Live data from Hacker News

Viewing profile — rosswilson

rosswilson

HN member
Joined
Sun, Nov 10, 2013, 12:38 AM UTC
HN karma
42
Public activity
29 items

About rosswilson

Principal Software Engineer at the BBC, UK. Doing things with authentication.

Recent public activity

  1. comment
    Comment #43698264

    This reminds me of https://github.com/jo-m/trainbot , a neat example of stitching together frames of passing trains to form a panorama. This frontend presents them nicely: https://…

  2. comment
    Comment #38023529

    This shouldn't be possible as the server-to-server request to Facebook to exchange the Authorization Code for an Access Token requires the client_id and client_secret to be provide…

  3. comment
    Comment #24556265

    It's called Insulation Resistance Testing and an electrician would typically use a device like a Megger tester. Here's a good video about it: https://www.youtube.com/watch?v=CsXUuu…

  4. comment
    Comment #24303302

    You have to draw the line somewhere. Otherwise we'd be saying that HTTPS/TLS is not secure since the webpage is rendered to your monitor unencrypted. I agree with the parent quote:…

  5. comment
    Comment #24039033

    You might be interested in the full list of UK trail delay codes: https://wiki.openraildata.com/index.php/Delay_Attribution_Gu...

  6. comment
    Comment #23868686

    Those extenders typically backhaul the traffic over a VPN back to the telco, so your router would never see the true destination (e.g. Facebook).

  7. comment
    Comment #23337472

    I think they've always done this redirect. Release artifacts are uploaded to S3 and then their Rails app generates a presigned S3 URL that gives short-term access. This is because …

  8. comment
    Comment #21851219

    You should first consider what you want to achieve from this “revamp”. Are you facing some issue with your existing tech stack? I’m wary when I hear teams discuss a total rewrite o…

  9. comment
    Comment #21669578

    I’m building a side project that has an enterprise customer, and the Enterprise Ready website was a good intro to the concepts that enterprises value: https://www.enterpriseready.i…

  10. comment
    Comment #21626722

    The article has quite a nice introduction to deep learning concepts, but the headline claim of building an ID card reader from scratch is little more than "use our API".

  11. comment
    Comment #21317402

    Fibre Channel, I think: https://en.m.wikipedia.org/wiki/Fibre_Channel

  12. comment
    Comment #21040342

    EC2 instances are now billed at per-second granularity, with a minimum charge of 60 seconds.

  13. comment
    Comment #20335111

    If you received a HTTP 502 then DNS must've already resolved. Browsers typically will do a DNS lookup, and then try establishing a TCP connection to one of the returned hosts. Its …

  14. comment
    Comment #20309252

    Exposing whether an account exists is a risk, but the alternative is also a hard problem to solve. Sign In screens could throw a generic error that doesn’t reveal whether it was th…

  15. comment
    Comment #15728738

    You’re referring to a mobile application that inherently has a slower release cadence - certainly for Apple with their verification process. A web app can be released multiple time…

  16. comment
    Comment #15098607

    You really shouldn't be relying on security by obscurity to prevent attacks to your websites. If you check your access logs you'll see countless attacks that are unconditional, the…

  17. comment
    Comment #15012273

    A lot of email providers support aliases using the + symbol. If your email address was foo@example.com, then foo+bar@example.com would also work and be delivered to your inbox. Thi…

  18. comment
    Comment #10041317

    Nor for me

  19. story
  20. story
  21. comment
    Comment #7465136

    How would turning the pinger off for a month help? It just means that the search operation stops for a whole month while they wait for the pings to resume. I don't understand how y…

  22. comment
    Comment #7414438

    Read about Nigeria Airways Flight 2120 ( http://en.wikipedia.org/wiki/Nigeria_Airways_Flight_2120 ). An under-inflated tyre caught fire during take-off, the plane took off unaware …

  23. comment
    Comment #7351159

    "so that it is really obvious to the user if they are directed to mess with things that they shouldn't be messing with" I think that as soon as an attacker tempts the user with: "f…

  24. comment
    Comment #7162428

    London Underground use a number of signalling systems, here's a good resource to get started learning about them: http://www.trainweb.org/tubeprune/signalling.htm However, ultimate…

  25. comment