HNHacker News
TopNewBestAskShowJobs

y0ghur7_xxx

2,612 karma · joined May 15, 2008

submissionscomments
y0ghur7_xxx··on Firefox OS – video presentations and slides on the OS, WebAPIs
That was it. Thank you.
y0ghur7_xxx··on The definitive guide to forms based website authentication
Where I work we use something simple like kerberos/basic/digest/custom http header authentication on our apps, and then put Apache with mod_auth_form in front of it (or ISA server).

I even wrote an authentication reverse proxy[1] in java in my spare time, so I can use that to publish my apps, and have SSO across all of them (until BrowserID becomes mainstream that is). This way I centralized the cookie auth problem, and don't need to care about it in every app.

[1]http://p.r0xy.it/

y0ghur7_xxx··on Firefox OS – video presentations and slides on the OS, WebAPIs
I have the latest ff: 16.0.2.

I even tried

  $ openssl s_client -connect hacks.mozilla.org:443
from a linode vm:

  CONNECTED(00000003)
  ---
  Certificate chain
   0 s:/serialNumber=I1oZ-yurbFWiPu/xP8HIzW3f9mApQvMv/C=US/ST=California/L=Mountain View/O=Mozilla Corporation/OU=IT/CN=tbpl.mozilla.org
     i:/C=US/O=GeoTrust, Inc./CN=GeoTrust SSL CA
   1 s:/C=US/O=GeoTrust, Inc./CN=GeoTrust SSL CA
     i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
   2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
     i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
  ---
  Server certificate
  [...]
  subject=/serialNumber=I1oZ-yurbFWiPu/xP8HIzW3f9mApQvMv/C=US/ST=California/L=Mountain View/O=Mozilla Corporation/OU=IT/CN=tbpl.mozilla.org
  issuer=/C=US/O=GeoTrust, Inc./CN=GeoTrust SSL CA
Any idea?
y0ghur7_xxx··on Firefox OS – video presentations and slides on the OS, WebAPIs
Sorry for the OT, but I always get a certificate error when visiting that domain. Am I the only one?

http://www.sslshopper.com/ssl-checker.html#hostname=hacks.mo...

Says the cert is ok, but my firefox complains:

  hacks.mozilla.org uses an invalid security certificate.
  The certificate is only valid for tbpl.mozilla.org
  (Error code: ssl_error_bad_cert_domain)

Maybe there is something wrong with my network.
y0ghur7_xxx··on Is lightspeed really a limit? Solving super-luminal Special Relativity
Why is 299.792.458 m/s instantaneous from your reference frame? Like the OP, I don't understand.
y0ghur7_xxx··on Persona - Mozilla's decentralized and secure authentication system
Previous discussion: http://news.ycombinator.com/item?id=4580986
y0ghur7_xxx··on Open webOS 1.0 is here
> I don't understand the hatred of Java and love of JS.

I don't hate Java, but I hate to write the same application over and over again, one for every platform out there:

- the desktop web

- the mobile web

- iOS

- Android

- Windows Phone

- ...

With JS there is a little hope that we well be able someday to write the app once, and make it work on every device out there, if it is from Apple, Google, Microsoft, Samsung or whoever wants to enter the market next.

We are almost there, but we need hacks like PhoneGap/appMobi to make it work, and it's not optimal at the moment.

y0ghur7_xxx··on Metro Apps Can Only Be Distributed Through Windows Store
> The grandparent described the environment being "exactly" like iOS.

Let me make my point clearer: I was talking about the ability of downloading and installing apps freely from the internet. What I meant was a closed ecosystem where you can only use approved apps from the app store without the ability to install apps from third partys.

That does not mean that you can't use the terminal or XCode (if those are approved apps), or get a "developer license" to "unlock" your Mac.

y0ghur7_xxx··on Metro Apps Can Only Be Distributed Through Windows Store
I think Apples long term plan is the same: make a closed ecosystem on the Desktop exactly like the one on iOS. There is no incentive that I can see for them to keep it open. It worked well on mobile, why not do the same on the desktop?

But of course it's only speculation at this point.

y0ghur7_xxx··on Bashttpd - An http server in bash
Some other cool guy wrote this (https://github.com/tlrobinson/wwwoosh) sinatra framework in bash. I am using it to control the lights in my house with my phone.

A very simple js frontend sends get requests to wwwoosh, and some bash commands get executed to control a relays board that turns the lights on and of.

It's very simple, consumes almost no memory and is very reliable.

y0ghur7_xxx··on PostgreSQL 9.2 released
> Is there any way to solve the problem of having to create a new connection as company_X_user for every single request?

Yes you can accomplish that with Veil, but I agree, it would be nice if it was built in, but an add-on is ok too.

y0ghur7_xxx··on PostgreSQL 9.2 released
> PostreSQL can't horizontally scale easily

Sure you can. Skype did it, Hitachi¹ did it.

¹http://www.pgcon.org/2008/schedule/events/57.en.html

> properly handle JSON right now

Well it has V8 running on it.

> It also has a fixed schema

You don't need to use it like that if you don't want to.

y0ghur7_xxx··on PostgreSQL 9.2 released
HTML/JS frontend calls simple node server that does nothing but call a stored procedure like

   spc_handle_request(req_headers, req_body, http_method, ...)
stored procedure does simple routing and does something like

  insert into table (a, b, c) values (to_json(req_body).a, to_json(req_body).b, to_json(req_body).c);
or

  to_json(select * from emp);
Time to implement simple crud app: 10 minutes.
y0ghur7_xxx··on FBI Says Laptop Wasn't Hacked; Never Possessed File of Apple Device IDs
And yet they flatly deny it instead of say they're investigating or they're not sure.

They don't deny it. They say that "At this time there is no evidence indicating that an FBI laptop was compromised". That's different. The evidence is just not here at this time.

y0ghur7_xxx··on The long and sordid history of the user-agent HTTP header field
...and everyone pretended to be everyone else, and confusion abounded.

And then JavaScript driven feature detection came to be, and everyone thought it was a good idea. And the people wrung their hands and wept

y0ghur7_xxx··on NYC Just Converted 10 Payphones into Free WiFi Hotspots
Why? You would use tls anyway with any service you think is even remotely important to you.
y0ghur7_xxx··on OrmHate
>> When I'm joining multiple tables and looking for specific

>> rows/objects that match multiple restrictions, ORM turns into a

>> migrane of epic proportions.

>

> Perhaps you're doing it wrong. Put the complex query in a proc or

> view, and use the ORM to map the result set into memory. Using an ORM

> doesn't mean not using SQL when it works better.

that's what he sad: use sql when it works better. if you put it in a proc, a view or your application makes no difference.

y0ghur7_xxx··on China: Nvidia Loses Face and a 10 Million PC Order over Linux Drivers and NRE's
I am happy that the Chinese invest this much in Linux. This obviously motivates big hardware makers to release quality/OS drivers for their products, and in the end I benefit from that as well.

I remember the times I had to hack around for days to get some particular piece of hardware to work. That happens less and less, and now most of the stuff I buy just works.

Video cards and capture cards are the big exception for now, they somehow work sometimes, but this is getting better every day, and this news takes us in that direction even more.

y0ghur7_xxx··on Chrome limits off-store extension installs
> This is basically the same model that every Linux distro uses

If that were true, to install google chrome/earth or whatever on ubuntu I would have to

- get google apt repository

- add it to my list of sources

- import google repository key

- run apt-get update

- run apt-get install google earth

instead of simply doubleclicking on the the downloaded deb.

y0ghur7_xxx··on Sorting - We're Doing It Wrong
previous discussion: http://news.ycombinator.org/item?id=3040157
y0ghur7_xxx··on The Microsoft Update mechanism has been used to spread malware
The same would happen on ubuntu if someone steals the repository keys. This has nothing to do with copy protection.
y0ghur7_xxx··on Facebook To Buy Opera? Maybe.
I think the same of google and chrome, but I am almost the only one. So I think most people will not care.
y0ghur7_xxx··on ISPs Improve Their DNS Hijacking And How To Stop It
You can install PowerDNS recursor[1] or BIND on you own server and use that instead of your ISP/google DNS.

[1]http://doc.powerdns.com/built-in-recursor.html

y0ghur7_xxx··on GPL, copyleft use declining faster than ever
didn't apple take bsd and build osx on it without contributing back?
y0ghur7_xxx··on What Happens to the Coke in Coca-Cola?
I think the secret is how to mix them and in what quantities, not what the ingredients are.
y0ghur7_xxx··on V8 Engine in PostgreSQL
Are you suggesting you allow the client-side JS app to call directly against the Postgres DB or is there another approach you had in mind?

Almost directly. The JS frontend calls something like mod_libpq¹, or a very simple node.js "proxy". Something that just gets incoming http requests, executes stored procedures and sends back the response. A reverse proxy between the JS client and Postgres. That proxy can be very generic and reused between applications. All logic would live in the db.

¹http://asmith.id.au/mod_libpq.html

y0ghur7_xxx··on V8 Engine in PostgreSQL
Most apps we write at work are boring data entry apps.

You have a form, you enter data, the data is somehow aggregated and presented to you in some other form or the data is sent off to some other service that then processes the data in some other way.

Removing a layer between the JS frontend and the DB just simplifies the whole stack: if postgres can do something like

   (select * from employees).to_json
and send it to the JS frontend that's already half of the app. The other half would be

   var record = {"empId": 2, "empName": "Franz"}
   insert into employees (emp_id, emp_name) values (record.empId, record.empName);

No java, .NET, ruby or python required. Plus it makes the sysOps happy: they have less stuff to handle.
y0ghur7_xxx··on Google responds to the Mocality blog post
> since you seem to have more facts than anyone

I don't. I just repeated what Nelson Mattos wrote on his blog.

"a team of people working on a Google project improperly used Mocality’s data and misrepresented our relationship with Mocality to encourage customers to create new websites."

y0ghur7_xxx··on Google responds to the Mocality blog post
The scam was going on for months. It's not something that some employee did without telling anyone, hidden away in some office. You can't possibly contact all those businesses during work hours at google without some boss asking you what you are working on and what you are doing. And if that is possible inside google, imho something is very wrong.
y0ghur7_xxx··on On being happy
That's awesome!

This year my happiest moment was when I finished the 70km ultratail in the middle of wonderful mountains. When I arrived I was tired, but I felt like I was the boss of the world! :)

http://31337.it/files/393/jpghRPudRPuHL.jpg

← PreviousPage 13 of 17Next →