Skip to content
HomeVideosBooksBlogs
AllTop postsTopics
Podcasts
HistoryListsWatch laterLiked videosFollowing

The videos, books, blogs and podcasts Hacker News keeps recommending, all in one place.

VideosBooksBlogsPodcastsAboutPrivacySettings

Data from Hacker News, HackerTube, HackerBooks, HackerBlogs and Open Library. Credits · Not affiliated with Y Combinator.

HomeVideosBooksBlogsPodcasts
Ctrl K
    J

    James Fisher

    jameshfisher.com · Personal blog · on HN since 2017

    James Fisher writes about programming, security, and tech culture, including phishing methods, SSH certificate authorities, and cryptography history.

    Visit blogRSSHN submissions
    ProgrammingSecurityWriting & Thinking
    What HN says

    Commenters list him among blogs they check regularly and praise his 'I hate telephones' post and Gmail dots scam write-up.

    Stats for nerds
    62HN people shared it
    67linked in comments
    4.3Kstory points
    Jan 2025last shared
    2018people per year2025

    Top posts on HN

    1. 1
      The inception bar: a new phishing method
      3 people · 1K points · first shared 2019 · 230 comments on HN
    2. 2
      The dots do matter: how to scam a Gmail user
      5 people · 1K points · first shared 2018 · 506 comments on HN
    3. 3
      I hate telephones
      4 people · 554 points · first shared 2017 · 431 comments on HN
    4. 4
      Syntax highlighters are wrong (2014)
      5 people · 276 points · first shared 2019 · 170 comments on HN
    5. 5
      The sorry state of OpenSSL usability (2017)
      2 people · 239 points · first shared 2017 · 79 comments on HN
    6. 6
      How Hacker News Stays Interesting
      1 person · 227 points · first shared 2019 · 112 comments on HN
    7. 7
      My Parents Are Flat Earthers
      6 people · 187 points · first shared 2019 · 207 comments on HN
    8. 8
      A formula for responsive font-size
      1 person · 165 points · first shared 2024 · 108 comments on HN
    9. 9
      Hello world in C inline assembly (2018)
      1 person · 163 points · first shared 2024 · 40 comments on HN
    10. 10
      Shape typing in Python
      2 people · 133 points · first shared 2024 · 75 comments on HN

    What HN people wrote when they linked it

    • pizza234Mar 2020

      I think treating flat earth theory as a rational argument to debunk is appealing, but ultimately unproductive.

      There was an interesting article some time ago: https://jameshfisher.com/2019/01/20/my-parents-are-flat-earthers, which casted the human perspective on the problem: at the root, believing a conspiracy theory gives self-importance to the believer, and it's, in a way, "fun".

      Considering this perspective, this phenomenon belongs to the class of problems whose easy angle of attack is the technical (rational, in this case), and the difficult one is the human.

      I'd argue that if one thinks that a flat earther is metaphorically a brick wall, and consequently a fool, opposing technical arguments against it is equally as foolish. It's actually the other side of the coin: yelling arguments to a wall is the mirrored human problem, in my opinion.

      In conclusion, I think it would be more productive to think more about why this belief is appealing to people (and why it's spreading), rather than proving it's false.

    • jamesfisherJul 2022

      Everyday Data Science is the first course on TigYog [1], a platform I'm building. Most courses are video-based, but TigYog courses are more like books. The only addition is multiple-choice buttons with responses. This lets you simulate the tight feedback loop you’d have with a private tutor.

      Andrew's writing shows off what you can make with this medium. It's a bit like blogging. Try it out and let me know how it goes! (Currently it’s a WYSIWYG editor, though I’m also working on a Markdown+git interface. Let me know if you’re interested.)

      - Jim Fisher [2]

      P.S.: Thanks to one user reporting an Apple Pay UI glitch. I'm on it! In the meantime, ordinary Stripe card payment should work.

