Top all-time · #23047
Jason Walton
Personal blog · thedreaming.orgprogrammingwebsecurity
Jason Walton's personal blog at thedreaming.org covers programming, web and security. Since 2014, 3 different Hacker News readers have linked it 12 times, most often “Avoiding CSRF Attacks with API Design”. The last post was in 2022, but the archive is still widely read.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for a how-to on getting Let's Encrypt certificates on a Synology NAS. One commenter cites its post as a guide alongside other Synology DNS-01 setup resources.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Random musings from Jason Walton, software developer and sometimes photograper.
Most-linked posts?
- Avoiding CSRF Attacks with API Design2 people · 2 mentions · first linked 2020-05-27
What Hacker News says?
As I noted here: http://www.thedreaming.org/201.. . you shuld also go to "Settings" -> "Accounts" -> "Sync your Settings" and turn off Password syncing, which is enabled by default. I would hope that passwords are encrypted with my Microsoft account password (and I would further hope that only a hash of this password is stored on Microsoft servers) but no where is any of this explained. There's a "How does sync work…
Comment linking /201..
on “I noticed some disturbing privacy defaults in Windows 10”Submitted Structured Logging in Node.js with Winston and Elasticsearch as a story · 2 points
HN discussionSince I see from your domain name that you are in Canada, might I suggest Canadian Shield[0] from CIRA (the .ca registry) as an alternative to 1.1.1.1? I have an article about setting it up via PiHole, too[1]. [0]: https://www.cira.ca/cybersecurity-services/canadian-shield [1]: http://www.thedreaming.org/2020/11/07/pihole/
Comment linking /2020/11/07/pihole/
on “1.1.1.1 for Families”Submitted Avoiding CSRF Attacks with API Design as a story · 2 points
HN discussiondns-01 is possible on Synology, but you need to SSH in: * https://github.com/acmesh-official/acme.sh/wiki/Synology-NAS... * https://lippertmarkus.com/2020/03/14/synology-le-dns-auto-re... * http://www.thedreaming.org/2020/11/18/synology-lets-encrypt/ It's possible as long as your ACME client has hook scripts, and your DNS provider has an API: * https://github.com/AnalogJ/lexicon
Comment linking /2020/11/18/synology-lets-encrypt/
on “Chrome may start restricting requests to private networks”Submitted Use Eslint with TypeScript, Today as a story · 2 points
HN discussionBeets is also not really maintained anymore. It’s been about two years since the last release. If anyone is looking for a tutorial/HOWTO for Picard, I have one here: http://www.thedreaming.org/2020/11/22/musicbrainz-picard/
Comment linking /2020/11/22/musicbrainz-picard/
on “Beets: the music geek’s media organizer”Submitted Avoiding CSRF Attacks with API Design as a story · 1 points
HN discussionHave a look at: http://www.thedreaming.org/2019/03/19/weakmaps-in-javascript...
Comment linking /2019/03/19/weakmaps-in-javascript/
on “How to detect if an object has been garbage collected in JavaScript”Submitted Why Are Weakmaps in JavaScript Not Enumerable? as a story · 1 points
HN discussionIf you're interested in starting up an ELK stack on docker: http://www.thedreaming.org/2014/11/21/docker-logstash/
Comment linking /2014/11/21/docker-logstash/
on “ELK stack deployment with Ansible”Submitted On the Construction of Murderous Robots as a story · 1 points
HN discussion