HNHacker News
TopNewBestAskShowJobs

jamesfinlayson

1,246 karma · joined September 5, 2021

submissionscomments
jamesfinlayson··on Active incident at Dreamhost forcing password reset
Counting down until you can download again...

I do not miss those days.

jamesfinlayson··on Why I Am a Programmer
TI-84+ for me, though I think it was fairly similar to the TI-83.
jamesfinlayson··on There isn't an easy exploit for this PHP vulnerability
Yeah Slim is decent. Still getting regular updates by the looks of it.

Coincidentally a website for one of my hobbies was throwing stack trace one day and I was surprised to see it was using Slim.

jamesfinlayson··on Docker is weird
I was still hearing that in 2015.
jamesfinlayson··on MPs moving to restrict gambling ads in Canada
I'm in Australia and I've never worked for a bookie before, but certainly the ads are all targeted at men, and I remember seeing an app designed specifically for women looking to bet on horses (you entered your star sign, favourite colours etc, shook your phone and it chose some horse numbers).
jamesfinlayson··on Why Windows 11 still ships with Windows 95's memory manager hidden inside it
Yes me too! I've added it to my todo list to update some personal projects when I get the time.
jamesfinlayson··on There isn't an easy exploit for this PHP vulnerability
I think PHP is fine as long as you use a maintained framework, at least in my experience. I've used SlimPHP and Yii2 in the past and never had any security issues. I've worked on a few PHP sites that rolled their own frameworks which in retrospect was pretty iffy. One of them got yearly pen tests and there were never any issues found but the other two probably had some latent issues.
jamesfinlayson··on Why Windows 11 still ships with Windows 95's memory manager hidden inside it
I think Windows has had a much better memory allocator for some time now but it's behind a registry flag? I think there were issues with some applications so it shipped but turned off by default.

Read about it here: https://news.ycombinator.com/item?id=47858177

jamesfinlayson··on Why Windows 11 still ships with Windows 95's memory manager hidden inside it
And now with AI answers...
jamesfinlayson··on PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
Yes. I had a project that was built with Elastic Beanstalk and was trying to move off it, but never got there. Amazon Linux and its package management was not great and I missed Debian/CentOS/Ubuntu.
jamesfinlayson··on PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
Yes I was hit by waiting for Elastic Beanstalk to update nginx for the succession of fixes. Wasn't fun being pestered by my security team.
jamesfinlayson··on GitLab critical patch release
Years ago I worked at a company that had a nightly cronjob for yum to apply security updates (with a couple of important exceptions that were handled manually). Always seemed very iffy to me for such a big company where downtime was very expensive.
jamesfinlayson··on The Future of CSS
Yeah with flexbox and fit-content/max-content is pretty fine now.
jamesfinlayson··on Upcoming critical PHP security release (CVE-2026-109618 / -109619)
No hints as to what versions are affected?
jamesfinlayson··on Tsrs: A Port of TypeScript to Rust
I read on here a few months ago about some high-frequency trading system being written in Java and running with no garbage collector enabled, because the application is closed at the end of trading each day and it's extremely fast without garbage collection.
jamesfinlayson··on Namecheap just seized and disabled all my domains
Yeah me too - they charge for name servers but I figured out after a while that Linode did the same thing for none of the cost.

But for domain registrations alone it's fine.

jamesfinlayson··on Namecheap just seized and disabled all my domains
+1 For Amazon Route 53 - one of the services that they don't nickel and dime you on.
jamesfinlayson··on AWS Lambda Web Functions
Yeah I've worked on a website built on a bunch of Lambdas - something like 150 Lambdas that tied themselves in knots with both HTTP requests and message queues.

I ended up moving a bunch of the logic into an ECS-hosted monolith. Probably cost a bit more (warm-up plugins meant that no customers still cost us money) but it vastly simplified things and made scaling up easier (can't set scaling thresholds with Lambda).

jamesfinlayson··on Fakecloud: Local AWS cloud emulator for integration tests
Interesting - I've only ever used it for unit tests and the only issue I had was (unsurprisingly) restoring from a back-up not being supported.
jamesfinlayson··on WordPress: Unauthenticated path traversal leading to conditional RCE
Yep I see this at work pretty regularly - a SpringBoot log file full of requests for all sorts of things (mostly WordPress but I think some IIS as well).
jamesfinlayson··on SAML: A fractal of bad design
Yeah I wanted to use alg none for some unit tests once (it was easier than setting up the next lowest tier security option) but whichever Java library I was using had completely disabled it. I could see it had been supported at some point but it had been updated so that it couldn't be enabled at all.
jamesfinlayson··on AWS says it can't restore some data from mideast facilities struck by Iran
Yeah same with AWS - they say they can't see my custom KMS key but... this stuff all lives on their servers, not on my servers. AWS definitely have the ability to see my KMS keys and decrypt my data but I assume that they won't unless a judge tells them to.
jamesfinlayson··on AWS says it can't restore some data from mideast facilities struck by Iran
Yeah agreed - any ephemeral stuff I need is generally in DynamoDB - S3 (and database) are for permanent storage.
jamesfinlayson··on Salesforce Global Outage
> I remember Cisco before iOS used to have hundreds of branches for their router, one branch for each major customer that was demanding specific features. It was unmanageable

Ouch. I heard of a company in my home town (small B2B service provider) doing something similar - they paid well but I didn't think it was worth it.

jamesfinlayson··on I can't stop thinking about Papua New Guinea
I know someone who worked there maybe 10 years ago in an embassy, and it was wild in a very bad way.

- they had a meeting with some locals and the locals discussed the need for retaliation for something, and their plan was to rape someone's daughter

- a kid bought a mini packet of chips on credit from a general store, the debt wasn't repaid and the end result was the general store getting burned down

- a fellow employee forgot to lock their car doors (everyone gets told to do this) and was car-jacked, but he got his car back because the car-jacker couldn't drive a manual car

- the embassy had high fences and security, but just in case, each house within the embassy compound had a central panic room in case the outer wall is breached

It's sad because I know of people who worked there in the 1970s (for Australians it was close to home but a bit of extra money because it was overseas) and it was apparently fine back then, but lawlessness has well and truly taken over.

jamesfinlayson··on Automattic's board forces CEO Matt Mullenweg into leave of absence
And on the flip-side, if it's an exec at another company getting tarred and feathered by the media for their incompetence, it means they probably won't end up at my company in six months' time and do the same thing.
jamesfinlayson··on What do Visa and Mastercard do? An intro to card networks
> My bank does not charge for deposits or change; this would be insane and I've never encountered this in the US.

Some smaller banks in Australia do but the big ones all have cash and coin ATMs which are free for account holders.

jamesfinlayson··on Lotus Notes and the dangers of starting from scratch
On a Mac I have no idea what, if anything F5 does in Chrome. Refresh is the much more annoying Cmd+r.
jamesfinlayson··on How I advertise malicious software on Google Ads
CGNAT'ed IP address? I get occasional CloudFlare blocks at home from some hobby-related websites I visit maybe once a week, and I know that no one else in my house is doing anything to hit rate limits.
jamesfinlayson··on Getting phpBB 1.4.4 working in Docker
Yeah a few years ago I got a bug report from someone in the business about getting a weird error when trying to update some text. Turns out they were trying to add (*) as a disclaimer at the end of something and Akamai was just giving a blank 403 because it looked to much like SQL.
← PreviousPage 2 of 34Next →