HNHacker News
TopNewBestAskShowJobs

cromd

128 karma · joined July 13, 2017

submissionscomments
cromd··on There’s no need to change passwords if they're robust, unique and not breached
That is true, but that one secret is still at risk, and maybe that secret means the world to you. You don't know when the info will be discovered or change hands. "No need to change" could maybe be nitpicked even though I agree with it in general - changing seems to provide some marginal probabilistic benefit if done properly, and the cost/benefit probably depends on what you are protecting.
cromd··on There’s no need to change passwords if they're robust, unique and not breached
Worth keeping in mind that passwords do actually leak. Companies have had incidents where they were inadvertently logging secrets passed to them. I've also typed/pasted secrets in the wrong field, which can get into some database or user-interface tracking tool. I've typed my sudo password instead of a vpn password at the command line, thinking sudo login had triggered when it was instead cached. Who knows when these crumbs might turn up.

And as others pointed out, breaches aren't always known or disclosed. Is it too late if you change your password 6 months after it's compromised? Not sure - maybe people sit on their exploits sometimes, or wait for a better buyer, or sell secrets in small batches.

All that said, I've never changed a password when it was newer than 5 years old, and only do it for crucial services, but if I were a bigger target, I might do it more.

cromd··on Russia to punish ‘fake news’ about Ukraine war with 15 years’ jail
This seems to be largely about your definition of war. No elections were overturned, but could you say he waged war on elections? He had his team out there saying that Hugo Chavez created the rigged voting machines and that it was statistically impossible for Biden to have won. It was an ideological war, not a physical war. You don't have to jail anyone to nonetheless do broad damage to an institution. I agree that people can over-analyze sloppy comments from fringe weirdo politicians, but here is something the president tweeted:

>“They can’t stand the fact that this Administration has done more than virtually any other Administration in its first 2yrs,” he continued. “They are truly the ENEMY OF THE PEOPLE!”

(https://thehill.com/homenews/administration/437610-trump-cal...)

And surely media can be bad, can harm people, can lie, but "ENEMY" is interesting.

cromd··on Russia to punish ‘fake news’ about Ukraine war with 15 years’ jail
I don't think they're saying that Republicans are currently doing what Putin is currently doing. They said some people want to jail journalists, and you seem to be agreeing by saying those people "talk shit" about jailing journalists. Maybe one could say that talk is harmless, but I think most would challenge that.
cromd··on Not everyone should meditate
It's something like what burrows is saying. I don't know if I'm implementing it as intended, but I first heard of "labeling" when reading The Mind Illuminated by John Yates. It seemed silly/trivial at first, but I later started just trying to categorize my thoughts. I found that there were actually surprisingly few buckets that my idle thoughts fell into.

I'd say that when I'm meditating, 90% of my out-of-the-blue thoughts fall into categories like:

- A: seeking out little acquisitions (life/work hacks, low hanging fruit, new tech skills I could tackle today to improve my life) - B: chores I need to do and social debts - C: money, and whether I have enough - D: what will the future be like? - E: food, sex, safety - F: "this is nice, I'm not thinking of much"

I don't feel like these are good or bad thoughts, since they all have their time and place. But I do expect/hope that as the session progresses, more and more time is spent in state F.

I think one benefit of these labels is that instead of trying to re-articulate what you're thinking every time, you just drop it into buckets A-F (or whatever your personal buckets are). Making that task lightweight keeps me from overanalyzing the thought, at the risk of maybe oversimplifying my thought landscape.

cromd··on Not everyone should meditate
That seems pretty valid. Not to make it overly analytical, but perhaps it's like meditation is a lab/training environment where you can press pause on the movie, look around in a 360 degree view, rewind a tad, press play again. But there's no urgent situation forcing you to be "very involved" as you say, and any goal-oriented processes can be paused. Kind of a mini-sabbatical - you know nobody is getting "paid" for the next 20 minutes, so it's not a big deal what happens.
cromd··on Not everyone should meditate
Yep, that's what I mean. And movie maybe implies too much action/drama/plot... Maybe it's more like a surveillance camera! I'd say it's just a general dampening of predictions, emotions, and explanations.

