News for hackers. Stuff that matters.

hbz

Seemed to freeze up after I loaded a sample and clicked a few things inside it
Re:What Rock Climbing Taught Me About Engineering on Wednesday June 14, 2017 @12:53PM (#14554010)
Designing software related to healthcare / electronic medical records requires more thoughtfulness than other kinds of development.
Re:Ask HN: What do you use for Log Management? on Tuesday October 11, 2016 @07:07AM (#12683212)
Self hosted ELK stack, not HA at the moment. Will move the ES nodes to AWS's managed service once I'm ready to make it more resilient.
Re:Switching Costs in Software Development on Tuesday September 13, 2016 @11:30AM (#12489120)
I like all the guesses on which company “Scaling R Us” represents. My guess is RightScale.
Re:SSL considered bloated on Tuesday September 06, 2016 @09:32AM (#12435842)
A counter to the author's "webserver in 1 line of code" - https://gist.github.com/denji/12b3a568f092ab951456#simple-go...

I prefer proxying of SSL (and automatic generations of LetsEncrypt certificates) using containers so that my web servers don't have to worry about that aspect of configuration.

Re:Show HN: Simple package manager for Dockerfiles on Monday July 25, 2016 @04:43PM (#12161482)
Because it's lazy and insecure?
Re:Show HN: Simple package manager for Dockerfiles on Monday July 25, 2016 @10:42AM (#12159005)
One of the biggest complaints about the curl - bash paradigm are the security implications. URLs can point to different content at different times. Project maintainers can (and have) changed the content at these URLs for malicious or other reasons. A lot of people will not examine the source of what they're piping into the shell.

To me, https://github.com/jbenet/hashpipe addresses a lot of these issues by pinning the content to a hash.

You can't force somebody to read and understand the install script, but at least those who do can know it's the one they verified in advance.

Re:Vim GIFs on Wednesday July 20, 2016 @06:36AM (#12127998)
Thanks!
Re:Vim GIFs on Tuesday July 19, 2016 @06:53PM (#12125568)
Does anybody know what program was used to generate the gifs?
An interactive guide to fork bombing
Re:Fully automated dockerized Let's Encrypt reverse proxy on Thursday May 12, 2016 @07:46AM (#11682702)
I use 2 containers to accomplish this:

https://github.com/jwilder/nginx-proxy

https://github.com/JrCs/docker-letsencrypt-nginx-proxy-compa...

Since both are long running processes, it makes sense to keep them in separate containers.

If you already have your work history filled out on LinkedIn, this seems like a handy tool: https://github.com/JMPerez/linkedin-to-json-resume
Re:Deploy a .onion Site in Less Than 5 minutes on Sunday February 14, 2016 @09:54AM (#11098447)
Why even do this in ansible? Your heavy reliance on command instead of the provided ansible modules makes it more of a bash script.
Re:Recplay: Motorbike simulation record player on Saturday July 18, 2015 @07:34PM (#9909412)
My jaw dropped when I saw it was Elastomania. Love that game!!
Re:Google hacked account on Tuesday June 30, 2015 @02:38PM (#9807498)
Are you sure that's still the case?

This[1] would seem to indicate you can use a U2F device[2] as an alternative to providing a cell phone for verification.

[1] https://www.google.com/landing/2step/#tab=how-it-works

[2] http://googleonlinesecurity.blogspot.com/2014/10/strengtheni...

Re:Google hacked account on Tuesday June 30, 2015 @08:57AM (#9804820)

  My mistake was that I didn't enable 2 factor authentication.
Kind of aggressive calling out Google's engineers when you couldn't bother protecting yourself with their free and easy to use security mechanisms.
I wish they had posted this to HN after it was available...I want it now! This project still appears to be in its infancy.
Re:NGINX open sources TCP load balancing on Wednesday April 22, 2015 @06:52AM (#9419519)
Technically incorrect. WebSockets handshake over HTTP and then "work" over TCP. I'm actually curious which HTTP stacks are non compliant and what you mean by that.

As to my original comment, you can probably get by without having full TCP load balancing.

Re:NGINX open sources TCP load balancing on Monday April 20, 2015 @02:49PM (#9410060)
http://en.wikipedia.org/wiki/WebSocket are a completely legitimate use.
Re:Infrastructure for Data Streams on Tuesday November 11, 2014 @09:38AM (#8589974)
No worries, thanks for taking the time to write all this up!
Re:Infrastructure for Data Streams on Tuesday November 11, 2014 @08:50AM (#8589732)
I was hoping he'd post the http-to-kafka adapter but I'm guessing that's ChartBeat IP.
Did Snowden reveal anything about "Mujahideen Secrets" or whether the NSA was able to unscramble communications made using that program? If it really was using homebrew cryptography, one can imagine it was already vulnerable to the types of attacks that programmers make when rolling their own security schemes.
Re:Drp.io: Fast and easy images hosting on Wednesday February 19, 2014 @08:27AM (#7263468)
Really great image host workflow.

I'd love to see the source of this (or something similar) so I could implement it privately. Any ideas?

This type of "sophisticated analysis" will be useless whenever zerocoin is proven as a viable addition to the protocol. True anonymity is scary from a regulatory standpoint but extremely desirable to many others.
Re:Github.com is down on Friday July 19, 2013 @08:29AM (#6069658)
Right in the middle of a deploy for us! Thankfully we're getting enterprise so hopefully this is last time a DDoS messes with our productivity.

Older »