Hacker News Reader

robertduncanon Itch.io Taken Down by Funko

There is a parallel to the public suffix list, which domains like github.io are listed on: https://publicsuffix.org/list/public_suffix_list.dat

robertduncanon SpiceDAO misunderstands copyright, wasting $3M buying rare Dune storyboard

What format of auction was it? Does that imply there was a counter bidder for a similar amount?

robertduncanon Receiving Weather Satellite Images With An £8 Dongle

Looks like your SSL certificate has expired.

robertduncanon Ask HN: What OSS projects need the most help with documentation?

OpenSSL: https://www.openssl.org/docs/

ssl(3): [STILL INCOMPLETE] Manual page documenting the OpenSSL SSL/TLS library.

robertduncanon jQuery.com Malware Attack Puts Privileged Enterprise IT Accounts at Risk

This proposal already exists: Subresource Integrity http://www.w3.org/TR/SRI/

http://www.chromestatus.com/features/6183089948590080 http://status.modern.ie/subresourceintegrity

robertduncanon Pipes and Filters

Error detection is much easier with pipefail:

http://www.gnu.org/software/bash/manual/html_node/Pipelines....

"If pipefail is enabled, the pipeline’s return status is the value of the last (rightmost) command to exit with a non-zero status, or zero if all commands exit successfully"

robertduncanon Gradually sunsetting SHA-1

Note that Gandi do not offer SHA-2 certificates at all at the moment.

https://twitter.com/gandibar/status/508001036653826049

robertduncanon Gradually sunsetting SHA-1

SHA-2 for new certificates.

SHA-1 has been deprecated for a while but is still in (very) widespread use, see: http://csrc.nist.gov/publications/nistpubs/800-131A/sp800-13... http://news.netcraft.com/archives/2014/02/04/nist-continues-...

robertduncanon Further improving digital certificate security

Chrome uses CRLsets:

https://twitter.com/agl__/status/409687123659214851 http://dev.chromium.org/Home/chromium-security/crlsets

robertduncanon The Vaccine Hoax is Over. Documents from UK reveal 30 Years of Coverup

I couldn't tell if this was satire or not.

robertduncanon A tcpdump Tutorial and Primer

Or the best of both worlds, tshark! http://www.wireshark.org/docs/man-pages/tshark.html

robertduncanon Show HN: WordCount.is

wc(1) to the rescue! :)

robertduncanon Huffshell: You probably type too much.

http://tbaggery.com/2008/04/19/a-note-about-git-commit-messa... gives a good description.

robertduncanon Huffshell: You probably type too much.

Using git commit -m is a guaranteed way to write useless and ill-formatted commit messages.

robertduncanon 2012 Submarine Cable Map

Was I the only one shocked by the $250 price tag? Shame -- at $25 I would have bought it straightaway.

robertduncanon Changing Your LinkedIn Password Still May Not Have Kept Your Account Safe

The proposed scheme seems overly complex and I don't immediately see any advantage over explicitly invalidating all issued (randomly generated) tokens after the password has been reset.

robertduncanon The security hole in sudo

Why was the incredibly important caveat -- this vulnerability only affects configurations which are using netmask-based permissions -- left to the last paragraph?

robertduncanon What if doing your best -- at what you're best at -- isn't enough?

Me too. I found it subtly ironic.

robertduncanon Useful use of cat(1)

Using the -ww flag will produce unlimited width output

robertduncanon [dead]

or is it?

> host www.satuno.net www.satuno.net has address 109.236.83.66

Only a few days ago was this: https://webcache.googleusercontent.com/search?q=cache:diYc90...

robertduncanon Don't be rich, Live rich

How does immigration law work for this kind of trip? Do you need a work permit/visa?

robertduncanon How not to protect against SQL injection (view source)

There may actually be a good reason for writing code like that. The time the content was generated by the server, perhaps?