HNHacker News
TopNewBestAskShowJobs

cschneid

1,612 karma · joined May 9, 2008

submissionscomments
cschneid··on WTF Delaware?
My only guess is a batch job that really really doesn't want data changing out from under it (and the devs were too lazy to batch up the next days changes to be submitted post-job).
cschneid··on Popcorn Time Is So Good at Movie Piracy, It’s Scary
See-Also: https://www.kickstarter.com/projects/559914737/the-veronica-...

$35 lets you buy the movie ahead of time. A bit steep compared with a dvd, but not by much. (plus whatever other bonuses they threw in).

cschneid··on Laying Out iOS UIs in Code
I've used a similar one myself. Same name but different project: https://github.com/jrturton/UIView-Autolayout/blob/master/So...

Thank you for making this area of ios dev less painful. :)

cschneid··on Comparing Haskell Web Frameworks
Look into Debug.Trace for old-school println debugging.
cschneid··on ATF uses rogue tactics in storefront stings across nation
Thanks, I'm obviously not very knowledgable about guns. But the word choice sure doesn't change the political reality in the US about any sort of gun control being totally untenable.
cschneid··on ATF uses rogue tactics in storefront stings across nation

    Would people flip out if there was a bill proposed to require all guns in the US to have a GPS tracker?
Ohh god yes, they would. I live in Colorado, and 2 of our state reps got recalled when the democrats limited clip size to 15, and required more background checks on purchase.

That restriction got people so angry that they did mid-term recalls. Not even just waiting till next election.

cschneid··on Bitcoin paradise
I like that he thinks these two things hold true at the same time:

1) Nations are having wars over water. 2) Water rights matter

cschneid··on Unicorn Jobs
Not really midwest, but I'm in Colorado - it's not hard to find $100k+ jobs for experienced programmers, and buy a nice house for $250k. It's an amazing confluence of cheap to live, but high pay work.

Plus mountains.

cschneid··on Show HN: No More Passwords, Just Email
I have a long sentence as my passphrase. 1password will stay unlocked for ~30 minutes (or when I close my computer), so I type it a few times a day. I've gotten very good at typing it, and can crank it out quickly.

It's much much faster than opening my email, and waiting for SMTP & Gmail to get its act together.

cschneid··on We Work Remotely – New Job Board from 37 Signals
From the guidelines (http://ycombinator.com/newsguidelines.html):

> Resist complaining about being downmodded. It never does any good, and it makes boring reading.

Please don't make comments like this.

cschneid··on In Praise of Haskell
There was a cool talk on "The Haskell Chat" episode two [1] that goes over how haskell is used in a large team, some members with expert haskell knowledge, some as just technical end-users of the libraries.

I found it really interesting to see how a large team can deal with a real haskell project.

[1]: http://www.haskellcast.com/episode/002-don-stewart-on-real-w...

cschneid··on Show HN: Mac Pro equivalent using i7
So "sorta, not really" is the answer. It's a potential hackintosh, with all the associated hassles that come along. (updates break your hackintosh? Hope you didn't want to get work done today).

And it's in an ugly case.

With less useful hardware (Xeon vs i7, memory quality).

It's going to not have workstation level build quality. For instance, my older mac pro has literally 1 cable run inside the case (power to the gfx card). Everything else is slotted in, and done on board. No self-built system I have is built that well.

I doubt I can get applecare on this system. So when things go wrong, I have 15ish different supplies to go through RMAs with (for better or worse).

Basically this "article" makes zero sense. It's just a link to a bunch of parts. Is it just advertising / affiliate?

cschneid··on Show HN: Mac Pro equivalent using i7
And? Does it run OSX? Is this anything other than an ad? Does it have a unique case styling that may or may not be better?

Why did you post this?

cschneid··on Learn Haskell Fast and Hard
I agree. There are a fair number of symbols out there. And really, how do you pronounce: ">>=", "<<=", "<*>", ".", and such.

I know them now, but discoverability is pretty low on those functions.

cschneid··on How To Lose Your Best Employees
You certainly can't use praise as an excuse for not paying well. But it's cool to have a quick one-off "hey, great job hunting down that bug" from somebody.
cschneid··on Can I Make a Living Off Bitcoin Mining? Probably Not
There are two ways to get bitcoins from mining.

The block reward, which halves every once in a while, eventually hitting 0 after all are mined

And then the transaction fees. Basically if I want to send a BTC to somebody, I send the coin to them, and also sign over a small extra amount as a transaction fee. A miner who solves a block (ie, a bundle of transactions) can send those fees anywhere they like (their own account).

So in a long-run situation, mining effort will balance out transaction fees to come to some sort of equilibrium.

cschneid··on Metadata Equals Surveillance
If you're in public, you have no expectation of privacy. So as cameras and facial recognition roll out further, you won't be able to go to another person's house to do that face-to-face without the metadata being created anyway.
cschneid··on To my daughter's high school programming teacher
> with each day lasting a maximum of about 7 hours, including about a 40 minute lunch period.

HAHAHA

My girlfriend is a second year high school teacher. You are technically right that she is required to be on campus for the required 7 or 8 hours. But, there is nowhere near enough time to grade, plan, prepare, work individually with kids (makeup work mostly), etc, in that time. She puts in 12+ hour days. Everyday. Including weekends.

