Live data from Hacker News

“Users will only be able to view patents via HTTP. HTTPS will no longer work”

uspto.gov

161–170 of 172 posts

Re: “Users will only be able to view patents via HTTP. HTTPS will no longer work”

#161
Quite a tricky incident or a tendency ... One day, it will make you look at the problem more creatively. This is an increase in the risks of MITM - when information can be distorted or other manipulations with it are possible. But this is good as a whole. Will help create more sophisticated and safe technologies for viewing information in these networks.

Fortunately, there are quite a few workarounds and opportunities that minimize all the associated risks ...

Re: “Users will only be able to view patents via HTTP. HTTPS will no longer work”

#162
post #143
post #133

Earlier quoted context omitted.

This is largely outmoded advice in the wake of in re seagate. Simply having looked at a patent is not enough to create willful infringement.

I've just been informed that in re seagate got over turned last year. Bad news.

Did it? Got a link?

Re: “Users will only be able to view patents via HTTP. HTTPS will no longer work”

#163
post #144

Earlier quoted context omitted.

It is one of the rare organizations where the people responsible for the budget of the organization have long track records of trying to have them disrupted (or just eliminated). Congress has often tried to undermine the ability of the EPA, IRS, NIH, NOAA... to do their job which then makes it seem they are ripe for disruption.

The Republicans are essentially government saboteurs, which is fascinating if you can look at it from a distance. Most countries' major conservative party don't do this. Quite frankly, I'd say that having a relatively small government is what saves the US from disaster, as countries with that level of government dysfunction are usually pretty poor.

> relatively small government

Are we talking about the same government??

Re: “Users will only be able to view patents via HTTP. HTTPS will no longer work”

#164
post #89

Earlier quoted context omitted.

What's being described above isn't simply template-based rendering (which, yes, essentially everything does), but the practice of building web-software like desktop software and keeping the state of the UI server-side. It ignores that browsers are capable of effectively forking the UI through (today) tabs and (historically) "Open in New Window". Interacting with such software is a profoundly unpleasant experience; th…

> It is not Java-specific, but it is common to a few specific Java frameworks as well as at least one of Microsoft's older frameworks (I forget which one). ASP.NET WebForms has a feature where the Session ID, normally stored in a cookie, is stored in the request URL path instead. This was done back in 1999-2001 to support extremely rudimentary HTTP clients which did not support HTTP Cookies - imagine really prototypi…

Storing things in the URL only got you so far (Internet Explorer would eventually complain about the request string being too long), so ASP.Net or whatever would bundle the entire stateful object into a hidden form, which would be submitted with POST via Javascript when the link was clicked.

Re: “Users will only be able to view patents via HTTP. HTTPS will no longer work”

#166

https://obamawhitehouse.archives.gov/blog/2015/06/08/https-e... Has this been superseded by a new policy?

An excellent question. I tried looking up the current policies, but the "IT Policy Library" [1] is provided in an iframe that doesn't load for me ("The connection to the server was reset while the page was loading."). [1] https://cio.gov/resources/it-policy-library/

The policy is still in effect, and its supporting home page is here: https://https.cio.gov

Re: “Users will only be able to view patents via HTTP. HTTPS will no longer work”

#167

As far as I know, this is illegal because of this: https://obamawhitehouse.archives.gov/blog/2015/06/08/https-e... Does anyone have any experience with their support system? On Monday I will be calling them in an attempt to understand why they are exempt from the HTTPS Everywhere federal directive.

I wouldn't use the word "illegal" - it's a directive of OMB (the White House's management and budget office), not a law or a regulation or an executive order. The only true enforcers are OMB themselves.

But to answer your other question, as part of the Department of Commerce, a "CFO Act" agency, USPTO would not be exempt.

Re: “Users will only be able to view patents via HTTP. HTTPS will no longer work”

#168

As far as I know, this is illegal because of this: https://obamawhitehouse.archives.gov/blog/2015/06/08/https-e... Does anyone have any experience with their support system? On Monday I will be calling them in an attempt to understand why they are exempt from the HTTPS Everywhere federal directive.

I wouldn't use the word "illegal" - it's a directive of OMB (the White House's management and budget office), not a law or a regulation or an executive order. The only true enforcers are OMB themselves. But to answer your other question, as part of the Department of Commerce, a "CFO Act" agency, USPTO would not be exempt.

Thank you for clearing that up. Are you aware of what kind of consequences might be incurred at the expense of disobeying the OMB as a government entity?

Re: “Users will only be able to view patents via HTTP. HTTPS will no longer work”

#169

Earlier quoted context omitted.

You can't know that. It could have been redeveloped in anything, but kept the original url scheme for backwards compatibility.

Oh, come now. Whether he can or cannot know such a thing is however many angels, dancing on the head of a pin. Do you honestly believe anything this terrible went through a rewrite? I sure don't.

I know! I takes at least three rewrites to make it that terrible.
Post reply on HN