HNHacker News
TopNewBestAskShowJobs

carsonreinke

91 karma · joined June 28, 2013

submissionscomments
carsonreinke··on Post-mortem of this weekend's NPM incident
I think I might actually try this out.
carsonreinke··on Post-mortem of this weekend's NPM incident
I feel like a project that could help with this to identify package importance by the dependents and downloads.
carsonreinke··on What Test Engineers Do at Google: Building Test Infrastructure
I believe you are missing a link to "This!"
carsonreinke··on On Phone Numbers and Identity
I'm a little confused on why these other 2FA approaches are seen as more secure. Is it simply because the port transfer process can happen?
carsonreinke··on WoSign and StartCom: Mozilla’s proposed conclusion
What is wrong with S/MIME?
carsonreinke··on English Village Becomes Climate Leader by Cleaning Up Its Own Patch
> 500 pounds (about $650) a year for electricity and heating

I wonder how much specifically this is? Maybe if we could start sharing more of this info we could all set some goals.

carsonreinke··on NPR Website to Get Rid of Comments
I wonder how many comments said something about "Obama" or "left-wing"
carsonreinke··on Pokemon Go is a huge security risk
Why in the world would they do this? Or was this just merely an accident?
carsonreinke··on Today I accept that Rails is yesterday’s software
You are really pushing the turd argument [https://news.ycombinator.com/item?id=11661834]
carsonreinke··on Julie Rubicon
Oh, duh, it explains it in the article: "misappropriation" insider trading
carsonreinke··on Julie Rubicon
Can someone explain why this is illegal (besides any data/privacy breach within Capital One)?
carsonreinke··on The DROWN Attack
Marketing helps market the awareness of these problems, even non-tech folk have heard of Heartbleed. More awareness probably means software is likely to be updated.
carsonreinke··on A Message to Our Customers
Maybe I am missing something here, but the Washinton Post says "Federal prosecutors stated in a memo accompanying the order that the software would affect only the seized phone". What is so wrong with that? If they just use it only on this phone? Or is that the weapon has been created and could be used?
carsonreinke··on More Air Force drones are crashing than ever as mysterious new problems emerge
Why is someone in a space suit at the crash site?
carsonreinke··on I Tried to Buy an Actual Barrel of Crude Oil
Just buy it on Alibaba [http://www.alibaba.com/trade/search?fsb=y&IndexArea=product_...].
carsonreinke··on Webwatch
Or http://followthatpage.com/
carsonreinke··on The TV antenna is making a comeback
Pretty much all of the MLB stuff (except for playoffs) is cable only. NFL will at least of the either Monday or Thursday game along with your local on Sunday.
carsonreinke··on Do not let your CDN betray you: Use Subresource Integrity
I mean if the Subresource is common place, someone might do this with a third party. The spec does not seem to address this.
carsonreinke··on Do not let your CDN betray you: Use Subresource Integrity
I wonder about situations that is used with 3rd parties (such as Facebook) and how they could distribute changes.
carsonreinke··on Amazon Flex
A lot goes into the infrastructure of the carriers, I think most companies cannot afford this.
carsonreinke··on Modern anti-spam and E2E crypto (2014)
Clarification, https://blog.mailchimp.com/opt-in-vs-confirmed-opt-in-vs-dou..., http://support2.constantcontact.com/articles/FAQ/1586.

I'm not sure why it is not credible to use the term double opt-in, please explain.

carsonreinke··on Modern anti-spam and E2E crypto (2014)
No doubt, opt-out should not suffer these problems. Is it SPAM after that point? Maybe. I can see at that point the reputation system wins.

`it is spam to everybody`, maybe, but Google is trusting the user to categorize SPAM, which can have some unwanted consequences.

carsonreinke··on Modern anti-spam and E2E crypto (2014)
Double opt-in is an industry standard. Someone buying a list of email addresses is not. Some laws are now enforcing the concept such as CASL.

Either way, newsletters/transactional emails can all be marked as SPAM even though the recipient is legitimate. The sender can be negatively affected by a blind reputation system.

"List-Unsubscribe" for sure can be abused, but better then blindly considering every email flagged as SPAM.

carsonreinke··on Modern anti-spam and E2E crypto (2014)
Traditionally I consider SPAM only unsolicited emails, any double opt-in that is too high of volume that the user could be able to opt-out. Users marking as SPAM and decreasing reputation because of that seems like the wrong target.
carsonreinke··on Modern anti-spam and E2E crypto (2014)
That is annoying
carsonreinke··on Modern anti-spam and E2E crypto (2014)
Reputation can go wrong, legitimate emails with double opt-in still can be marked as SPAM by the user. Gmail definitely is slowing that down by offering a warning to the user when there is a `List-Unsubscribe` header. Even that still does not work and probably the reason by AT&T bill is sometimes marked as SPAM.
carsonreinke··on UK at risk of losing Freedom of Panorama
So if I own some land, can I copyright the landscape so no one can sell a picture of it?
carsonreinke··on What to know about encodings and character sets
...never assume one byte per glyph
carsonreinke··on Cardinals Face F.B.I. Inquiry in Hacking of Astros’ Network
Please no
carsonreinke··on Cardinals Face F.B.I. Inquiry in Hacking of Astros’ Network
Where does one get a master list?
Page 1 of 4Next →