News for hackers. Stuff that matters.

seanp2k

Re:Dotjs — hack the web on Wednesday June 29, 2011 @12:57AM (#2708456)
ahahahahah what? Dude, do you work for Microsoft? "Well see, we just have to run MS-SQL server (DESKTOP OMG EXPRESS ENGINE) here, and then we run IIS on top of it to serve this file listing..."
Re:Dotjs — hack the web on Wednesday June 29, 2011 @12:54AM (#2708450)
So actually it's much worse than Greasemonkey.

Also, with GM you can just save the script with the same filename and it'll use that instead.

This project is 100% useless.

Re:Dotjs — hack the web on Wednesday June 29, 2011 @12:53AM (#2708449)
Yeah, already have greasemonkey and the only thing I have to do to "publish" files is to save them with the same name.

This project is a lot of work for zero benefit.

Re:JavaScript is Dead. Long Live JavaScript on Sunday June 26, 2011 @10:41PM (#2699889)
I really hate when "X is dead; long live X!" is misused like this. The original phrase is "The king is dead; long live the king!", used when the OLD king died and the NEW king takes over.

Googling around, I see tons of misuse: Example of bad usage: "White Stripes are dead (long live white stripes)"

Example of proper usage: "Palm is dead; long live Palm!" (this would mean that Palm got acquired or reformed) "Paper is dead; long live paper!" (could be proper if used in an article about how paper for PRINTING is dead but paper lives on in other forms)

REF: http://en.wikipedia.org/wiki/The_King_is_dead._Long_live_the....

Re:MtGox salted passwords cracked on Sunday June 26, 2011 @09:21PM (#2699685)
Yeah dude, mine was on the bigger list. It's a 10chr semi-random password (all lower case tho).

I pick passwords based on easy things to type and the memorize the pattern / commit it to muscle memory. I also try to use obscure but pronounceable patterns somewhere in the pass.

Re:MtGox salted passwords cracked on Sunday June 26, 2011 @09:19PM (#2699682)
Tradehill is the new MtGox. They even copied the site design pretty much exactly.
Re:MtGox salted passwords cracked on Sunday June 26, 2011 @09:12PM (#2699666)
KeePassX + Dropbox bro. It's only an alt-tab and a right-click -> log in to site on whatever you want to get into, once you enter your master password and/or present your password file.
Re:MtGox salted passwords cracked on Sunday June 26, 2011 @09:06PM (#2699646)
Looks great but no Linux support. Since I use Ubuntu on my work (and home) laptop and netbook, this is largely useless for me.

KeePassX + Dropbox is a great way to go, but it's kind of more "DIY"-ish. Still not hard to set up, keeps all my passwords in sync, and KeePassX has some great features like "auto-type" which basically is a one-click website login.

I now use the max-length passwords on all the sites I use, and they're all crazy random ones. I don't memorize any of them because it's so easy to reset a password if I lost my KeePassX access (unlikely since it's on Dropbox + 4 computers + CrashPlan backups).

Re:MtGox salted passwords cracked on Sunday June 26, 2011 @09:01PM (#2699629)
Yeah, I've gotten downvoted a lot for correcting people...but I think that not even approaching proper english makes you look like an idiot, so really, I'm helping.
Re:OS X – Safe, yet horribly insecure on Saturday June 25, 2011 @06:53PM (#2696821)
We have some colocation clients who have a full cab of all XServes and Mac Pros (with OSX Server installed). One time, I asked what they run with all of that. They said "Ooh, we needed it to run Tomcat". Uhh....

I don't really understand the point of OSX Server beyond possibly render farms (for music / movies)

Re:OS X – Safe, yet horribly insecure on Saturday June 25, 2011 @06:47PM (#2696805)
>"and there's no good way to do it seamlessly yet."

Right. There are ways to do it, but not any /good/ ones. Good here meaning "while still letting the software execute efficiently and without a ton of added complexity"

Re:OS X – Safe, yet horribly insecure on Saturday June 25, 2011 @06:45PM (#2696800)
Good UX engineering is good UX engineering. Software engineering / architecture / development in general is not necessarily the same.

An app can be beautifully engineered by have an awful UX. The inverse is less likely to be true (because bugs and obvious flaws like long delays and unresponsive UIs can quickly degrade UX), but still possible.

Re:OS X – Safe, yet horribly insecure on Saturday June 25, 2011 @06:36PM (#2696781)
I found this article to be very poorly written, although it does makes some good points.

That said, I agree with pretty much all of what you said.

Re:TrueCrypt User Held in Contempt of Court on Saturday June 25, 2011 @02:13PM (#2696178)
You also are missing the point of TrueCrypt: Plausible Dependability and multiple passwords for different content. It'd be like "Give us the key to this safe that unlocks the incriminating evidence, even though we have absolutely no way of knowing if you're hiding more or giving us the full truth".

You could have cat pictures encrypted with passphrase A and incriminating evidence (that stands up to the best forensic analysis currently available) encrypted with passphrase B and they wouldn't know which is which, if they unlocked ALL the data, or what.

Truecrypt is AMAZING and anyone holding onto stuff that might get them into trouble (esp. w/ foreign gov'ts) should use it.

Re:TrueCrypt User Held in Contempt of Court on Saturday June 25, 2011 @02:09PM (#2696170)
>"So if you get a warrant to search your hard drive for something, you are compelled to give them the password just like you are compelled to let them into your house if they have a warrant to search for something like drugs or guns or counterfeit plush toys."

You might also be missing something about TrueCrypt: plausible deniability. You can have different passphrases that unlock different things. You could provide them with a passphrase the only unlocks innocent documents when really you have CP stored using a DIFFERENT pass phrase -- any this would stand up to any cryptographical analysis -- they simply cannot PROVE that the CP exists or even that more encrypted data exists.

The analogy to a key isn't quite valid here; it's more like the doors in that hallway in the matrix. If you use key A in the door, you will get content A. However, you can use a different key, open the door, and it'll go somewhere else entirely. Also, if you rip the door off the wall, there is just the wall behind it. Crazy stuff, that.

Re:Hulu puts itself up for sale on Wednesday June 22, 2011 @07:19PM (#2685841)
Who'd want it, unless someone is looking to launch an inferior Netflix competitor.
Totally not shocked. BPI and pals are awful.
Re:Ask HN: what still sucks about web development? on Tuesday June 21, 2011 @08:08PM (#2680965)
Frameworks. MVC itself isn't hard for me to grok, but doing USEFUL things with Django and friends is kind of hard having never done it before. All the tutorials assume that you're already an ace OO guy.
.... they (are|have) signed with Warner and Atlantic. Doesn't get much more mainstream than that.

REF: http://en.wikipedia.org/wiki/Death_cab_for_cutie

Regarding the _USEFULNESS_ of this: low. Regarding the entertainment factor: pretty high. I could use a m3u-> txt parser to dump a huge load of youtube videos and make a "music video playlist" -- kind of cool.

>"Because they make deeply integrated skins" Not always true, and usually said skins are awful, slow, buggy crap.

I would argue that if skin development is introducing even the slightest delay into the release cycle, they should cut it out ASAP.

Re:CIA.gov Possibly Down, LulzSec Claims Responsibility on Wednesday June 15, 2011 @11:26PM (#2660006)
Probably something very large, very expensive, and very custom. I would think something like a custom contract-deal IBM solution.

Here is the whatweb output: ./whatweb https://online.citibank.com https://online.citibank.com [200] X-UA-Compatible[IE=EmulateIE7, IE=EmulateIE7], UncommonHeaders[jid], Cookies[JFPWebAppInfo,JSESSIONID], Title[Citibank Online], Country[UNITED STATES][US]

Looks like something Java-based. It's fun that sometimes software gets so large that they miss a gaping security hole like this.

Re:Dear Comcast: Why are you not crushing Netflix? on Wednesday June 15, 2011 @07:21PM (#2659482)
Comcast already rakes in cash from consumers who usually have the "choice" between ATT with awful DSL service, or Comcast with awful cable modem service that is at least fast most of the time.

ATT: 1.5mbit in most locations and costs $20-$40/month not including phone line.

Comcast: costs $50-$200/month but you can get 6-100mbit in lots of locations.

To anyone who is going to try to play the "free market; let's see some competition!" card:

It's pretty impossible to do in this industry since ATT and Comcast OWN THE INFRASTRUCTURE THAT CONNECTS TO HOUSING. You really think that every city is going to let you either dig up miles of road or put up new lines on their poles? You'd even have to pay ATT/Comcast if you went the "running new lines" route.

The residential ISP business is ABSOLUTELY an oligopoly, and you'd need billions in funding to even have a chance at breaking into the market.

I hope Comcast dies a fiery death and I'm really glad to see Netflix killing them at their own game. VOD / cable boxes have been AWFUL with software that never gets updated even though they can do OTA updates and UIs that look like stuff the airlines used in the early 90s.

UX? What's that....

EDIT:

TL;DR Comcast isn't going to change much any time soon because they already make $50-$300/month in most cases...they have no motivation to change.

If netflix gets more popular, they'll just lower their bandwidth caps more to make you indirectly pay them for netflix.

I'm pretty sure that Quake 3 is basically unplayable on my phone because I don't have a mouse. Your suggestion might work fine if you were just shooting stationary targets, but for moving objects, no way.
Re:Coding tricks I learnt at Apple on Friday June 10, 2011 @11:21AM (#2641158)
>"Coding tricks I learnt at Apple"

I'd wager "learning how to properly use 'learned'" wasn't one of them.

http://www.urch.com/forums/english/9214-learned-vs-learnt.ht... "The descriptive answer in American English is: There is no such word as "learnt". Use "learned" always."

Re:Hacker News Search on Saturday June 04, 2011 @10:28PM (#2621109)
First thought: Seriously, you guys couldn't just make SQL or something lucene-based work for this (like elasticsearch) ?

Second thought: Hmm, ooh well, I just use google with site: news.ycombinator.com

EDIT: It annoys me when people hate on SQL and act like it's OMGSOSLOW. I would agree that fulltext search BY ITSELF isn't amazing, but you can use something like Sphinx to wrap it and support awesome things like Soundex / Metaphone fuzzy matching. It's also stupid easy to set up. The NoSQL movement is, IMO, largely misguided. If you need to shard data and scale ridiculously, something like Lucene can probably do it. If you need bigger than that, use memcached /redis and shard and map/reduce queries....that makes sense, but NoSQL doesn't seem like a great idea for PRIMARY data storage. It seems like you better have amazing backups :)

Re:Hate Java? You’re fighting the wrong battle. on Saturday June 04, 2011 @03:14PM (#2620220)
>"But, the option is there, as it could happen."

And you know someone is going to use [awful library] to solve [big problem] and it will "work".

Re:Hate Java? You’re fighting the wrong battle. on Saturday June 04, 2011 @03:13PM (#2620217)
C / C++ are fun :)
Re:Hate Java? You’re fighting the wrong battle. on Saturday June 04, 2011 @03:04PM (#2620200)
Mostly, this. I've seen Java go fast and work well and scale and do other "enterprise-y" things, but there is tons and tons of awful software out there.

I just feel like there are better choices for most projects.

Older »