HNHacker News
TopNewBestAskShowJobs

Orangeair

925 karma · joined January 21, 2014

submissionscomments
Orangeair··on Learn Python 3 the Hard Way
Saying the parentheses are optional in Python 2 is kind of inaccurate. "print(thing)" is just "print (thing)", and "(thing)" is just an unnecessarily parenthesized version of "thing". So basically it's just redundant syntax that happens to make it look like a function.

If you try to do something like "print(thing1, thing2)" in Python 2, you'll find that "(thing1, thing2)" is interpreted as a tuple, so Python prints it as a tuple (instead of printing thing1 and thing2 individually).

Orangeair··on AMD Ryzen price and release date revealed
They're ahead in multi-threaded performance, but as another commenter said, they suffer when it comes to single-threaded tasks, which meant that their gaming performance often suffered (my friend ran into this problem firsthand when he discovered that his FX6300 was bottlenecking his GTX 970).

Hopefully that isn't true anymore, or Intel may still be the superior chip for gaming.

Orangeair··on The JVM is not that heavy
That's just Hello World, though. He said his app was parsing a 20 MB file.

To do a fair comparison, with your example, I just compiled and ran Hello World in Java on my machine and got this:

real 0.06 user 0.06 sys 0.01

Orangeair··on Using Immutable Caching to Speed Up the Web
Shouldn't using common CDNs solve this problem?
Orangeair··on Python 2.8?
I agree. What exactly is the point of backporting features, when the main reason people give for wanting to use Python 2 is for legacy applications? What 8-year-old codebase is going to be updated to use `async`? And if you're starting a new project, why not write it in Python 3, which has first-party support?
Orangeair··on Stealing passwords from McDonald's users
> Is that correct?

Yes, that's the classic XSS attack pattern. It's like phishing, but better since you're sending the person a link to the actual website. And once they've clicked on it, they're already screwed; they don't even need to manually enter any information.

> how?

Once you have the cookie, its as simple as something like making an XMLHttpRequest to your own server that includes the decrypted email and password from the cookies.

Orangeair··on ThinkPad X1 Carbon
I own this laptop too, and I agree with you. I would add a few complaints of my own, though:

- The computer sometimes seems to turn on after it's closed and asleep in my bag

- The CPU gets pegged constantly, even on the i7 version (admittedly, this may be due to some background processes that were installed by my employer, but sometimes in task manager it just seems like a generic Windows process it taking up all of the CPU, so it's hard to tell).

- The fn key placement is awful. Seriously, I think Apple started this trend, and I wish other manufacturers would stop following it. Years of muscle memory have trained me to put my pinky in the bottom, left-hand corner of the keyboard for ctrl. At least you can change this in the BIOS on this computer, unlike a Mac, but that's still less than ideal.

Orangeair··on Linux (2003)
I am in complete agreement. No matter how many troubles Windows may have caused me over the years, at least I've never managed to somehow completely delete its entire GUI while attempting a routine software update.
Orangeair··on Linux (2003)
Ooh, let's continue the metaphor.

Sometimes Linux Airlines forgets to equip its planes with doors. Others in Linux Airlines, who are used to entering through the windows, suggest that you should start a door company yourself to outfit the planes.

Orangeair··on Ask HN: Insultingly Bad Bonus, Bay Area, Cause for Concern?
Well, just for comparison's sake, employees at Google are able to give each other bonuses that are worth more than that. They're subject to manager approval of course, but they can be given for things as simple as "this person was my go-to help for understanding this new platform I haven't worked on before". So take that for what it's worth.
Orangeair··on Amazon Worker Jumps Off Company Building After E-Mail to Staff
Absolutely. For example, Google will reimburse you up to $12k a year for courses you take that are related to your job, and even offers up to $1,200 for everything else. So if you want to take, say, a cooking class, they'll even help out with that a bit.
Orangeair··on C puzzles
I have a problem with these puzzles that it seems like no one has pointed out. A couple of them are just intentionally misleading, specifically the ones that involve typos. For example, the solution to one of them is that it says 'defa1ut' instead of 'default' in a case statement. Ignoring the question of whether or not typos are really "puzzles", this is misleading because the syntax highlighting the author uses highlights it as if it had been spelled correctly. No actual (automatic) syntax highlighting system would ever highlight the code as it is shown on the page. It should either be presented with correct highlighting or with none at all.

For anyone who is going through these exercises, I would encourage you to copy-and-paste the code snippets into a regular text editor.

Orangeair··on Review: The NES Classic Edition and all 30 games on it
I think what you're saying is definitely indicative of what I was trying to get at: that analog is more of a "feeling" and less of a technical term nowadays. I didn't mean to vilify you for that; I think it's a fairly widespread phenomenon, and you just happened to illustrate my point well :P

Great article, by the way!

Orangeair··on Review: The NES Classic Edition and all 30 games on it
> The controller ports aren’t as satisfyingly analog-feeling as the old ones, but that’s really not a big deal.

It's slightly ironic that the author says this, since there is absolutely nothing analog about NES controllers -- they're nothing more than a shift register internally. By contrast, modern controllers do in fact have analog input mechanisms (although they are of course communicated with digitally).

It seems to me that "analog" and "digital" have lost their true meanings over time, and come to mean nothing more than "old technology" and "new technology" over time.

