Hacker News Reader

Comment by 100k | Hacker News Reader

Oh hey, that's my talk! Thanks for submitting it. It was a huge honor to present my team's work at Strange Loop.

I’d just like to say: thank you!

GitHub’s previous search was not great, and when the new version launched it was a massive leap forward, where it’s now part of my daily workflow. Before this I thought good search at this scale might just be an intractable problem. :)

Meh before Microsoft acquisition, you could get an API key for any service you want by just making a search on github, not sure how many people knew about it, it was probably a dirty secret but I used to crawl tons of stuff by just rotating API keys found from github, none of that is possible anymore.

On the plus side I don't count how many reports I've done to companies who did leak not only their username/password but also all the cool proxy you could use to go inside their network. The weirdest one of them was a guy working in security at thales which is supposed to handle security sensitive stuff for governments leaking all that information as he was working on a side project involving poker during business hours ...

This was novel 10 years ago. Maybe you were still doing it but hardly worth mentioning.

This is definitely still possible. Saw a guy a year or two ago in a web scraping Discord who does this for fun and found all sorts of API keys. I think he found a 2captcha API key for an account with a 5 grand balance by spamming the search API endpoints. I hope he didn’t actually use any of that….

Pretty sure some people also made a fortune in crypto exchange API keys because I’ve seen threads where people advertise services to “cash out” Binance API keys for 5 cents in the dollar. I assume they use the balance in the account to inflate the price of some random coin that the attacker bought just before the attack. Yeah, that’s what this world is coming to.

Do you have any paper/talk that gives more details about the "geometric XOR filter"? If not, is there any plan to publish something?

Yes! My colleague who created it has started working on an open source version so we can publish it. I am not sure when it will be ready, but I'm excited because it is extremely interesting and has a lot of potential use cases.

Amazing, thank you!

PS: where/what can I follow to know when it is published? Could you share your colleague github handle (I guess he'll have one :) )?

We'll definitely blog about it (https://github.blog/). His handle is https://github.com/aneubeck (it's on the thank you slide of my talk btw)

Thank you!

> more details about the "geometric XOR filter"?

I know we don’t typically say this here but, you have a very relevant username for your question xoranth :D

Does anyone know what geometric means in this context?

It refers to the geometric progression of bucket sizes used in the data structure.

Hi Luke,

Could you please give an update on whether or not GitHub is still considering adding “sort by recent” to search?

——

E: I just saw you answered that already. It’s a dearly missed feature.

Please see my other comment about why this is difficult: https://news.ycombinator.com/item?id=38638214

Hey, it would be nice to be able to browse in other branches besides main

Really great summary of a huge work! Thank you.

Reply on news.ycombinator.com