HNHacker News
TopNewBestAskShowJobs

ebfe1

258 karma · joined December 27, 2019

submissionscomments
ebfe1··on Jobs you're applying to might not be real
Sad to see so many people getting scam these days, One of the idea I have and wish someone could take the time to implement is a self-registering platform where you can declare your information was previously stolen and used in a scam - The system will hash this information in multiple way, without storing them, such that, banks, financial institutions, or even mobilephone providers (think sim swap attack) can submit some users information and said system would come back with a result based on some matching of hashes(eg first name, dob, address or last name, dob, social security number). Ideally, it would result in the banks doing more vigorous check on user's identity like actually seeing them in person if this check fails rather than taking everything submitted over some web-form as is.

I have had family member who had their identity stolen for many years and it kept on going, it's super frustrating.

ebfe1··on Ask HN: Is there a data set for GitHub repos associated with academic papers?
One idea: You can play with the github dataset in ClickHouse playground.

This is just a quick sql query to look for the DOI number pattern mentioned in any comment on repositories:

https://play.clickhouse.com/play?user=play#c2VsZWN0IHJlcG9fb...

``` select repo_name,event_type,body from github_events where event_type in ('IssueCommentEvent','IssuesEvent','PullRequestEvent','PullRequestReviewCommentEvent') and match (body,'.10\.\d{4,9}\/[-\._;()\/:A-Z0-9]+.') limit 10 ```

perhaps you can extend on that :)

ebfe1··on GQL – Git Query Language
These are totally legit concerns, while the behaviour of the site has been around for quite sometimes and many ClickHouse installation script may have them so we will keep it for backward compatibility, we will add the usual install.sh url later and start sharing them more often.

(Pull request is in ... it should be deployed on Monday and you can use https://clickhouse.com/install.sh ). Love the feedbacks, please keep them coming!

ebfe1··on GQL – Git Query Language
that is exaxtly what it does ;) if you don't feel comfortable with curl | sh , you can download clickhouse binary from the repo here https://github.com/ClickHouse/ClickHouse/releases

;)

ebfe1··on GQL – Git Query Language
Lovely! I only learnt today that clickhouse has a git-import tool from my colleagues at ClickHouse. So if you also want to give it a go:

Download clickhouse: curl https://clickhouse.com/ | sh

Check out documentation for git-import: ./clickhouse git-import --help

Then the tool can be run directly inside the git repository. It will collect data like commits, file changes and changes of every line in every file for further analysis. It works well even on largest repositories like Linux or Chromium.

Example of a trivial query:

SELECT author AS k, count() AS c FROM line_changes WHERE file_extension IN ('h', 'cpp') GROUP BY k ORDER BY c DESC LIMIT 20

Example of some non-trivial query - a matrix of authors, how much code of one author is removed by another:

SELECT k, written_code.c, removed_code.c, round(removed_code.c * 100 / written_code.c) AS remove_ratio FROM ( SELECT author AS k, count() AS c FROM line_changes WHERE sign = 1 AND file_extension IN ('h', 'cpp') AND line_type NOT IN ('Punct', 'Empty') GROUP BY k ) AS written_code INNER JOIN ( SELECT prev_author AS k, count() AS c FROM line_changes WHERE sign = -1 AND file_extension IN ('h', 'cpp') AND line_type NOT IN ('Punct', 'Empty') AND author != prev_author GROUP BY k ) AS removed_code USING (k) WHERE written_code.c > 1000 ORDER BY c DESC LIMIT 500

ebfe1··on Show HN: ClickPy – OSS project and service for Python analytics using ClickHouse
Curious - how many row are you ingesting daily?

This would be a really nice tool to reference to when people share their findings about malicious python packages being uploaded to pypi... take this one as example https://clickpy.clickhouse.com/dashboard/cobo-python-api

After looking through some of these malicious packages using your tool, I noticed a trend.. The malicious package usually targets high download count packages and create something similar so the moment they are uploaded, they start getting high number of download... perhaps it can be used as indicator.

ebfe1··on Someone keeps trying to reset my Facebook password
Another theory is they have an efficient way and or bypass facebook ratelimit to bruteforce reset victim's password token ... regardless, i would make sure 2fa is enabled for extra precaution... or maybe just take a break from facebook :)
ebfe1··on Taking Magnesium tablet everyday changes my life
100% this - I love to hear from others' experiences and what work for them but always do my own research before considering taking them myself :).
ebfe1··on Taking Magnesium tablet everyday changes my life
100% this is what I experienced .. I was fine for months after taking the supplement then I went away for holiday, forgot my supplement and the leg cramps at night came back after sometime. When i came home, i started taking it again and the cramps were gone. Just from that experience, it confirmed to me that magnesium deficiency was the root cause.
ebfe1··on Taking Magnesium tablet everyday changes my life
From what I know nuts are rich in magnesium (Almonds and cashews) if that helps.
ebfe1··on Taking Magnesium tablet everyday changes my life
citrate was what I had/have (my wife usually buy it for me and I just looked at the label) and you just taught me a list of other options I never knew about! XD
ebfe1··on Taking Magnesium tablet everyday changes my life
I only learn about Magnesium Glycinate now... I have been taking Magnesium Citrate ... works well for me...

But reading online... I see why Glycinate maybe better for some XD:

> "This form of magnesium is less likely to have a laxative effect than magnesium citrate"

ebfe1··on Taking Magnesium tablet everyday changes my life
I'm so gonna give Ashwagandha a go ;) Stress free life is the best!
ebfe1··on Taking Magnesium tablet everyday changes my life
> medication that takes weeks to have an effect

I don't disagree with the rest but talking from my own personal experience, taking magnesium had almost an immediate effect on me but perhaps it's not the same for everyone.

Totally agree that there are other factors that may contribute to muscle soreness but I think taking magnesium is a good, harmless experiment if you have not tried. Also perhaps you may find other potential answers reading through some of the responses here :) Good luck mate!

ebfe1··on Taking Magnesium tablet everyday changes my life
This is a great tip and cannot agree more! I also start drinking a lot more water and even bought a 2.2L jug to drink at my desk!
ebfe1··on Taking Magnesium tablet everyday changes my life
Yea - this is a bit confusing to me but I just take B complex.
ebfe1··on Taking Magnesium tablet everyday changes my life
I ate everything - I'm born lucky with high metabolism so I don't gain weight easily and have pretty lean body. After taking magnesium&B complex, my diet has not changed but the cramps were gone and my muscle recover much quicker than before.
ebfe1··on Taking Magnesium tablet everyday changes my life
It was not obvious to me at the time but after some research, it turned out magnesium deficiency cause muscle cramps and it is also one of the key element for muscle recovery/growth.
ebfe1··on Taking Magnesium tablet everyday changes my life
Wowser - I have never heard of Magnesium spray! Will definitely check it out! I have sleep apnea as well so this might be good compliment :)
ebfe1··on Taking Magnesium tablet everyday changes my life
100% I do eat more of these food and the nuts are great! I think in my case, My body either doesn't absorb it well or it really was due to bad diet but I needed the tablet at the time to get back to normal.
ebfe1··on Taking Magnesium tablet everyday changes my life
I started with 300mg every night - 2 tablets from a brand called Swisse. I am now taking just 150mg a day since I think my body is back to normal. They also have powder type and i was also taking that at the beginning and your body absorb it really quick!
ebfe1··on Password protect a static HTML page
Hah! I did a similar thing for a fun friday afternoon security challenge with AES256 encryption on static website using the answer to challenges as the key here if anyone wanna play with it... :)

https://challenge.surge.sh/

It should take you no less than 10 minutes ;)

ebfe1··on Ask HN: How do you manage your passwords in 2023?
I hope their desktop app is better now, last time i took a look, the whole vault is decrypted in memory and even when it timed out and request user for password, I was still able to inspect memory and retrieve the plaintext passwords
ebfe1··on Green hydrogen is the centerpiece of Australia’s clean-economy growth plan
Why the negativity here? What people mostly worry about (fossil fuel being used to produce electric then produce hydrogen in the background) is simply explained in this line in the article

"The carbon-free rigs will pack 50 kilos of hydrogen zapped from water using electricity from the refinery’s dedicated solar power plant."

hence __green__ hydrogen.

On the contrary, I think storing energy in hydrogen has more potential in long term compare to lithium or any other type of batteries that rely on ores we need to dig up, refine and dump as waste after a couple of years, no?

ebfe1··on Just use Postgres for everything
Add ClickHouse for analytic, columnar use case and you have everything.... Oh wait, Cloudflare already pointed that out XD:

https://about.gitlab.com/blog/2022/04/29/two-sizes-fit-most-...

ebfe1··on Hippotat: IP over HTTP
I run openvpn on 53 udp and 80tcp... works like charm in most cases and sometimes enough to bypass hotel portal. :)
ebfe1··on Tell HN: Domain fronting to be blocked on Azure
big corporation with everyone working in a building, 100% achievable but with everyone working from home these days, it's a big challenge to have all users' internet traffic through a single gateway in some sort of VPN is not scalable. Most corp has to support split tunnel to make it work-able...

Lots of IoC base on DNS as well so that is out of the windows since the malicious traffic is inside TLS...:-/

ebfe1··on Tell HN: Domain fronting to be blocked on Azure
Unfortunately much like every nice thing on the internet, once it is being abused, it gets axed... Domain fronting (having Host header differ to SNI in TLS) is a powerful way a malware author could send payload into organisations.. imagine seeing seemingly legitimate traffic to azure.com but end up with malwaredomain.com/lulz.exe... Unless organisations are peeking into TLS, check Host header, response with MZ file header...There is nothing they can do to stop this.
ebfe1··on Ask HN: How to deal with burn out whilst in probationary period?
I think, firstly, you need to start working on yourself, ask your partner to help you navigate through this difficult time. Proactively find ways to get your productivity and passion to learn back....Get a standing desk if you have not already, personally, I found standing desk make me focus more. Ask others to help pick up kids or drop off so you can have solid 6,7 hours working and refocusing. I find it hard to juggle between kids and job as well.

On the "should I tell my boss" note, I would do that after trying everything else and ask whether it is possible to take temporary 1 week off without pay to get yourself back on track. Since you barely know your boss, I think you should not focus on how it affects your work yet and just explain how it affects your family everybody has family so I think your boss would resonate.

I like to look at it this way, you are hired because you have the skill and proved to be better than other candidates and the company took time and effort to find you, I trust that they will want to work with you through this instead of abandoning you.

Last but not least, I find that for every job, you feel a little loss at first but to truly integrate and feel like you are part of the team is to start having some wins (big or small) so you should look around, find taks that you can accomplish or want to learn/work on and actively request to do those. It will help boosting your confident and make working more fun imo.

ebfe1··on Six Shooter Glue Gun
and it seems his micro blog code is here if you follow his github url on the page :) https://github.com/millworks/miter/blob/main/index.php

was wondering how he protects his site _SESSION and it turned out to be quite interesting as the /back/index.php file that set the session (https://github.com/millworks/miter/blob/d8553b991c6e96cbc71b...) is protected with good old basic auth trick (probably apache or .htaccess setting) - simple and effective for personal use.

← PreviousPage 2 of 4Next →