HNHacker News
TopNewBestAskShowJobs

alaithea

720 karma · joined June 29, 2007

submissionscomments
alaithea··on Former Equifax CIO sentenced for insider trading
This is doubly ridiculous. As CIO he ought to be held accountable for the loss of millions of people's personal data. Instead, he gets what amounts to a slap on the wrist for insider trading.
alaithea··on Fat, Not Meat, May Have Led to Bigger Hominin Brains
Can you elaborate on the histamine/lead issue?
alaithea··on A listing of companies that don't do whiteboard job interviews
People whose kids are older may have forgotten how hard it is to get even five minutes to one's self at home, when there are infants or toddlers in the house, let alone an hour or two. Without an adequate support network in place, a parent might have to pay a babysitter to get the time to do the take-home. So yes, take-homes which are expected to be done in one's "free time" are discriminatory against those with families.
alaithea··on Show HN: Markdeck – author cool slides, text-only, offline-ready, collaborative
I love Deckset-- using it is like having presentation creation superpowers. But since it's OSX-only, I've moved to GitPitch, which is cross-platform and has the added benefit of hosting the slides.

https://gitpitch.com/

alaithea··on Tulsa Remote
Hate to break it to you, but it's been twice that long. ;)
alaithea··on The rise and fall of 18F
Schedule A positions mean a different thing in the US Federal Government employment context than the IRS context... Schedule A just means a term-limited position. Those are W2 employees, not contract.
alaithea··on Login.gov encryption is badly designed
The OP seems to misunderstand the function of NIST, as well. NIST does not "approve" other agencies' software systems. NIST is a standards-setting organization only. They create and publish standards, but do not enforce them.
alaithea··on ThinkPad X1 Carbon
At this point, the fix is just a matter of popping open a terminal, hitting Ctrl+R and typing "restart" to find the command that fixes things, and hitting Enter. So yeah, it is annoying but not a dealbreaker by any means for a power user. I could probably cronjob the restart, too.
alaithea··on ThinkPad X1 Carbon
I can't speak to this generation of the machine, but I've had a decent experience with Ubuntu on the 3rd gen Carbon X1. I have constant issues with the wifi, though... networkmanager needs to be restarted a couple times a day or else the OS will just lose connection and say wifi is disabled. There is also a general sluggishness, especially when web-browsing, that I have not yet tracked down.

All in all, though, it is fine, and the hardware is very nice. I did have trouble getting any other distros besides Ubuntu to install and run properly, though, YMMV.

alaithea··on Dramatically Reducing Software Vulnerabilities [pdf]
I'm pretty sure what you're talking about exists in the OpenControl repos somewhere-- I'm just not sure which one (sorry). My former 18F colleague was recently talking about translating controls about password specifications into actual automated tests on the codebase and/or app.

The reason all that "formal methods" stuff is in there as well (and indeed it's what the more prominent repos in there are about) is so that we can eventually connect the dots between effective security practices in code and the management of the security controls on the administrative side, and at least until the former catches up to the software methods, take the manual work of generating the copious documentation regarding all of this out of the developers' hands. Case in point: https://compliance.cloud.gov/ (<- all auto-gen, AFAIK)

alaithea··on Dramatically Reducing Software Vulnerabilities [pdf]
The U.S. Federal Government already has [NIST-800-53](https://en.wikipedia.org/wiki/NIST_Special_Publication_800-5...) (for software), and [FedRAMP](https://en.wikipedia.org/wiki/FedRAMP) (for cloud infrastructures). The regulations and certifications are there, it's a matter of implementing them properly in a way that actually ensures real-world security, not just that there's a huge, 200-300 pg. document somewhere describing a secure state of an application.

But this is what OpenControl is meant to solve. https://github.com/opencontrol/

alaithea··on Dramatically Reducing Software Vulnerabilities [pdf]
This was already started by 18F. If you haven't heard of them, they are the first U.S. federal gov digital consultancy, and the primary force behind a lot of security/certification improvements already.

https://github.com/opencontrol/ https://github.com/opencontrol/compliance-masonry

alaithea··on Introducing “Ask a Female Engineer”
I think that woman's view is in the minority. If that particular community is not open to male allies, but you want to help, please keep looking and find one of the many communities that is!
alaithea··on Adopting Feature Flag-Driven Releases
It's funny that this is just becoming a thing. I heard about flag-driven releases from somebody in DevOps at Facebook last year, and how integral they were to their release process there.

I ran my own SaaS as a self-taught, solo developer from about 2002-2008, and I used to insert feature flags all the time to test stuff out. Later, when I joined the corporate world and learned more industry standard best practices, I assumed feature flags were just another bad practice I needed to leave behind with my old PHP project. But come to think of it, it was very convenient to:

- test things on a small scale live,

- preview features with the biz folks,

- and it was almost always very smooth to remove the flag and make a feature live, because it was already part of the program's overall control flow.

Funny the things you come upon out of ignorance, versus the drive to do things some way because that's the way everybody does them, and the good/innovative ideas that may fall through the cracks in the rush from the former to the latter.

alaithea··on 18F launches cloud.gov
That's not correct. 18F predates USDS by about a year, and we are (and always have been) independent of each other, though there is a lot of cross-pollination in our work.
alaithea··on Ask HN: Anxiety is limiting my enjoyment of a wonderful career. Can you relate?
I know you said you wanted "support," as opposed to suggestions of pills to take. However, more sufferers of anxiety need to know about this, so I'm going to say it: get a magnesium+calcium (+D) supplement. If you are magnesium deficient, taking some can change your life. For me, it eliminates the "body feel" of anxiety that I'm always a step or trigger away from a panic attack. It means that other ways of coping work so. much. better.
alaithea··on Early exposure 'cuts peanut allergy' by over 80%
This all seems to come down to a couple of factors, namely the hygiene hypothesis and the gut microbiome. I suspect that many of the dietary changes which several posters have mentioned as having helped their allergies may have in fact just allowed them to develop a healthier gut microbiome. Overuse of antibiotics, especially amongst the very young, necessarily plays into this, as well.

http://news.sciencemag.org/biology/2014/08/gut-microbe-stops...

alaithea··on FTC Alleges T-Mobile Crammed Bogus Charges onto Customers’ Phone Bills
I would never in a million years sign up for an SMS service like that, yet I have been signed up for things like that no less than three times during the several years I have been a customer of T-Mobile. I have just managed to catch the charges on my bill. T-Mobile's customer support has always been accommodating, and in most cases, they have been able to refund my money. They will also put a block on your account for "premium services" if you ask them to.
alaithea··on CSVKit: CSV utilities that includes csvsql, csvgrep, csvstat, and more
That depends on what you want to do with your junky input. And if it's junky enough, no tool is going to be able to divine what you want to do with the data until you do some manual cleanup. However, just to put it out there, csvkit has a utility, csvclean, that will split a file based on which lines are valid csv and which are not, allowing you to more quickly dive into what's wrong with the bad lines.
alaithea··on CSVKit: CSV utilities that includes csvsql, csvgrep, csvstat, and more
Why? I know and love csvkit, but never heard of csvfix.
alaithea··on Have US Income and Wealth Inequality Actually Increased?
[edit: the author has since corrected the Gini definition in the article]

I've never encountered the Gini coefficient before, but reading up on it on Wikipedia, the author appears to have the measure flat backward.

"A score of "0" on the Gini coefficient represents complete equality, i.e., every person has the same income. A score of 1 would represent complete inequality, i.e., where one person has all the income and others have none."

Source: http://en.wikipedia.org/wiki/List_of_U.S._states_by_Gini_coe...

Also see the chart here, with the US rising toward inequality ever since the 60's. Again, the caption says "where 0 is perfect equality, and 100 is perfect inequality." http://en.wikipedia.org/wiki/Gini_coefficient#Gini_coefficie...

alaithea··on Yogaglo Patent Issued
If you're a subscriber, as I was, you can go into your account settings and "Suspend Indefinitely" your account from being charged. There is also a comments section. I'm betting they'll pay a lot more attention to those comments than to ones on a blog post or Facebook, so suspend your accounts if you have them, everybody!
alaithea··on Goodbye, Malcolm
His LinkedIn profile says he went to university in '89-'92, which would put him in his early forties, if he went at a usual age.
alaithea··on Farewell, neighbors
I wanted to try using it, but they only supported the city "proper" that I live near (a couple hundred feet from the border, actually), and not my metro area. While I could see that being a hard thing, dev-wise, to do, I'd say it was a huge shortcoming.
alaithea··on Nexus 4 demand 10 times higher than Google expected
Yeah, best price I can find is $489 on eBay.
alaithea··on An In-depth Review of Fitbit One, Fitbit Aria, and Fitbit Premium
Actually, it comes with a wristband to clip it to for sleeping.
alaithea··on How Tide Detergent Became a Drug Currency
I saw one of these transactions go down a month or so ago in my town (a DC suburb). A somewhat ragged looking woman was lugging a large bottle of tide down the street. Another person waved at her and they approached each other in the middle of a crosswalk. They haggled for a brief moment, the Tide changed hands, and they went on their respective ways. My husband and I were totally confused as to what we'd just seen. Now we know!
alaithea··on Audiogalaxy acquired by Dropbox
Yeah, it had a way to subscribe to a community, and then people would send tracks out to the community. Awesome stuff from people would then just show up in a folder on your computer.
alaithea··on How to Choose Health Insurance – Startup Edition
HSA != FSA. The former is a savings/investment account that lets you keep your money year over year, to be used for medical expenses. FSA's are use-it-or-lose it. HSA's are typically paired with a particular type of high-deductible insurance, while FSA's tend to go along with any type of plan.
alaithea··on Google Is Tops for Software Engineer Salaries
I did say "pretend." I'm not interested in debating DC statehood, rather I am interested in a good user experience. In my case, I actually live in Maryland, yet I had to pull up Virginia to find my metro area.
← PreviousPage 3 of 7Next →