B

Buzz Media

thebuzzmedia.com · Personal blog · on HN since 2010

Buzz Media is a developer blog with posts on Java, REST API security, MongoDB durability, and AWS outages.

What HN saysHN commenters often link its guide to securing a REST API without OAuth when discussing API authentication, including timestamp and nonce schemes.
15HN people shared it
8linked it in comments
29stories submitted
265story points
14 years agolast shared
2010people per year2026

Most-shared posts

  1. 1
    Getting started with designing a Secure REST (Web) API
    9 people · 55 points · first shared 2011 · 16 comments on HN
  2. 2
    Handling Self Doubt and Battling Inactivity
    2 people · 38 points · first shared 2011 · 7 comments on HN
  3. 3
    MongoDB (Single-Server) Data Durability Guide
    2 people · 3 points · first shared 2010 · discussion on HN
  4. 4
    Imgscalr - a java image scaling library
    2 people · 1 points · first shared 2010 · discussion on HN
  5. 5
    Digg v4's Problems are not Technical
    1 people · 65 points · first shared 2010 · 41 comments on HN
  6. 6
    Java IO is faster than NIO: Old is New Again
    1 people · 46 points · first shared 2010 · 19 comments on HN
  7. 7
    Happiness
    1 people · 20 points · first shared 2010 · 15 comments on HN
  8. 8
  9. 9
  10. 10
    Workout program for people who don't like working out.
    1 people · 6 points · first shared 2011 · discussion on HN
  11. 11
    FourSquare Checkin "Hack" now with pretty GUI
    1 people · 3 points · first shared 2010 · 1 comments on HN
  12. 12
    Fix for iPhone 4 antenna reception problems (PIC)
    1 people · 3 points · first shared 2010 · discussion on HN
  13. 13
    Inception Movie Review
    1 people · 2 points · first shared 2010 · discussion on HN
  14. 14
    Time Management with Mark Forster’s Autofocus System
    1 people · 2 points · first shared 2010 · 1 comments on HN
  15. 15

What HN people wrote when they linked it

rkalla · 2011-12-07
I've owned 2x Nexus One, 2x HTC Magic (one myTouch 3G and one Google Ion dev device) and finally a myTouch 4G (Essentially 1 HTC phone from each generation of device they have produced). I have never enjoyed my HTC devices; they have never worked smoothly, never had some sort of minor or major hardware problem (Nexus One's screen used to have snow like an old TV, myTouch 4G out of the box required a factory reset to work correctly), working with HTC support directly was as painful as using Microsoft Xbox Live support[1] and the "HTC Sense" customized Android experience has always been bloated and of course, un-removable. I disagree with comments like Raphael's about HTC simply not having that "jesus phone" to put them on the map; they have plenty of spec-perfect phones, the problem is their phone experience is a combination of incomplete/slow software mixed with spotty hardware that didn't spend enough time in the QA lab because the company is growing so quickly. There was another announcement 2 weeks ago about HTC's sales dipping due to "inferior devices" and I couldn't have been happier to see that specific point actually spelled out for the first time as opposed to Engadget or Gizmodo praising the newest HTC device as the "best Android device we've seen on the market" - I cannot read that phrase without rolling my eyes anymore. I think I've read that phrase about 9 phones this year... HTC has been enjoying growing at a break-neck speed and continue to ride that…
knkella · 2013-04-17
What are your thoughts on Amazon like security scheme? As far as there are no third party apps involved, I think OAuth is an overkill. What I mean by Amazon like securtiy is described in this article http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-…
farhanpatel · 2012-10-20
would a nonce not work? You could just timestamp your request. And only accept requests in a certain timeframe. http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-…
jobu · 2012-07-25
Unfortunately the lack of a proper SSL certificate is rather off-putting, but it is an interesting idea. It reminds me a bit of this article about securing an API without OAuth: http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-… Hopefully I'll have some time to dig into it later - I am curious how this was done.
jbrendel · 2012-06-07
Exactly. Have a look here for some information on how to do this: http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-…
colevscode · 2011-10-13
Here are a few of the articles I've found: http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-… Complete, easy to understand article that outlines the HMAC approach but suggests that things can be much simpler if HTTPS is employed. http://broadcast.oreilly.com/2009/12/principles-for-standardized-rest-… Claims that you should use HTTPS and sign your queries using a private key. This seems onerous for the API user.
cstuder · 2011-03-30
Download the script here: http://www.thebuzzmedia.com/how-to-become-mayor-for-any-place-in-fours… It's back from August 2010, but probably still working.
tobtoh · 2011-01-11
The only advantage I see in blu-ray discs is the image quality - everything else is a severe letdown - the glacial load times, the unskippable trailers and warnings etc. I'm actually less inclined to purchase blu-ray discs than DVDs - I used to buy DVDs for all sorts of movies - comedy, drama, action. However, I find the user experience of blu-ray discs so annoying that I now only limit my purchases to action movies. I feel that the image below perfectly sums up how the movie industry has done more to encourage movie piracy than anyone else: http://www.thebuzzmedia.com/wp-content/uploads/2010/02/why-people-pira…

Keyboard shortcuts

/Search
j kNext / previous blog
EnterOpen selected blog
vVisit the blog site
fFollow / unfollow
lSwitch grid / list view
dSwitch dark mode
g hHome
g pTop posts
g tTopics
g fFollowing
g lLiked
g yHistory
g qFAQ
EscBack / close