Hacker Newsnew | past | comments | ask | show | jobs | submit | throwmeaway2525's commentslogin

Why did this post disappear so quickly from the front page?

It's very on-topic, and used to be HN's sweet spot.


We were also surprised...


You just weren't meant for each other!


This article seems to be pushing Martini, which at first glance looks interesting (though it doesn't appear to have been mentioned on the mailing list even once, so there may be some boosting involved).

There is Revel, but it seems to be getting a bad rap ("non-idiomatic" label used as a stick).


Martini author here. Weird how it didn't show up in the golang-nuts search, here is a link to the announcement topic: https://groups.google.com/forum/#!topic/golang-nuts/LubMauy6...

Martini is still young (less than a week) but the core is pretty fleshed out.

No boosting here (I don't even have that many twitter followers). I just put together a framework that doesn't step on your toes and people ate it up :)


I love what I've seen so far. The biggest problem is probably the age. Googling for "go martini json" will not yield results until more users start to talk about it.


Yup. Getting there will take a while. In the meantime I plan on releasing a whole bunch of middleware in the martini-contrib repo and creating more video tutorials on web development in Go.


I mentioned Martini as I like its approach. It hit HN a few days ago and was on the go-nuts ML around the same time.

I don't expect everyone to agree with me surrounding Revel, but I certainly think it's lack of modularity is a negative.


I had searched for it to see what kind of feedback it was getting but came up empty:

https://groups.google.com/forum/#!searchin/golang-nuts/marti...

The Revel comment was more about a criticism I've read several times now.

I liked and bookmarked the article. :)


I'm not the author, I'm just curious what people think of this approach. Does it sound reasonable?


This appears to be another mechanism to mitigate CSRF vulnerabilities, tailored to a single page app. It is quite similar to, for example, putting a security token into a form that is validated on post. The difference is that it is put into a header. This is probably less secure, in fact, because the token comes straight from the cookie. CSRF tokens are typically generated server side and can thus be made cryptographically strong.

It's funny because the author initially advocates against using cookies because they are susceptible to CSRF attacks, and then immediately suggests using cookies as part of this new scheme (albeit in a different way).

This is a good example of why you shouldn't design your own security system unless you are an expert in security and/or cryptography.


I believe the scheme is still generating the token server-side, no?

"The server validates the login information and creates an authentication token for the user"


Check the mailing list for this. There wasn't a large amount of discussion about mobile options when I last checked, but one solution seems to be what you've already listed above: Phonegap/Cordova.

https://groups.google.com/forum/#!forum/meteor-talk

It didn't seem like there's a "perfect" solution for this yet (in any realm--it's all still evolving).


My suggestion is to simply tell the complete and honest truth, in a kind and caring manner (if you value the friendship, you could let him know that).

Every choice has a cost.


I think we're talking sneakernet here...


Cheating a bit since I didn't read the article, but having been in and out of that world for a number of years, there were always certain types of clients who didn't want to hire a company--they only wanted to deal with individuals, for reasons stated or unstated.


From a different perspective, has anyone ever taken the time to read local health department restaurant inspection reports (if available)?

I assume most people here eat at restaurants without too much concern, but if you ever read the reports, you'll find experienced industry professionals cited for far worse infractions than these.


I live in the UK. My local town has a 5 start system. "rats in the same building" would get a place shut down.


And yet I see a lot of job ads listing MongoDB.

If I went into an interview and asked why they chose a document-oriented database, and that one in particular, think I'd be popular? (I like to play with new techologies, too, but it seems odd to see it mentioned as a requirement.)


Many job ads are written by HR, based on a list of technologies that developers naively provided them. Some of our job ads have technologies that we briefly used once in an experiment that was never more than 20% complete, while MongoDB (which we use in production) isn't currently listed.3


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: