Viewing profile — xianb
xianb
HN member- Joined
- Fri, Jan 15, 2016, 10:21 PM UTC
- HN karma
- 37
- Public activity
- 22 items
- HN profile
- View on Hacker News ↗
About xianb
No profile information was provided.
Recent public activity
-
comment
Comment #34211309
I'd assume it's similar to what grubhub said here that the platform pays https://twitter.com/grubhub/status/611320394256109568?lang=e...
-
comment
Comment #22891356
It's fascinating how Auth0 actually had a blog post about finding and fixing a handful of JWT vulnerabilities years ago (one of them is more advanced to exploit than this). Just an…
-
comment
Comment #19193155
probably need to be fined billions to get them to take it seriously
-
comment
Comment #19101652
Houzz and Nest security emails also got filtered
-
comment
Comment #19085140
I think it's not just the journalists though...pretty sure some of the concerns with FB were published years ago but fell on mostly deaf ears. But now you have a public that cares …
-
comment
Comment #19029467
> Why would LE send the SNI in the first place? I thought the purpose was to prove you own the domain, not cohabit an environment where the domain is hosted? The assumption was tha…
-
comment
Comment #18947726
For ETH the big one is the DAO where they had to fork it to recover There's also other smaller bugs like coinbase and parity wallet
-
comment
Comment #18921072
Perhaps this might be a poor setup on my company's part, but it's awful navigating between teams and finding escalation policies and schedules in PD
-
comment
Comment #18792709
> The green lines are flight paths from before the implementation of the new technology (January 2013). The red lines are flight paths from after the implementation of the new tech…
-
comment
Comment #18780947
sounds like a nice generic company value/principle
-
comment
Comment #18731483
is it really different from the data collection of other grocery store shopper cards though?
-
comment
Comment #18533889
if you store plaintext password on the client, you'd be one XSS attack away from potentially having a lot of passwords stolen - best practice is to have password in plaintext for a…
-
comment
Comment #18533836
anything that makes computation less intensive for you also makes it less intensive for a potential malefactor - it's just an inherent tradeoff. Rather than scan for password being…
-
comment
Comment #18526343
accurate description of LinkedIn by Blake Lively and Anna Kendrick https://youtu.be/xmo8-Bh98fw?t=270
-
comment
Comment #18447525
but you can also choose to withhold stock for taxes basically would have just been a losing gamble to have withheld money instead instead of it being something forced upon them
-
comment
Comment #18219404
https://twitter.com/kenjennings/status/339170784406810624
-
comment
Comment #18118418
yeah, if you're absolutely inept and have insufficient logging/monitoring, you can't even tell how bad you'd been screwed. kinda like a Dunning Kruger effect of sorts
-
comment
Comment #18098336
sounded like the video stuff was added after view as was added so it probably didn't go through the same level of scrutiny
-
comment
Comment #18043447
sounds similar to this https://en.wikipedia.org/wiki/False_positive_paradox
-
comment
Comment #17975875
https://www.youtube.com/watch?v=E5gPdrlyc84 people have, but who knows how long it'll last
-
comment
Comment #16633859
It's running fine for me on a Pi Zero W. There's honestly like no slowdown at all
-
comment
Comment #10912716
>profit on them. Nope. http://gawker.com/here-are-the-internal-documents-that-prove... Granted that businesses like Amazon are unprofitable, but Uber is not nearly going to be as s…