<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: GICodeWarrior</title><link>https://news.ycombinator.com/user?id=GICodeWarrior</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 15 Aug 2026 12:29:50 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=GICodeWarrior" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by GICodeWarrior in "Ask HN: In your experience, what are sound conventions for e-ink UI development?"]]></title><description><![CDATA[
<p>While not as good as a proper refresh, you can use alternating black and white drawing to help clear an area of the screen.</p>
]]></description><pubDate>Tue, 11 Aug 2026 00:29:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=49251730</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=49251730</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49251730</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "JSON Canvas Spec"]]></title><description><![CDATA[
<p>ctrl+mouse wheel triggers the application zoom in most cases.  However, if my mouse is over the scrollable node, it invokes the Google Chrome window zoom (so I end up with two competing zoom transforms).  It also zooms relative to the upper left corner, rather than relative to my cursor (seems the app doesn't support panning?).  The background dots also move and change size as I zoom (subtle but somewhat distracting).</p>
]]></description><pubDate>Thu, 02 Apr 2026 21:42:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=47620570</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=47620570</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47620570</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Paged Out #6 [pdf]"]]></title><description><![CDATA[
<p>If you're interested to explore lots of XSS edge cases, I've found this CTF to be enjoyable.<p><a href="https://alf.nu/alert1" rel="nofollow">https://alf.nu/alert1</a></p>
]]></description><pubDate>Sun, 30 Mar 2025 17:59:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=43526125</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=43526125</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43526125</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Paged Out #6 [pdf]"]]></title><description><![CDATA[
<p>Encoding for each scenario can be quite complex unfortunately.  Django does have some template filters to help.<p>I recommend following the documentation carefully, and using a JSON API or other similarly standard mechanism if the documented options are insufficient.</p>
]]></description><pubDate>Sun, 30 Mar 2025 17:56:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=43526099</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=43526099</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43526099</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Paged Out #6 [pdf]"]]></title><description><![CDATA[
<p>Simple JSON encoding alone is not sufficient if you put the output into a <script> tag.<p><script>const user_input = "</script><script>alert(1)//"; ...</p>
]]></description><pubDate>Sun, 30 Mar 2025 17:47:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=43526014</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=43526014</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43526014</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Paged Out #6 [pdf]"]]></title><description><![CDATA[
<p>The "How to use a Python variable in an external Javascript (Django)" examples are likely vulnerable to an XSS attack, when the variable contains user supplied content.<p>It's important to output-encode for the correct context.  By default, Django encodes template variables for an HTML context, which can allow XSS when output inside a script tag or as a JavaScript file.</p>
]]></description><pubDate>Sat, 29 Mar 2025 23:17:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=43519636</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=43519636</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43519636</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "About the Tailscale.com outage on March 7, 2024"]]></title><description><![CDATA[
<p>Further, security of a marketing site tends to be lower priority than the product itself, and an install script should generally be secured similar to the product.</p>
]]></description><pubDate>Sat, 30 Mar 2024 17:01:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=39876529</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=39876529</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39876529</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Show HN: ToolJet 2.0 – Open-source alternative to Power Apps and Retool"]]></title><description><![CDATA[
<p>How can ToolJet relicense AGPL contributions to a less restrictive license?<p>The code is AGPL and accepts volunteer contributions under that license.<p><a href="https://github.com/ToolJet/ToolJet/blob/develop/CONTRIBUTING.md#any-contributions-you-make-will-be-under-the-agpl-v3-license">https://github.com/ToolJet/ToolJet/blob/develop/CONTRIBUTING...</a><p>However, in their AGPL announcement it says:<p>> We do have a commercial license that overrides the AGPL license. This commercial license allows organizations to make changes to ToolJet and provide it as a service.<p><a href="https://blog.tooljet.com/changing-license-to-agpl/#what-someone-you-really-wants-to-create-a-derivative-work-and-sell-as-a-service" rel="nofollow">https://blog.tooljet.com/changing-license-to-agpl/#what-some...</a><p>Does the hosted ToolJet service include unreleased code, leveraging this commercial license?<p>Every volunteer contributor would need to agree to relicensing and/or would need to have previously agreed to assign their copyright to ToolJet, right?</p>
