Hacker News Reader

deoxxaon I have received a $100k sponsorship for Ladybird browser

I just want a browser that tastes like a real browser!

deoxxaon Twibright Optar – OPTical ARchiver – a codec for encoding data on paper

Erasure coding (particularly fountain codes) are what you'd want to use.

deoxxaon It Costs $532,000 to Decommission Single Wind Turbine

Most things do, which is good news. I'd be interested to know if there are any projections of how these costs may be reduced. Do you have any references on hand?

deoxxaon Lidl to Launch Rival to AWS

Luckily the C-suite get their own C-word for proper etiquette.

deoxxaon Trolls break into meetings on Zoom

4chan is a big place with a long history. It's kind of like 50 different websites and communities under one domain, where there's surprisingly little overlap between them all. I think you'd find that most people who visit the less notorious boards on 4chan are your totally normal geek crowd.

deoxxaon Apple Reveals ‘Lisa’, Its $50M Gamble (1983)

That depends on what jurisdiction you're in.

deoxxaon APL – A Glimpse of Heaven (2006)

Yep, Prolog is pretty great for that kind of thing. I'm working on a project right now where I'm using Prolog (via tau-prolog) in the browser to determine permissible input options based on the user's existing selections. I'm also using it (via https://github.com/mndrix/golog) to apply those restrictions on the server, and to calculate the pricing for a configuration. In most cases I'm generating Prolog code from a collection of tick boxes, but for complex campaigns I can dig in and write a specific implementation of the required rules. Very flexible.

deoxxaon Serious Chrome zero-day

I read this as "for sure I do this too"

deoxxaon Almost booting an iOS kernel in QEMU

I would be fiercely interested in any more details around this. I'm sure many of us have seen Scotty from Strange Parts doing his headphone socket project, and the franken-phone built from spare parts, but it sounds like you're suggesting something even more than that.

Citations, please!

deoxxaon Don't Provide Your References to a Recruiter Until After Your Last Interview

Seems a bold assumption given that I (and many people I know) don't maintain accounts on linkedin or similar.

deoxxaon Windows gifski.exe with a digital signature

Oh man, Sikuli (and SikuliX http://sikulix.com/) is amazing. It's the kind of thing where I hate that it has to exist, but I'm so happy that it does exist.

deoxxaon I Got Catfished by a Candidate

Australian here, but I've worked for NZ companies before.

Especially down in our corner of the world, it's all about who you know. If you've got a few people you've worked with where you can go "hey I'm looking for a new job soon, heard of any openings?", that'll get you wayyyyy better jobs on average than what ends up hitting the public job advertisements.

Speaking from experience, advertising a job publicly is what you do after you've asked everyone you know if they know anyone personally who would work well.

deoxxaon February 28th DDoS Incident Report

It's interesting you say this, as that's pretty much exactly how Lightsail (Amazon's easy-mode VM thing) works by default. Public IP, ports 22 and 80 open. I'm guessing for a good chunk of users, that default config is all they need.

deoxxaon Colly – Scraping Framework for Golang

Tell that to the project I migrated from scrapy to go six months back. Granted, scrapy might be doing other "fun" things to eat into performance, but it was really night and day. Immediately went from CPU bottleneck to network.

deoxxaon Parcel – A fast, zero configuration web application bundler

It sure looks that way if you follow the news, but my webpack config has barely changed for two years now and I'm still getting work done.

deoxxaon Show HN: Example of a polyglot microservice app

Ahhh. That rabbit hole is deep. Buckle up if you're going in because it starts ugly and gets worse.

I've spent quite some time exploring the caverns of XACML (eXtensible Access Control Markup Language), even going so far as writing a limited implementation of it in JavaScript. It's infinitely flexible, extremely capable, horrendously complex, and just about the least fun standard to work with. Sure as heck gets the job done though. Just get yourself used to writing and debugging XML and you'll be fine.

I've also looked in great detail at Amazon's IAM policies. These are significantly simpler, and heavily inspired my current favourite library, ladon [1]. I recently wrote a GraphQL API and I found that GraphQL mutations and field accesses mapped nicely to policies in ladon.

[1]: https://github.com/ory/ladon

deoxxaon GOTO.js

How did you arrive at 30+ years?

deoxxaon The OWASP Top 10 is killing me

It sounds like your problem is with the infosec industry rather than the infosec community. The community in general would agree with you about the industry being kind of broken, I'd say.

deoxxaon Intel Delivers 17-Qubit Superconducting Chip

I'm not sure about what's used in all industry applications, but this video explains one implementation of a super-cooling setup: https://www.youtube.com/watch?v=7jT5rbE69ho.

I won't even try to summarise it - I'm sure I'd get it wrong! Fascinating stuff though.

deoxxaon Qantas wants to fly from Sydney to New York or London nonstop

I'd like to hear more about pudding.

deoxxaon A comment left on Slashdot

> I'm 49 and I feel like I only just hit my peak in coding knowledge and quality. I suspect I will feel the same when I'm 59 ;-)

This is very comforting to hear! I'm 27 and feel the same way. I can only hope that I keep getting better at this whole thing, and that I can keep ahold of the feeling that I am getting better at it, as you appear to have.

deoxxaon Linting HTML using CSS

It's also similar to what Microsoft does (did?) with Windows during development[0] - text that hasn't been translated yet is shown with a whole bunch of meaningless diacritical marks and replacement characters so it stands out.

[0]: https://en.wikipedia.org/wiki/Pseudolocalization#Pseudolocal...

deoxxaon Falsehoods programmers believe about video

http://take.ms/fwwhx

That is frustratingly poor contrast.

deoxxaon Ransomware gives free decryption keys to victims who infect their friends

This is roughly what happened with several "exploit droppers" a few years ago. It wasn't pretty GitHub sites or open source blogs, but rather "leaked" versions of the software suites, missing nearly all of the actual exploits. Usually there'd be a couple of very old, widely patched exploits in there so you could see how it worked. People would download the stripped out version, play with it, then buy the actual exploit payloads/plugins.

Pretty interesting process to watch from the sidelines!

deoxxaon Quorum – JP Morgan’s permissioned implementation of Ethereum

Hey neat, this has code that I wrote in it. Hooray open source.

deoxxaon How we made our React-Rails app 5x faster

Maybe it takes 1s to load, but now happens 4s before you even think of opening the page?

deoxxaon Error Handling in Node.js

Either that or you wrap it up in function that makes a channel, calls the function with it, then waits on that channel for the return value. Basically you can go back/forth between async and sync(ish) in go much more easily than in JavaScript.

In saying that though, if you have to do it a lot it probably means some of those functions should have been synchronous in the first place.

deoxxaon Unexplored Areas in Data Compression

> Why can't they just add another flag to tar [...]?

You are "they" - you can add that flag. If it turns out that it works well, it'll (probably) be taken and added to whichever `tar` implementations you submit patches for.

deoxxaon Rwasa – A high-performance web server in x86_64 assembly

Wasn't it that assumption ("lots of people are looking at [it]") that lead to the current state of OpenSSL?

deoxxaon Show HN: Gitr.io – It's how developers meet

The backend is Rails (https://github.com/macropodhq/gitr-backend), and the frontend is React and Fluxxor (https://github.com/macropodhq/gitr-client).

I'd love to take a look at that code, if you have it online somewhere - it'd be awesome to show that kind of information and use it to rank suggestions!