HNHacker News
TopNewBestAskShowJobs

bonzoesc

1,388 karma · joined March 20, 2010

[ my public key: https://keybase.io/bryce; my proof: https://keybase.io/bryce/sigs/JBMJ2AHg7uYTVM20lt0mmrSA_sLwr2sau-gjLi1wW-g ]
submissionscomments
bonzoesc··on Massive Twitter Botnet
For all the janky looking URLs I get from eggs that only have like twenty tweets, half of them janky looking URLs, I don't believe anything is trivial for Twitter's spam filters.
bonzoesc··on Note 3’s benchmarking “adjustments” inflate scores by up to 20%
> Ironically, there's a Nissan car that does enable and disable the limiter based on the GPS detecting it being on a race track or not. But they're transparent about it.

It's the GT-R, and it's only on the Japanese version: [trigger warning: gadget blog] http://www.engadget.com/2007/12/22/nissan-gt-r-disables-spee...

bonzoesc··on Scaling MongoDB at Mailbox
From firsthand experience, the PostGIS extension for PostgreSQL is fantastic.

A couple of my coworkers at Basho have done geospatial work with Riak, our scalable, distributed database: http://basho.com/indexing-the-zombie-apocalypse-with-riak/

bonzoesc··on In emergency cases a passenger was selected and thrown out of the plane (2004)
That's so indescribably worse than just killing that process the mind boggles. Breaking in a simple, predictable, and detectable way vs. corrupting data and hoping (excuse me, "praying") nobody notices.
bonzoesc··on NSA finds Snowden hijacked officials’ logins
Spying on all of the email isn't simple either. When there's a will and a bottomless font of taxpayer money in the name of national security, there's a way.
bonzoesc··on Boarding Pass Redesign
Is this a case of design for the sake of aesthetics alone?

Welcome to Hacker News!

bonzoesc··on Boarding Pass Redesign
I've never had this happen.
bonzoesc··on Boarding Pass Redesign
Yes, this is pretty common for printers installed in service desks at the airport. However, they tend to not have overly-branded stock because in the irregular circumstances you tend to get a pass from a service desk, you might be rebooked on a different carrier, and would therefore have a mismatched boarding pass.
bonzoesc··on The Factoring Cryptopocalypse
Usability. One time pads have been around forever, are provably secure, but a pain in the ass.

Modern symmetric ciphers solve the "you need to securely exchange as much key material as you wish to send data" using mathematical formulas to stretch key material. Asymmetric ciphers use mathematical formulas to fix "you need a secure way to exchange keys."

Unfortunately, the math can't be probably secure, only believed secure and proved insecure.

bonzoesc··on Authy: Faster Two-Factor Authentication
I'm confused as to why you'd need a third-party for this.

The Authy app is better.

Look at the screenshots at https://itunes.apple.com/us/app/google-authenticator/id38849... . The buttons are ugly, labels are misaligned, and the colors are ghastly.

Re-ordering tokens in the Google Authenticator app is janky as hell too, and the only way you'll know if it's going to work is if the regular view switches to one with subtly different font sizes.

Authy's not without its rough edges, but it never looks that bad.

From down-thread, regarding Google Authenticator: e.g. setting up 2-factor with MS with the same email you use for Google will overwrite the Google one unless you rename it.

Authy does this correctly.

bonzoesc··on Bootstrap 3
Flat is in this year.
bonzoesc··on A Low-Tech Mosquito Deterrent
Sterilize & release programs for feral cats work; the sterilized cats compete for the same resources as unsterilized ones, but are more effective and longer-lived because they don't have to support reproduction. This not only means that the sterilized cats won't reproduce, but the unsterilized ones will have a harder time, and reproduce less.

It works better than trapping & killing.

bonzoesc··on Revising MailChimp's logo
"http://jessicahische.is/monkeyingaround" has got to be the best URL I've seen in a long time.
bonzoesc··on Riak 1.4 Released
It does a merge sort, and I can't see that you can opt out of it: https://github.com/basho/riak_kv/blob/master/src/sms.erl

2i doesn't use mapreduce in normal operation.

bonzoesc··on Riak 1.4 Released
Secondary Indexing Improvements: Query results are now sorted and paginated, offering developers much richer semantics

So the results can be sorted but are not stored in sorted order in the secondary indices?

Secondary indexes are stored sorted on disk, but segmented per vnode. Previously, they wouldn't be sorted before being returned to a client.

Suppose you're querying for "Bananas" through "Bavaria"; the node that contains "Bassoon" could return its first result before the node containing "Bananas" and "Barons", which would, in old Riak versions, result in out-of-order results.

Disclosure: I work at Basho, and have been working on riak-ruby-client updates to support the 2i improvements.

bonzoesc··on Ambition can be poison
This "poison" is easy to deal with - just go again next year and win it.

At what cost, though? From DHH's post:

When you expect to win, it’s merely a checked box if you do — after the initial rush of glory dies down.

Winning isn't everything, and in fact can mean very little. Spending exorbitant sums of money (LMP2 isn't cheap) and risking your life (not everyone who started Le Mans on Saturday lived to finish) might not be worth it.

bonzoesc··on John McAfee on How To Uninstall McAfee Antivirus
The credits at the end state that most of the actresses were hired through a firm in Portland, so I'd assume he's in Oregon, where summer days aren't 90°F.
bonzoesc··on Oracle Discontinues Free Java Time Zone Updates
> Oracle's files are based on the tzinfo files, and are just as vulnerable. If anything, more so because Oracle has a lot more money than the tzinfo maintainers.

Oracle's got enough cheddar to take it to court or settle out-of-court like their business depends on it.

bonzoesc··on Oracle Discontinues Free Java Time Zone Updates
That's one of the reasons Java ships its own; if some systems have different or absent system databases, Java's should still act the same as it does anywhere.
bonzoesc··on Oracle Discontinues Free Java Time Zone Updates
Lawyer-resistance; remember the situation a year or so ago when the tzinfo files were the subject of a patent claim? Oracle's weren't at risk because they have lawyers on retainer.
bonzoesc··on HyperLevelDB: A High-Performance LevelDB Fork
I got this to build on Ubuntu 12.10 Quantal Quetzal:

    libtoolize
    aclocal
    autoheader
    automake --add-missing
    autoconf
    ./configure 
    make
No performance numbers 'cause I did it on a slow machine though.
bonzoesc··on Google Reader API replacement, powered by Riak
I wonder if they could just use a simple locking scheme to prevent more than 1 parser from parsing the same feed at the same time. This sounds simpler than conflict resolution, to me.

You may want to check out Aphyr's "Call Me Maybe" series of posts about distributed databases: http://aphyr.com/tags/jepsen

The short version is that convergent conflict resolution seems intimidating but works better than locking and synchronization.

bonzoesc··on Google Reader API replacement, powered by Riak
I believe it's part of Riak 1.4, which is our next release; no date yet.

The number of entries in a 2i isn't going to bog down querying it any more than lots of objects bog down LevelDB. Make sure your indexes have the right content with the right cardinalities and it shouldn't be a problem.

If you want to drop in to #riak on freenode tomorrow (I'm in the America/New_York time zone) I'm brycek in there.

bonzoesc··on Google Reader API replacement, powered by Riak
Assuming you are using Riak's default configuration each range query hits 1/3 of the cluster, which could get pretty hairy on large clusters that have lots of requests. Also, there is no pagination, so if an index has a million objects you'll have to be prepared to wait even if you only want the first part of the query.

You could solve this by putting a sort value in the key and using a range query, but this wouldn't work if you want the most recent items keyed with time, because the items could be unevenly spaced back in time.

Pagination is coming soon; it's in riak_kv master already, but in buyer-beware #yolo territory.

LevelDB is also supposedly slower than Bitcask, the default backend, but I'm not sure if this is still true.

Bitcask is faster when all the keys fit in memory: it's designed to load any value with a single disk seek. LevelDB can't make that guarantee, but neither can Bitcask with too many keys for available memory.

I've been trying to think of ways around these problems. A simple thought I had was to simply cache the response as pages in Riak. Although this introduces new problems like how to know how often to reset the cache, too often and I may as well not have this cache, too infrequently and users get stale data.

Caching is one of the two hard problems in software engineering (along with "naming things" and "off-by-one errors"), so good luck :) If you're not opposed to running a separate service, Memcache is what I'd use.

bonzoesc··on Google Reader API replacement, powered by Riak
For the listing/deleting problems, have you looked at using LevelDB and secondary indexes (2i) to make range queries cheaper?

Disclosure: I work at Basho, makers of the Riak database.

bonzoesc··on The network is reliable
This is a pretty exhaustive list of network issues and the software/data problems they cause. Thanks!
bonzoesc··on CDN vs S3
You're not clueless. S3 is almost certainly good enough for what you're doing.
bonzoesc··on Keep Google fonts updated on your desktop
If websites are using the fonts correctly, yes.

However, it's not worth it for that use, and it's especially not worth it playing Pokemon (gotta catch 'em all!) with all the web fonts you see around the internet.

It is useful if you work on more than one computer and want to keep them synchronized though.

bonzoesc··on Using Lasers to Find Land Mines and IEDs
Unlike Call of Duty, you don't get points for killing in real life. Wasting an enemy's time and hurting their morale on a pointless task trying to detect and disarm explosive devices that don't exist might be more powerful than a single one that does.

Making the enemy believe something is frequently more powerful than making them dead: http://www.psywarrior.com/dissemination.html

bonzoesc··on Using Lasers to Find Land Mines and IEDs
If you're looking for deadly munitions and you find just a scrap of raw explosive compound without any mechanism to explode it and make it deadly, that's a false positive.
Page 1 of 15Next →