Hacker News Reader

zhngon Why Baidu Has Been Hijacked to Attack GitHub

Is the best way to currently prevent this is via full ssl?

Additionally, how can a site like Amazon.com run non-ssl protected pages and prevent mitm-ing? (e.g. http://www.amazon.com/dp/B00TYBBNAW/ doesn't redirect to https, but only when ordering, etc.)

zhngon “Why you should not use Uber (the car ride brokering company)”

> It requires passengers to run a nonfree program (an app).

https://m.uber.com/ doesn't require the app to be installed.

zhngon CSS Stats

I'm seeing 265 KB for Facebook's CSS.

http://cssstats.com/stats?url=http%3A%2F%2Ffacebook.com&name...

zhngon How bad is the California drought?

LADWP - Los Angeles Department of Water and Power

zhngon How a computer error helped Deep Blue beat humanity's best chess player

Direct link to documentary http://espn.go.com/video/clip?id=espn:11694550

zhngon Devices being remotely wiped in police custody

C.Y.A. - Cover your ass

zhngon Reddit source code

The legal department, not the programmer, probably dictates that the copyright headers must be in each and every file.

zhngon What Happened to U.S. Plans to Raise the H-1B Visa Ceiling?

I've seen this first hand. It does happen.

zhngon Gradually sunsetting SHA-1

The problem i have with their "neutral, lacking security" icon is that it does not indicate that anything is wrong when in fact there is. https:// should never have a neutral icon. it should be VALID or INVALID.

zhngon LinkedIn to pay nearly $6M in unpaid overtime wages and damages to 359 employees

http://www.temporarilyembarrassedmillionaires.org/

zhngon Linus Torvalds gives a tour of his home office

> for some reason people keep sending me penguins

i would be careful. there could be cameras in there.

zhngon Making of Aprilzero

traveling "costs" a lot. what must be given up in order to travel?

zhngon HTTPie is a command line HTTP client, a user-friendly cURL replacement

> Instances of the same path and name will overwrite each other, with the latest instance taking precedence. Instances of the same path but different names will add additional mappings.

> When sending cookies to a server, all cookies with a more specific path mapping should be sent before cookies with less specific path mappings. For example, a cookie "name1=foo" with a path mapping of "/" should be sent after a cookie "name1=foo2" with a path mapping of "/bar" if they are both to be sent.

http://curl.haxx.se/rfc/cookie_spec.html

zhngon Adblock Plus gives Facebook users a way to block its extended tracking efforts

instead of blocking, shouldn't we create extensions that make us appear as the same person on the web?

zhngon HTTPie is a command line HTTP client, a user-friendly cURL replacement

It should as order is important.

zhngon Ars tests Internet surveillance by spying on an NPR reporter

Using HTTPS be default may encourage more people to adopt it.

zhngon Virginia orders Uber, Lyft to stop operating in state

sex - not if you film it. then it's instantly legal

zhngon Getting local variable values in stack traces, in production

Django includes local variables and contextual lines in stack traces. https://i.imgur.com/Iyk81mp.png

zhngon The “Housing Affordability Crisis”

> reduction in the required number of parking spaces per residence unit

Can you elaborate on how this helps people? It was my thinking that requiring a minimum of 1 space per bedroom would help things. Parking is already burdensome and very costly.

zhngon Soylent Update 3/13

Don't confuse easy with inexpensive or quick.

zhngon Stick bomb

Because this video perhaps. https://www.youtube.com/watch?v=PvQ9InhEKu0

zhngon Thieves Break Into Cars Using Mysterious 'Black Box'

Read somewhere that this is possible by re-playing bluetooth (or similar) keyless entry signals. The suspect doesn't actually know what car he or she is going to unlock. So they brute force walk by any car that opens and drive off.