HNHacker News
TopNewBestAskShowJobs

eapen

415 karma · joined June 16, 2009

A software engineer at eBay. I can be found at http://eapen.in or @twEapen

email: myusername at mydomain

[ my public key: https://keybase.io/eapen; my proof: https://keybase.io/eapen/sigs/oC70QafCExo6tG8K9ZP34UdO2BqX6wZy6kDnETk0Xf4 ]

submissionscomments
eapen··on Www. is deprecated - should it be?
Another benefit of hosting static components on a cookie-free domain is that some proxies might refuse to cache the components that are requested with cookies. On a related note, if you wonder if you should use example.org or www.example.org for your home page, consider the cookie impact. Omitting www leaves you no choice but to write cookies to .example.org, so for performance reasons it’s best to use the www subdomain and write the cookies to that subdomain.* via http://developer.yahoo.com/performance/rules.html

My own takes: http://eapen.in/to-www-or-not-to-www/ http://eapen.in/to-www-or-not-to-www-update/

eapen··on That dev's salary is higher than mine
www.glassdoor.com, www.indeed.com/salary
eapen··on Why Paying Bribes Should Be Legal
In India, it is almost impossible to get something done without giving a bribe and especially if you need something in time. If not, the bribe-expecting government workers will keep you waiting till you are ready to hand over the bribe. I didn't realize it was illegal to give a bribe in India, so I guess I can't even admit to having done that - which is ridiculous!

When I needed to get a document in India (in a more rural area), the young government official, who I assumed was above all this corruption, kept telling me to come later (when there were fewer people around) and had me go to a nearby Xerox shop to get copies of a document. While I was going there, the official called the guy at the Xerox shop and told him to tell me how the process works. Suffice to say that I gave something and apparently that wasn't enough, so I had my mom visit him the next day and he made a comment that I hadn't given enough. My mom just smiled, picked up the certificate (which was in front of him) and left.

On the other hand, reporting an official is still a bit scary knowing that him or his partners-in-crime can accidentally mess up any of the other official documents and since most of the documents are still on paper and not digitized, it could throw you down into a deeper hole. Unless a massive campaign against corruption is introduced, I dont see this problem going away anytime soon.

eapen··on Google Inadvertently Classifies Google Places As A “Content Farm”
I am not keen on these April 1st jokes being posted on HN and it's going to get annoying with all these "true or not true" stories (especially when some truth is added to false articles). I can understand such articles making it to the frontpage of Reddit or Digg and even on Twitter but please discourage this activity from HN.

In fact HN, should do an April Fools celebration of allowing everyone to down-vote every article that is an April Fools joke.

eapen··on Slightly More Advanced Git techniques
The "Filter-Branch" tip was the most helpful tip for me, since I've been there and deleted my whole repo as quickly as possible not knowing other solutions existed.

http://help.github.com/removing-sensitive-data/

eapen··on Revisiting the Home Theater PC
Thanks!
eapen··on Revisiting the Home Theater PC
Can you set it up to automatically start with XBMC? How hard/easy is it to upgrade XBMC as new versions come out? Does the AppleTV support a keyboard or some other device (iPhone?) to control ATV?
eapen··on Revisiting the Home Theater PC
Interesting, thanks! This box looks so much slicker than the WDTV too. Since I watch quite a few foreign movies, one of the useful features with XBMC is the ability to adjust the subtitle display (add delay or speed it up by a couple of seconds) and also the ability to browse and pick a subtitle. I am curious if either WD or VMP has any additional options with subtitles. It is not a game-stopper by any means but I am still trying to decide whether to go with an XBMC capable box or these options which are also much cheaper.
eapen··on McAfee's website full of security holes
From - http://seclists.org/fulldisclosure/2011/Mar/313

Vulnerabilities in *McAfee.com

1. VULNERABILITY DESCRIPTION

-> Cross Site Scripting http://download.mcafee.com/products/webhelp/4/1033/#javascri...