      [1]: https://tigyog.app/
      [2]: https://jameshfisher.com/

    • sametmaxApr 2023

      It's a more and more popular opinion:

      - Why not tell people to "simply" use pyenv, poetry or anaconda (https://bitecode.substack.com/p/why-not-tell-people-to-simply-use)

      - Don’t use the word ‘simply’ (https://jameshfisher.com/2017/02/22/dont-use-simply/)

      - Stop using ‘simply’ in tech instructions (https://www.parkersoftware.com/blog/stop-using-simply-in-tech-instructions/)

      - Don’t say “simply” in your documentation (https://www.knowledgeowl.com/blog/posts/dont-say-simply-jim-fisher/)

      And I agree strongly. It can be so discouraging to fail at something you should "simply" do.

      But to be fair to the technical writer, it's easy to write it without noticing, even after proof reading. This should be automatized by writing tools.

    • gruezAug 2020

      >Maybe there should be?

      How do you prevent a website from faking the address bar? The only reason that you can trust address bars right now is that the website can't draw outside the content frame. There's already attacks on mobile[1] involving fake address bars because the address bar can be hidden, allowing the site to draw a fake address bar in its place. The only secure way to do it would be to opening another window (like when you try to use sign in with google), but that still has the issue that lots of legacy sites won't use this security feature, so users will still happily enter in their credit card numbers.

      [1] https://jameshfisher.com/2019/04/27/the-inception-bar-a-new-phishing-method/

    • franciscopNov 2019

      I totally agree, made a while ago a snippet for Atom with syntax highlighting based on a similar article [1] that will make comments bright pink (meta-tweet with the code in effect):

      https://twitter.com/FPresencia/status/1133733608785473536

      For copy/paste (in Atom -> Stylesheet...):

      .syntax--comment,
      .syntax--punctuation.syntax--definition.syntax--comment,
      .syntax--comment .syntax--markup.syntax--link {
      color: rgba(255, 51, 255, 0.8);
      }

      .syntax--comment.syntax--block,
      .syntax--comment.syntax--line {
      background: rgba(255, 51, 255, 0.1);
      }

      [1] https://jameshfisher.com/2014/05/11/your-syntax-highlighter-is-wrong/

    • hackyhackyJan 2025

      Of course it isn't really BASIC compatibility mode. In reality, it's an lesser-known array initialization syntax. It's explained here: https://jameshfisher.com/2016/12/25/c-array-literal-explicit-indexes/

      In short, you can initialize an array like this, by specifying each element in order:

      int foo[] = {10,20,30}; // initialize elements 0, 1, and 2 However, you can also initialize specific array elements:

      int foo[] = {[50] 10, [51] 20, [52] 30}; // initialize elements 50, 51, 52 "BASIC compatibility" mode uses the above syntax.

    Related

    MSRC Blogmsrc.microsoft.com240 people

    SolarWinds hackers were able to access Microsoft source code

    MSRC Blog
    Company · last shared 2026
    James Goslingnighthacks.com41 people

    James Gosling joining Google

    James Gosling
    Personal · last shared 2026
    James Stanleyincoherency.co.uk57 people

    Nightdrive

    James Stanley
    Personal · last shared 2026
    Errata Securityblog.erratasec.com357 people

    Extracting the SuperFish certificate

    Errata Security
    Personal · last shared 2025
    D. J. Bernsteincr.yp.to641 people

    IEEE Refuses to Accept Public-Domain Papers?

    D. J. Bernstein
    Personal · last shared 2026
    Aphyraphyr.com551 people

    Hexing the technical interview (2017)

    Aphyr
    Personal · last shared 2026
    James Bottomleyblog.hansenpartnership.com55 people

    Lessons from the Gnome Patent Troll Incident

    James Bottomley
    Personal · last shared 2026
    Proofpoint Blogproofpoint.com57 people

    Threat actor abuses Cloudflare tunnels to deliver remote access trojans

    Proofpoint Blog
    Company · last shared 2026