News for hackers. Stuff that matters.

dalbotex

Re:Curryfinger – Find the Server Behind the CDN on Saturday September 14, 2019 @08:45AM (#20970442)
Because I imagine someone who would expose their mongodb instance to the web would also just terminate HTTPS at the CDN, rendering curryfinger/cloudflare.py useless.
Re:Curryfinger – Find the Server Behind the CDN on Saturday September 14, 2019 @08:43AM (#20970431)
Yeah, that does sound plausible.
Re:Curryfinger – Find the Server Behind the CDN on Saturday September 14, 2019 @06:08AM (#20969879)
To me it looks like this tool (and cloudflair.py) can only ever find servers which are configured in a very specific way:

* The traffic between server and CDN is encrypted using a valid certificate

* The server's firewall is not properly configured

Apparently there are indeed servers with this configuration, but I just find it odd how someone would go through the trouble of setting up HTTPS (instead of terminating it at the CDN) and then not bother to block traffic from anywhere but the CDN.

Don't CORS restrictions basically render this whole tool useless?
Re:Show HN: IOU – Split shared expenses on Wednesday August 21, 2019 @10:35AM (#20757593)
Multiple @ symbols are absolutely valid, as long as they are properly quoted ;)
Re:Show HN: IOU – Split shared expenses on Wednesday August 21, 2019 @08:23AM (#20756617)
100% this!

For reference, I didn't try any of the more obscure email address features, such as comments or quotation. My address simply has the form [email protected]

Re:Show HN: IOU – Split shared expenses on Wednesday August 21, 2019 @07:51AM (#20756437)
Great work, I like the simplicity!

So far I have two issues with your solution:

1. It doesn't accept my email address. Looks like the pattern is way too strict and doesn't allow any new TLDs.

2. The use-case I most often see Splitwise used for is trips abroad with friends. In this situation, expenses are often recorded while no internet connection is available and synced later. I'm not sure if IOU supports this, I haven't tried it.

Re:Show HN: SAN – a Safe and Nice TOML/YAML Alternative on Thursday September 20, 2018 @04:30AM (#18030663)
So it's basically JSON without commas and quoted keys?
Re:Fish: A user-friendly command line shell for macOS, Linux, etc on Wednesday December 13, 2017 @04:49AM (#15913207)
This is easily achieved using a fish function: https://github.com/nyarly/fish-bang-bang

Unlike bash, fish even expands it in place, allowing you to make changes.

Re:ColorRun – Simple browser game about colors on Sunday August 17, 2014 @11:29AM (#8189569)
function c(i,j){return $("#color-"+i)[0].getContext('2d').getImageData(0,0,1,1).data[j]} setInterval(function(){$("#color-"+(1+(c(1,0)+c(1,1)+c(1,2)<c(2,0)+c(2,1)+c(2,2)))).click()},1)