Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Messages via JSON

refl.me

Post reply on HN
Print view View original

31–40 of 129 posts

Re: Messages via JSON

#31

Post by SamBam »

ramenmeal wrote: post #28

Curious, what are some examples of public json files I would "subscribe" to?

My understanding is that you would be making your own. E.g. if you had a site that people could comment on, make a url that serializes those comments as JSON and then point this at that.

Re: Messages via JSON

#36

Post by enedil »

beefhash wrote: post #7

> Request signature format(crc): [time_stamp]_[md5(time_stamp+secret_key)] This should probably be an HMAC construction at the very least, and MD5 in general just should be discarded entirely in favor of BLAKE2b, SHA-2 or SHA-3. And ideally, it'd actually validate the rest of the contents as well.

There's another problem, if the author tells us that this is crc, while it's a MAC (not particularly strong tbh), it shows that we, as developers and users, cannot trust that cryptographic decisions of the author are of any consideration. For reference, crc is not a signature, its full name is "cyclic redundancy check", which is a really simple mathematical operation, that computes a specific remainder that comes from polynomial long division (of polynomials decided from the message). It is not any kind of cryptographic signature and given a string, it's crc and target crc, we can find another string that differs in one byte only, that has the target crc, all of this in time faster than computing whole original crc.

Re: Messages via JSON

#37

Post by enedil »

teko_ji wrote: post #8
beefhash wrote: post #7

> Request signature format(crc): [time_stamp]_[md5(time_stamp+secret_key)] This should probably be an HMAC construction at the very least, and MD5 in general just should be discarded entirely in favor of BLAKE2b, SHA-2 or SHA-3. And ideally, it'd actually validate the rest of the contents as well.

I think the author has made it as simple as possible for users and developers with basic skills.

Quick and honest question: are you the author? You respond to lots of comments in the name of author, that's a rather surprising level of care about a niche piece of software.

Re: Messages via JSON

#38

Post by DevKoala »

codegladiator wrote: post #22

What exactly is new in this ? Isn't this what Android and iOS notification services do ? And all messaging services ? What did I miss

Any web service can integrate with it as long as it responds with a JSON object that adheres to the specification.

It is genius.

Re: Messages via JSON

#39

Post by greyskull »

codegladiator wrote: post #22

What exactly is new in this ? Isn't this what Android and iOS notification services do ? And all messaging services ? What did I miss

It's a mobile app that polls an endpoint for json, after the user configures it (seemingly with a QR code), that's all. There's no middle-man server, and it's also not push.

Neat idea, low barrier to entry. Can't tell from docs how authz/authn are handled.

Re: Messages via JSON

#40

Post by DevKoala »

Amazing idea. For my job, I have all sorts of instrumentations on my web services for monitoring sake. However, I have none for my pet projects, and this is just the right amount of monitoring I need. Now, I can wait for the iOS version or perhaps just roll my own app; It is a very neat idea, which I can see helping me in tons of scenarios.
Post reply on HN