-> Information Disclosure > Internal Hostname: http://www.mcafee.com/js/omniture/omniture_profile.js

    ($ ruby host-extract.rb -a
http://www.mcafee.com/js/omniture/omniture_profile.js)

-> Information Disclosure > Source Code Disclosure:

        view-source:http://download.mcafee.com/clinic/includes/commoninc/cookiecommon.asp
        view-source:http://download.mcafee.com/clinic/includes/commoninc/appcommon.asp
        view-source:http://download.mcafee.com/clinic/includes/commoninc/partnerCodesLibrary.asp
        view-source:http://download.mcafee.com/clinic/Includes/common.asp
        view-source:http://download.mcafee.com/updates/upgrade_patches.asp
        view-source:http://download.mcafee.com/updates/common/dat_common.asp
        view-source:http://download.mcafee.com/updates/updates.asp
        view-source:http://download.mcafee.com/updates/superDat.asp     
        view-source:http://download.mcafee.com/eval/evaluate2.asp
        view-source:http://download.mcafee.com/common/ssi/conditionals.asp
        view-source:http://download.mcafee.com/common/ssi/errHandler_soft.asp
        view-source:http://download.mcafee.com/common/ssi/variables.asp
        view-source:http://download.mcafee.com/common/ssi/standard/oem/oem_controls.asp
        view-source:http://download.mcafee.com/common/ssi/errHandler.asp
        view-source:http://download.mcafee.com/common/ssi/common_subs.asp
        view-source:http://download.mcafee.com/us/upgradeCenter/productComparison_top.asp
        view-source:http://download.mcafee.com/us/bannerAd.asp
        view-source:http://download.mcafee.com/common/ssi/standard/global_foot_us.asp
        
2. RECOMMENDATION

- Fully utilize Mcafee FoundStone Experts - Use outbound monitoring of traffic to detect potential information leakage

3. VENDOR

McAfee Inc http://www.mcafee.com

4. DISCLOSURE TIME-LINE

2011-02-10: reported vendor 2011-02-12: vendor replied "we are working to resolve the issue as quickly as possible" 2011-03-27: vulnerability found to be unfixed completely 2011-03-27: vulnerability disclosed

5. REFERENCES

Original Advisory URL: http://yehg.net/lab/pr0js/advisories/sites/mcafee.com/[mcafe... Former Disclosure, 2008: http://www.theregister.co.uk/2008/06/13/security_giants_xsse... Former Disclosure, 2009: http://news.softpedia.com/news/McAfee-Websites-Vulnerable-to... Former Disclosure, 2010: http://security-sh3ll.blogspot.com/2010/04/mcafee-communitie... host-extract: http://code.google.com/p/host-extract/ Demo: http://yehg.net/lab/pr0js/training/view/misc/XSSing_McAfee_S... xssed: http://www.xssed.com/search?key=mcafee.com Lessont Learn: http://blogs.mcafee.com/mcafee-labs/from-xss-to-root-lessons...

#yehg [2011-03-27]

eapen··on Revisiting the Home Theater PC
Seeing a comment on Jeff's blog, I was jut looking up the WDTV ( http://www.amazon.com/Western-Digital-Network-ready-Media-Pl... ) and tempted to try it out. I currently have XBMC on a classic Xbox and was wondering how this compares to XBMC (video formats, updates).
eapen··on How one guy turned his C&C skills into millions with online poker
C&C = Command and Conquer (game) for other curious folk
eapen··on Firefox 4 is here
What you have appears to be the latest version (similar to what I have). Weird that I didn’t see that warning though. Which OS are you on? (I am on a mac)
eapen··on Firefox 4 is here
The author's site has the latest version that works with FF4. http://piro.sakura.ne.jp/xul/_treestyletab.html.en

DL: http://piro.sakura.ne.jp/xul/xpi/confirm.cgi?treestyletab.xp...

eapen··on Firefox 4 is here
I just plugged this in another reply. The latest and greatest can be found at the author's site.

btw... TabCandy is now called Panorama.

eapen··on Firefox 4 is here
Since I tend to have 20-30 tabs open at a time, the tabs are usually too small to read - so I ended up using the Panorama to hold "ReadItLater" tabs. But now that the TreeStyleTab add-on is compatible with FF4, I no longer use it. Btw.. if you have a widescreen monitor, check out TreeStyle tab.
eapen··on Firefox 4 is here
Worth a try? Yes.

Better Tab handling and has the ability to hold tabs in "groups" and a "panorama" view which allows you to view all tabs across groups.

