HNHacker News
TopNewBestAskShowJobs

y0ghur7_xxx

2,612 karma · joined May 15, 2008

submissionscomments
y0ghur7_xxx··on Contact form encrypts message with PGP before sending
The page loads jquery from google cdn, so at least google could inject js in the page and read the message before it gets encrypted.

I know, for a contact form this is very unlikely, but just from a security point of view, if I would write something like this, I would host js loaded by the page on my own server.

y0ghur7_xxx··on Download Windows 8.1 RTM, Visual Studio 2013 RC Today
> If the community knew just how fast the Windows team was iterating on this new release cycle, I think they might be a lot more sympathetic to this situation.

You could open source it, so the community could help.

y0ghur7_xxx··on Hacker sends this through the mail to record a video of the process
Because outside of the US people are not paranoid.
y0ghur7_xxx··on GitHub experiencing a large DDoS attack
We are using Gitlab for about half a year with Jenkins, and we could not be happier. We are about 50 devs working with it every day. It has some quirks (for example AD integration) but it has served us well, and we would not want anything else.
y0ghur7_xxx··on Microsoft’s shares sink by more than 10%
http://venturebeat.com/2013/07/13/microsofts-xbox-one-chief-...

http://www.neoseeker.com/news/23234-microsofts-one-mistake-p...

y0ghur7_xxx··on Ubisoft hacked, account data compromised
I'm using

  cat /dev/urandom |base64 |head -c20 && echo
y0ghur7_xxx··on Perfect Forward Secrecy can block the NSA, but almost no one uses it
> you probably have good reason to want any number of governments,

> foreign competitors, and individuals from knowing what you are

> doing or (at the least) your financial status.

...and you should therefore ignore PFS in https, and use something that encrypts your data so that only the recipient can read it, and not someone in the middle like google, microsoft or facebook.

y0ghur7_xxx··on Perfect Forward Secrecy can block the NSA, but almost no one uses it
> Google can't stop the NSA from slurping up traffic. But they can prevent that data from being massively decrypted via a single key.

I don't want to sound snarky, but, so what? If you want privacy you still have to encrypt data end-to-end, not end-to-[google|microsoft|yahoo|facebook]-to-end.

And, anyway, [google|microsoft|yahoo|facebook] should not know about your stuff just like the nsa or anyone else who is not the intended recipient.

y0ghur7_xxx··on Perfect Forward Secrecy can block the NSA, but almost no one uses it
Who cares? The NSA gets it's data directly from google. You need to protect yourself from all hops between you and the one you communicate with, not only from the hops between you and google.
y0ghur7_xxx··on NSA-proof encryption exists. Why doesn’t anyone use it?
> And where is the private key stored?

Securely in the Browser, and not directly accessible by js, just like a TMP chip or a smartcard. Could that be a solution?

y0ghur7_xxx··on JQuery 1.10.0 and 2.0.1 Released
Thank you all for working on this and making my webdev life and that of many others a lot easier.
y0ghur7_xxx··on PostgreSQL 9.3 Beta 1 Released
I use postgres for every hobby project I have, and oracle at work.

What I really miss in postgres is row level security like it's implemented in oracle.

To implement RLS in postgres I need to either install veil and go through the pain of configuring it or create a lot of views and work on them (but some scenarios can not be implemented like that).

y0ghur7_xxx··on Poll: At what price would you buy Google Glass?
It's not just about the price for me, but more about the fact that I have to share my whole life with google.

If I can buy one and hook it up with a backend server that I own and control I would buy for $500 (the price of a good smartphne).

y0ghur7_xxx··on Everything about Java 8
>> natural syntax like a+bc than verbose alternatives like a.add(b.multiply(c)).

> it is not more reliable because you are assuming what "+" and "" do.

You also assume what "add" and "multiply" do.

y0ghur7_xxx··on Compiling LLJS to asm.js
I am sure there is some reason this can't be done, but can we compile JavaScript to asm.js? If this can be done with C, it can be done with JS?
y0ghur7_xxx··on Firefox Operating System: Finally Launched at Mobile Congress 2013
Why did you think that? Did Mozilla not deliver at some point in the past?
y0ghur7_xxx··on Hacker News Parody Thread
> Brad Conte

I'm honestly really curious about this. Could you elaborate?

y0ghur7_xxx··on Hacker News Parody Thread
I find it a bit creepy that I got all the jokes.
y0ghur7_xxx··on Creating Mobile Version for Your Backbone.js App using jQuery Mobile
> What do you propose?

jqMobi is imho the better alternative[1] for single page mobile JS apps at the moment. But not because of the size, but because it works better.

[1]http://s2.diffuse.it/blog/show/14823-Mobile_HTML_Frameworks_...

y0ghur7_xxx··on Creating Mobile Version for Your Backbone.js App using jQuery Mobile
Last time I checked jQuery Mobile transitions worked only on iOS. If this is still the case, it's not usable for cross platform mobile web apps.
y0ghur7_xxx··on Why does Google append while(1); in front of their JSON responses?
> Thankfully, CORS lets modern browsers go cross-browser

> safely, even with private data if things are configured right.

CORS does nothing to prevent CSRF attacks, see[1]. We still need to protect against CSRF.

[1]http://www.w3.org/TR/cors/#security

y0ghur7_xxx··on Hello Chrome, it’s Firefox calling
see also http://news.ycombinator.com/item?id=5166239
y0ghur7_xxx··on JQuery Gantt editor - new release
Awesome work Roberto. Thanks for letting us use your work.
y0ghur7_xxx··on Building Firefox OS
I think it is common understanding that "Hybrid apps" are apps that run on the device, and are written with HTML, CSS and JS and leverage the device’s browser engine - not the browser - to render HTML and process the JavaScript.

PhoneGap/Cordova/appMobi apps are Hybrid apps.

y0ghur7_xxx··on Europe introduces new Banknotes
This is the European Central Bank press release: http://www.ecb.int/press/pr/date/2012/html/pr121108_1.en.htm...

and this

http://www.ecb.int/euro/banknotes/europa/html/index.en.html

Linking to

http://www.new-euro-banknotes.eu/

y0ghur7_xxx··on Junior - A Native-Looking and Feeling Mobile HTML5 Front-End Framework
How does this compare to jqMobi?

http://www.jqmobi.com/

y0ghur7_xxx··on Mozilla and Xiph's new Daala video codec to compete with h.265
I'm a bit out of the loop, but what was wrong with Theora?

Daalas goal "is to provide a free to implement, use and distribute digital media format and reference implementation with technical performance superior to h.265."

Wasn't that exactly what Theora was as well?

y0ghur7_xxx··on Playing with Go: Embarrassingly Parallel Scripts
I know it's about Go, but bash is awesome for stuff like this:

   while read line; do
   host $line | head -n1 | awk '{print $1 " -> " $4}' &
   done < domains.txt
y0ghur7_xxx··on HTML5 Datalist
It's not supported in iOS, but all recent Desktop browsers implement it (except Safari).

http://caniuse.com/#search=datalist

y0ghur7_xxx··on WebTCP: Making TCP Connections From Browser
This is an awesome hack. We really need real TCP connections from the browser. Until then this looks like a great workaround. I eagerly await the day we can use the browser for everything we do (did?) with Desktop apps.
← PreviousPage 12 of 17Next →