anulman

4 ms·

1.
by anulman 6mo ago
Author here; live demos within. The core issue: Stripe's Payment Intent pattern (server gets token → passes to client → client opens iframe) is safe because the blast radius is bounded; worst case, someone pays your invoice. But the sa
2.
I reported an iframe vuln to two payroll startups. Were they right to shrug?(outsidetheboxmodel.com)
2 points by anulman 6mo ago|2 comments
3.
Recording Links: The Nitty Gritty Details Behind Today's Launch(jam.dev)
2 points by anulman 1y ago|0 comments
4.
by anulman 7y ago
Hi HN! Reddit has been a promising source of early users for us at chef Connie; for example a single response on a post with lift can easily generate 10+ signups, most of whom finish activation. We didn't want to miss out on any action
5.
Social Notifier – Slack notifications for Keywords on Reddit, Twitter (GPL)(github.com)
1 points by anulman 7y ago|1 comments
6.
Show HN: Cook for Mom
8 points by anulman 9y ago|0 comments
7.
by anulman 11y ago
Fun fact: the "disconnected mini-graphs" the author mentions toward the end could also be attributed to Clinton being included via cc / bcc. Source: I've built & reviewed email graphs from IMAP & POP dumps too
8.
by anulman 11y ago
Notably, the bit.ly link directs you to Facebook. Nice play, FB Video team.
9.
That zero-G OK Go video taking over Facebook isn't on YouTube(youtube.com)
1 points by anulman 11y ago|1 comments
10.
by anulman 11y ago
You're likely right, but they could always get crafty with Braintree APIs: https://developers.braintreepayments.com/ios+ruby/reference/...
11.
by anulman 11y ago
Not sure they would either, though perhaps a use case for git_commit_amend [1]? Regardless, sounds fairly implementation-specific. Think I just followed you on Twitter, happy to discuss further offline. [1] https://libgit2.github
12.
by anulman 11y ago
Did you consider leveraging the refdb to offer immutable primary keys? I had been hacking together a Kyoto Tycoon-backed implementation for a project (since dropped); our design exposed the ref id to the user (e.g. 'master', &#x27
13.
by anulman 12y ago
Source: http://www.jstor.org/discover/10.2307/2684102?sid=2110577666...
14.
by anulman 13y ago
Definitely understand the concern—I set the minimum permissions, but obviously friends list is among them. All the code looks for is user_id; I'm not even storing the access_token generated. This will be clearer as the readme shapes up, but
15.
by anulman 13y ago
+1. If you want to see the sexy CSS3 animations + whatnot, the callback's at http://probablythemostromanticthingever.com/open
16.
by anulman 13y ago
Thanks for the note! Definitely intentional: the callback comes back, but since there's no user ID, you hit the vanilla callback page. (Basically, I wanted to make sure that everybody would have the card open... it's just the messages that
17.
by anulman 13y ago
Hey HN. I've been seeing a pretty awesome girl for the last couple of weeks, and wanted to send her a series of notes. To that end, I wrote an ephemeral messaging system using Sinatra + Redis that authenticates her ID against Facebook and w
18.
Show HN: ProbablyTheMostRomanticThingEver(github.com)
15 points by anulman 13y ago|10 comments
19.
Uber competitor Winston pivots to build white-label apps for TaxiCos(betakit.com)
2 points by anulman 14y ago|0 comments
20.
by anulman 14y ago
Again, you're right on the fact, but not on the interpretation. The medallion system used by most cities restricts the number of cars on the road in a city. However: 1) Most taxi fleets -- especially the larger ones -- collect monthly ren
21.
by anulman 14y ago
I believed this point too when we first started our company, and were more Uber-clone-y than we are now. However, after spending a year working in the industry, I've learned that it's more "catchy idea" than reality. It turns out that the t
22.
by anulman 14y ago
Thanks, Carter! My partner Krista tried to come into town for that meeting, but they switched the date on her. You almost met! The human factor is definitely a huge challenge in this industry, and I can understand anyone's aversion to i
23.
by anulman 14y ago
Thanks -- this is a subject that is near and dear to me. I definitely agree with you that there is a service gap between Uber and standard taxis. Some of it comes from the app, some of it comes from their quality control. (On that note: Ube
24.
by anulman 14y ago
TL;DR: Uber is innovative, but their approach (or lack thereof) to dealing with regulatory hurdles in each city disgusts me. It seems like HN has already picked up on the major issues Uber faces in Boston, as well as pretty much every
25.
by anulman 14y ago
Those books were the impetus for my first startup: a mystery and math problem solving stand. I had no customers (something about a 5 year old with a bristol board setting up shop on a tranquil suburban street strikes me as ineffective...),
26.
by anulman 14y ago
MyShitIsOnFire.com -- A website explaining how to put out various kinds of fires. Also sells cheeky shirts/prints/etc, to match the associated comics.
27.
by anulman 14y ago
cxz & pud -- If either of you guys want, some friends and I developed a pretty comprehensive collaborative recording suite a while ago that I just couldn't get off the ground. I've since taken it offline (minimal active users + a couple
28.
Show HN: my weekend project – location-based SMS chat rooms(textius.com)
11 points by anulman 15y ago|1 comments
29.
by anulman 15y ago
Thanks for the advice, Troy! As for learning .NET over the summer, there definitely isn't enough free time in the incubator/program – it's half-education, half-building-companies. Re: .NET developers charging enterprise rates, that's someth
30.
Ask HN: What have been your experiences with .NET?
1 points by anulman 15y ago|3 comments

More ›