HNHacker News
TopNewBestAskShowJobs

ary

2,413 karma · joined June 4, 2010

Recovering startup CTO and Co-Founder.

https://ary.pub

submissionscomments
ary··on App Links: Link Anywhere on Mobile
This is good. I'm left wondering about a couple of thing.

- Would a parallel standard be useful that allows the rel="" and type="" attributes of <a> to signal the kind of app (for mobile and desktop) that could better handle the resource than the browser? I've been enamored with this idea of general cross-linking between browsers and native apps for quite a while, but it seems like a pipe dream.

- Is it even possible to have general data types that multiple apps can handle (and what would the selection UI look like for that)? Think lat/long for mapping apps, addresses (for a variety of apps), events (time/data/address), etc.

I should add that the referring app UI for iOS is clever, great job whoever thought of that.

ary··on OpenBSD has started a massive strip-down and cleanup of OpenSSL
While I understand where you've coming from I think your attitude is dangerous. Implementing the SSL/TLS spec(s) is always going to be difficult while they are in widespread use. That said refactoring the existing libraries (to make them more readable and understandable) and then auditing them (to gain confidence in their efficacy) is especially important given the nature of their applications.

Doing the hard work of getting this right, or accepting the status quo and getting it wrong, will have a very real impact on the future of many, many people. Should the time come that changes have to be made to the standards themselves then we can debate the merits of breaking backwards compatibility. I value pragmatism more than most (I think) but there comes a point where the cost of not changing is higher than the cost of changing. I think we're there.

ary··on OpenBSD has started a massive strip-down and cleanup of OpenSSL
I do, and I hope to give it a try in the latest product I'm building. Like everyone else I'd prefer to see some expert validation of NaCl before I put a ton of trust into it. That said DJB's track record is pretty good in my eyes (I liked the design of qmail, a lot).
ary··on OpenBSD has started a massive strip-down and cleanup of OpenSSL
In the past I was part of an attempt to make asymmetric crypto easier to use for a commercial product. My role was to help design the product (simple, collaborative file sharing; you've heard it before) and to let the experts ensure the crypto was used properly. What drove me absolutely nuts was the level of paranoia and uncertainty around the safety of the libraries and algorithms used. The available experts were confident in the concepts, but feared every implementation. "Par for the course" you might say, but the status quo around OpenSSL and other libraries is unacceptable.

From an application developer's perspective crypto libraries look like a lightning rod even for the experts. No one wants to get too involved or make recommendations lest they back the wrong horse (admittedly an easy thing to do). So kudos to the OpenBSD team for rolling up their sleeves and attempting to build a solid foundation for the future.

I'd be happy if OpenSSL is simply fixed. I'd be overjoyed if there was a solid crypto system underneath an OpenSSL compatible API that gives us a path towards an open source, reusable crypto platform.

ary··on The Richest Rich Are in a Class by Themselves
I am not the first person to make this "audacious" claim. Feel free to assimilate multiple sources into your understanding of history, but I find much of Howard Zinn's writing to be enlightening.

http://www.historyisaweapon.com/defcon1/zinntyr4.html

ary··on The Richest Rich Are in a Class by Themselves
> People much wiser than us founded America upon the principle that extreme wealth is incompatible with democracy.

You need to go back and take a look at early American history. Many of the founding fathers were business owners and/or extremely land wealthy and had a strong interest in personal property rights as a result. They needed the middle class of the day to agree to the ratification of the constitution which led to the bill of rights.

Basically they founded America on the principle that their extreme wealth was incompatible with the rest of the colonials without democracy.

ary··on Apple Worldwide Developers Conference Kicks Off June 2
The upside is that you see far fewer people attending who aren't developers or aren't serious about Apple's platforms. Google I/O, for example, has had quality issues (with both the sessions and attendees) due to how inexpensive it was and the expectation of a giveaway to offset the price of admission.
ary··on Medical Anarchy
As someone who had to license CPT codes for my own (now dead) medical billing app I can say unequivocally that the AMA is laser focused on getting their money. We had to pay a fee per user just so clerks could more easily process Medicare claims. Without a doubt the U.S. Federal government created a state-sanctioned monopoly in the AMA. That a private organization gets to profit from a public program (and much more) by having control of what amounts to an index table is nuts.
ary··on What's in my iOS Toolbox? Part 2
This series of posts appears to be a somewhat poor copy of another blog (although it is linked).

http://benscheirman.com/2013/08/the-ios-developers-toolbelt/

ary··on [dead]
So I switched to Digital Ocean after the last Linode security fiasco and I can't say I regret it.

Should you decide to switch to another VPS provider I strongly recommend you cite the security problems when they ask you why you're closing your account. The only reliable way to get the security message across to technical managers and business people alike is to make it about money. That said the fact that this has happened, in this way, again to Linode is a very bad sign.

Having been in meetings, advocated for taking security seriously, and heard the rationalizations for a lax approach I can only say that as a customer if your desire for security isn't made crystal clear you have no hope of getting it. It has to be a deal breaker or not only will companies like Linode not learn, but their competitors who stand to gain from their loss won't either.

ary··on Dear Spike Lee
Are there any reasonable escrow services out there for designers? It seems that a third party with a list of conditions for both sides could hang on to a predetermined amount of money and the digital assets until both parties agree to release.

There are perhaps caveats that I've not considered, but this idea comes to me again and again when I hear this kind of story (again).

Edit: Guess I also have to throw in here that I am continually amazed at the number of people who are afraid to do the dirty work of being in business (drawing up contacts, negotiating, calculating margin, saying NO, etc).

ary··on You’re infected—if you want to see your data again, pay us $300 in Bitcoins
AppLocker can't be enforced on Windows 7 Professional (or lower). In my case that was a deal breaker.

http://technet.microsoft.com/en-us/library/ee424382.aspx

That being said a very restrictive Software Restriction Policy as linked below would mitigate CryptoLocker as it exists today. It has worked well for me so far.

http://www.mechbgon.com/srp/

ary··on Rules to Lead by from the Man Who Defined Google’s Product Strategy
#5 would have probably been better stated as "Learn how to listen, already."
ary··on Cryptogams and the NSA (fiction)
Spoilers ahead

To be even more clear it appears to draw inspiration from various works of political fiction. Notably the "love" for authority figures towards the end smacks of Winston's transformation in '1984'.

ary··on iOS 7
Some here have said that iOS 7 has gone too far in the "flat" direction, but my feeling is that the move is an intentional repositioning on Apple's part. Removing most of the "texture" from the user interface has (outside of aesthetic concerns) been done primarily so that it can be added back in a new way in the future.

Ever since I saw this demo video for Senseg [1]:

http://news.cnet.com/1606-2_3-50115714.html

I've thought long and hard about how Apple might use this in future iOS devices. This clean slate design feels to me like the first step to something more. I personally hope it has a lot to do with haptic feedback as adding another user interface dimension to these types of devices would be incredible.

[1] http://senseg.com/

ary··on Setting up Sublime Text 2
You can use the built in 'subl' command to launch Sublime Text 2 from the terminal.

http://www.sublimetext.com/docs/2/osx_command_line.html

Editing remote files is as simple as an SFTP mount.

ary··on Facebook Tells Parse Developers “No Plans To Change How App Data Is Used”
I'll go even further to say that this can probably be attributed to the Facebook + Parse announcement being the first time many developers ever heard of Parse.
ary··on Facebook Tells Parse Developers “No Plans To Change How App Data Is Used”
> Meanwhile, to calm fears about Facebook spying on Parse developer data, the company issued the statement “We currently have no plans to make any changes to how Parse app data is used.”

Keyword: currently

So yeah, we all rag on Facebook pretty hard here. What I'm most interested in is, if the uptick in adoption for Parse is true, why do developers feel more comfortable now that Facebook owns the product/company? Given the general pessimism about Facebook's fostering of their own API, and their laughable advocacy of privacy this whole article smacks of PR.

In my mind the whole modus operandi of companies like Facebook and Google is to absorb and mine as much information as possible. So if they aren't going to peek and analyze did they really just buy Parse for the API expertise?

ary··on You are not Steve Jobs
I can't speak to the recruiting of staff in the early days of Apple or NeXT, but many of the "world class" people at Pixar got involved before Jobs purchased the company.

