Recent submissions

Comment · 5 years ago
The only reason reactors are dangerous is because everyone was still using the disaster plan from the 1960s. Cooling a melting reactor can be done very safely now if people put the effort in. This is a much cleaner solution than solar; wtf are we supposed to do with all of the solar cells every 10 years or so... landfill?

I completely agree with you

Comment · 5 years ago
Comment · 6 years ago
Hi TheDong. I put most of the changes you recommended and I am much happier with the overall project. I decided to remove the Python part though and went back to the Imagick bindings. There's probably still some things to fix but thanks again for taking the time to look and advise.
Comment · 6 years ago
okay have some of these fixes in progress. Thanks again for taking the time to look at my code! Very appreciative
Comment · 6 years ago
Hmm okay. I'm going to start fixing that part and also attempt some CGO/objective-C to replace the python dependency. I had figured that removing any possible directory that could be seen as an application directory (at app-startup) would alleviate the issue you described. Thanks for the feedback though and also taking the time to look.
Comment · 6 years ago
Well any old working directory that exists at startup is removed. So an attacker would not be able to create the directory before the user runs the program. And they would have to be logged in as the user in order to edit the pngtopdf.py file as it is created with 0700. Also, I would rather specify the actual bytes directly and force a lazy programmer to look at the ASCII table over using []byte(" "). These are just some of my after-thoughts.
Comment · 6 years ago
That's a fantastic idea. I actually looked into it because I really didn't want to use Python to create the output PDFs. I have experience making C bindings in Go, but had issues with Objective C (I also don't know Obj-C). If you are able to remove the Python dependency with a CGo please open a PR! Thanks for the feedback too...
Comment · 6 years ago
Thanks for the feedback. Yeah the Python part is definitely a bit hackish. Do you have any other recommendations on other problems? I'm still learning Golang and would like to improve. Thanks!

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton