HN user

technoguyrob

28 karma

http://therobert.org

technoguyrob @ [letter before h]mail (math\.uic\.edu)\/~(robertk) -> $2 @ $1

Posts23
Comments234
View on HN
news.ycombinator.com 17y ago

Ask YC: Question about writing Terms & Conditions (getting users to read them)

technoguyrob
3pts1
www.akropolix.net 17y ago

Y Combinator in Python

technoguyrob
8pts6
news.ycombinator.com 18y ago

Ask YC: Fewer lines of clever code or more lines of clearer code?

technoguyrob
14pts34
news.ycombinator.com 18y ago

Ask YC: Your most interesting bugs / bug fixes?

technoguyrob
25pts19
blog.modernmechanix.com 18y ago

Clever Doorbell Hack for Deterring Unwelcome Solicitors

technoguyrob
3pts2
www.aol.com.au 18y ago

Scientists discover monkeys that fish

technoguyrob
1pts1
www.mercurynews.com 18y ago

Multi-millionaire startup founder throws 29th birthday party...with 300 homeless people

technoguyrob
30pts11
consumerist.com 18y ago

It is now completely impossible to sell a laptop on eBay

technoguyrob
49pts43
www.semicomplete.com 18y ago

Keynav: Keyboard based mouse control (that works)

technoguyrob
1pts0
www.adobe.com 18y ago

SWF and FLV are going to become open

technoguyrob
2pts0
reddit.com 18y ago

Octopart very well received after its first time on the Reddit frontpage

technoguyrob
45pts19
news.ycombinator.com 18y ago

The (humorous) dangers of Google's new deep search

technoguyrob
22pts11
beta.booklamp.org 18y ago

BookLamp - Pandora for books

technoguyrob
19pts9
www.acceleratingfuture.com 18y ago

Ten futuristic (but already developed) construction/textile materials

technoguyrob
2pts0
news.ycombinator.com 18y ago

The clock is ticking: Today is the last day to apply to YC

technoguyrob
17pts7
news.ycombinator.com 18y ago

Ask YC: What income-generating systems do you employ?

technoguyrob
4pts2
news.ycombinator.com 18y ago

PHP/GD Cartesian equation plotter

technoguyrob
1pts0
space.mit.edu 18y ago

Fascinating diagram of relationships between basic mathematical structures

technoguyrob
1pts0
scienceblogs.com 18y ago

PZ Myers gets expelled from intelligent design movie Expelled, but they overlooked his guest...

technoguyrob
2pts0
news.ycombinator.com 18y ago

Ask YC: What happened to Teledesic?

technoguyrob
1pts2
www.google.com 18y ago

Google Sky launches

technoguyrob
40pts18
www.elance.com 18y ago

Ultra High Level Programming Language

technoguyrob
12pts6
therobert.org 18y ago

Mindboggling(ly simple) set theoretic question

technoguyrob
3pts2

I'd like to live for a time, sure, but even five hundred years might be too long. I'd either get driven insane by the constant bow-shocks of ever advancing culture, or I'd lapse into some kind of boredom-induced stupor.

It's not wrong either for the rest of us to be curious.

The same key can be used for each session...when the Gmail page is being generated, I am saying this embedded in-line key can be associated TO the user's cookie, so that there is a one-to-one correspondence between this "Javascript cookie/session variable" and the user's actual cookie. There is no problem whatsoever. The only thing to be done is the exact same authentication that Google has to do to determine from which authenticated user chat requests are coming from (or any other AJAX request sent to Gmail).

EDIT: To answer your question of "are they doing some kind of lookup for each AJAX request?" Well of course, since they already have to look up a user's ID, account information, etc. based on the cookie they send.

And the Gmail engineers should add an opt-out "high security" mode that checks the referer to make sure the form submission is coming from Gmail itself and not some outside website. This way people who like to use custom/blank referers can ignore this security concern if they want, and all the rest of us can prevent the risk of this problem.

EDIT: Or how about just adding an in-line Javascript variable? Say, on all Gmail pages, you could embed this in the page:

   <script>var SECURITY_KEY = "918028cd79a5ba47e83e6ba68d036ca3";</script>
And then when sending AJAX or form requests in the background, make sure to include that as a request parameter. That way, even if the user has the right authentication cookies, external websites won't be able to fool Gmail into thinking they are Gmail.

Really, this doesn't seem like a very hard problem to solve...couple lines of code...

Sounds Like Bach 18 years ago

Reading that article made me expect a future in which a musician will not be known for a particular composition, but for the algorithm he devised for creating music of a particular flavor.

This only goes to show that eventually, all fields of knowledge will be nothing except mathematics!

My Public Apology 18 years ago

Sweet, I can now say I've been told "fuck you[r downvotes]" by a professor from Cornell.

XSS detection is not just as simple as that. For example, in IE, entering the following produces a pop-up:

   <table style="background-image:url(javascript:alert(1))"><tr><td>Hi</td></tr></table>
However, read debt's comment below. XSS is irrelevant here since "XSS" means cross-site scripting, i.e., ,managing to embed Javascript into pages someone ELSE sees. Only the client sees this, it doesn't get reproduced for anyone else.

I think mediocrity is sort of the complement to laziness, in that respect. For example, settling for a cubicle job that drains you because you don't think you can do anything better or don't want to--that's still "laziness" in the way you're describing.

I am a mathematics student and sometimes need to look up papers. A lot of these papers are in journals not available online and have references to more of such papers. This can sometimes make even understanding a relatively simple proof that could be explain in a book in a few pages a gruesome all-day ordeal where 3/4th of the time is spent looking up references.

It would be really freaking cool if Google (Scholar?) could scan these articles into PDFs, then attempt to OCR the references and see if Google has indexed those, then embed hyperlinks to the references. This is technically feasible, and I imagine it would really make a lot of researchers very happy.