HNHacker News
TopNewBestAskShowJobs

chrisshroba

1,577 karma · joined October 15, 2014

submissionscomments
chrisshroba··on Resolving the great undo-redo quandary
Maccy is a great free and open source clipboard history tool with a nice interface (Alfred requires the power pack purchase for this feature)
chrisshroba··on Malicious Python packages replace crypto addresses in developer clipboards
I think you may have intended to respond to this comment? [1]

[1] https://news.ycombinator.com/item?id=33512203

chrisshroba··on Ask HN: What are some of the best books you have read in 2022?
I'd suggest searching HN for other reviews of the book since it comes up pretty frequently in these threads, but personally I liked that it covered a lot of ground quickly and fairly deeply, and the content remained engaging for me throughout. Some specific things I liked about the book were its coverage of SQL isolation levels and how they work, different ways to coordinate separate systems when you want atomicity (like 2pc and queue-based synchronization), failure modes to keep in mind when dealing with distributed systems (like unbounded network delay and split-brain situations), and references to a whole bunch of production-ready software that solve distributed computing challenges in various ways depending on the trade-offs you're looking for.

Overall I felt better equipped to make intelligent decisions about systems design after reading it.

chrisshroba··on Ask HN: What are some of the best books you have read in 2022?
I finally read DDIA this year and loved it. If anyone has any more suggestions for similarly enlightening books, I'd love to hear them!
chrisshroba··on I recorded user behaviour on my competitor’s websites (2018)
As a counterpoint, I don’t want to download apps when webapps suffice. I appreciate when a right click gives me the options I’m hoping for rather than a set of generic Chrome actions that aren’t what I want. I also appreciate when copying works how I want it to (e.g. copy paste in google docs or Figma work as I expect it to, including all styles). And hijacking browser history doesn’t seem to me like it adds much exposure, because the attack vector is still there without browser support (when a user enters your site, auto redirect to google.mydomain.com, which then auto redirects to your content. Back button now will return you to google.mydomain.com without relying on custom browser back button shenanigans)

Disclaimer: I work for Figma.

chrisshroba··on Private Prisons Are Behind the Push for Homeless Criminalization
What is an “open drug scene”?
chrisshroba··on On AlphaTensor’s new matrix multiplication algorithms
Excuse my lack of knowledge here, but what is stability?
chrisshroba··on Zerocal – A Serverless Calendar App in Rust
I’m also curious - could you maybe give an example of something concrete that is (or was) difficult in go but easy with rust?
chrisshroba··on The Full Chess Cheating Report of Hans Neiman
I personally think the stakes are plenty high enough that people would try any convoluted mechanisms that they could sneak past security.
chrisshroba··on Baker's Math (2009)
Bold move explaining the joke in French
chrisshroba··on Recon and Attack Vectors from My Logs
I’m not OP, but I’m guessing the idea is that if someone requests 10 non-existent pages in a row, they’re likely not a normal user making a mistake, so we should rate limit them.
chrisshroba··on Recon and Attack Vectors from My Logs
What does AV mean in this context?
chrisshroba··on New integer types I’d like to see
I like this feature of python, but it's wise to remember that operations that we typically think of as O(1) are actually usually dependent on the length of the input, so allowing arbitrary length integers can cause issues (such as DOS opportunities) in places some people don't think to look. Specifically, Python recently changed the str -> int conversion logic to error on strings beyond a certain length (e.g. `int('1'*4301)` will error.) [1]

[1] https://news.ycombinator.com/item?id=32753235

chrisshroba··on Why to not use JWT (2021)
It seems like most of the commenters here are blindly choosing a side when the real answer is, it depends on your priorities. If you want statelessness and one fewer db calls at the expense of timely revocations, pick JWT’s. If you want instant revocation, then accept that you need to check a database every time and don’t use JWT’s. Both options are correct.

As an aside, if you do pick JWT’s, you could create a revocation queue, publish all revocations to that queue, and read that queue asynchronously in every server to keep a token blocklist. You lose statelessness but retain speed (no db call).

chrisshroba··on Dear Chess World
It wouldn't do much good since Stockfish could easily run on a raspberry pi or similar inside of that, say, in a player's shoe
chrisshroba··on The Strid: The ‘deadliest stretch of water’
Or you cross the river Styx [1], depending which mythology you believe.

[1] https://en.m.wikipedia.org/wiki/Styx

chrisshroba··on Ask HN: Does Hacker News still do in person meet ups?
Feel free to email me at my username @gmail!
chrisshroba··on Ask HN: Does Hacker News still do in person meet ups?
Feel free to email me at my username @gmail!
chrisshroba··on Ask HN: Does Hacker News still do in person meet ups?
Anyone in Nashville, TN looking to meet up?
chrisshroba··on Ask HN: Does Hacker News still do in person meet ups?
No need to be rude just because someone used more words than you think necessary.
chrisshroba··on Ask HN: Solopreneurs, how do you maintain a professional/social network?
I’m not sure why you’re getting downvoted - sounds like good advice to me.
chrisshroba··on Transcending Posix: The End of an Era?
I’d love to hear more about how you solved the synchronization process, if you’d be willing to share. How do you handle conflicting changes, like local and remote both changing the same field, or one deleting a resource while another modified it?

I’m trying to understand more real world examples of syncing offline with online.

Thanks!

chrisshroba··on Riding in a peloton is the most energy efficient locomotion – research (2018)
Where can I learn more about this?
chrisshroba··on Globalstar SEC filing, Apple to use 85% of its satellite network capacity
I have a Garmin InReach and it can send location periodically. While it is more effective to have it out and pointed at a satellite, it still works in my pocket, but may just take a little longer to send the messages. For a feature like Find My, many people won’t mind if the location being sent is a little stale, but with emergency SOS, you really want your message to go out ASAP, so it makes sense that you need to point at a satellite for SOS, but not for Find My tracking.
chrisshroba··on Kubernetes Failure Stories
> you can treat both deployments and infrastructure as cattle.

What does this analogy mean?

chrisshroba··on Removing HTTP/2 Server Push from Chrome
In case anyone is confused, I believe the parent poster means 103, not 403.
chrisshroba··on Ask HN: Can I see your scripts?
I keep this in my snippet manager to be pasted into a kubernetes pod I want to have the tools I'm used to:

    apt-get update; apt-get install -y tmux git ncdu psmisc iproute2 net-tools curl zsh vim; curl -Ls install.ohmyz.sh | sh; chsh -s $(which zsh); exec zsh
It's not automatic but it only takes a second for me to find it and about 10-15s to run.
chrisshroba··on Open AirPlay 2 Receiver
Looks like that same key is found elsewhere on the web, so I assume it's intentional:

[1] https://www.theiphonewiki.com/wiki/AirPlay

[2] https://www.google.com/search?q=MIIEpQIBAAKCAQEA59dE8qLieIts...

chrisshroba··on Ask HN: Higher order derivatives in everyday life?
Something I've been wondering for awhile about this: is it specifically jerk that humans can't handle well, or all of the higher order derivatives? A lot of times we're talking about a car that's at rest (and has been at rest for delta t>0), so every order derivative is going to be positive when the value starts increasing (the rate of increase, the rate of rate of increase, the rate of ...).

Is there something specific about jerk that makes it important to optimize for, or are all position derivatives of order 3+ the same?

chrisshroba··on Glassdoor ordered to unmask former toy company employees who posted criticism
The problem is that there's a limited amount of total information available to candidates looking for company reviews, so (in my opinion) it's still wise to consider Glassdoor a useful source, with the caveat that it shouldn't be blindly trusted. It still gives useful signal.
← PreviousPage 5 of 14Next →