tonylampada

Joined 14 years ago

Karma
398
Submissions
90
Member since
Jul 23
Brazilian. Building software since 2000. Creator of http://www.freedomsponsors.org Personal blog: http://dicasdolampada.wordpress.com/
View on Hacker News

Recent submissions

Comment · 12 years ago
I think this would work on your home ;-)

<a href="/anime/" class="a_very_big_button">See Anime List</a>

Comment · 12 years ago
I've seen this before here: http://www.jsfuck.com/.

It's nice that this guy actually explains how it works

Comment · 12 years ago
And then there's gitlab.com with free unlimited private repos. I guess people just didn't find out about it yet.
Comment · 12 years ago
I wouldn't have put it better myself. I just added a new update on the website.

Saturday, April 12, 09:50 (GMT-3)

OK, so here's my reply to Nikolai:

"Let me address this question.

> Anything about free revocations there?

It doesn't, but that's not relevant. It's pretty damn clear: You see the evidence, that alone should be enough for you to take action.

If you take Mozilla's policy by the letter, one doesn't even have to own a certificate to be able to request its revocation. All that should be needed is the evidence of compromise.

If I disclosed the private keys for a certificat I don't own, would you just ignore that information? Or would you come after the certificate owner demanding payment first?

You're a CA, A CA!!! You should be worried about the security of the internet above all things.

You should also be worried that you have a bunch of green padlocks around that don't mean what they once did. You're not worried about that. So in my opinion you don't deserve the trust of the internet anymore.

Cheers Tony"

Comment · 12 years ago
So now it's official. They got the evidence that the certificate is compromised yet they refuse to take action. If that's not violation of CA policy I don't know what is.
Comment · 12 years ago
Can the same be done for chrome?
Comment · 12 years ago
Have you looked at https://pypi.python.org/pypi/django-jsonfield/ before building your json field? If so, can you elaborate about how those implementations compare with each other?

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton