HNHacker News
TopNewBestAskShowJobs

efuquen

1,508 karma · joined October 6, 2009

submissionscomments
efuquen··on Over 30% of Official Images in Docker Hub Contain Security Vulnerabilities
I wonder what would happen if you attempted the same study with AWS AMI's on the official images. Get the latest versions, don't update your distro, and see how many vulnerabilities you get. How often does AWS really rebuild their official AMIs?

Ultimately keeping your OS completely up to date is on you, not Docker, not Amazon, you. VM's suffer from the exact same problems as Docker containers.

Edit: Also, security issues with using community AMIs are already well known, should be no surprise the same applies to Docker community images.

efuquen··on Over 30% of Official Images in Docker Hub Contain Security Vulnerabilities
Does AWS does this with their AMIs? Everything you listed can be applied in virtually the same way with VM images, and their are community based AMIs with all sorts of vulnerabilities and non-updated code, people just know not to use them or build their own.
efuquen··on Vox Media Acquiring ReCode
There are so many more demos media start ups can be targeting, but everyone is after the same tech savy millennial demo, it's completely overloaded. You really hit the issue directly, the mass market is much larger and there is a lot more potential new media that could be created targeting them.
efuquen··on Senate Blocks Patriot Act Extension
I think the headline here is misleading and focuses on the wrong vote. There were two votes here 1) to extend the Patriot Act by two months and 2) to pass the USA Freedom Act (which would supersede the Patriot Act).

The extension vote was opposed by Democrats and supported by most Republicans while the USA Freedom Act was supported by all democrats and opposed by most Republicans. While it is indeed good that the Patriot Act wasn't extended this is the consolation prize of the actual worse news that the USA Freedom Act didn't pass.

While the USA Freedom Act isn't perfect, and was weakened in the House [1], it is still far far better than the Patriot Act has meaningful reforms. It also still has the support of the EFF [1]. Overall, it's failure to pass is bad news and could lead to an even worse bill.

[1] https://en.wikipedia.org/wiki/USA_Freedom_Act#Reaction

efuquen··on Senate Blocks Patriot Act Extension
That was simply a vote to extend the current program by two months:

"That was immediately followed by rejection of a two-month extension to the existing programs. The vote was 45-54, again short of the 60-vote threshold."

I think it's pretty clear the policy was they don't want an extension of the Patriot Act, which I think is a good thing. I also think there is a lot of confusion here, everything I've read about the USA Freedom Act seems pretty sensible and addresses privacy concerns. It completely changes how the NSA could gain access to phone records and bears no resemblance to the blanket powers the Patriot Act allowed.

efuquen··on Show HN: Visa Explorer – Salaries, lawyers, companies of all H-1B in the USA
There is a "Data Scientist" at AirBnb with a salary of $1.35M.
efuquen··on Twitter Needs New Leadership
Have you stopped to consider that for most other people the opposite might be the case?
efuquen··on The state of Computer Vision and AI: we are really, really far (2012)
we are really, really far along the path

Except the "along the path" the path part is neither stated or implied. Rather then just being a grammar or language issue I think people are projecting their optimistic opinion of AI onto the title, with no basis for it based on what's actually written. Objectively if you read the title how it should be construed as negative, we have a long way to go, etc.

efuquen··on The state of Computer Vision and AI: we are really, really far (2012)
hmmm, I feel if anything tech people are more optimistic then warranted about AI. I found it refreshing this made it clear there are still a lot more to intelligence then just recognizing a face in an image. Now the tech industry being pessimistic about many other things, sure, but in my experience that hasn't been the case with AI.
efuquen··on The state of Computer Vision and AI: we are really, really far (2012)
I'm not sure when he says it's funny he means laugh out loud funny. Do you find it amusing? I think the point is as humans most of us can get the joke this image is conveying and it would be very difficult for AI to understand that. How funny you actually find it is a matter of personal taste and I don't believe the author really cares about that in this post.
efuquen··on The Grooveshark Settlement [pdf]
Grooveshark had a paltry amount of equity/debt financing compared to what's common in the valley. In total they raised a couple million, in the low to mid single digits. Part was equity and part debt financing, which was all paid back and some of the equity was also bought back from investors who wanted out after the lawsuits.

Grooveshark was completely self sufficient for a long time, even with the lawyer bills. What really killed it was the pressure from labels to get them kicked off ad networks, mobile app stores (first Apple, then Google), and prevent the more lucrative direct ad deals you need to really survive. Once the summary judgement occurred is when it really started becoming impossible.

Disclaimer I was an early employee that worked there for 5 years.

efuquen··on Announcing Git Large File Storage
Why reinvent the same thing? What were the technical deficiencies of git-annex that necessitated this? Or is this NIH syndrome? I think these are all reasonable questions.
efuquen··on Announcing Git Large File Storage
I think the question is why did they role their own solution when there was one already an open and freely one available. If it wasn't suitable in some way I would really like to know why.
efuquen··on Coursify: A Free Open-Source Online Course Platform
From the person who "cloned" your product.

> I looked at a few self-hosted Online Course platforms, but they all wanted a monthly fee + transaction fees, which I think is excessive.

efuquen··on Economic Inequality: It’s Far Worse Than You Think
Were you commenting on the article or some specific comments here? I'm not sure, but I thought your comment was talking about the article ...

If you want to take issues with someone specific views, then do so, but don't make a generalization like you did on a viewpoint that wasn't really even stated by the original post.

And posting some out of context quotes give me very little go on, the discussions you can have about this should involve a little more nuance than random text bites from user comments that come from people from all sorts of backgrounds and political leanings.

My general point, which seems to have been completely ignored in favor of attacking my use of the word 'strawman', is that discussing income inequality doesn't have to devolve into an us vs them argument, that it has a lot more to do with what sort of society we wish to foster and build. But you seem content in holding on to the former view.

efuquen··on Enough with the Salts: Updates on Secure Password Schemes
>This isn't a particularly easy problem to solve, and if you do it incorrectly you open yourself and your users up to a denial-of-service.

When there is a choice between making dealing with denial of service mitigation more difficult or making it easier for user passwords to be discovered after a breach, you should definitely choose dealing with denial of service mitigation. Not saying you might disagree with that sentiment but I would have very little sympathy about a company trying to make excuses like that to validate increasing the risk of user passwords being exposed.

efuquen··on Economic Inequality: It’s Far Worse Than You Think
I hate this type of argument because it completely circumvent the point. The point isn't that if you're rich that means you've stolen something from the poor. It's the belief that the way our civil society is organized is broken, and plenty of riots have occurred for that reason in the past. The idea is that increased concentrations of wealth to an increasingly smaller percentage of people leads to a less innovative and content populace. And that we should be trying to avoid those trends, it's says something about what and who we value as a society.

So stop bringing up the strawman of "rich people are evil" when the article wasn't even trying to making that point. Can we have a discussion about income inequality without that bogus line of thinking?

efuquen··on JavaScript's world domination
> Javascript is not such a bad language, I use it directly when doing meteor.js development, but I think the future is better languages like Clojure, Haskell, Scala, etc. transpiling to Javascript.

Honestly I think this has been the 'future' for a long time now, and I still don't see it happening anytime soon. Clojurescript as a language was announced in mid 2011, NodeJS came on the seen in late 2009. Both were languages never or barely used in their respective domains (server vs client side), but NodeJS has clearly had way more adoption on the server side then Clojurescript ever has had on the client.

Unless we get significant browser buy in for other languages (aka not just Chrome) and much better tooling I don't think any transpiled language is ever going to go beyond the minor niches they fill. And I say all this as a huge Scala fanboy, having used it for years in a professional way, and being very interested in ScalaJS. There simply isn't a language that has the buy in and following Javascript has been able to develop.

efuquen··on Goodbye MongoDB, Hello PostgreSQL
I wouldn't call it the same problem. Something nullable is similar to an Optional type (i.e. in scala Option[String] would map to a nullable varchar). That is not the same as being schemaless, you at least still have types that are being enforced, even if they might be empty.

I would agree that having too many nullable fields could indicate a problem with the schema, i.e. you should break things up into more tables.

efuquen··on Why One Programmer Doesn’t Do DevOps Anymore
If 'DevOps' is operations, that what is the point of the term? Ops teams have been doing automation of support systems for a while, so what exactly does it mean to be DevOps? I think that's part of what the OP is getting at, if your fancy 'DevOps' team just ends up being separated and isolated from the dev team you're back at square one, you've accomplished nothing and the same divide exists with a new label.

As someone who works on the dev side, the ops side, and the mixture of the two I feel the OPs pain acutely and have had mixed experiences. People on the dev side need to understand and willing to learn about ops, it's not rocket science and you don't have to be knee deep in it to get the basics down. When ops becomes this black box and becomes a bottleneck is when you start to see dysfunction.

efuquen··on Career-Changing Programming Books
Functional Programming in Scala would be my suggestion:

http://www.amazon.com/Functional-Programming-Scala-Paul-Chiu...

I would consider it an updated and more practically minded version of SICP, which is of course amazing as well but not the sort of book you asked for.

efuquen··on If you have startup stock options, check your option plan
True, but in the current hiring climate and if you're still at an early stage you should definitely still have leverage.
efuquen··on Marissa Mayer Has Completed Step One
I'm not sure how you could argue Apple wasn't an 'it' company. Obviously that's a pretty subjective term but not only did they have a revolutionary product but their IPO was a pretty big deal as well. From the Apple Wikipedia article:

On December 12, 1980, Apple went public at $22 per share,[30] generating more capital than any IPO since Ford Motor Company in 1956 and instantly creating more millionaires (about 300) than any company in history.[31]

efuquen··on Coding is not the new literacy
> As to the need for coding so that humans could interact with machines, I think in the long run, this is also going to progress to the point where the machine would be aware of the abilities of the human it's dealing with and make it easy for the human to interact with itself.

And when is that long run going to play out, in the next 50, 100, 500 years? A lot of the learn to code movement is about economic empowerment, providing an avenue for economic advancement for children and adults, especially children and adults that wouldn't have thought coding as a career was possible for them or have had the access to resources to really pursue it.

Yes, automation is eliminating jobs, but still creating new and well paying technical ones. Whether and when we'll reach some technological singularity is all based on a lot of conjecture, and how that ultimately will pan out with how we structure our economy is impossible to predict. In the mean time we have the current reality, one that most likely will result in tech providing plenty of well paying jobs for at least a few more generations. The idea of coding as literacy, as has been stated before, isn't that everyone needs to become a software engineer. It's that as a person coming from any background you at least get the opportunity to see if it's a career you would want to pursue, and if not at least give you more insight into how technology works and make you a more well rounded citizen.

efuquen··on An Open Letter to Jessica Livingston About YC's Female Founders Conference
> making people take an action to better your financial position is slavery.

"What is Watsi?

Watsi is a global crowdfunding platform that enables anyone to donate as little as $5 to directly fund life-changing healthcare for people in need. Watsi is a registered U.S. 501(c)(3) non-profit organization (EIN: 45-3236734)."

https://watsi.org/faq

If these were the actions of a CEO for a for profit business your statements might make more sense, except that's not the case at all. Nobody is getting rich off Watsi and there goals are commendable.

Not to say there aren't probably other examples that would make your point, but seriously this doesn't seem like a good one to pick.

efuquen··on Sex redefined: the idea of two sexes is simplistic
You are contradicted by the very Wikipedia article you posted: "Binary means composed of two pieces or two parts" You look it up in any dictionary and a similar definition will be given, which in the context of the article is a completely correct usage. Binary as a word predates computer science by quite a bit ...
efuquen··on App Container and Docker
> At the same time as adding Docker support to Rocket, we have also opened a pull-request that enables Docker to run appc images (ACIs).

I really hope this lands and something constructive can come out of it. There is a lot more that can be gained by these communities working together and not promoting divisiveness.

efuquen··on Docker 1.5: IPv6 support, read-only containers, stats, and more
> You know, I think this is really 1-way... I have not see anything along these levels of hostility coming from the CoreOS camp.

Personally, I agree with you, just trying to stay neutral with my comment. Recently went to a CoreOS meetup in NYC and from what I can tell the CoreOS guys seem super nice and very knowledgeable, nothing else I've seen anyone representing them say or do in public suggests any malice against Docker.

efuquen··on Docker 1.5: IPv6 support, read-only containers, stats, and more
That seems unlikely, based off the bad blood developing between CoreOS and Docker. See the links below:

https://github.com/docker/docker/issues/9538

https://github.com/docker/docker/issues/10643

efuquen··on Gotham Air: Manhattan to JFK in 6 minutes for $99
Man would love a Tesla to pick me when randomly using Uber one day.
← PreviousPage 4 of 10Next →