HNHacker News
TopNewBestAskShowJobs

thomseddon

1,436 karma · joined April 15, 2012

email: thom@ below domain

work: https://elevate.uk

submissionscomments
thomseddon··on NerdyData: a source code search engine
Actual link: http://search.nerdydata.com/

Some fun searches: https://search.nerdydata.com/search/#!/searchTerm=client_sec...

thomseddon··on Jeff Atwood's Code Keyboard Review
Unusual that this is from the man who is "into the whole ergonomic split layout thing": http://www.codinghorror.com/blog/2009/02/have-keyboard-will-...

Obviously opinions change, or other factors have prevailed in the design of this

thomseddon··on Long live the callbacks
First comment by @lloydwatkin made me smile:

"I don't know who you are. I don't know what you want. If you are looking for generators or promises, I can tell you I haven't coded any. But what I do have are a very particular set of callback skills; skills I have acquired over a very long javascript career. Skills that make me a nightmare for developers like you. If you performance analyse callbacks correctly, that'll be the end of it. I will not look for you, I will not pursue you. But if you don't, I will look for you, I will find you, and I will destroy your benchmarks."

thomseddon··on [dead]
More likely it's just because there was a delay between the times the images were taken, hence now you see it now you don't. This is extremely common on Google Maps.

Edit: For example, click the arrow to go down the No Entry road: https://maps.google.com/maps?q=WF17+9LN&hl=en&ll=53.731781,-...

thomseddon··on People with nothing to hide
One important thing to recognize is that: "You can read my text/call logs" !== "You and the rest of the world can know everything about me"

So someone saying they "have nothing to hide" doesn't really mean they would answer all the above question publicly, but rather there is no electronic record/evidence of anything they know they want to keep private.

And, as another point of discussion, whilst the matters raised in those questions may be deeply personal for many people, frankly I wouldn't be concerned if my answers to those questions were in the public domain.

thomseddon··on REST Client for Google Chrome
This isn't a pure Chrome Extension, it just takes you to the site: https://suite.websecurify.com/rest

One of the main uses of a rest client in a chrome extension (e.g. postman/advanced REST client) is so you can use it offline. The entire functionality of the webpage is written in JS (https://suite.websecurify.com/rest/script) so it could be easily packaged into a true chrome extension, frankly as it stands this seems to be a bit of a half arsed attempt to get more exposure.

thomseddon··on OAuth.io - OAuth that just works.
You'll find there is a shed load of OAuth2 provider libraries, look at "server libraries" here: http://oauth.net/2/

Also, a few that aren't listed: Rails: https://github.com/pelle/oauth-plugin Django: http://code.larlet.fr/django-oauth-plus/wiki/Home NodeJS: https://github.com/nightworld/node-oauth2-server (me) CakePHP: https://github.com/thomseddon/cakephp-oauth-server (me again)

thomseddon··on Dear WordPress
I had the privilege of meeting the (significantly) lesser known co-founder of Wordpress Mike Little[1] a week or so ago and this seems an appropriate time to mention what really genuine and nice guy he seemed to be. Clearly he hasn't quite received the same notoriety as Matt and it really seemed funny to introduce him as the "Co-founder of Wordpress" yet very few people actually knew of him :)

[1] http://profiles.wordpress.org/mikelittle

thomseddon··on Ask HN: Is NodeJS stable enough to build the next Twitter?
Why do people always take a figure like this and assume a near linear distribution?

I do agree with the sentiment of your point though but I'd be interested to know what the parent handles at peak

thomseddon··on Poll: HN desktop Linux users, what distro do you use?
This is exactly why I use fedora too, however I'm increasingly pulled towards Ubuntu again....
thomseddon··on Why I chose to write Nuuton in Go
Three rewrites and not yet out of (or even in) beta: http://nuuton.com/

If you are seriously hoping for this to be a full time business then I would strongly recommend you read "The Lean Startup" or similar. This blind technical pursuit of perfection is a pretty classic approach for us techies and something i'm guilty of myself. It was actually that process that made me realise what my strengths actually were and what I would need to do to start a world class company (work with great people).

If this isn't really a commercial project then just ignore the above and happy hacking, perhaps you should consider open sourcing it?

thomseddon··on DWP - Services and benefits online
MadLab's good, but TechHub's even more awesome! http://manchester.techhub.com
thomseddon··on Show HN: Weekend project - Magnific Popup
Really good work, particularly like the fade-slide animation.
thomseddon··on DWP - Services and benefits online
At the other end of the spectrum, the Manchester city council site: http://www.manchester.gov.uk/

Definitely not what you might expect!

thomseddon··on Why Does Music Feel So Good?
The question that has always puzzled me is why do we feel compelled to sing along to music?

I mean, we are invariably worse singers so it surely makes it sound worse and this is besides the fact that signing ourselves drowns out much of the original sound anyway!

(Note: this is not to say I'm a silent listener, i'm a big fan of singing to myself ! :)

thomseddon··on Why is there only one Elon Musk?
Must say I agree with ErrantX on this one, by far the best trains I have used (in the UK).
thomseddon··on Why is there only one Elon Musk?
Yes and no. (Mainly no)

It is unquestionable that Rb has pursued many different avenues despite there being little to no obvious commercial benefit. I do concede that you could argue it is just in the name of building his own profile, but for example did you know he started a charity aged 17, the Student advisory centre where he used to personally give advice over the phone (apparently still running) and that he started mates condoms[1] (UK based). He is also the one behind the eldars[2] (http://www.theelders.org/) and countless other projects including helping african communities establish sustainable business (to name just one).

1: http://www.mates.co.uk/mates-expert/history/ 2: http://www.theelders.org/about

thomseddon··on Why is there only one Elon Musk?
I'll take your one Elon Musk and raise you one Richard Branson:

http://www.virgingalactic.com/ http://www.virginearth.com/ http://www.virgingreenfund.com/

+ Massive, continued, success in countless other markets (+ set a few personal world records)

thomseddon··on New GitHub Pages domain: github.io
It's a real pain that "project pages", i.e. serving the gh-pages branch from username.github.com/project aren't being redirected, for example: http://nightworld.github.com/odlnorth just 404's

Is this an oversight or am I missing something?

thomseddon··on If PHP were British
http://spiffingcss.com/ deserves a mention here "the preprocessor made for Brits"

No more scratching heads when things like the following don't work:

#id {

  text-align: centre;
  text-transform: capitalise;
}

:)

thomseddon··on DigitalOcean Root Vulnerability in the Wild
As soon as I saw the text "Your root password will be emailed to you" on the bottom of the droplet create page I opened a ticket, here's how it went:

"Your root password will be emailed to you"

-- start --

Me

Just seen this at the bottom of the "Create a droplet" page. You're kidding right?

Them

The root password is sent via email because it is the easiest and fastest way to get a user online and running a virtual server.

We strongly recommend updating the root password after you login for the first time.

We also have SSH keys support so you can add your SSH key to the server during creation in which case no email is sent and instead the SSH keys are added under the root user for more secure access.

Thanks,

Me

Just added an SSH key and you're quite right, I retract my blunt reaction.

I must say however that I still think emailing them is a fairly terrible idea and I'm surprised your not worried about being found liable for a subsequent server hack.

That aside, thank you for your swift response and for pointing out I can use my SSH key. I look forward to using DO more

-- end --

N.B. I actually received their response twice from different agents suggesting it was a canned response

Frankly I don't even think passwords should be an option, as on AWS (not that they're perfect)

thomseddon··on Dropbox Sync API
Incidentally, this exact topic is now under discussion: http://news.ycombinator.com/item?id=5337099
thomseddon··on Dropbox Sync API
Essentially no client side app can be considered able to keep secrets.

I would be interested in the implications of this from the authorising servers perspective. Here is the main mention of it in the OAuth spec: http://tools.ietf.org/html/rfc6749#page-52 and google's interpretation: https://developers.google.com/accounts/docs/OAuth2InstalledA.... Even though google say "t is assumed that these applications cannot keep secrets" I can't quite infer the actual implications of this?

thomseddon··on Dropbox Sync API
Looks like it: https://www.dropbox.com/developers/sync/docs/android#com.dro...
thomseddon··on Show HN: Breakpoint.io - Share and get feedback on your side projects
Hard to parse + frustratingly unfruitful. I just want to know what the things does, screenshot is a bonus.
thomseddon··on HelloFlo Launches a Tampon Subscription Service
Best advert i've seen this year, literally laughed out loud
thomseddon··on CloudFlare was down
Would love some details on how to do this, I've been a (business) CF customer for a while now and have never seen this service and I haven't turned up anything googling/scouring their website for it just now.

Details much appreciated!

EDIT: Spoke too soon: https://support.cloudflare.com/entries/22054357-how-do-i-do-... shame it's so convoluted

thomseddon··on Postgres: The Bits You Haven't Found
Shame you can't view it on mobile (iPhone), saved for later.
thomseddon··on Stripe launches beta in the UK
This thread has, without doubt, been pinned to the bottom ( it was sitting at the top a couple of hours ago and has received as many votes since then).

Editing the title is one thing (which I largely condone), editing a URL is another thing entirely and then to blatantly attempt to hide the discussion is boardering on outrageous! The HN "mod community" has gone well down in my estimations.

thomseddon··on What to do when your non-technical boss is just plain wrong
The practical bit:

"Instead, a technical expert could offer chances for the boss to save face when they are caught suggesting something that is a bad idea."

Which I think is a very smart technique with respect to all negotiations!

← PreviousPage 3 of 5Next →