And over the summer, you are right that it is mostly free, except for several weeks you give up to do professional development, AP course training, and any schoolwork to move up the salary schedule a bit.

Her salary schedules are here [1]. With a masters degree, she would top out at $58k/year after 20 years on the job (assuming the masters track). Starting salaries are in the $35k range.

Meanwhile, I am a computer programmer, working a legit 8 hour a day job, making much more than she is now.

What annoys me more than just teacher pay though is the other spending in the school. She was pulled in to teach english this year. When the english department met to work out the plan, they had to blow their whole budget for the year on a single class-set of a paperback. (30ish copies). That's it. No more books, no miscellaneous DVDs / Documentaries purchased. That's it. Well, except for when she just goes and pays for it. Which she did last year to the tune of $350ish.

[1] http://thompsonschools.org/cms/lib07/CO01900772/Centricity/D...

cschneid··on Don't use bcrypt (2012)
That wouldn't be the case in many scenarios I can think of:

1. DB backup is compromised (from an offsite backup storage, think S3).

2. Developer laptop lost, with a copy of the database locally. (source code may be available, but the site-specific key probably wouldn't be. As that's a config var on the server).

3. SQLi that dumps hashes to the page.

I'm a big fan of making the job harder for attackers. There are lots of attack vectors where a 'pepper' value would be useless. But not all of them. And it's nearly free to implement. Might as well.

cschneid··on Don't use bcrypt (2012)
In this case, it means that lots of memory accesses are required in mostly random order. This makes parallelizing on GPU hardware much more difficult than something like an MD5 or SHA hash, which don't require much memory access during the computation.

This also boosts the cost of making dedicated cracking hardware (ASIC or FPGA type hardware)

I'm having a hard time finding actual memory usage of a single password verification though.

After a bit more reading just now, it looks like you can also adjust the memory-work-factor of scrypt as well, which doesn't appear to be available for bcrypt (very unsure on this one though, please dont' take my word on it).

Does anybody out there have a good side-by-side comparison of practicalities like "memory usage", "flexibility", "can it be parallelized on CPU/GPU/FPGA/ASIC" and so on across all the popular hashing setups?

cschneid··on Trading Halted in Nasdaq-Listed Securities Due to Technical Issue
That is the #1 part of the last Batman movie that annoyed me. "ohh he's broke because ... of an attack on the stock exchange during which a giant totally weird trade was made".
cschneid··on Services (Part 6 of AngularJS from beginner to expert in 7 steps series)
I am not actively working with Angular enough to vouch for its usefulness in real apps, but the style of the posts themselves, with live copies of the code that's being discussed was really well done.
cschneid··on From a Mailchimp email and Wufoo form to $25k in 3 months
Didn't mean to come off so accusatory. I had simple open in another tab at the time and thought it was weird that the sign in link had changed text before I realized what was going on :)
cschneid··on From a Mailchimp email and Wufoo form to $25k in 3 months
Holy crap does the site's landing page look like Simple.
cschneid··on ChessBoardJS
Please don't bring reddit style here. There's plenty of reddit on reddit. This kind of snark detracts from what makes this site good.
cschneid··on Hospital creates bidding war by posting pricing online
While emergency care needs to be taken into account, most medical issues are just not emergencies, they are merely pressing. Even super expensive, life threatening ones (ie, a cancer diagnosis) allow for a bit of shopping around, second opinions and such.

So if most surgery, and near all outpatient procedures are not-pressing and possible to shop around for, why can't I know how much it costs ahead of time?

cschneid··on Fitbit for Dogs
The fitbit aria scale had a clever way to set itself up. As far as I could tell, it had my computer join a known network, and broadcast the SSID & Password that my computer already knew off to the scale. So the scale gets put in setup mode, and listens for that temp network.

At least that's what it appeared to be doing when I set it up....

cschneid··on Haskell style list comprehensions in Ruby
Specifically, it is monkey patching the unary - and + operators on array, and has a clever global method missing.

The unary operators `def -@` gets called when you do something like: `-[1,2,3]`.

So in the example code at the bottom, it's doing `bar =+ [x | x <- [1..3]]` that's better parsed as `bar = +[x | x <- [1..3]]` (note the spacing difference).

Hacking unary operators has a long history in silliness in ruby. See also: https://github.com/jicksta/superators

cschneid··on LivingSocial Hacked – 50 Million Customers Affected
That doesn't mean an additional secret stored on the server is a bad idea either way.

I've heard it referred to as a pepper (to go along with salt) and is in the application code.

bcrypt(password, salt, pepper) => hash. So even if they grab the db with the salt, the effective password to crack turns into 'password3jkl453jklgfuja9oph4mn" instead of just 'password'. Impossible.

And if they do get your site's code, you're back to a strong hashing algo and a salt.

cschneid··on Multiplayer Game 'Eve Online' Cultivates a Most Devoted Following
It has its own problems. Big fights are magnets for others, and because at 10x time slowdown, they can take several real hours to resolve, everybody and their mom has time to travel across the galaxy and join in. This was a problem at the relatively recent Goonswarm & TEST fight with multiple titans. So many others were opportunistically coming in and kept slowing things down and interrupting, where they shouldn't really have had time to mobilize.
← PreviousPage 7 of 20Next →