Instead of saying "I want my next job to be X", it's "I wonder what my next job will be". Instead of saying "I'm taking a walk to place Y", it's "I wonder where I'm walking to". Of course I can tell myself a destination, but statistically, I know it's far from certain. Looking backwards, instead of saying "You should have said hi to your neighbor", it's more like "I wonder why I acted that way". And it's not always in the direction of being helpless. Sometimes it's "I wonder why I'm exercising so much today".

At one point today, walking, I thought "I'm moving my left foot, I'm moving my right foot, my foot is touching the ground, it's weird that I don't usually think about this". That's meditation-ish, like watching the breath as a swinging gate, appreciating a normally automatic process for a bit. In my opinion, this goes beyond just breathing and walking, and extends into processes like writing and talking - words just kind of come. You can revise them and slow them down, but if you can step back, you might feel words just coming out of nowhere. Sam Harris, mentioned by others in this thread, has also described speech as being surreal in this way.

cromd··on Not everyone should meditate
(It sounds like you're saying you largely also view life as happening to you, but maybe I'm wrong). There's maybe no point in even making a distinction between life-as-movie and life-as-commander, especially if people aren't choosing the camp they fall in!

I would posit there are correlations like "people who view life as something that happens to them tend to enjoy it more, when their economic and political circumstances are good, and enjoy it less when their circumstances are bad". And "people who view themselves as controlling their life enjoy life in a wider variety of conditions". I think some call this internal/external locus of control (https://en.wikipedia.org/wiki/Locus_of_control)

You could probably extend those correlations to things like "societies with an overall internal locus of control tend to support the death penalty more", or "societies with an external locus of control tend to believe in magic more". Whether or not these are useful correlations, I don't know ;)

cromd··on Not everyone should meditate
(Note: I'm not sure if you're suggesting there is a "you" or not.) While I'm of course a mass of stuff that feels and thinks, I really do feel like I'm watching a pleasant movie filmed through my eyeballs. I feel like that about half the time. The other half, I forget, and live "normally". I also don't feel like I'm part of some interconnected world organism or anything like that.

To the ~5 people I've described that to, they mostly show some kind of alarm, like they didn't realize I held such dangerous views. I guess in some people the same worldview might manifest as a sociopath personality that excuses reckless behavior, or a person with no drive that wastes their days away. In my case, I'm hypersensitive about harming people, I'm fairly risk averse, and I'm borderline obsessed with keeping high "productivity".

I often tell myself I'm smart and that I deserve my very comfortable life, but I also have to wonder if something about my brain chemistry or environment makes me enjoy reading HN and coding all day, while others hate that. So I do find the narrative shifts from "I accomplished X because I decided to" and becomes "I spent time on X, and I'm glad that happened, it was fun, and I'm glad I find that fun".

I hope I'm not getting too off topic given the original article. Self/consciousness/free-will debates can go on forever, so my ideal outcome is somebody says "yeah, that is pretty weird, pretty magical, oh well!". But more often it's met with "ah, don't be so negative, you can control yourself, if you try!".

cromd··on Not everyone should meditate
That makes a good distinction. Is he taking one side or the other though? Seems to me like deterministic != free, and random also != free. So maybe nothing is free?
cromd··on Not everyone should meditate
Well, does someone who can't control their thoughts really control their own behavior? Is there any basis for thought/behavior that science knows of, that is not physiological? Scientists have never put out a press release saying "we've discovered that there are non-physiological processes called 'will' that actually make you even more in control than previously suspected". It's always the other way around - they find that things we used to assign to "will", are in fact caused by something else.
cromd··on Not everyone should meditate
I do get these feelings of control, so I can't say I feel like a victim of my thoughts - "let them pass by", as you say, is mostly what I feel. But I think for some people, there's a question like:

"I thought I was the originator of many my out-of-the-blue thoughts, and I found out that's not true. Am I actually the originator of the thoughts at the next level up?".

