Live data from Hacker News

Viewing profile — xianb

xianb

HN member
Joined
Fri, Jan 15, 2016, 10:21 PM UTC
HN karma
37
Public activity
22 items

About xianb

No profile information was provided.

Recent public activity

  1. comment
    Comment #34211309

    I'd assume it's similar to what grubhub said here that the platform pays https://twitter.com/grubhub/status/611320394256109568?lang=e...

  2. comment
    Comment #22891356

    It's fascinating how Auth0 actually had a blog post about finding and fixing a handful of JWT vulnerabilities years ago (one of them is more advanced to exploit than this). Just an…

  3. comment
    Comment #19193155

    probably need to be fined billions to get them to take it seriously

  4. comment
    Comment #19101652

    Houzz and Nest security emails also got filtered

  5. comment
    Comment #19085140

    I think it's not just the journalists though...pretty sure some of the concerns with FB were published years ago but fell on mostly deaf ears. But now you have a public that cares …

  6. comment
    Comment #19029467

    > Why would LE send the SNI in the first place? I thought the purpose was to prove you own the domain, not cohabit an environment where the domain is hosted? The assumption was tha…

  7. comment
    Comment #18947726

    For ETH the big one is the DAO where they had to fork it to recover There's also other smaller bugs like coinbase and parity wallet

  8. comment
    Comment #18921072

    Perhaps this might be a poor setup on my company's part, but it's awful navigating between teams and finding escalation policies and schedules in PD

  9. comment
    Comment #18792709

    > The green lines are flight paths from before the implementation of the new technology (January 2013). The red lines are flight paths from after the implementation of the new tech…

  10. comment
    Comment #18780947

    sounds like a nice generic company value/principle

  11. comment
    Comment #18731483

    is it really different from the data collection of other grocery store shopper cards though?

  12. comment
    Comment #18533889

    if you store plaintext password on the client, you'd be one XSS attack away from potentially having a lot of passwords stolen - best practice is to have password in plaintext for a…

  13. comment
    Comment #18533836

    anything that makes computation less intensive for you also makes it less intensive for a potential malefactor - it's just an inherent tradeoff. Rather than scan for password being…

  14. comment
    Comment #18526343

    accurate description of LinkedIn by Blake Lively and Anna Kendrick https://youtu.be/xmo8-Bh98fw?t=270

  15. comment
    Comment #18447525

    but you can also choose to withhold stock for taxes basically would have just been a losing gamble to have withheld money instead instead of it being something forced upon them

  16. comment
    Comment #18219404

    https://twitter.com/kenjennings/status/339170784406810624

  17. comment
    Comment #18118418

    yeah, if you're absolutely inept and have insufficient logging/monitoring, you can't even tell how bad you'd been screwed. kinda like a Dunning Kruger effect of sorts

  18. comment
    Comment #18098336

    sounded like the video stuff was added after view as was added so it probably didn't go through the same level of scrutiny

  19. comment
    Comment #18043447

    sounds similar to this https://en.wikipedia.org/wiki/False_positive_paradox

  20. comment
    Comment #17975875

    https://www.youtube.com/watch?v=E5gPdrlyc84 people have, but who knows how long it'll last

  21. comment
    Comment #16633859

    It's running fine for me on a Pi Zero W. There's honestly like no slowdown at all

  22. comment
    Comment #10912716

    >profit on them. Nope. http://gawker.com/here-are-the-internal-documents-that-prove... Granted that businesses like Amazon are unprofitable, but Uber is not nearly going to be as s…