HN user

ryhanson

59 karma
Posts23
Comments49
View on HN
royaljay.com 10y ago

How I Stole Plunker Session Tokens with an Angular Expression

ryhanson
9pts1
codesploit.com 10y ago

Stealing Bearer Tokens with an Angular Expression Injection

ryhanson
10pts6
royaljay.com 10y ago

Healthcare Data Breaches Cost $6B a Year

ryhanson
5pts0
usuncut.com 10y ago

Top Economist Says Bernie’s Plan Will Actually SAVE the US $5 Trillion

ryhanson
3pts0
royaljay.com 11y ago

From opening an email to being hacked

ryhanson
10pts0
royaljay.com 11y ago

Failure is an option

ryhanson
4pts0
royaljay.com 11y ago

Debugging Entity Framework with SQL Server Profiler

ryhanson
6pts0
royaljay.com 11y ago

3 Ways to Outsource Development Successfully

ryhanson
8pts1
www.digitalmarketer.com 11y ago

How to Go from Zero to 30,000 Page Views in 11 Weeks (With No Budget)

ryhanson
10pts0
medium.com 12y ago

Working on a team rocks

ryhanson
1pts0
news.ycombinator.com 12y ago

Ask HN: Should I switch companies?

ryhanson
4pts8
medium.com 13y ago

Working at home sucks...

ryhanson
2pts0
medium.com 13y ago

Working at home sucks...

ryhanson
1pts0
news.ycombinator.com 13y ago

Ask HN: How often do companies help relocate?

ryhanson
6pts2
news.ycombinator.com 13y ago

Looking for a front-end guy for a startup project.

ryhanson
8pts8
news.ycombinator.com 13y ago

Ask HN: What web apps have you built and what frameworks/languages did you use?

ryhanson
1pts0
news.ycombinator.com 13y ago

Ask HN: What are the major benefits of learning Node.js?

ryhanson
5pts9
news.ycombinator.com 13y ago

Ask HN: What do you listen to while coding/designing?

ryhanson
9pts32
news.ycombinator.com 13y ago

Ask HN: What do you listen to while hacking?

ryhanson
2pts4
ryhanson.com 13y ago

Quit My Job 5 Months Ago to Build Websites, Apps, Etc. Here is My Portfolio..

ryhanson
4pts2
codechimps.com 13y ago

Why Your Business Needs a Website

ryhanson
2pts0
codechimps.com 13y ago

Code Chimps

ryhanson
1pts1
ryhanson.com 13y ago

Hello World

ryhanson
2pts1

I would bet that static analysis is going to be one of the top reasons. Being able to automate the process of analyzing code for leaked keys, outdated/vulnerable libraries, insecure storage, permissions, etc.

Here is an open-source tool I've used in the past to do quick static security checks on APKs: https://github.com/ajinabraham/Mobile-Security-Framework-Mob...

It also supports dynamic analysis, but I haven't used that portion of it yet.

I, too, am interested in the other enterprise tools that are built on top of this though.

That is the most common occurrence of this issue. It can also happen with directives that use transclude or if the app is explicitly call Angular's $interpolate function on a user's input.

You should definitely avoid mixing server side and client side templates, but if that's too much work, scrubbing would work. You would need to strip the expression stand and end symbols. Default symbols are '{{' and '}}', but some apps use different symbols to avoid collisions with other template engines that use the double curly brace.

From the research I have done, this is a true statement. The reason being is people are adding Angular into their web apps that were initially built with an MVC framework of some sort.

The problem ends up being that they mix server side templates with client side templates. If user input is rendered in a server side template and ends up in an element that is part of the Angular scope, the expression will evaluate. So attaching an angular controller to your body tag and then including server side templates within the body, is bad...

Completely agree! I started limiting myself to apps that had night mode such as, Alien Blue and Tweetbot.

Being able to go from a computer with f.lux to my iPhone with f.lux will play much nicer with my eyes at night. I can literally feel the strain in my eyes when going from f.lux to no f.lux.

That Minimal Viable Product graphic on there is a classic! I love it! Always a good thing to show people when when they get too hung up on the planning phase.

I'm a believer in: Just build something that works and iterate off that. Prototype rather than over-engineer. Over-engineering early is future proofing for a future that may never happen.

What is ADD? 11 years ago

Very true! My psychiatrist even said that hyperfocus has nothing to do with how people are diagnosed. He did mention that hyperfocus is a common trait among people who do have ADHD, but not exclusive to them. Meaning there are plenty of non-ADHD human's out there that have the same ability(or issue) to hyperfocus.

What is ADD? 11 years ago

It's not the ability to focus on a coding problem, that is a sign of ADHD. It's the inability to focus on anything BUT the coding problem.

It doesn't matter whether it is a coding problem, video game, book, website, or any other task. There are times when there is something much more important to be focusing on, but it requires such an insane amount of effort to focus on that thing, that you simply don't. Or maybe you do focus on the important task, but chances are it doesn't get your full attention or you end up distracted very quickly.

What is ADD? 11 years ago

Having been recently diagnosed with ADHD (inattentive type), I never thought I had ADHD, because I COULD focus on things. I didn't realize that this hyper-focused state I would go into was a major sign of ADHD, especially since I couldn't stop focusing.

I, too, was one of the fortunate ones that hyper focused on computers and programming. This focus started at a very young age, and has since turned itself into a very rewarding career.

You are not alone! I believe there is a pretty strong correlation between software developers and ADHD. I feel like programming works well with the chemistry of an ADHD brain. Some of the best engineers I've met have been diagnosed with ADHD. There are a few that I believe have it, but I'm not sure if they've been diagnosed or not.

ADHD truly is a very interesting brain type!

Also an Idaho resident. I, too, am very grateful this got struck down. Just like I was glad when same-sex marriage was legalized with Butch being so against it. I absolutely love Idaho, but I very much dislike our Governor. Unfortunately he rarely does what the people want, and only makes decisions based on his own beliefs and sponsors, as you mentioned.

Royal Jay LLC (http://royaljay.com/careers/) | Boise, ID | Senior Software Developer, Copywriter

We are located in Boise, ID, A clean, safe city with a low cost of living ideal for families, outdoor enthusiasts and entrepreneurs. Boise is a regular in the Top 10 lists (go ahead, google it), and we love it here. Check out these videos and you’ll see why:

Boise is Waiting (https://vimeo.com/81424694) This is Boise (http://www.boisestatefootball.com/boise-0)

Copywriter: Royal Jay is actively recruiting an experienced copywriter. The ideal candidate has a proven track record delivering high-quality persuasive copy in the digital space. They posses a talent for transforming creative ideas into engaging copy, and have a passion for storytelling.

The copywriter will work closely with the digital strategist and UX/UI designer to execute online marketing campaigns, website content and software messaging.

Senior Software Developer: Royal Jay is actively recruiting creative and inventive Sr. Software Developers. The ideal candidate has a proven track record of delivering software solutions using the latest technologies and continues to keep their skills sharp, staying current on all new development trends, techniques, and frameworks. Our Developers are hungry for challenging work, enjoy pushing boundaries, and would rather create software vs. be stuck in meetings all day.

The Sr. Software Developer is an active developer and leader on a first class team, building next generation mission critical applications that are highly scalable, secure and fast, wrapped in a pixel perfect user experience.

In exchange for your innovation and talent we will offer you an environment where you are rewarded for your contributions, appreciated for your ideas, and empowered to make a difference. Come have a beer with us and discover working for a company created by developers, passionate about building great products that inspire people.

http://royaljay.com/careers/

I too am a young father, my daughter is almost 10 months old. Last week I just recently left the startup I was a part of. I was getting paid an alright salary for it being an early startup who had raised funding or launched yet. I made it a point to make sure I didn't stay late at the office unless it was an absolutely necessity. So I didn't have the extreme hours to deal with, but rather the uncertainty... Not knowing if your next paycheck is going to be one of your lasts or not is not a way I want to live. Having a family to provide for is a bigger and much more important job than grinding out code for a startup that has the potential to be big.

Because of the uncertainty and risks that come with working in a startup, I pursued other options. I ended up talking with a smaller software development agency here that has the startup atmosphere in the office (doesnt feel like some corporate job). They are very well off and there is very little chance of them failing or running out of work. The increased salary and full benefits were easily enough for me to leave the startup where I had a slightly less salary, but 20% equity. The 20% equity definitely had the potential to have some huge payoffs, but I wouldn't see those for atleast 5 years, and I much rather have guaranteed stability now rather than hoping for it to come later.

Wow. Thank you for this. This is insight that I never ever would have thought of because of my lack of dealing with this sort of situation. Obviously profit sharing and equity make a huge difference. If I stay with this startup I will absolutely make sure I get equity and rather than profit sharing.

I have a family already. I am married with an 8 month old daughter and plan on having one more child. Thats what is really making me consider going with the more established company.

With that said though, I did somewhat fall into this startup, they offered my a job, it seemed promising, I do see a bright future for it and I do see it succeeding. But I'm not sure I want to wait it out and take the risk just yet.

I have lots of experience building something myself, and I do enjoy that. But thinking back to my college days I also really really enjoyed working on another team with other developers, which is something I have not done since college. Thats what was appealing to me about startups, was the environment and being surrounded by other developers. I now realize thats not the case until a startup becomes somewhat successful and has funding to make something like that happen.

I will definitely be using this! I was just about to code my own for a project I'm working on. The ability to put the fields in columns would be great. An example would be to allow some to have two separate text fields, like First Name & Last Name, on the same line.

Anyone else bothered by the fact that the font size is only 11px? Being on a 27" iMac the article was hard to read.

TSDR (Too Small Didn't Read)

Thanks for replying! Thats good to know that it happens more than I thought.

I actually signed up at whitetruffle and thats what got me thinking about it. I saw that some of the jobs had "Remote OK".

I will definitely keep looking around for a job that will fit my skills.

Thanks again!

Sounds a lot like my situation, except I didn't drop out, I finished out the associates degree so I could take the few programming classes I wanted. It took my two years, I got a little bit of college under my belt, got a job before I finished, and was only 18 when I graduated.

I think experience and skill level speak higher than a degree in this field. I have hired people that don't have a degree, because they have a nice portfolio and have the skills I need.