Hacker Newsnew | past | comments | ask | show | jobs | submit | _joev's commentslogin

That's not true. There have been PDF.js exploits that lead straight to RCE. This has the additional downside of leading to immediate compromise on every platform.

Example (used by Mariusz Mlynski to win Pwn2Own this year): https://www.mozilla.org/en-US/security/advisories/mfsa2015-3...


Thanks for the link, and bummer, too late to edit my comment.. now I'll be wrong on the Internet for perpetuity :)


join the club


Here's a tool I wrote that grabs your internal IP and scans your LAN using response timings and HTTP asset fingerprints:

Demo: http://joevennix.com/lan-js/examples/dashboard.html Code: https://github.com/joevennix/lan-js

If you are interested and have some time, find and contribute HTTP "fingerprint" assets from devices on your LAN to src/db.js.


"Native desktop" spotify is just a web app wrapped into an embedded Chromium browser.


"just" a browser with a lot of native technology baked in to enhance the experience. Playlist caching for one.


localStorage.getItem("myPlaylist")

I'm not saying that's what they use, it could be WebSQL, IndexedDB, FileAPI - local data storage is built into your browser.


You can't, there was a bug in my code when run on firefox fullscreen.

Formatting options would be nice, for now you can copy some text from an external HTML document and it will preserve the formatting. You can then edit this text.


I cannot for the life of me figure out how to fix this. Maybe someone here knows. I define the fullscreen bg color:

    bg:fullscreen, bg:-webkit-full-screen, bg:-moz-full-screen {
      background-color: rgba(255,255,255,0);
    }
But it does not get respected


Fixed it with *{background: white;}, strangely enough.


It's a Safari bug unfortunately.

https://medium.com/adventures-in-consumer-technology/allow-k...

Seems like the best recourse is to disable the feature in Safari. Bummer.


Thanks for the votes :) The code is here if anyone wants to modify it (this site is hosted on github pages):

https://github.com/joevennix/aquietplace


Silly bug. Should be fixed now, with a .focus() call.


Yeah right now there is only saving as the browser allows (print to PDF is another way). I'll add support for saving as a .txt on cmd-S through HTML5 download API in a bit.


Added a cmd-S to save to txt.


wakes up 10 hours later to find this on HN homepage

Sorry, originally I had some functionality so that changing URL hash gives you a new file. At some point I switched this to using location.pathname and broke it. Let me add it back :)


Okay, feature implemented :) To work on a new file just change the URL hash

http://joevennix.com/aquietplace#newfile


Nice, i really like the idea of just using URLs for that but not having any specific GUI. Great!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: