HNHacker News
TopNewBestAskShowJobs

woranl

605 karma · joined January 18, 2017

submissionscomments
woranl··on TLS certificates for internal services done right
I use client certificate authentication (or mTLS) to access internal services. It requires the client device to present a digital certificate during the TLS handshake, so I don’t need to white list any IP addresses.
woranl··on Improving the Trustworthiness of JavaScript on the Web
What about something like this: A javascript bookmarklet that fetches the html page with SRI, then turn the file into a blobURL and run. Within the html page, all resources are chained with SRI.
woranl··on The double standard of webhook security and API security
OAuth 1.0a requires API requests to be signed.
woranl··on Show HN: A pure WebGL image editor with filters, crop and perspective correction
It would be nice if I can feed an image blob to it, and return the edited image as a blob programmatically - i.e. without the need for an UI to open or download the image. That will help integration/embed it into other apps.
woranl··on Apple needs a Snow Sequoia
I still remember the Snow Leopard update wiped my drive clean. Talk about most solid software releases Apple ever put out. Period. Yeah right.

https://arstechnica.com/gadgets/2009/10/apple-owns-up-to-odd...

woranl··on Show HN: I built open source file sharing solution using AWS S3
If you have a dedicated bucket just for this and the authentication is just for that bucket, then is it still considered insecure?
woranl··on When something that was working, suddenly doesn't work when demoing to others
I get that a lot, just have to restart that Docker desktop to push the saved changes to volume.
woranl··on Microsoft starts testing ads in the Windows 11 Start menu
"The problem with Microsoft is they just have no taste. They have no taste and I don't mean that in a small way, I mean that in a big way" - Steve Jobs
woranl··on Oh-Auth – Abusing OAuth to take over millions of accounts
Which version of OAuth implementation is at risk? 2.0 and 1.0a are quite different.
woranl··on Working remotely can more than halve an office employee’s carbon footprint
I beg to differ. Impact will not be easily felt by businesses if it relies on trickle down consequences. In a capitalistic society, employers and employees don’t share the equal power dynamics.
woranl··on Working remotely can more than halve an office employee’s carbon footprint
Tax the companies that deliberately and unnecessarily decided to go against climate policies. Let them feel the direct economic impact for their action. If we are to shield these initiators from the consequence through a series of convoluted economic maneuvers, then nothing will get changed and it’s just business as usual.
woranl··on Working remotely can more than halve an office employee’s carbon footprint
What actually happened is the costs and wages are all jacked up and we ended up with inflation. There is no meaningful GHG emissions reduction overall.
woranl··on Working remotely can more than halve an office employee’s carbon footprint
In this case, taxing fossil fuel directly won’t reduce emissions. The increased cost to fossil fuel will simply be passed to the consumers. It just adds cost to the affected employees and makes them accountable for bad corporate policies to make a choice between livelihood and climate. The root of the problem is not addressed. The deep pocket should be accountable. It is the unnecessary emissions forced onto the working class that should be discouraged.
woranl··on Working remotely can more than halve an office employee’s carbon footprint
I don’t think companies can rightfully claim carbon neutral if they don’t account for the GHG emissions from their forced “working in the office” policy. They should be taxed heavily at the very least.
woranl··on An unconfirmed tweet about Freeport LNG is upending gas markets
Freeport buys US natural gas and turns that into LNG for export to Europe. With a plant shutdown, it’s not buying as much natural gas domestically. Hence price in US goes down. Despite still high globally.
woranl··on Using a framework will harm the maintenance of your software
Many don’t survive. You mentioned Symfony, Zend used to be equally popular. Not many people use it now.
woranl··on Using a framework will harm the maintenance of your software
Frameworks come and go. What is trendy today will be deemed obsolete a few years later. By the time when the community no longer interested in said framework, it will feel like the rug got pulled leaving many projects stranded.
woranl··on Germany to Rethink Nuclear Shutdown as Energy Crisis Deepens
Safe nuclear power is an engineering problem, whereas Russian gas is a geopolitical one. Germany has more faiths in Russia being nice than German engineering. It is a shame.
woranl··on GSuite legacy users can now get a free personal account, includes Gmail
I followed the instructions and got the confirmation email. But in Admin console under billing > subscription, my subscription is still showing google workspace business starter. Are you seeing the same?
woranl··on Attack campaign involving stolen OAuth tokens issued to third-party integrators
Isn’t this how OAuth 1.0a work? It is more secured for a reason.

https://developer.mastercard.com/blog/why-mastercard-doesnt-...

woranl··on Ruby's Email Address Regexp
There is nothing before the first @, and nothing after the last @.
woranl··on Solar-driven water splitting at 13.8% solar-to-hydrogen efficiency
People often say how battery cars are more efficient than fuel cell cars, and we should focus our resources to the former. Some even called fuel cell cars dumb. This is short sighted in my opinion. If fuel cell cars are more popular, it encourages more green hydrogen production and investment. Once there are more green hydrogen, then we can truly decarbonize the chemical and industrial sectors. There are so many industrial processes requiring hydrogen as a reactant. Fuel cell cars can be a catalyst to decarbonize sectors well beyond the auto industry.
woranl··on Ask HN: Whatever happened to Wolfram Alpha?
I use it to solve differential equations.
woranl··on How the pandemic has affected people’s perspective on travelling to work
*unnecessary
woranl··on How the pandemic has affected people’s perspective on travelling to work
Companies that required employees to work in the office, who otherwise can work from home should be heavily taxed. Taxed for generating necessary emissions.
woranl··on My tiny side project has had more impact than my decade in the software industry
Client side document rendering has a lot of potential. There is currently no open source library that can render docx file as nice as mammoth. There are some commercial libraries that rely on WASM, but they are generally bloated and you can’t read their source.
woranl··on Launch HN: Remora (YC W21) – Carbon capture for semi trucks
Refining biofuel or renewable fuel involves GHG emissions.
woranl··on Programmers: Stop Calling Yourselves Engineers
In many jurisdictions, professional engineer has a well established definition. Here is one for Ontario: https://www.peo.on.ca/about-peo/what-peo/learn-more-about-pe...

For those who don’t care about the engineering profession, you can call yourself “software doctor” or whatever. I really couldn’t care less.

woranl··on Update on Firefox Send and Firefox Notes
This is inevitable. Mozilla should focus on their browser tech and monetization, instead of creating competing services to other consumer focused startups.

Listen to the developers and implement API. Firefox web API implementation is so far behind from Chrome. It is saddening.

Sell and bring values to developers. They are your most likely customers, not the general public.

woranl··on Canadian government sides with telecoms in appeal of CRTC’s lower wholesale rate
Canadian government caved to pressure from the large carriers, who threatened to hold back investments in rural Canada unless the government plays along with their price increase scheme.

Canada, your internet is already too expensive! Talk about anti-competitive...

Page 1 of 4Next →