The awesome bar has also improved significantly and has some smart features (like the option of tab switching instead of opening a new tab when you already have a URL open).

Better Add-ons management interface and some add-ons work without a restart of the browser.

Websockets disabled (for security)

I still prefer Chrome though.

PS. I've been using the FF 4 beta version for a 3-4 months now and probably dont remember the other significant changes.

eapen··on HTTPS is more secure, so why isn't the Web using it?
Disappointed to see that this author doesn't really understand the issue he is writing about. The Firesheep tool would actually pick the cookies sent over HTTP rather than the username/password which was sent securely (in most cases). Also, as others have mentioned, it is possible to have an SSL cert installed on Virtual hosts. Dreamhost offers an option for as little as around $3-4 a month to have an SSL cert for a site.

Sometimes, I wish I could downvote an article on HN.

eapen··on JavaScript Trie Performance Analysis
Thanks, I assumed you would have some sophisticated tool that you use for benchmarks against jQuery mobile etc.
eapen··on JavaScript Trie Performance Analysis
Great follow-up and appreciate the deep analysis with graphs. I am curious how you measure the Mobi Safari load times. Is there a tool (xcode?) to do this?
eapen··on Dictionary Lookups in JavaScript
I didn't expect you to do that and was joking (hence the wink) but it would be amazing to see it AT work. If you had added the Trie in this post, it would have probably been over the average human threshold of patience and understanding.
eapen··on Dictionary Lookups in JavaScript
Great explanation and practical sample of javascript features + HTML5's local storage.

The only thing missing was converting the dictionary data into a trie. ;-)

eapen··on Twitter Drops The Ecosystem Hammer: Don’t Try To Compete With Us On Clients
I like how the second paragraph of the quote ends "...ensure a high bar is maintained."

I am taking it out of context but it seems like a good pun for the dickbar.

eapen··on Xcode now costs US$ 4.99
US accounting rules sometimes require companies to charge for updates if they provide a significant feature left out of original products. An alternative solution can be to restate past earnings, something Apple would likely prefer to avoid.

Apple has sometimes been infamous for charging for updates typically expected for free. The most frequent example has been major iPod touch firmware upgrades, which cost a small fee up until iOS 4. In 2007, the company went so far as charging $2 to enable 802.11n Wi-Fi on some Macs.

Read more: http://www.macnn.com/articles/11/02/24/may.be.trying.to.avoi...

eapen··on Launch
The other referenced blog post: http://abstractnonsense.com/life-at-a-startup/ http://news.ycombinator.com/item?id=2302214
eapen··on Student Who Found GPS Device On His Car Due To Reddit Comment Sues The FBI
This was actually his friend's comment on Reddit.

http://www.reddit.com/r/AskReddit/comments/ciiag/so_if_my_de...

eapen··on Anatomy of a Crushing
I didn’t realize it was a one-time signup fee. Thanks for pointing that out.
eapen··on Once again, praise kids for effort, not for 'smarts'
I like this approach. What kind of encouraging words do you tell your child? My son is a few months short of 2 but I want to do the same for him (well... maybe not Futurama) and he definitely doesn't understand hardwork or smart yet - but I want us (my wife and I) to get into this groove.
eapen··on The Secret to a Happy Marriage: Do the Dishes, Put Out, Don’t Talk So Much
My wife's take: "huh! Didn't care much for the article coz though she makes some good points, I felt like it's putting it all on the woman!! Even if she says "spouse" several times, it's like she's saying spouse, but meaning wife... I have to agree with her sister about trying to put women back 50 years!! Not surprising you, meaning a guy, would like it though!! ;-D It has everything a husband would want his ideal wife to do!"
eapen··on How I made an HDTV antenna so I could watch Jeopardy last night
Nice tip. I've always wanted to get one of the R/C helicopters and was always planning on getting it from one of the aisle mall shops - but this advice is helpful.
eapen··on Digg undoes more changes, discontinues RSS import
I haven't been using it for over an year and want to delete all traces of activity as well as my email from their databse (so they dont ever email me saying that they have released Digg version 13.0) and also if their site ever gets hacked, I'd rather not have any of my information in there.
← PreviousPage 2 of 4Next →