]]></description><pubDate>Wed, 11 Jan 2023 19:18:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=34343135</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=34343135</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=34343135</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Tell HN: IPv6-only still pretty much unusable"]]></title><description><![CDATA[
<p>NPTv6 is different from IPv4 NAT and doesn't really have the same issues.<p>A different solution I've seen proposed for networks with multiple ISPs is to advertise both public prefixes to the network and let each client endpoint figure out which egress to use. This seems like a worse idea though.<p>The most official approach is to get your own public IPv6 prefix and work with your ISPs to BGP route that to you on both links.  However, home and small business ISPs generally don't offer this.</p>
]]></description><pubDate>Thu, 08 Dec 2022 15:27:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=33908837</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=33908837</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=33908837</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Tell HN: IPv6-only still pretty much unusable"]]></title><description><![CDATA[
<p>Have you implemented NPTv6 before?  What routing product(s) have you implemented this with?  Do you happen to have some documentation links handy?<p>In my experience, this capability is missing from most off-the-shelf solutions, and in the cases where it is available, the documentation of this feature is missing or incomplete.</p>
]]></description><pubDate>Thu, 08 Dec 2022 00:51:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=33902638</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=33902638</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=33902638</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Removing characters from strings faster with AVX-512"]]></title><description><![CDATA[
<p>Here's a list of processors supporting AVX-512:<p><a href="https://ark.intel.com/content/www/us/en/ark/search/featurefilter.html?productType=873&1_Filter-InstructionSetExtensions=3533" rel="nofollow">https://ark.intel.com/content/www/us/en/ark/search/featurefi...</a><p>The author mentions it's difficult to identify which features are supported on which processor, but ark.intel.com has a quite good catalog.</p>
]]></description><pubDate>Mon, 02 May 2022 02:35:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=31230846</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=31230846</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=31230846</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Transparent OLEDs"]]></title><description><![CDATA[
<p>If you put your webcam behind your video chat window, you can achieve better eye contact with your remote participants.  I wonder how well a webcam can see through these screens and/or how much of a hole would be required in the rendered image to avoid obstructing the camera.</p>
]]></description><pubDate>Thu, 13 Aug 2020 22:41:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=24150507</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=24150507</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=24150507</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Only 37 dogs of each breed can have the same name"]]></title><description><![CDATA[
<p>When I saw "purebred" and "AKC", my mind immediately went to:<p>The Bizarre Truth About Purebred Dogs (and Why Mutts Are Better) - Adam Ruins Everything<p><a href="https://www.youtube.com/watch?v=aCv10_WvGxo" rel="nofollow">https://www.youtube.com/watch?v=aCv10_WvGxo</a></p>
]]></description><pubDate>Sun, 16 Jun 2019 06:24:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=20194126</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=20194126</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=20194126</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Ask HN: Who is hiring? (May 2018)"]]></title><description><![CDATA[
<p>DoorDash (YC S13) | Security Engineers | Mountain View, San Francisco | ONSITE, Full-Time | <a href="https://www.doordash.com/" rel="nofollow">https://www.doordash.com/</a><p>We're looking for multiple application and infrastructure Security Engineers.  If you have experience securing webapps/apis -OR- experience securing infrastructure in AWS & Kubernetes, we want to hear from you!<p>Technologies: Kubernetes, AWS, Python, Django, Java, and more<p>Areas: Security Tools & Infrastructure, Code Review, Architecture Review, Penetration Testing, and more<p>Again, we're hiring multiple people; you don't need to excel in every technology and area.<p>I'm the Head of Security here at DoorDash (former head of Matasano Security's south bay office).<p>Our hiring process is three steps:<p>1. Introduction call with me personally (to learn more about DoorDash, not to "tech you out")<p>2. Application or infrastructure security qualifier<p>3. On-site interview<p>We recently closed our $535 million Series D, we are expanding from 600 to 1,600 cities this year, and hiring 250 more people as well.  Join us now to help take our security to the next level as our systems evolve to meet and exceed our expansion plans.<p>Reach out to learn more about DoorDash, and tell me what you want to work on!<p>rusty.burchfield+hn@doordash.com<p><a href="https://boards.greenhouse.io/doordash/jobs/802600" rel="nofollow">https://boards.greenhouse.io/doordash/jobs/802600</a></p>
]]></description><pubDate>Wed, 02 May 2018 04:13:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=16974005</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=16974005</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=16974005</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Ask HN: Who is hiring? (October 2017)"]]></title><description><![CDATA[
<p>DoorDash (YC S13) | Security Engineer | San Francisco, Mountain View | ONSITE, Full-Time, <a href="https://www.doordash.com/" rel="nofollow">https://www.doordash.com/</a><p>Formerly managing Matasano Security's south bay team, I've joined DoorDash as Head of Security to build our internal security team.<p>We are looking for application and infrastructure Security Engineers to work on a small team (<5) keeping DoorDash secure. If you have experience securing custom web applications and APIs -OR- experience securing infrastructure in Docker & AWS, we want to hear from you!<p><a href="https://boards.greenhouse.io/doordash/jobs/802600" rel="nofollow">https://boards.greenhouse.io/doordash/jobs/802600</a><p>Technologies: Python, Django, Docker, AWS, and more<p>Interesting challenges:<p>* Secure the next iteration of our platform architecture<p>* Multiple customer types to secure (merchants, dashers, consumers)<p>* Many external contractors (support, menus, etc.)<p>* Securing customers and teams without hindering them<p>Reach out to learn more!</p>
]]></description><pubDate>Tue, 03 Oct 2017 04:55:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=15390278</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=15390278</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15390278</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Ask HN: Who is hiring? (September 2017)"]]></title><description><![CDATA[
<p>DoorDash (YC S13) | Security Engineer | San Francisco, Mountain View | ONSITE, Full-Time, <a href="https://www.doordash.com/" rel="nofollow">https://www.doordash.com/</a><p>Formerly at Matasano Security, I've joined DoorDash as Head of Security to build our internal security team.<p>We are looking for application and infrastructure Security Engineers to work on a small team (<5) keeping DoorDash secure.  If you have experience securing custom web applications and APIs -OR- experience securing infrastructure in Docker & AWS, we want to hear from you!<p><a href="https://boards.greenhouse.io/doordash/jobs/802600" rel="nofollow">https://boards.greenhouse.io/doordash/jobs/802600</a><p>Technologies:  Python, Django, Docker, AWS, and more<p>Interesting challenges:<p>* Secure the next iteration of our platform architecture<p>* Multiple customer types to secure (merchants, dashers, consumers)<p>* Many external contractors (support, menus, etc.)<p>* Securing customers and teams without hindering them<p>Reach out to learn more!</p>
]]></description><pubDate>Fri, 01 Sep 2017 15:19:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=15149122</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=15149122</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15149122</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Flight QF72: What happens when automation leaves pilots powerless?"]]></title><description><![CDATA[
<p>The wording is technically imprecise in a number of places.  The mechanical components certainly can't move at any significant fraction of c, but they may be referring to the electrical fly-by-wire signals controlling them.<p>Still not precisely the speed of light, but close enough if that's what they meant.</p>
]]></description><pubDate>Sat, 20 May 2017 03:41:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=14380922</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=14380922</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=14380922</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Shocking Poor Security at the Social Security Administration"]]></title><description><![CDATA[
<p>The security of passwords at rest depends on how they are stored.  Further, if an SSA database is dumped, passwords won't be the data exposure people are upset about.</p>
]]></description><pubDate>Sun, 15 Jan 2017 16:11:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=13404603</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=13404603</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=13404603</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Shocking Poor Security at the Social Security Administration"]]></title><description><![CDATA[
<p>What login rate-limiting, account lock-out, and password expiry policies do they have though?<p>Based on the password requirements, they have something like 2.6 trillion possible passwords.  If your account is locked out after 3 failed login attempts, if they limit to one attempt per second, or if they have a forced password change every month, etc. there are a number of ways to tighten this up.<p>Their password policy is anachronistic, and this /could/ be a symptom of other issues.  However by itself, it seems more like a usability issue than a security issue.<p>In fact, they could be attempting to discourage password reuse with other sites.  That would be a security bonus if it worked (I doubt it works).</p>
]]></description><pubDate>Sun, 15 Jan 2017 06:53:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=13402743</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=13402743</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=13402743</guid></item><item><title><![CDATA[New comment by GICodeWarrior in "Most popular links in Hacker News comments, 2006–2015"]]></title><description><![CDATA[
<p>Most of these look like things I'd expect.<p>However, number 13 is an obvious spam link if you look at the mentions.<p>I wonder how HN protects against this type of spam and how this particular spam got through.  The most recent mention was 4 years ago, so it would appear this particular issue is fixed in the current software.</p>
]]></description><pubDate>Mon, 25 Apr 2016 03:39:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=11562420</link><dc:creator>GICodeWarrior</dc:creator><comments>https://news.ycombinator.com/item?id=11562420</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=11562420</guid></item></channel></rss>