I think some people who have never meditated, while they admit to having thoughts just hit them randomly sometimes, they'll nonetheless feel that many of their truly out-of-the-blue thoughts were conscious choices to switch gears or pull on an interesting thread. A meditator might label the same low-level thought as "random", but a non-meditator would say "I did that". Can a meditator similarly be fooled, on a different level?

cromd··on Not everyone should meditate
Yeah, and I think all of this brings us closer to the truth as you say - that ultimately we are responding to cellular/electrical activity. I'm inclined to believe truth-finding is good overall, but we also have to buckle up for some weird stuff then.

Sam Harris, while I never followed his meditation talk much, had one example recently that really drove home the "can't predict thought" concept. Something like "think of a song, any song", and then he challenged you to think about why you picked that song, and not one of the other songs you know. And then, despite whatever explanation you concoct, think about all the songs it didn't even occur to you to choose that fit the same criteria. It's kind of magical.

I do think all this can make us more tolerant towards other people, but it's still a bit circular. If it's all meat and electrons, they're destined to commit the crime, and we're destined to lock them up. (edit: I mean: if they commit the crime, you can't blame them, and if someone jails them, you also can't blame them)

As far as I know, the trend is that older people tend to mellow out - usually! And I think that having a sudden realization that you're not so in-control can be tough. It can catch you off guard if the time isn't right. But after a few years, hopefully people course-correct a bit and start to give themselves more buffer and steer away from activities that exacerbate those anxieties. Or at the very least, one may become more numb to it as the novelty wears off.

cromd··on Not everyone should meditate
For me, meditation started a fundamental shift in how I think about free will, and oddly nobody I've mentioned it to in real life has felt this.

I used to feel very in-control of my own mind, but after intentionally sitting and monitoring for thoughts, labeling those thoughts, etc, I became sensitive to how thoughts can really come out of nowhere. You can't predict what you will think next. That strikes a little deeper than a nature/nurture argument where you might say "oh, I just behave a certain way I guess, its in my genes". You start to wonder if you're just being forced to watch the movie that is your own life.

I personally feel like my life is a mostly-good movie, and there's reason to predict it will continue that way, but for many people, they're stuck in a bad movie. Some people may feel imprisoned by that. But not feeling in control can also be liberating, depending how you look at it. So I definitely agree that it's a double edged sword, or that YMMV.

(Overall, I've enjoyed meditation, and I try to do it about once a week, just to remind myself that there's another mode of thinking that's available to me.)

cromd··on Why I'm Glad I Lack Passion to Be a Programmer
A lot of this resonates with me. Programming takes on a more enjoyable form when you can remove ego a bit, and worry less about padding your resume and learning your 1000th tool.

That said, it can be fundamentally hard to strike a balance on that with a client.

>Should a client need [...], I'll go with it. But I'll do so only when it's the simplest and most maintainable solution to the problem, and not because I want to be the greatest of programmers in my or other people's eyes.

"Simple" and "maintainable" depends on who is maintaining the project after you, and what they know, and what programmers at-large are likely to know. I also tend to make frontends that heavily rely on server-side and jQuery. I know that an SPA might be better sometimes, but since it will take me 10 days to learn a new framework (say 30-90 to learn it well), it's never the simplest solution _from my perspective_. But, it might be fine to stick to my old ways if the client just wants speed, or if I know I'll be around for a while, or if I'm confident any newbie can come in and quickly understand/overhaul my work.

