Hacker News: maknz

New comment by maknz in "Cloudflare Reverse Proxies Are Dumping Uninitialized Memory"

maknz — Fri, 24 Feb 2017 02:45:53 +0000

Full SSL requests still terminate at CloudFlare, and would still be vulnerable. It's just that CloudFlare's connection to your origin is also encrypted.

New comment by maknz in "Threaded messaging comes to Slack"

maknz — Thu, 19 Jan 2017 04:15:30 +0000

Flowdock was great until CA bought it. Now it's pretty much on life support. No support (it's all 'community' now, whatever that means), buggy as heck, no updates in years, the Twitter account is dead.

New comment by maknz in "Pokemon Go is a huge security risk"

maknz — Mon, 11 Jul 2016 22:45:44 +0000

Full access is bad enough, but the really dodgy thing going on is that you never get asked to approve or deny that access for Pokemon Go when doing the OAuth flow. You just log in, proceed through 2fa, and you're magically logged into the app. Pokemon Go Release then shows up as an authorised app... except I never authorised it.

My theory is that they're injecting JavaScript into the web view to automatically press the 'Approve' button and hiding that from the user. If true, that's very worrying. They'd be effectively circumventing the whole OAuth framework by forging the user's approval of the app. Every user should have been asked up-front whether or not they wanted to approve or deny Pokemon Go's full access.

New comment by maknz in "How “Silicon Valley” Nails Silicon Valley"

maknz — Thu, 09 Jun 2016 23:02:26 +0000

Halt and Catch Fire is great, definitely recommend.

New comment by maknz in "Show HN: Automatic private time tracking for OS X"

maknz — Thu, 26 May 2016 23:51:04 +0000

Damn this is good. I'll be buying.

New comment by maknz in "Introducing TAuth: Why OAuth 2.0 is bad for banking APIs and how we're fixing it"

maknz — Thu, 05 May 2016 23:35:28 +0000

It's spelled authorisation everywhere else.

New comment by maknz in "Reddit for iOS and Android"

maknz — Fri, 08 Apr 2016 05:08:25 +0000

Australia, but not New Zealand? C'mon.

New comment by maknz in "Transmission BitTorrent app contained malware"

maknz — Mon, 07 Mar 2016 01:15:34 +0000

Checked my install of 2.9.0 from auto-update, it's clean (none of the suspect files are in Contents/Resources). According to a post on the Transmission forums, when a person was (probably) delivered an infected binary, there was a checksum failure as you'd expect. So it seems as though you won't be infected if you used the auto-updater.

New comment by maknz in "To Lose Weight, Eating Less Is Far More Important Than Exercising More"

maknz — Tue, 16 Jun 2015 08:48:18 +0000

So much this. If you include regular exercise you're way more motivated not to over-eat, you simply don't want to spoil the hard work you did since it's so easy to consume 500 cal but so much harder (relatively) to burn 500 cal. Combining both has certainly been effective for me.

New comment by maknz in "Show HN: A DJ Khaled Tinder Bot"

maknz — Sun, 17 May 2015 07:56:22 +0000

Great writeup, hilarious outcome! Nice work.

New comment by maknz in "Please don't denigrate what a beginner is currently learning"

maknz — Mon, 08 Dec 2014 04:33:18 +0000

I'm a PHP developer (reasonably experienced, in my opinion anyway). The only practical downside of PHP is the standard library is a bit iffy, because breaking BC that much is a big deal. Many experienced developers prefer PHP, it's not just a language for newbie web developers to get their feet wet in.

I think the reason you see a lot of terrible PHP code is because it has low barriers to entry, a lot of inexperienced people who really aren't programmers can jump in and build crap really easily. But there is _a lot_ of good PHP code out there too.

New comment by maknz in "Amazon DNS error"

maknz — Thu, 27 Nov 2014 00:56:59 +0000

Our CloudFront distribution is down. Route53 seems fine, but it could just be caching. Looks like we're in good company though.

New comment by maknz in "Ask HN: Where are all the Rails jobs?"

maknz — Sat, 22 Nov 2014 06:55:12 +0000

I haven't noticed a particular decline in Rails jobs locally here in New Zealand. In fact, a company has been looking for a Rails dev for over a year and can't find anyone. I work in PHP, and there's quite a lot of opportunity. On the other hand, there's no Node jobs around, perhaps because of its infancy.

New comment by maknz in "Show HN: Workfrom – The best coffee shops and cafes to work from"

maknz — Mon, 04 Aug 2014 09:37:25 +0000

It's a great idea. Only suggestion would be to make it easier to add cities and places and let the community report bad places, instead of what seems to be a review-first approach. I'd rather more content (and the ability to add content for my locals right away) than have to go through a "beta" phase to get the city up and running.

New comment by maknz in "Stripe launches in Australia"

maknz — Tue, 22 Jul 2014 03:22:46 +0000

Please, please come to NZ. We are stuck in an awful monopoly of Payment Express and overpriced merchant accounts.

New comment by maknz in "Hemingway makes your writing bold and clear"

maknz — Wed, 12 Feb 2014 22:57:21 +0000

Public API, please!