Hacker News Reader

dan15on Please stop serving .git to the outside world

Hiding it is riskier than just not having it there in the first place. Why blacklist when you can whitelist?

dan15on Please stop serving .git to the outside world

IMO this is the correct approach - Exposing every single file in the repository (including files that don't need to be public) sounds terrible.

dan15on Please stop serving .git to the outside world

.git should never be in your web root... I can't think of any situation (other than a very simple site) where you'd want to just stick the whole Git repository in the web root. Normally there's a bunch of other things in the repository (documentation, database scripts, etc.) that you wouldn't want exposed publicly.

dan15on Commit Message Generator

I wouldn't really call it a "generator"; it uses a static list: https://github.com/ngerakines/commitment/blob/master/commit_...

dan15on OVH has been compromised

Are they blaming OVH for their own server being poorly configured and/or insecure?

dan15on Google Reader shutting down

PHP and MySQL aren't that bad (and support for them is pretty much guaranteed on every web host).

However, the fact that it supports PHP 4.2 and MySQL 3.23 makes me wonder how old the code base is! Makes me think it's using so many obsolete PHP methods, the deprecated MySQL extension, and is all procedural code (which almost always seems to be spaghetti code with PHP).

dan15on CSS3 Patterns Gallery

Agree, they're great for mockups though as it's really easy to change the colours rapidly. Also good for doing things like animation of gradients.

dan15on Ask HN: How do you manage your bookmarks?

+1 for Pinboard - I've been using it since "The great Delicious exodus". I really like it.

dan15on Ask HN: How do you manage your bookmarks?

It appears to be built using Ruby on Rails.

dan15on Ask HN: How do you manage your bookmarks?

I agree with this. A very well-polished site, looks incredibly professional. Great work.

dan15on Stripe moves to JSONP; adds CORS support

SSL/TLS is at a lower level than HTTP. The whole connection is secure as all the encryption is set up before the HTTP request is even sent. This is why SSL used to always require a dedicated IP address - The server didn't even know what domain you were going to while the connection was being set up (as the host name is in the HTTP headers) so you could only have one SSL certificate per IP address.

Server Name Indication (http://en.wikipedia.org/wiki/Server_Name_Indication) works around this by sending the host name during the TLS handshake, so that multiple domains can use SSL on the same IP address. In this case, only the host name is sent in the clear. The whole HTTP request and response are still encrypted.