Hacker Newsnew | past | comments | ask | show | jobs | submit | mklopets's commentslogin

Heh, nice to stumble on this here; I wrote the post – happy to answer any questions!


Hah, I was building something almost identical to this a few months ago. Very nice!


Might be good to share your background first.


thanks @mklopets. Editing the post.I will share my background.


At least their status page (https://status.aws.amazon.com/) is as unreliable as ever.


It now says "We are investigating increased error rates for Amazon S3 requests in the US-EAST-1 Region."


This is really neat!


What's your thinking behind how this works? What makes the 'after' sites more beautiful?

The increased padding on the Chromium site is great, but to me the HN 'after' looks quite a bit uglier than the 'before'.


Thanks for feedback, I shouldn't have used "beautify" but "look good" kind of. Comments section is more readable IMHO http://i.imgur.com/Drb2nQ7.png


Also the cpluscplus example. It throws structured data in a completely unreadable format and ads paddings to the navigation where they are surely not needed.


It's not showing x minutes AND y seconds, it's x minutes OR y seconds. Minutes is just there for someone who doesn't need precision and can let the API handle the rounding. Seconds is for people who want to do more advanced stuff.


Aaaaand now there are tens of IPs trying to access /etc/passwd. Tailing my "failed hack attempts" log is kinda fun now.

But if you wrote this to warn me, then thanks!


Also be careful about redirect handling: http://evil.com might redirect you to file:///etc/passwd


> But if you wrote this to warn me, then thanks!

I did.

You're not the first person to make that kind of mistake, and I assumed it was an obvious enough "attack" that trying to communicate it privately wasn't required.


Though I now have an extra if statement in my code to detect and log this type of 'hacking' attempts in addition to some others, the code was never vulnerable to this in the first place. No file contents are displayed at any time anyway.


Thanks for sharing! The point here isn't just calculating the reading time based on a WPM metric, it's fetching a remote page, analyzing it to find the main content and then doing the maths, among other stuff taking into account any images.


I'm aware of it, thanks. The current approach isn't really that flexible. For example, I've seen the NY Times and The Atlantic not working. I've considered some different potential fixes but haven't implemented them yet. Thanks!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: