HN user

gregmolnar

682 karma

a9bf6b

Posts66
Comments39
View on HN
derails.dev 8mo ago

Why Dictators Are the Best Devs: Commands, Not Suggestions

gregmolnar
3pts4
greg.molnar.io 1y ago

What changed in Rails this year?

gregmolnar
4pts0
www.youtube.com 1y ago

The state of security in Rails 8 [video]

gregmolnar
2pts0
rubyonrails.org 3y ago

The Rails Foundation announces its first-ever conference!

gregmolnar
7pts3
rubyonrails.org 3y ago

This Year in Rails, a summary of 2022

gregmolnar
3pts0
greg.molnar.io 3y ago

A Single File Rails Application

gregmolnar
3pts0
greg.molnar.io 4y ago

6 Security Improvements in Rails 7

gregmolnar
1pts0
greg.molnar.io 4y ago

Rubygems CVE-2022-29176 explained

gregmolnar
2pts0
www.fairphone.com 4y ago

Fairphone Black Friday: 0% Off Everything

gregmolnar
13pts0
greg.molnar.io 4y ago

Rails Console1984 Bypass

gregmolnar
2pts0
www.youtube.com 9y ago

RailsConf Live Stream

gregmolnar
1pts0
blog.silentsignal.eu 9y ago

Bake Your Own EXTRABACON – Silent Signal Techblog

gregmolnar
2pts0
www.schneier.com 9y ago

Major NSA/Equation Group Leak

gregmolnar
21pts0
developer.apple.com 9y ago

MacOS Sierra Beta

gregmolnar
40pts70
krebsonsecurity.com 10y ago

Sources: Trump Hotels Breached Again

gregmolnar
1pts0
weblog.rubyonrails.org 10y ago

Riding Rails: Rails 5.0.0.beta1: Action Cable, API Mode, Rails Command

gregmolnar
10pts0
greg.molnar.io 10y ago

Prevent information leaking in Rails

gregmolnar
27pts5
www.rubytutorial.io 10y ago

ActionCable Devise Authentication

gregmolnar
1pts0
heimdalsecurity.com 10y ago

Millions Exposed to Cyber Attacks Because of Internet Explorer Vulnerability

gregmolnar
2pts0
www.trustwave.com 10y ago

Username Enumeration Against OpenSSH/SELinux with CVE-2015-3238

gregmolnar
1pts0
www.disclose.tv 10y ago

A (Terrifying) Traffic Analysis of Windows 10

gregmolnar
44pts21
haveibeenpwned.com 10y ago

Have I been pwned? Pwned websites

gregmolnar
1pts0
blog.rubygems.org 10y ago

CVE-2015-3900 Request hijacking vulnerability in RubyGems 2.4.6 and earlier

gregmolnar
1pts0
technet.microsoft.com 10y ago

Microsoft Security Bulletin MS15-093 – Critical

gregmolnar
4pts0
intothesymmetry.blogspot.com 10y ago

Into the Symmetry: Apple Safari SOP Bypass (CVE-2015-3753)

gregmolnar
2pts0
cybersecurityventures.com 10y ago

The Cybersecurity Market Report

gregmolnar
3pts0
arstechnica.co.uk 10y ago

Even when told not to, Windows 10 doesn't stop talking to Microsoft

gregmolnar
453pts257
github.com 10y ago

Nosql-Exploitation-Framework

gregmolnar
2pts0
www.usenix.org 10y ago

Workshop Program – USENIX

gregmolnar
2pts0
techcrunch.com 10y ago

UK-Based Carphone Warehouse Hack Could Affect Up to 2.4M Customers

gregmolnar
2pts0

Great question. To be honest, I like them both, but the 16" has less reflection so if that's important for you, go with that. I think there is an even better screen option now than the one I have. But I don't think I will upgrade to that since I am happy with the ones I currently have.

I have a 13" one for 2 years and a 16" for close to 6 months. I love them both and I will likely only upgrade these and never by a complete new laptop. The 13 is amazing for the go, lightweight and comfortable. The 16 is great for me for general use, because I don't work at a table, so the larger screen makes a big difference. I recommend the AMD one, that performs better for me(my 13 is Intel). I have 2 articles about them on my blog if you are curious:

https://greg.molnar.io/blog/framework-laptop/

https://greg.molnar.io/blog/framework-16-first-impression/

And if you have any specific questions, I am happy to answer.

Since it is super simple to create a new app and super simple to deploy and host, I don't find it to be an overkill. And if you want to expand on an idea, it makes it very easy. For sometime that's really simple, like a landing page, I use jekyll and the end result is just plain HTML

I haven't used Sinatra for years, because whatever simple I start, Rails is super convenient to use for it these days. The single file thing I wrote this article about is only good for reporting bugs if one of the official bug report templates wouldn't be enough, or to test something. I use it for testing security related things and for little example apps.

I feel you. I live in Europe and I feel the same about traveling to the US. It is such an extra hassle compared to travel within the EU. In an ideal world we would have 2 non-politicized conferences each year, one in Europe, one in the States. Hopefully we will get that in the future.

I just received my Framework laptop recently, installed Fedora 36 + KDE Plasma, and even though it took some tweaking to get a close to my Mac behaviour, it works perfect. I had 0 driver problems. So it looks like Linux on the desktop seems to be getting there. And the best part, with this laptop, no shop needed to replace the battery, I can do it myself.

I experienced the other end of the spectrum with Revolut. My wife saw an advert on Facebook for a and indoor children slide, it looked quite nice for a 100 bucks and since I was busy with work, I didn't due any due diligence and ordered the item. Received the confirmation email, then life went on. In about 2 weeks time, I remembered this order and wanted to check the progress. I opened the order summary link from the email, but it was a 404 and oddly the site looked very different than before, this was the first time I had a feeling, I may have been scammed. I replied to the order email, and asked them for a status update. There was no reply within 2 days, so I went to the site again, and looked for the contact details. I found and email address(Gmail), but no company details whatsoever. This was the time when I realised, I got scammed. Anyways, I sent an email to that address, but of course there was no reply. A day later and decided to figure out where is the site hosted and going back to the contact form, I found a new contact email address(an Outlook one). Since then, I checked the site a few times and the contact address was a different one multiple times. Anyways, I realised it is a scam, found out the site is on Shopify, reached out to them and they directed me to my bank. I contacted Revolut, briefed them about what happened, and they started the chargeback process. Oddly a few days after they did that, I got another email from the merchant with a tracking code. In about 2 weeks I received a fidget spinner like plastic crap from China, which I never ordered. I notified Revolut about this too and they also told me, the merchant sent them proof me doing the transaction and want not to allow the chargeback, but since I said at the beginning it was me doing the transaction, just never received the items, I just need to fill out another form, stating this and they will carry on, trying to get my money back. As of today, I still didn't get my money back and I am not sure I ever will, but Revolut was really helpful during the process so far. I am more dissapointed with Shopify, I thought they vet their merchants or at least care about reports of misconducting ones, but they didn't give a crap about me telling them about a scam site running at them. I also found crazy that they don't force the merchant to disclose company details, that's required by the law in many countries.

I didn't say it is a flaw. IMHO the default caching setting is how it should be, but the developer should be aware of the http caching, and should turn it off where it can lead to information leaking.

Same with me. I use "test first" with unit/model tests only. For the rest I first write the code, test in the browser and when I am happy I write a test to make sure I won't break the feature with future code changes.

"Sure, but how does hula-hooping poison the environment? As far as we can tell, the women doing the hula-hooping were doing it for fun/exercise with no sexual intent, and the men watching just thought it was entertaining and not sexual."

Exactly. The intension is very important. Also if the hula hooping girls would of been bothered by the guys watching them I guess they should've let them know.

So if I would watch two woman while they play table tennis it would be inappropriate? This is silly :). I don't see any difference between hula hooping and playing table tennis or darts. If someone wants to see how sexy is that they can do it with both.

You rarely hire a PHP developer for his algorithm skills and that's what you can screen with codeeval. By the way I don't think codeeval is a good way of measuring developer skills as some people who is very good with algorithms struggle with simple real world problems and vica versa. But that's another topic :)

Skype blog hacked 13 years ago

Why should the client know git or anything else if you are the one who has to setup the blog for him/her? Or are you working with clients only who know html, css, ftp etc so they can do the work themself just being lazy and paying you instead?