Hacker News: Hedja

New comment by Hedja in "Our Year in Review: How we’ve kept Firefox working for you in 2020"

Hedja — Thu, 31 Dec 2020 15:22:10 +0000

HTTPS ensures the data isn't tampered during transport, but it doesn't ensure the integrity of the data itself. That's why there's things like Subresource Integrity (which doesn't apply to top-level resources like HTML).

However, there's no way to ensure the files we download are created by who they say they are. A domain for example can change hands and existing links say on HN can be loaded with unexpected, potentially malicious, content. Same for hacked servers.

IMO we need some form standard page signing to enforce actual integrity of information, not just transport. I made a proof-of-concept Web Extension to show how that might be possible using PGP [1]. Of course PGP has its own issues but it's just an experiment.

[1] https://webverify.jahed.dev/

simplewall – Open-source Firewall for Windows

Hedja — Wed, 30 Dec 2020 16:56:38 +0000

Article URL: https://www.henrypp.org/product/simplewall

Comments URL: https://news.ycombinator.com/item?id=25583304

Points: 6

# Comments: 0

New comment by Hedja in "Welcome Yari: MDN Web Docs has a new platform"

Hedja — Tue, 15 Dec 2020 15:37:53 +0000

It's just a vectorised image of Yukimura from Samurai Warriors[1]. This image to be specific[2]. Don't think there was a designer, just a developer making a logo using a character they like (or maybe it was random image search). Pretty common in open source.

[1] https://koei.fandom.com/wiki/Yukimura_Sanada

[2] https://static.wikia.nocookie.net/dynastywarriors/images/9/9...

Show HN: WebVerify – Verify Authorship of Webpages

Hedja — Mon, 16 Nov 2020 14:13:07 +0000

Article URL: https://webverify.jahed.dev/

Comments URL: https://news.ycombinator.com/item?id=25111812

Points: 1

# Comments: 0

Domain Ownership, Web Authorship and WebVerify

Hedja — Sat, 14 Nov 2020 20:24:08 +0000

Article URL: https://jahed.dev/2020/11/13/domain-ownership-web-authorship-and-webverify/

Comments URL: https://news.ycombinator.com/item?id=25095324

Points: 4

# Comments: 0

New comment by Hedja in "Issue Grooming"

Hedja — Wed, 21 Oct 2020 12:25:50 +0000

You can do this with GitHub Projects (the Trello-like interface). For my personal projects, I use GitHub Issues as a dumping ground for ideas, which automatically go into a "Triage" (inbox) column, which I go through and assign labels and priorities every week or month depending on the project.

The downside with GitHub projects is that you can't automate based on labels so the issues need to be organised into columns manually if you have more than the simple one board with To-Do/In-Progress/Done columns setup. Though search and filters slightly helps with that.

Show HN: firebase-rules – TypeScript for Firebase RTDB Rules, Avoid JSON

Hedja — Thu, 17 Sep 2020 14:06:55 +0000

Article URL: https://github.com/jahed/firebase-rules

Comments URL: https://news.ycombinator.com/item?id=24504778

Points: 1

# Comments: 0

New comment by Hedja in "Worrying about the NPM Ecosystem"

Hedja — Mon, 29 Jun 2020 23:46:13 +0000

> lodash should just be incorporated into vanilla javascript, as part of its standard library

That's already happening. More and more of lodash/underscore/etc's functions are being introduced to Array/Object/String APIs.

https://github.com/you-dont-need/You-Dont-Need-Lodash-Unders...

New comment by Hedja in "Apple declined to implement 16 Web APIs in Safari due to privacy concerns"

Hedja — Mon, 29 Jun 2020 17:22:04 +0000

In most browsers, you can go into settings and default it to block without asking.

New comment by Hedja in "Lemmy, an open-source federated Reddit alternative, gets funding for development"

Hedja — Sun, 28 Jun 2020 11:42:38 +0000

This is what happens all across the web, regardless of software. Raiding. IRC raids, forum raids, etc. Sometimes it's for fun, sometimes it's more malicious. Most software has ways to mitigate it. Temporarily closing new registrations, invite only registrations, throttling, IP bans, etc. Just like DDoS attacks, there is no true solution to this since that's how the public web and internet works.

New comment by Hedja in "Ask HN: Thoughts on new GitHub layout?"

Hedja — Tue, 23 Jun 2020 21:11:10 +0000

I have a single major problem with all of their new layouts. They place content at extreme ends of the screen, completely stretched out like a rubber band with No Man's Land in the middle. In this case, the top half is stretched and the bottom half is centred. Completely inconsistent and tiring for your eyes darting around corners of the screen.

Example: https://twitter.com/JahedDEV/status/1275532988772683776

I don't know why they think it's good design, it would be nice to know. All of their previews for it squash the window so it looks perfect, like their mockups I assume. Similarly, I have to have a dedicated, half-width window just for GitHub to workaround this.

New comment by Hedja in "I Just Hit $100k/year On GitHub Sponsors"

Hedja — Tue, 23 Jun 2020 16:20:01 +0000

Since people are showing interest in GitHub Sponsors, I just wanted to mention: The types of services listed in the article likely falls under VAT in specific regions which can be a pain to calculate. That's one of the reasons I'm sticking with Patreon; they handle tax and chargebacks so the fee isn't a big deal. GitHub Sponsors explicitly says the tax is all on you. They don't mention chargebacks in their docs so it's hard to say, if they're processing the payment on their end, I'd guess they handle it.

https://help.github.com/en/github/supporting-the-open-source...

Open Source Apps on Android

Hedja — Mon, 22 Jun 2020 12:35:14 +0000

Article URL: https://jahed.dev/2020/06/18/open-source-apps-on-android/

Comments URL: https://news.ycombinator.com/item?id=23599469

Points: 1

# Comments: 0

Do You CI?

Hedja — Sun, 21 Jun 2020 18:02:05 +0000

Article URL: https://benjiweber.co.uk/blog/2020/02/12/do-you-ci/

Comments URL: https://news.ycombinator.com/item?id=23593845

Points: 2

# Comments: 0

New comment by Hedja in "Analytics Without Google"

Hedja — Thu, 04 Jun 2020 05:35:10 +0000

The strange thing for me is, when I switched to custom first-party analytics, I stopped getting referrer spam altogether. I assume then that spammers explicitly optimise for GA tracking and ignore everything else. Which makes sense since a lot of them are targeting audiences that care about SEO and GA has a uniform tracking URL that they can flood without the cost of rendering webpages. The reason GA can't filter them out is because they're constantly working around each other.