HNHacker News
TopNewBestAskShowJobs

NeutronBoy

2,099 karma · joined February 15, 2012

submissionscomments
NeutronBoy··on Nyancat on the touchbar
FWIW, I just moved towards my laptop screen until the top of the keyboard was out of my peripheral vision. My nose was almost touching the screen.
NeutronBoy··on Why America Needs India’s Rockets
In a startup failing and iterating is a goal. Why should this be different in a government organisation?

(Assuming you learn from your failures)

NeutronBoy··on BearSSL – Smaller SSL/TLS
> It even dervies the name from PolarSSL (Polar Bear

I thought it was a play on 'bare' - e.g. only the basic features needed.

NeutronBoy··on Ask HN: How is LDAP not a huge security risk?
> and some being just quick hackathon projects that needed authentication, a bug ...

The solution here is not to 'fix' LDAP, it's to have proper processes for testing, change management, and deployment. It's to have non-production environments you can use, etc.

I know it's not particularly popular or trendy in startups, but these processes don't have to be onerous. Just some control over what you put into production. I'm not suggesting you wan avoid bugs, but there are in-depth mitigation you can take to help prevent this.

NeutronBoy··on Gameroom
I mean, I'm looking through the permissions now and don't see anything that's not arguably needed to make it work:

- Calendar (it can set up reminders in group chats and calendar)

- Camera/Microphone (to take pictures and videos to put in group chat)

- Contacts (to get a list of contacts! Also see SMS capability below)

- Location (you can send your location in a chat)

- SMS (it can act as an SMS client as well as FB chat)

- Storage (store received pics/videos, and access existing pics/videos)

- Telephone (to detect when you get an incoming call so it can handle any active activities (think if you're already on a video call)).

And as others have noted, you can disable most of these if you don't want them on recent Android versions.

NeutronBoy··on Wordpress on AWS: smooth and pain free
I run a static blog on S3 using Lambda. I upload a markdown post to an S3 bucket, Lambda runs Hugo (could be Jekyll, or whatever) to regenerate the appropriate files, then uploads it to an output buckets, invalidates the files it needs to in Cloudfront, etc.

Not infeasible to think you could use Lambda to generate a static cache of a WP site onto S3 and update files on demand.

NeutronBoy··on We Got Phished
It's partially because you can sign in with custom domains. By putting your email address in first, Google can figure out what signin mechanism to use prior to you inputting your password (or not, if you don't need one).

For example, we use Google Apps at work with our custom domain, with an internal SSO server providing authentication services. You enter your email address, the Google page directs you to the internal SSO server, you get a token, take that back to Google, and you get logged in - no password required.

NeutronBoy··on IPFS is the Distributed Web
> I'm so lost at this assertion. How is this a social / political problem?

How is it a technical problem? Current web technologies allow decentralised web (except for maybe root name servers). Everyone can host their own content, control their own servers, basically everything below your hostname. The implementation has led down a centralised path.

NeutronBoy··on HN comments are underrated
> Since it "hurts" their own karma, people downvote less.

Yes, so they just vote to close the question instead.

NeutronBoy··on Angular 1.x Banned from Firefox Addons
I use Keepass with auto-type. I know it's not perfect, but I feel better about auto-type than browser extensions.
NeutronBoy··on Angular 1.x Banned from Firefox Addons
Because big players can take remedial action prior to the bug being disclosed to protect users - for example, banning a specific framework from browser extensions.
NeutronBoy··on All Tesla Cars Being Produced Now Have Full Self-Driving Hardware
'Regular cars' look like they do because of design limitations imposed by things like fuel tanks, engines, and gearboxes.
NeutronBoy··on Now Open – AWS US East (Ohio) Region
> The only reason I can think of is the excessive amount of money they can charge for EBS instances (especially PIOPS)

The main driver is that they don't need to have instance storage - that is, they can uncouple the storage from their compute nodes entirely and keep it on SAN somewhere.

NeutronBoy··on It is now a federal crime to bring a Galaxy Note 7 onto an airplane
There were reports from Melbourne (Aus) Airport this morning about queues 4x or 5x times normal length (for a Monday morning). Security were checking every mobile phone going through and not letting anyone carry Galaxy Note 7s on.
NeutronBoy··on The Stack Overflow Developer Story: A New Technical Resume
> Probably will have to find another menial job. Oh well

Don't take this the wrong way, but you need to change the way you project yourself. Even just from this resume, you're talking yourself down. Who would you hire?

"I wanted to keep track of who/what was visiting my websites. Turns out they were mostly crawlers for search engines. I keep track of IPs and URLs requested, I store them in a MySQL database using PHP"

or

"Wrote an application to process and analyse logfiles across a collection of websites, using a common web application stack. Stores requested IPs and URLs for future analysis. Identified the split of automated search engine crawlers and other bots vs human visitors. Tools and languages used include PHP and MySQL"

Resumes are all about how you present what you've done.

On that point - if you're applying for frontend developer positions, use your skills! Build a cool website to present your resume rather than a plain piece of paper. You'll probably still need the paper, but the first line of it can be "View my resume online at example.com".

NeutronBoy··on Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras
Fair point, have updated my comment.
NeutronBoy··on Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras
This comment shows the disconnect between many comments I read on this forum[0] and the real world, frankly.

Whenever Apple or Samsung release an update for their smartphones, I have a to help family members click through dialogs to install them. How are they supposed to assess and implement security for an IP camera they bought at a department store?

How would they do it anyway? Is the expectation that they fire up Wireshark, identify traffic flows to and from their device, then configure the firewall on their consumer-grade router to limit this traffic?

[0] previously read just '... disconnect between this forum ...'

NeutronBoy··on Bitwarden – Free and Open Source Password Manager
Rather than an extension, I just use the auto-type functionality.
NeutronBoy··on Hugo: A fast and modern static website engine
See my reply here https://news.ycombinator.com/item?id=12675780
NeutronBoy··on Hugo: A fast and modern static website engine
The key stuff is from this project (not mine) https://github.com/ryansb/hugo-lambda

I couldn't get to CloudFormation template deploy working, so set it all up by hand, using the scripts in that repo as a base.

Once you figure out how it works, it becomes easy to start adding other commends to run (for example, I added some lines to invalidate CloudFront when I uploaded a blog post).

If I get a change over the next week or so I'll update a repo with the scripts I use, but as I said it's based on the above anyway.

NeutronBoy··on Hugo: A fast and modern static website engine
I have moved from Jekyll to Hugo. Functionally it's the same for my use case, but in a single binary, meaning I don't have to maintain a full Ruby stack.

I've now moved it into Lambda, so to post a new page to my blog, I drop the markdown file in an S3 bucket, and literally a few seconds later my blog is updated, Cloudfront and all.

NeutronBoy··on Amazon flipped a default and made me thousands of dollars
Well shit. I read the whole thing, not close enough apparently!
NeutronBoy··on Amazon flipped a default and made me thousands of dollars
EDIT: Well that will teach me to read more closely! Continue below if you want to see me make an idiot of myself. Turns out I missed the point

So as I type this the votes are charging up the ranks (about 10 votes since I started typing this comment), so let me start off:

I can't possibly see how this is Amazon's fault. You're arguing that you offer a service for free (for a little while anyway), and that more people are taking you up on that because they have logs lying around, because Amazon has prompted them in the past to save these logs?

I mean, shouldn't this help your service?

a) now people can try it out because they already have logs and don't have to wait (which you've already identified was an issue), and

b) now people will end up with a bucket full of logs, think 'how can I analyse and use these logs', and go looking for a product like yours!

NeutronBoy··on Announcing Azure Command-Line Interface 2.0 Preview
Just to complete your comparison, Azure has some great MS-based PaaS offerings (e.g. hosted DB, hosted IIS, etc) and great integration with MS environments, but I find their interfaces (API and portal) more clunky than AWS.
NeutronBoy··on UnGoogled Chromium: Chromium with enhanced privacy, control and transparency
While I applaud the effort that's gone into this, I urge people to consider (and use and contribute to!) Firefox. It's one of the last truly open-source browsers - both in terms of source code visibility (which Chrome(ium) has), and in terms of being able to contribute (which Chrome(ium) has not).
NeutronBoy··on DNSCrypt Reduces Privacy
I don't get it. The blog kinda nails it's own point in the first paragraph.

> It allows you to authenticate that the packet you received from the DNS server you connected to is the one that it sent, and also encrypts it over that single hop.

I guess the bit that's missing is, 'who is disagreeing with this?'

NeutronBoy··on Why Bezos’ rocket is unprecedented–and worth taking seriously
Sorry, when did sell online pet food retailing, taxi dispatching apps, or instant messaging apps, come close to making anywhere near "hundreds of billions of dollars"
NeutronBoy··on YouTube Community goes beyond video
Like Youtube (and just about every social website ever), size matters - bigger is better to a point of critical mass, then it's all downhill from there.
NeutronBoy··on How I learned to program
> to hire a developer who wanted a different person to write/run their tests

That's not the role of the tester. The developer should be writing and running their own unit tests. The Tester should be running through user scenarios, use cases, and basically be pretending to be a user of the software to make sure that everything works and makes sense in a workflow (not just in their unit components)

NeutronBoy··on Scalable and secure access with SSH
I would argue it's a lot easier to maintain a single CRL across your entire infrastructure (you can regularly update it to all hosts, easily monitor for non-matching versions through your monitoring tools, etc) than it is to maintain a customised authorised_keys file for each server or server group (n keys across m servers can be a lot of combinations, with no easy way to check correctness)
← PreviousPage 4 of 21Next →