Orangeair··on MicroG Project: A re-implementation of Google's Android apps and libraries
I'm a little wary about projects like this. While it is true that Google Play Services kind of subverts the free nature of Android, it's also one of the only things that is keeping fragmentation from becoming a big(ger) problem. Google is unable to update the OS on every Android phone in the wild, but they can update Play Services as needed to patch critical security bugs or add new features. The more that developers rely on it, the more they are relying on something that will be properly maintained.
Orangeair··on New MacBook Pro Is Not a Laptop for Developers Anymore
I'm surprised that so many people use them even today. Unless you're fully ingrained into the Mac ecosystem, there are just too many idiosyncrasies that make moving between platforms in possible, like the use of the 'command' key which no other platform in the world uses, or the weird placement of the control key which completely negates years of muscle memory (a trend which some Windows laptops are unfortunately beginning to follow, even in business-class machines; thankfully mine at least lets me rebind it in the BIOS).

Honest question for people who develop on Macs: Do you exclusively develop on them, or have you just learned to put up with differences between it and Linux/Windows?

Orangeair··on Ewww, You Use PHP? (2010)
Honestly, I think just because it's so exceptionally un-cool. PHP may not be that cool either, but Facebook uses (has used?) it, and it's at least not as strict and "enterprise-y" as Java.
Orangeair··on Google's “Director of Engineering” Hiring Test
I think you're misunderstanding how the process works. It's not like they wait until they're ready to hire you and then tell you where you're going to work -- they ask you where you want to work. After I had passed all of the interviews, they gave time to consider the different locations and pick which one I wanted to work at (I could only pick a location that had available positions, of course). After I had accepted the job offer, about a month before I started, they contacted me again with a survey that asked me about my interests and skills, which helped them place me on a team. Since I'm working at a smaller office, there were only two team choices, but the larger offices (ie. Mountain View and Seattle) will give you several choices. On top of that, you're free to change teams after as little as a year. So I would hardly call any of that 'arrogance'.
Orangeair··on Coconut – Pythonic functional programming language
In Python 3, reduce was intentionally moved into the functools library because it was argued that its two biggest use cases by far were sum and product, which were both added as builtins. In my experience, this has very much been the case. Reduce is still there if you need it, and isn't any more verbose. The only thing that is a little bit more gross about this example is the lambda syntax; I would argue that even that is a moot point, however, since Python supports first-class functions, so you can always just write your complicated reduce function out and then plug it in.
Orangeair··on MitM Attack against KeePass 2’s Update Check
Why is there advertisement on the automated update server? Why can't he just split them apart? What with things like Let's Encrypt nowadays, there really shouldn't be any excuse not to use https. Especially for a security related product!
Orangeair··on Fox 'uses' a gameplay video from YouTube, and removes the original with DMCA
I'm not sure if I understand the problem here. So either Fox will want to remove the trailer manually, or they will want to remove it automatically with ContentID. If they remove it manuallly, then there's no problem since what I'm talking about only applies to the automated approach. If they want to remove it with ContentID, then presumably they have already uploaded the ContentID data, in which case their upload date is still earlier, and they can take it down.

The only time this would be a problem is if the bootleg trailer were uploaded before they uploaded the ContentID data, and Fox wanted to then upload the ContentID data and have it removed automatically. I can't see why they would do this, however, since presumably they are reacting to the bootleg upload in this case, and can then simpply issue a manual takedown request.

Orangeair··on Fox 'uses' a gameplay video from YouTube, and removes the original with DMCA
There is no reason this kind of glitch should even be happening. There should be some kind of date attribute that gets attached to the ContentID data that Fox submits, and YouTube should reject takedowns for which that date is later than the date the video in question was uploaded. This is just ridiculous.
Orangeair··on Amazon Reviews: How We Spot the Fakes
That's a great example too, because Amazon actually ended up following up and banning cables that were found to be non-compliant with the spec, largely based on his reviews: http://lifehacker.com/amazon-bans-non-compliant-usb-c-cables...
Orangeair··on Results from Candy Japan box design A/B test
> In a world where it makes no difference which package is sent, you would get a result as significant as this 80% of the time.

I suddenly get p-values now. Why has no one ever explained it like this before?

Orangeair··on Ruby Bug: SecureRandom should try /dev/urandom first
I really don't like the sentiment of "We shouldn't change it unless the man page says we can". That's exactly the kind of senseless bureaucracy that the open source community should be avoiding.
Orangeair··on How to Pass a Programming Interview
So the purpose of job interviews is to find people who can pass job interviews? Seems like a tautology.
Orangeair··on My Little Sister Taught Me How to “Snapchat Like the Teens”
That's because it isn't MMS. It's Apple's proprietary messaging system.
Orangeair··on Android Full Disk Encryption Cold Boot Attack (2012)
Most recent phones lock the bootloader by default, regardless of whether or not decryption is enabled. Some phones, such as the Nexus series, allow it to be unlocked relatively easily. Others, such as those made by Motorola, require the user to go online and get a unique unlock code for their device. And some, such as LG, don't allow the bootloader to be unlocked at all.

In practical terms, the only people who would ever unlock their bootloaders are those who wish to perform modifications (ie. rooting and customs ROMs), and they typically accept a somewhat lessened amount of security anyway.

Orangeair··on Show HN: FuckFuckAdblock
https://xkcd.com/952/
Orangeair··on Dell does a Superfish, ships PCs with self-signed root certificates
I don't know how to do it through group policy or anything fancy like that, but have you tried running certmgr.msc and deleting it through there? I can't test it on my computer since I don't have a dell, but clicking on a certificate gives me a delete option in the menu bar. The cert you're looking for should be under "Trusted Root Certification Authorities"
← PreviousPage 4 of 7Next →