HNHacker News
TopNewBestAskShowJobs

wingspan

266 karma · joined September 12, 2011

Software Engineer at Netflix, building components for TV.

https://ianobermiller.com

submissionscomments
wingspan··on Show HN: Markov Baby Name Generator
Cool! I'll have to remember this when we can't pick a name for our next baby. A little hit or miss, but for a geeky name it is better than little Bobby tables...
wingspan··on How I Collect Passwords
Isn't this what http://lastpass.com does?
wingspan··on Timeline - A JS Library For Beautiful Timelines That Are Easy & Intuitive To Use
Beautiful! Is anyone else slightly annoyed by the front-loaded easing when you click the arrows? (I have no idea if that is the right term, but I mean to say the fact that it starts slowly, then speeds up. I'd prefer the other way around).
wingspan··on Create your own programming language in JavaScript
Why redirect from nathansuniversity.com to nathansuniversity.appspot.com? Shouldn't it be the other way around?
wingspan··on PHP-Snow - A concise, dry and beautiful language that compiles to PHP
Thanks for the Ur link. But seriously, 2 clicks to get to a page (docs > tutorial intro) just to see a code sample?
wingspan··on CodePlex now supports Git
From my recent experience (past month or so), TortoiseHG is definitely more polished than TortoiseGit. The thing I miss the most is the "Workbench", a single window that contains everything you'd need to do (commit, view history, sync, etc).
wingspan··on Exploit to detect which Social Networks you are logged into
The technique exploits the redirection mechanism of most login pages. Consider the url "foo.com/login?redirect_after_login=%2Fimages%2Fspinner.gif". If you put that url as the src of an img tag, and the user is logged in, some sites will 302 you to the image. If you are not logged in, the src will be the login page, and you can detect the difference with javascript.

Quote from the site:

What happens if you visit the login page with a ‘redirect on login’ parameter and you are already logged in? When implemented in a naive fashion you are simply immediately redirected to the page specified in the parameter. Some sites limit that parameter to being another page on the same domain, but we’ll see that doesn’t help for this trick.

This mechanism is open to abuse in exactly the way I needed; I could set the ‘redirect on login’ page to be an image file on the same domain. For example:

<img src="https://twitter.com/login?redirect_after_login=%2Fimages%2Fs... /> In this example, if I am logged in Twitter is kind enough to 302 redirect me to the image file I specified, but if I am not logged in I am show the login page. It turns out that both Twitter and Google’s login mechanisms are susceptible to exactly this trick. It seems LinkedIn and Tumblr are currently immune to this, though I didn’t dig too deep so there might be another redirect URL for them.

wingspan··on Show HN: Searchable Who is Hiring?
Very useful, thanks. It would be quicker (and a bit less jarring) if instead of going to a new page with the listing details, the row you clicked on just expanded with the details inline.
wingspan··on Show HN: Fed up with WebEx, so we built a way to screen share in under 20 sec.
Awesome, works on Windows Phone.
wingspan··on Login to your Google account by scanning a QR code
Works fine on my windows phone; remembers my login info from IE.
wingspan··on Review my startup - Lean Domain Search: The fastest way to find a domain name
Same here, when I searched for "rpg".
wingspan··on It’s Instant
As someone mentioned in a previous thread on dwolla (re your second point), you don't list two different prices. When the customer is checking out, you give a cash discount if you use dwolla (e.g. 3% off your purchase if you use dwolla to pay!).
wingspan··on Maxing out your Dropbox referrals (how I got 16GB for less than $10)
http://db.tt/b2bwCad Thanks, saves the trouble of starting a campaign ;)
← PreviousPage 4 of 4