HNHacker News
TopNewBestAskShowJobs

bilawal

80 karma · joined June 26, 2012

http://bilaw.al/
submissionscomments
bilawal··on Ask HN: Are there any hackathons for non-students and non-graduate-students?
There is far too many hackathons for non-students, such as AngelHack, BattleHack, Startup Weekend (arguable to whether an hackathon) amongst many more.

A lot of student hackathons accept dropouts too on a case-by-case basis. But there's hackathons for all :)

bilawal··on YoAuth
The 2 hour product was doomed, but I've rewritten it enough to be secure.
bilawal··on HackCard: The world's first loyalty card for hackers
This was partly an instinctive decision, but I think it's too easy to go mobile. Part of the reasoning for having a tangible card is the novelty and the failproof factor behind it.

No advantage, but no disadvantage either.

bilawal··on Built in Manchester
Thanks for the kind words. Pittsburgh's tech scene looks pretty awesome.
bilawal··on [dead]
Align the columns and use 3 colours instead of 5 which don't go together.
bilawal··on Why iOS7 was a bad move
That's rather my point. I don't think they have done 'flat' right. Plus, what exactly is Apple-esque about the flat design in iOS7?
bilawal··on Hacking the <a> tag in 100 characters
Correct. No browsers execute onclick when you open under new tab.
bilawal··on Hacking the <a> tag in 100 characters
I've updated the pledge - I'm now asking major browsers to warn users if a link is changed to another domain from what it originally was.
bilawal··on Hacking the <a> tag in 100 characters
Okay, Phishing 2.0 may have gone a bit too far. I hold my hand up there. As for LastPass, I use that and it's great -- but this poses a problem for those who don't use LastPass, etc. or those who use mobile.
bilawal··on Hacking the <a> tag in 100 characters
Heck, if you're going to do that.. you don't even need JavaScript.

<meta http-equiv="refresh" content="0; url=http://malware.com />

bilawal··on Hacking the &lt;a&gt; tag in 100 characters
Maybe there's a side to it that I'm not aware, but as far as I know, it's become very difficult to run exploitable JS in an iframe.
bilawal··on Hacking the &lt;a&gt; tag in 100 characters
I've updated it. Sorry about that.
bilawal··on Hacking the &lt;a&gt; tag in 100 characters
Ha. I'm very much aware of preventDefault(), but to add that in my article won't make any difference to my point.
bilawal··on Hacking the &lt;a&gt; tag in 100 characters
With relative ease, you can build websites with a cheap $10 SSL that can impose to be a PayPal page. JavaScript can provide phishing and accessing cookies, but beyond that, I'm not really sure what else it can offer.

It may be simple code, but I think the title of the post explained that.

bilawal··on Hacking the &lt;a&gt; tag in 100 characters
It was purely gathering thoughts to what I consider a flaw. Sure, it's not the only way to do it -- but this is it in it's simplest form.

False redirections is the principle. I'm not sure how to fully eradicate it in that sense, but I think to bring attention to the possibility is somewhat beneficial rather than sensationalist.

bilawal··on Hacking the &lt;a&gt; tag in 100 characters
W3C only do web standards: HTML, XML, CSS, XSL, etc. According to ECMA International, they maintain JS. But I'm not sure, each browser does it's own thing.
bilawal··on Hacking the &lt;a&gt; tag in 100 characters
I'm also using Chrome 25, and it's not sending me to PayPal. Is there any particular extensions that is causing it to send you to PayPal?
bilawal··on Hacking the &lt;a&gt; tag in 100 characters
I've updated it. I went backwards from the compressed version, and missed it completely. Thanks.
bilawal··on Hacking the &lt;a&gt; tag in 100 characters
Websites don't need to use this, that's my point. Whilst it looks nicer to use it, it's not worth opening a easy door for fraudsters.
bilawal··on Hacking the &lt;a&gt; tag in 100 characters
There's always workarounds, especially with what they're doing with search results. Google can live.
bilawal··on Immigration Debate Won't End Without the Fall of Mercantilism
I don't think Latin America makes a difference. In Britain, our immigration laws lack true stringency, yet we suffer from those same third-world immigrant issues to its fullest effect even though we're only surrounded by first-world countries.
bilawal··on Why Apple’s Innovation Is Under Threat
Well it's the chaotic Jobs we all seen that emphasised his authority. Sure, Cook hasn't forgotten, but it doesn't take much to realize that he has had to operate Apple differently as CEO. This isn't about inside knowledge, it is a perspective that arguably has some validity to it.
bilawal··on Show HN: My Cool CV
With complete respect and admiration for your efforts, I don't feel like signing up because it looks atrocious. I know the project may be low budget, but even if it's free, you still need to sell it to your target market.
bilawal··on Ask HN: Do you listen to music while coding? What genre makes you more creative?
I listen to a lot of Bon Iver, The Weeknd, Rihanna, Charlie Simpson, Florence + The Machine and Ben Howard. So, soft and emotional music. Hard rock and pop music distracts me into the song. I'm increasingly moving over to instrumentals.
bilawal··on Show HN: HN In Your Terminal
Ironically, I found your gem after wanting to build my own HN CLI. Saved me a bit of time. Thanks!
bilawal··on Show HN: HN In Your Terminal
I already use hnews. http://rubygems.org/gems/hnews Good work though, looks pretty awesome!
bilawal··on How to land my dream web dev role?
By the sounds of it, you would make a brilliant "big data" backend developer (e.g. Scala, Python, etc). Lots of web-based companies need them to crunch big numbers.

But if you don't, then I would suggest building ideas that you can build and push live on the web. Lots of novelty (or useful) web apps make lots of media attention, and that would be ideal for employers to be tempted to hire you for that dream role.

Just my 2c.

bilawal··on Ask HN: What Software Did You Pay For In 2012
iA Writer & Sublime Text 2
bilawal··on Ask HN: Tips on raising money for Dev Bootcamp
I would email Paul Graham; though make it as concise as possible. There is a nice world out there, you just need to go and look for it.

Could you not ask this company to do some sort of negotiation? Surely they can understand your position?

bilawal··on Why isn't join.app.net catching on?
It's just the mindset that companies have given them - to rely on advertisers to fund free services.

There's so many ad based websites out there, we often think that paid websites have an ad-supported alternative. Though, the ones which don't and are exceptionally compelling will gain genuine customers.

But how many companies are that?

Page 1 of 2Next →