HNHacker News
TopNewBestAskShowJobs

billpg

5,638 karma · joined April 24, 2009

http://billpg.com/
submissionscomments
billpg··on Ask HN: What to do with text from old, unarchived, online forums?
Did we have web forums back then? I know Usenet was a thing.
billpg··on Cisco to acquire Isovalent
"What shall we call our company?"

"Let's go with a word that looks a bit like 'Insolvent' when you glace at it in a hurry."

billpg··on End of an era for electronics giant Toshiba
Bye Tosh.
billpg··on RFC 9518 – What can internet standards do about centralisation?
I tried this two decades ago. We just had broadband for the first time and I installed some web service application on my Windows PC. My ISP had what appeared to be a static IP so I manually set up a free DNS service with that IP. The experiment didn't last long enough for the IP to change but I did learn it did because long after I took the service down, my domain was pointing to someone else's IP.

It what I now realise was a bad idea, I was writing code by web server code using C with CGI. I was supposed to use Perl, but I didn't want to spend time learning that as I already knew C.

billpg··on Volkswagen Will Bring Back Physical Buttons in New Cars
Good. Can the regular roadworthiness tests be updated to fail cars that don't have physical buttons or dials for essential controls? These cars need taking off the road.
billpg··on The Eval Game
Did they get an entire Python interpreter into JS?

Yes, I know all Turing machines are equivalent so it shouldn't be surprising it was possible but still, cool.

billpg··on Microsoft Outlook Blocking All Email from Tutanota.com Domain as Spam
Good. That's half way to my ideal way to deal with email.

1. Emails from everyone (including you) go into the spam folder. 2. I identify senders I do actually want to receive messages from.

The industry isn't doing item 2 very well, but default-deny for new senders is exactly what I want from a mailbox service.

billpg··on Report Phone Spam – Shut down robocallers and text spammers
Are numbers ever really brand new, as in you are the first to ever have that number?
billpg··on Brother have gotten to where they are now by not innovating
That does sound useful. I'd need a camera on each level with the amount I pack onto each shelf.
billpg··on Brother have gotten to where they are now by not innovating
Innovation....

I saw a fridge that had an app so you could control it from anywhere.

My requirements for a fridge are remarkably simple, to the point the only practical use I could think of an app was alarm that I'd left the door open or something.

(If this particular app did have a door-open alarm, it wasn't on the list of features. It did say you could adjust the temperature from your office. A location I'm often worrying about the fridge.)

billpg··on RSS can be used to distribute all sorts of information
<link rel="next" href="http://example.org/index.atom?page=2"/>

That's fantastic. Anyone developing ATOM/RSS, please use this mechanism.

(I'm looking at you, podcast with over 100 episodes.)

billpg··on RSS can be used to distribute all sorts of information
Suppose I have a feed with a million items already on it which I've already handled. I'm about to poll the feed and there's a small number of new items on the feed I don't know about yet.

Am I going to have to download a file with references to all one million items again?

If the answer is to have a separate feed with only the most recent n items, I'm afraid that's not going to work unless there's additional details. There might have been n+1 items turn up since the last time I polled. Also, someone else might want to start handling those one million records from the start and we should be able to co-ordinate by having a common canonical URL.

(I'd also mention pull-vs-push, but that's a thread elsewhere in these comments.)

billpg··on RSS can be used to distribute all sorts of information
Also, do we mean ATOM in the same way that people insist on referring to TLS as "SSL", or do we actually mean RSS as in actual RSS?

If we could agree that ATOM is RSS 2 (or whatever MAX(version)+1 is) that'd be great.

billpg··on Interesting Bugs Caught by ESLint's no-constant-binary-expression (2022)
LISP has entered the chat.
billpg··on What the QWAC? An EV Certificate all over again
Am I the only one who checks the EV cert when logging into the bank?
billpg··on GitHub Engineering: When mTLS Is Done Wrong
In case you're still reading this, I've updated this document to version 2, answering your comment directly and adding an alternative immediate response instead of keeping the connection open.

As this is still a public draft and not an established standard, I hope discussion will bring a consensus that one way of responding is better and a future draft will only specify that way.

billpg··on GitHub Engineering: When mTLS Is Done Wrong
Thank you, I think that's worth addressing in the questions section and I might have an idea on resolving the issue.
billpg··on Raspberry Pi receives strategic investment from Arm
Wasn't Raspberry Pi a charitable foundation or did I completely imagine that?
billpg··on GitHub Engineering: When mTLS Is Done Wrong
Thank you. I'll have a read of that and see if there's any lessons I can learn for it that would apply to my proposal.
billpg··on GitHub Engineering: When mTLS Is Done Wrong
Thank you just for reading it! I've opened an issue on the project at https://github.com/billpg/CrossRequestTokenExchange/issues/6

If I may rewrite your scenario to check I understand it...

An attacker sets themselves up as an Initiator and registers https://evil.example/TimeOut/ as their URL to receive the TokenIssue POST requests. The attacker then makes a TokenCall request to which the Issuer responds by making the TokenIssue POST request to the malicious "time out" endpoint. As this never responds, that initial connection is kept open.

billpg··on GitHub Engineering: When mTLS Is Done Wrong
(Shameless plug.) I had some thoughts in this area.

https://github.com/billpg/CrossRequestTokenExchange

billpg··on Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
I've heard of enough cases where the ransomware gang have not followed through after payment of the ransom, that I think that time ("if they don't actually provide the files when paid") has already passed.
billpg··on Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
"I have your lottery winnings. Send (amount) to me to process sending you the money."

That's a scam, right?

"I have encrypted your files. Send (amount) and I'll decrypt them for you."

Not a scam?

billpg··on EBCDIC Is Incompatible with GDPR
"Call Bob. He is the only person who knows how to maintain this system."

"Bob died. Ten years ago."

billpg··on Ask HN: Show me your half baked project
https://github.com/billpg/POP3Listener/

This was going to be part of a larger project implementing libraries for all the email protocols, but I lost enthusiasm for it when I realised how broken email itself is in this day and age.

billpg··on mAh Is an Industry Mistake
"Total power (watt-hours)"

Nitpick, but Watt-Hours is energy, not power.

Why yes, I am very clever. Thank you for noticing.

billpg··on Metric Time
There's a parallel universe where the French chose to base their new system around twelve instead of ten. Divide the day into twelve twelfths and each twelfth into twelve parts again. (They'd have to coin prefixes for each.)
billpg··on Dennis Ritchie Home Page
Bell Labs Colombia?
billpg··on Why does all() return True if the iterable is empty?
I posted in a political thread once...

"Re-joining the EU would give the UK all the benefits of EU membership as well as all the benefits of Brexit too."

billpg··on [dead]
"Hiiiiii it's your favorite user Carp! We're currently on Login Required mode for one of a few reasons:"

Oh dear.

← PreviousPage 5 of 34Next →