Hacker Newsnew | comments | show | ask | jobs | submit | robinduckett's comments login

Sometimes you're running a single application via AWS OpsWorks or so, and your application is handling the SSL because you don't want to pay for an elastic load balancer to handle the SSL.

-----


Fair enough, I'm not familiar with that service.

Running a Node.js application without a reverse proxy in front of it sounds like poor practice though, particularly from a security standpoint.

-----


Do you have any particular security holes in mind that nginx guards which node.js / io.js are open for ?

-----


Separating your TLS server from your app server also shields your app server from leaks in your TLS server. See: Heartbleed.

-----


True, however the higher the number of different software packages that participate in your application's operational environment, the higher the chances that one of these exposes security holes. You have to make a trade-off between complexity and increasing security by isolating pieces of your stack.

-----


Not off the top of my head, although I know the recommendation at least used to be that Node was not run with full public access.

I think it makes sense to separate the security and low level details of serving a public site, and the details of hosting an application though. This is common practice with Django, using gunicorn and nginx, and I believe with Ruby as well in a similar manner.

-----


Django and Ruby /can't/ serve static content at any speed as they block their main thread. Node and nginx use the same model for io, as does Tornado and Eventmachine (though the latter two are nowhere near as popular).

-----


You can at least configure some basic sanitizations, so you'r app doesn't have to deal with them. Examples of the top of my head, are normalizing slashes and removing invalid headers.

Whether that's worth it is another question.

-----


.... but why?

-----


Thanks, I think planning is one of those things that I'm not really good at to begin with, so working on that will be good :)

-----


Also Moon. http://www.imdb.com/title/tt1182345/

-----


Completely off-topic, but if you haven't seen Moon, do it.

It's an amazing movie.

-----


It is a very good movie, but also a total downer.

-----


it's also extremely slow-paced, so be aware of that.

-----


i cannot agree more

-----


I like `let`. It means you have to be implicit and actually be aware of what you're doing.

-----


That part of the article isn't particularly clear. The intended behavior of let is great. The unintended behavior - that it can cause typeof to fail - is bad.

-----


It seems to me typeof in the described case should return undefined.

-----


typeof is never being invoked, so it can't return anything.

The rules of let are that any reference to the variable before the let declaration (the "temporal dead zone"), it's a reference error. So the reference error is being thrown before typeof is invoked.

-----


Fun but laggy

-----


I count four and a book plug.

-----


Not that I'm a fan of the book plug but you can keep going after that slide to get the rest of the list (and more plugs).

-----


I was on my phone and couldn't swipe any further for some reason :(

-----


Yeah, but of a slashvertisement/hnvertisement.

-----


Hello, I just have to ask, are you suffering from mental illness? If you aren't, it may be a good idea to get to a GP/Doctor and get checked out. Your comments on this thread read EXACTLY like some of the writing I have read by a family member with Schizophrenia. Feel free the flag / down vote me, but if you aren't aware then it could potentially help a lot...

-----


Your comments on this thread read EXACTLY like some of the writing...

Care to elaborate on why that is the case?

-----


Just because someone is incredibly passionate about something technical that you don't understand doesn't mean that person has a mental illness. It's pretty clear from reading what he's written that it isn't technobabble or nonsense in the least. Schizonphrenic individuals do not generally write comprehensible and logically sound ideas down. The worst you could characterize graycat's comments as are "quirky". Your comment is both hurtful, since it was made publicly, and completely wrong.

-----


Let's see: (1) Make some progress learning to play violin. I did. E.g., I made it through not all of but over half of the Bach "Chaconne", regarded as great music and challenging by nearly all violinists. (2) Learn some Fourier theory, pure and applied. I did that, for work with the fast Fourier transform on sonar problems for the US Navy and other problems. Also I took some grad math courses that covered Fourier theory carefully, right, based on measure theory.

I wrote the material here quickly, and better explanations could be possible:

For a violin, when tuning, and really also for much of the playing, to get the frequency ratios correct, which is most of what playing a violin with good innotation is about, use overtones, that is, the terms of a Fourier series expansion of a periodic (not necessarily sine or cosine) signal. In particular, when bow two strings together, i.e., at the same time, say, the A and the E, with the A already at 440 Hz from, say, a tuning fork, and slowly adjust the frequency of the E string, then are, in part, adding an overtone of the A string with the signal of the E string and, really, as adjust the E string, sweeping in frequency, as in the terms of a Fourier series, a sine wave overtone of the E string the terms of the Fourier series of the A string. When that overtone of the E string gets close to the frequency of a term in the Fourier series of the A string, get beats, that is, an amplitude modulation which violin students learn to listen for and hear. When the beats go from a few a second down to less than one a second and basically go away, then have found the frequency of the desired overtone of the Fourier series of the A string, that is, have essentially part of the Fourier series of the A string.

As do other cases of bowing two strings together, get to find more overtones: E.g., want to use a finger of the left hand on the A string to play B, C, C#, D and E. E.g., Beethoven's 9th Symphony has "Ode to Joy" and can play that in A Major with C# C# D E E D C#, .... Well, to get the B correct, bow it with the E string and look for a perfect 4th. For the C, look for a perfect major third. For the C#, look for a perfect minor third. For the D, bow with the open D string an look for an octave. For the E, bow with the E string and look for unison. In eadh case, as adjust finger on the A string, will be doing a sweep in frequency looking for a term in the Fourier series of the other string.

For the bridge, treat it as a linear system. Then given and input signal, to get the output, take the Fourier transform of the input, multiply it by the impulse response of the bridge, and then take the inverse transform. The impulse response is what get when hit the bridge with an impulse, that is, a signal with all frequencies with equal power. If the bridge has a resonant frequency and the troops march with that frequency, then the product of the two Fourier transforms and the inverse transform will be large and the bridge might fail. Fourier transforms win again.

My comments on Fourier theory are fine and should be entertaining for the HN audience.

I wrote the remarks quickly and kept the content intuitive. If I wrote it all out in terms of measure theory, then I'd be still more difficult to read. That you found something objectionable with what I wrote is absurd.

Your remarks are ignorant about Fourier theory and/or just hostile to me. A guess is that I wrote something you didn't understand and, thus, you got hostile. Such hostility is not appropriate on HN.

Put the two together and the criticize what I wrote about where essentially Fourier theory pops up playing a violin. There's more, e.g., the image through a lens of a point source and, then, much of antenna theory, right, also for sonar, especially the phased array case. And there's the issued of power spectral estimation -- did quite a lot of that via Blackman and Tukey.

Right, the Michelson-Morley interferometer, like Young's double slit, is basically antenna theory and, thus, also Fourier theory. I omit the details of the math.

What I wrote was supposed to be fun reading.

There's nothing wrong with what I wrote. Maybe you don't like it; and of course it was not a full course in Fourier theory; and I omitted the math; but for much of a STEM technical audience it should have been easy to read.

Your medical diagnosis is totally wacko nonsense, incompetent, irresponsible, erroneous, inappropriate, insulting, and provocative.

Here's your logic: You know some sick people who write. You observe that I write. So, you conclude that I must be sick. Erroneous. Nonsense.

-----


> What I wrote was supposed to be fun reading.

It was! As a (very) amateur-level musician and programmer, I greatly enjoyed reading your comment. It took a couple of times (because of my shaking understanding of Fourier transforms, not your writing), but I understood your point in the end.

So thanks for sharing. I'm glad you're enthusiastic about this stuff, it'd make a great blog post.

-----


Newsflash: Startup founder struggles with Work / Life balance and ends up not seeing his wife over Halloween.

-----


If you use Asepsis then you'll get a message saying it's incompatible and won't be migrated, however if you reinstall it'll work just fine.

-----

More

Guidelines | FAQ | Support | API | Lists | Bookmarklet | DMCA | Y Combinator | Apply | Contact

Search: