit the bill. Funny how it turns out though, that the cheap plastic screens are more durable.

wesleyacon Nokia phone lost underwater for 3 months, still works

I have a friend who makes a show of throwing his phone on the ground and stomping on it whenever people start to talk about smartphones.

I can do the same thing, minus the stomping.

Both of our phones were made circa 2005.

wesleyacon Here’s Another Chance to Buy Google Glass

Yay, Big Brother!

wesleyacon Bedrock Linux

Very cool, but I'm happy with Arch.

wesleyacon So I’m the guy who sent the t-shirt out as a thank you

Thank you for reminding me to think before I start complaining.