I think it's also just ok to admit to ourselves that, even if it's not ideal for a client, eventually we want to work in a way that's mentally comfortable and familiar. You want some adventures to spice things up now and then, but too much too fast is overwhelming. Wanting to work with a familiar stack seems comparable to wanting your usual snacks, noise level, view, temperature, etc. As we become less desperate for salary, or as priorities change, it ideally becomes easier to say no to jobs/clients that can't accept a certain stack.

cromd··on Ukraine's tech community rises to challenges of war
How hard is it for Russia to cripple the internet in Ukraine? Is it likely that these volunteers will still be able to contribute much, tech-wise, in a few weeks?
cromd··on Nuclear War Survival Skills (1987) [pdf]
Neat map. It's easy to think "NYC, DC, SF will get hit, stick to a smaller city to improve your odds", but there are tons of worthwhile targets. However, this map is also very US-centric, and if Putin loses his mind, might he attack many NATO countries? Or would e.g. Spain and Greece be largely unscathed? Or maybe South America and Africa and Asia would mostly be intact.

Now, ~5k warheads is certainly enough to hit the top 10 cities in every country, which might cause chaos that we can't recover from, but I doubt they would be distributed that way.

cromd··on Pandas' reference doc considered unsafe
Some discussion here, though these people also don't seem to have much info either: https://github.com/pandas-dev/pandas/issues/39862

One person seems to have narrowed the violation down to a zipfile version of the docs available on the site.

I can imagine an automated warning system like this providing some value to web users as a whole, though the process doesn't seem great to me if such tech-savvy people are still scratching their heads after 2 days.

cromd··on It is easy to expose users' secret web habits, say researchers
You could maybe pick 20/30/40 random subjects to fake a prolonged interest in, and really focus on those, maybe swapping some out over time. In any case, I think one has to pump enough fake volume through to make fake interest look like real interest. But then the opposite problem comes up - excessive requests for one topic might signal fakeness. Maybe you could have fake traffic be produced proportionally to real traffic?
cromd··on Want to Be Happy? Buy More Takeout and Hire a Maid, Study Suggests
I used a housekeeping service for a few months (Handy). The time saved definitely felt worth the money in general. On the other hand, and this is maybe partly my building's arrangement, it also felt like it complicated/constrained life sometimes. I would find myself saying "sorry, I'll skip drinks, I have to get home and let the maid in at 7pm". I also found it a little hard to be fully relaxed while the person was there in the next room. And, one day while on vacation, although I canceled the cleaning for that week, a maid showed up at my apartment, and they made the trip for nothing - I felt bad. Turned out the site had quickly auto-moved the first canceled appointment to a few days later in a pretty misleading way. I got charged and decided to work it out with their customer service. I just pulled up the chain, and it was a 15 email inquiry that took 35 days to resolve. IIRC, a negative Yelp review got things moving again.

So, that's probably not everyone's situation or experience, but it just reiterated that having control and simplicity is nice. Simplicity for some might be not having to clean, but for others it might mean not having to depend on someone else. I can't be my own Verizon or Uber of course, but some things I'm in a good position to provide for myself...

cromd··on Want to Be Happy? Buy More Takeout and Hire a Maid, Study Suggests
I assume they're saying it's hard to read, type, etc while driving.
cromd··on Lindy effect
"Bathtub mortality" perhaps? https://en.wikipedia.org/wiki/Bathtub_curve
cromd··on Machine Learning Crash Course: The Bias-Variance Dilemma
If it helps anyone, the FiveThirtyEight article describes a scenario where people take a survey about immigration status and voting. Most legal citizens will correctly identify themselves, but some will accidentally check the wrong box and say they are an illegal immigrant. If you have a billion citizens and 10 illegal immigrants truly taking the survey, and people check the wrong box 1 in 1000 times, your "percentage of illegal immigrants who vote" statistic will be about the same as for citizens (because almost all reported illegals will be citizens). Collecting more data won't help.

