Hacker News Reader

genzeron Shrimple – A Simpler, Nicer Markdown

Using `-> Title.[1]` for Links looks neat at first. But I often tend to copy links from one Markdown to another. I don't think updating the footnote numbers of *both* Shrimple documents is easier in any way.

genzeron How Markdown took over the world

I argee. Up until now, the most PITA for me in Markdown is the table syntax. Even CommonMark does not have any spec for table except for long running discussions with lots of proposals.

AsciiDoc(tor) has a nice support for tables. It also supports more complex features like merged cells, span cols and all but the syntax suffers from there. I guess that is also why AsciiDoc was not widely adopted.

genzeron Installing Java in 2025, and Version Managers

Ever since I found `asdf`, I threw away jenv, nvm, fmn and rvm.

genzeron Quicksort with Jenkins for fun and no profit

This made me laugh out loud! So much related!

Ever since I discovered `act` [1], I made a lot less commits.

[1]: https://github.com/nektos/act

genzeron Stealing OAuth tokens of Microsoft accounts via open redirect in Harvest App

The vulnerability came from the outlook-integration.harvestapp.com. It used a JSON object as `state` containing instructions once the OAuth2 Callback succeeded.

The property `subdomain` was used to redirect the browser to a subdomain of harvestapp.com, passing the `#id-token`. The problem came from the fact that the value of `subdomain` was injected directly to:

https://${subdomain}.harvestapp.com/...#id-token=...

By setting the `subdomain` in JSON payload to `attacker-controlled.com/` (note the trailing slash), the URL become:

  https://attacker-controlled.com/.harvestapp.com/...#id-token=..

..thus redirects the browser to another domain, leaking the token.

genzeron NewPipe: A lightweight YouTube experience for Android

Have you tried YouTube Kids? I allow my daughter using only YouTube Kids (in kid mode) on my Android phone. The suggested content was good enough. Google also allowed you to supervise the content [1].

[1]: https://support.google.com/youtubekids/answer/7178746#block_...

genzeron Adhole.org is shutting down

This reminds of the journey of the creator of icanhazip [1]. He had created it and maintained it through several milestones _on his own_ until he could no longer carry on. Luckily it ended on a good note as Cloudflare decided to "buy" it.

[1]: https://major.io/2021/06/06/a-new-future-for-icanhazip/

genzeron Ask HN: Do all browsers support private browsing?

The anwser is just one Google away: Yes. The Wikipedia has a page dedicated to it [1].

[1]: https://en.m.wikipedia.org/wiki/Private_browsing#Support_in_...

genzeron Ask HN: Is it just me, or is the inbox is the worst place for newsletters?

I just tried using Kill the Newsletter! on Farnam Street [1] and the experience was awesome. Simple, fast, free and no ads.

Thanks for introducing a very good tool!

[1]: https://fs.blog/