Top all-time · #5266
Loading...
Personal blog · thebuzzmedia.comwebsecurity
Loading... is a personal blog at thebuzzmedia.com about web and security. Since 2010, 15 different Hacker News readers have linked it 50 times, most often “Getting started with designing a Secure REST (Web) API”. No feed was found, so read it on the site itself.
Too few sampled comments (7) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for its posts on designing secure REST APIs and API authentication, including HMAC request signing. One commenter called an article a complete, easy-to-understand guide.
Summarised by Claude from a sample of 7 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Getting started with designing a Secure REST (Web) API9 people · 10 mentions · first linked 2011-04-27
- Imgscalr - a java image scaling library2 people · 2 mentions · first linked 2010-12-27
- MongoDB (Single-Server) Data Durability Guide2 people · 2 mentions · first linked 2010-07-09
What Hacker News says?
After 4 years and helping 100s of people with their PS3's loosing signal[1], I cannot agree with the article. I understand the message of the article (that the $90 Monster cables are a scam) but the $1 skinny HDMI cable you got with your DVD player is not the same quality as the $10 one you picked up from MonoPrice, Amazon or Blue Jeans Cables (all 3 of my favorites for buying cables). I don't know why, I am not an…
Comment linking /hdmi-cable-showdown-monster-monoprice-xtreme-hd/
on “Why all HDMI cables are the same”Submitted Digg v4's Problems are not Technical as a story · 65 points
HN discussionExactly. Have a look here for some information on how to do this: http://www.thebuzzmedia.com/designing-a-secure-rest-api-with...
Comment linking /designing-a-secure-rest-api-without-oauth-authentication/
on “Pin is Australia’s first all-in-one payment API”Submitted Java IO is faster than NIO: Old is New Again as a story · 46 points
HN discussionWhat are your thoughts on Amazon like security scheme? As far as there are no third party apps involved, I think OAuth is an overkill. What I mean by Amazon like securtiy is described in this article http://www.thebuzzmedia.com/designing-a-secure-rest-api-with...
Comment linking /designing-a-secure-rest-api-without-oauth-authentication/
on “Secure Your REST API”Submitted Getting started with designing a Secure REST (Web) API as a story · 42 points
HN discussionDid some hunting for a good jQuery upload plugin a week ago for (self promotion warning) imgscalr.com. valums ajax-upload seemed like it would be the best fit, but I couldn't get a full-screen Drag and Drop target working and had a hard (impossible) time customizing it to behave differently. Wanted to use uploadify, but as mentioned it didn't work inside a browser with Flash-blocking enabled which turned me off imme…
Comment linking /html5-drag-and-drop-and-file-api-tutorial/
on “JQuery File Upload”Submitted Handling Self Doubt and Battling Inactivity as a story · 35 points
HN discussionPeldi, something similar to this happened to me for a number of years (I've run my own WP site for 6 years now); every 3 months or so, no matter what I did to lock the site down it would get reinfected with malware. It got so frustrating that I toyed with just taking the site down permanently a few times because I couldn't handle the maintenance burden psychologically (it was such a downer to be fighting the same fi…
Comment linking /finding-and-removing-hidden-wordpress-hacks/
on “Ask HN: I can't tell why my site is showing malware warning.”Submitted Happiness as a story · 19 points
HN discussionI may have one of the single dumbest reasons every to not be able to use IntelliJ as my primary dev environment: their comment/Javadoc formatter isn't as robust as Eclipse's. I am very verbose commenter for both other people coming behind me (in closed or open source software[1]) as well as myself a year down the road going back through thick code and needing to get back up to speed on it. Because of this I frequent…
Comment linking /downloads/software/imgscalr/javadoc/org/imgscalr/Scalr.html
on “IntelliJ IDEA 11 is Out”Submitted Designing a Secure REST API Without OAuth as a story · 8 points
HN discussionFor 4 years I tried to run my WordPress site off of Apache + PHP. For the first 3 years it was Apache+Prefork+mod_php+WordPress (default setup for any on RedHat-based or Debian-based setups for the longest time). Any time I would get a story on Slashdot or Digg the site would die for at least half a day... god I hate it. I went from a 1GB RAM VPS to a 12GB dedicated machine in 3.5 years trying to get it to stop cras…
Comment linking /wp-content/uploads/2010/12/slashdot-story-400-users-nginx-performance.png
on “12,000 Requests per second with Nginx, PHP and Memcached”Submitted AWS Elastic Load Balancer sends 2 Million Netflix API Requests to Wrong Customer as a story · 7 points