See: http://www.amazon.com/Pixar-Touch-Vintage-David-Price/dp/030...

ary··on HTML5 Sandbox - a bad idea
As a side note the thing I find most puzzling about RFC 6797 is that the 'max-age' field can be set to 0 to invalidate the HSTS flag for the domain, but can't be set to an indefinite value. The inability to deal with stripping before reception of the 'Strict-Transport-Security' header is understandable, but lack of indefinite retention of the HSTS flag is hard to comprehend.
ary··on The 17-Year-Old That Yahoo Paid $30M Was Licensing His Startup's Core Technology
Forgive me for having to ask this, but can anyone link me to a cogent argument made here on HN as to why this particular story inspires so much fixation? After the Nth front page story here I'm still having trouble understanding why everyone is so wrapped up in it.

Supposedly the Spock-like logical minds of HN are immune to the wunderkind mass media story hook; so what gives?

ary··on Apple ID password reset exploit reportedly in the wild
It's unfortunate that (at least in my experience) Apple makes you wait 3 days to enable two-factor auth. I'm still waiting and crossing my fingers that this gets patched ASAP.
ary··on Dear Apple: I give up, WireframeApp will become open source
Was the "GO TO HELL" really necessary? Frustration is understandable, but what do you gain from abusing a customer support person at a large and influential technology company and then vanity posting it to the internet?

Let's say the recipient of your "Dear Apple" email decided to forgive and forget; what you've got left is an announcement to the rest of us about your inability to be civil under stress. Temporary relief aside it pays to be polite. Even on the internet.

ary··on This mom gave her son an 18-point contract with his iPhone
"Everyone" also more or less blindly accepts the gradual stripping away of their liberty, the irresponsible destruction of the environment, and the nutritional content of fast food. Oddly enough it takes people unwilling to accept the status quo for anything to change.

Imagine that.

ary··on If you see a UI walkthrough, they blew it
This is utter nonsense. Spend even a small amount of time with someone who works outside of the computer hardware/software industry and observe how and why they use a smart phone or computer. UI walkthroughs are not only necessary, but desired. They act as the equivalent of standing next to someone and "showing" them how something works. As the OP correctly notes there is a very heavy reliance on mimicry for most learning.

Visual cues are nice, and even desired, but gentle introductions outlining how to get started are as well.

ary··on Google I/O 2013
Wishlist:

- No free stuff.

- A registration site not subcontracted out to a third party who sets up a Cold Fusion application to handle ticketing.

- Dedicated press passes for the keynotes so that reporters/bloggers et al don't clog up the rest of the conference (this one may already be true, I'm unclear).

The state of the registration system last year was shameful for a company that makes the lion's share of its revenue from the web.

ary··on An experiment: Can desperation drive success?
So to be clear; you have a startup, so you have a company to work on that could bring financial gain, but you want another startup?
ary··on Facebook's Release Engineer
(from the Arstechnica article, not the OP's)

> The company's internal tools have a Facebook-inspired mechanism that Rossi uses to keep score. Facebook's developers all have a "karma" rating that is tracked through the code review system. Rossi can increase or decrease a developer's karma by clicking on thumbs-up and thumbs-down icons that appear next to the developer's name in a Web-based dashboard.

> The thumbs-up icon in Rossi's tool is the same one used for the "like" function on the social networking site. The thumbs-down image is the same icon, but upside down. When Rossi showed me the icons, he joked that he's the only person in the world who has a Facebook "dislike" button.

To me this was the most interesting part that whole piece. I've long thought Facebook could do with a "dislike" button for everyone. Keep it private, but let it affect what you see from whom, and how.

ary··on Adobe's Source Code Pro Font
I would be remiss not to point out Inconsolata. It's perfect (IMHO) for code, terminals, and email.

http://levien.com/type/myfonts/inconsolata.html

ary··on Meeting A Troll
I'll speak for myself, as if I had a child that acted in this way.

The first, and most important response would be to establish why. With actions like this being carried out in and from my own home I would have to immediately reassess my level of involvement with my child and whether or not I was culpable via omission. Very soon thereafter I would seek out the advice of people directly involved with the study and treatment of psychopathy and sociopathy and have my child assessed. From there it would be up to the outcome of that assessment.

Perhaps that's not the kind of clear cut answer you were (possibly) looking for, but I think it comes down to whether or not it was an innate or developed problem.

← PreviousPage 5 of 15Next →