It's a very good article, though in the context of deciding how many variables should be in a model of some complex phenomenon, this example is a little tougher to wrap your head around. It's not quite a predictive model, but there were some variables left out. A naive model I suppose is "this data is generated by infallible respondents", whereas a better model would incorporate that error rate. There isn't as much of a question about which pieces of information are relevant, though, like you might encounter when trying to predict future drug use from household income, race, age, number of books read as a child, number of pets, and so on.

cromd··on Ask HN: A simple workout tracker
I've been through a number of systems for this. I think where I've landed is that this is probably the ideal code-it-yourself opportunity. People often suggest todo lists as very easy, but I find those even more complicated than workout tracking. You need to track multiple lists, update existing records, etc. Workout data is pretty "append only".

For my workouts, which are fairly simple (and usually involve body weight, a simplifying assumption), a shell script to log the data and a python script to analyze the data works great. When I do 20 pushups, I say "log_exercise pushups 20", with autocomplete and all. It just adds a row to a 3 column file with the epoch timestamp, exercise name, and quantity. With that log, it's very easy to analyze my pushup/chinup/plank/running activity over time. I generally limit my analysis to things like "am I able to do more of xyz than a month ago?" or "how many pushups have I done on average over the past 6 months?" (seeing "avg 2 pushups a day over the past 60 days" gets me embarrassed!).

As for web/mobile, I just put my workout in Google Keep on my phone (notes like "10 chinups, 2 miles running, 6 more chinups...") and just enter it in when I get back. For me, this pain is outweighed by having complete control in other areas.

I initially thought "oh, this must be a solved problem", so I would look for apps. Over time I realized that a lot of features just weren't necessary for me. I found that graphs of my pushups over time didn't give me additional information. I could see from a table whether or not I was doing a lot or a little. Syncing across devices or seeing it on the go wasn't important. Sharing with my friends wasn't important. Nor was seeing percent increases or goal setting. The biggest benefit was from going from keeping no records to consistently keeping records, and adding a tiny bit of structure.

cromd··on Ask HN: What are the best books you've read that few others have?
I really enjoyed "Software and Mind", which I first read about on HN, though the discussion was short and people didn't seem to like the author's angle much. It's largely about how "mechanistic theories of software" hold us back, how programmers aren't getting to exercise their brains, and how most people are giving more and more control of their life up to others in order to avoid having to program. Avoiding programming becomes more of a goal than expanding the mind.

The author is very passionate about all this - and I think most people would find the intensity off-putting. He manages to fill ~800 pages. I am not sure I agree with everything. While it resonated strongly, I'm also not that bummed out about the ability to launch a website from scratch in 5 minutes. But, in much the same way I feel about the writing of Nassim Taleb, despite having many statements that are incendiary and possibly wrong, it approaches a topic from an angle that you probably haven't been getting elsewhere.

I immediately thought of this book when I read the question because I've never met anyone who has read it or who has any interest in reading it after hearing about it.

cromd··on The Hard Thing About Software Development
I think not having enough breadth in "one skull" is largely created by psychology and structure at companies and less by curriculum deficiencies. When I used to manage developers, most of them told me that they were pained by how little they were expected to interface with non-developers. These were very technical people, but they still wanted variety and connection/relevance to the product.

Even developers with good interpersonal skills or business sense are discouraged from participating in more producty discussion. They may be encouraged by way of somebody taking them aside early in their career and saying "Hey kid, you really _get it_. You're not like the rest of these nerds. How about you start calling shots on what to build and switch to a product role?" But they'll rarely be encouraged to stay as technical while simply getting listened to more by management. Management may argue that after 2 or 3 years of getting one's hands dirty, you understand programming as well as you need to, and that for the rest of your career, persuasion trumps skill acquisition. It's somewhat taboo to cultivate both skill sets at the same time. So, I think even if you got more "people people" to study CS/whatever, a reverence for specialization will silence a lot of voices.

cromd··on Ask HN: Which book had the biggest impact on your personality?
Letters from a Stoic (a Seneca collection). A lot of the ideas were completely foreign to me, having grown up with a little too much television, politics, food, etc.
← PreviousPage 2 of 2