HN discussionFWIW, I put up a fairly extensive review of Duke Nukem Forever[1] I, much like burgerbrain and others though the general shenanigans and debauchery (bewbs!) would keep me entertained and while they were certainly highlights, the core shooting mechanics and level design in the game (what makes up the other 90% of your time in there) is SO mediocre and uninspired that the game just feels like a drag at parts. There ar…
Comment linking /duke-nukem-forever-pc-review/
on “14 Years of Waiting Have Come to an End: Duke Nukem Forever”Submitted PickFu – A Great Way to Get Instant Feedback for Simple Questions as a story · 7 points
HN discussionThis was exactly the same experience[1] I had with HTC back when I got the first Nexus One (hardware defect). A year later I got a myTouch 4G, again rampant hardware issues with the screen. I plan to honor my initial promise of never trying another HTcC device, but I get weak in the knees from high end tech and they seem to be leading the android race the most aggressively right now, Bah. [1] http://www.thebuzzmedia…
Comment linking /my-experience-with-htc-nexus-one-support-was-mediocre/
on “5 Months of Customer Service Hell with HTC”Submitted Handling Self Doubt and Battling Inactivity as a story · 3 points
HN discussionSony seems to be learning its lesson... it disclosed the hack attempts, locked the accounts and are looking into securing the login system further as a result of this. As an aside, I would point out that XBL hack reports (with purchased/stolen points) have been running rampant for the last year[4], with Microsoft working hard to bury the reports. One of the editors at VE3D was hit by it and had a few thousand Points…
Comment linking /itunes-app-store-hacked-again-user-credit-card-data-stolen/
on “Sony Reports Massive Hack Attempt On Networks: 93,000 Accounts Affected Globally”Submitted Designing a Secure REST (Web) API without OAuth as a story · 3 points
HN discussionI've owned 2x Nexus One, 2x HTC Magic (one myTouch 3G and one Google Ion dev device) and finally a myTouch 4G (Essentially 1 HTC phone from each generation of device they have produced). I have never enjoyed my HTC devices; they have never worked smoothly, never had some sort of minor or major hardware problem (Nexus One's screen used to have snow like an old TV, myTouch 4G out of the box required a factory reset to…
Comment linking /my-experience-with-htc-nexus-one-support-was-mediocre/
on “HTC sales fall 30% in a month”Submitted Workout program for people who don't like working out. as a story · 3 points
HN discussionFor anyone that kept seeing "HMAC" and thought "What in the hell..." I wrote an article (stream of thought in story format) describing how you might try and secure an API call, how AWS does it and eventually how 2-legged OAuth can be utilized to do it: http://www.thebuzzmedia.com/designing-a-secure-rest-api-with... NOTE: This is written from the perspective of "My god, what does this all mean?" NOTE #2: You can do a…
Comment linking /designing-a-secure-rest-api-without-oauth-authentication/
on “Security on an untrusted client - locking down a javascript library”Submitted FourSquare Checkin "Hack" now with pretty GUI as a story · 3 points
HN discussionI see a lot of node.js work here... I'll be the super-uncool guy in the group and admit that so far I've only ever released Java libraries under Apache 2. I just released a CloudFront log parsing library: http://www.thebuzzmedia.com/software/cloudfront-log-parser/ and a simple XML parsing library (speed of pull-parsing with the ease of XPath-esque expressions): http://www.thebuzzmedia.com/software/simple-java-xml-pa…
Comment linking /software/imgscalr-java-image-scaling-library/
on “Ask HN: Who are working on young open-source projects? (or know such?)”Submitted Fix for iPhone 4 antenna reception problems (PIC) as a story · 3 points
HN discussionwould a nonce not work? You could just timestamp your request. And only accept requests in a certain timeframe. http://www.thebuzzmedia.com/designing-a-secure-rest-api-with...
Comment linking /designing-a-secure-rest-api-without-oauth-authentication/
on “What is HMAC Authentication why is it useful?”Submitted Designing a secure REST API without OAuth as a story · 2 points
HN discussionThe only advantage I see in blu-ray discs is the image quality - everything else is a severe letdown - the glacial load times, the unskippable trailers and warnings etc. I'm actually less inclined to purchase blu-ray discs than DVDs - I used to buy DVDs for all sorts of movies - comedy, drama, action. However, I find the user experience of blu-ray discs so annoying that I now only limit my purchases to action movies…
Comment linking /wp-content/uploads/2010/02/why-people-pirate-movies-steps-to-watching-video.jpg
on “Subtraction.com: Blu-Ray Blues”Submitted Workout Program for People that Hate Working Out as a story · 2 points
HN discussion
