Hacker News Reader

evandwighton Twitch is hacked, and its source code leaked

Why does it matter if hashes are the same?

That only tells you the passwords are the same.

evandwighton E-Ink Magic Calendar that runs off a battery powered Raspberry Pi

https://news.ycombinator.com/item?id=27831868

Seems to be a meaty thread if anyone else is curious.

evandwighton You either die an MVP or live long enough to build content moderation

I agree. You build the MVP then as you need content moderation you start requiring more onerous proof of identity. The only goal is to make ban evasion more difficult.

For everything else, just ask the community what they want. If they don't like Donald Trump in the conversation, then he's gone. Donald can then attempt to find a community (subreddit) that accepts him. That community can be quarantined or banned if people really don't like it.

Thank you for the feedback. I strongly suspect I'm wasting my time :(

evandwighton You either die an MVP or live long enough to build content moderation

I agree that you'd need to securely store the personal information but as it's only used during account sign up it could be an entirely separate system.

It's definitely a huge draw back that you'd risk such important information.

evandwighton You either die an MVP or live long enough to build content moderation

I should clarify - crowd sourced moderation, not no moderation. People can still be banned if the community doesn't like them.

I broadly agree but invites aren't complex. See lobste.rs

evandwighton You either die an MVP or live long enough to build content moderation

Why can't you verify real identities? Can't you use phone numbers, photos of IDs, charging a credit card, verification of physical addresses, or invites to increase the difficulty if creating fake accounts?

Yes, there is an issue of increasing the difficulty if signing up for real users but once accounts are tied to real identities doesn't that allow crowd moderation?

- person whose fallen into your apparent fallacy

evandwighton We killed our end-to-end test suite

Cool. I think I can use this strategy when I add communities.

evandwighton We killed our end-to-end test suite

Thank you! That's so crazy!

evandwighton We killed our end-to-end test suite

How do you run tests in parallel if part of the logic you are testing is a sql statement?

Do you just test them separately? For example, mock out the db when testing the app and then sequentially test the db to make sure the sql statement works as expected. However, this explicitly doesn't test the integration.

evandwighton How We Went All In on sqlc/pgx for Postgres and Go

How are migrations defined?

I ask because I'm still trying to find a good solution for my project.

evandwighton Ask HN: What problem are you close to solving and how can we help?

Cool! Was it supervised learning?

I feel like machine learning isn't at the level where it can tell if something is misleading, unless it's from a known sketchy source.

evandwighton Ask HN: What problem are you close to solving and how can we help?

That's a very interesting system! I've been reading about it but I'm not sure how it applies.

> (if they have a preference over which action will be taken) are incentivised to give more extreme answers.

With yes and no answers, how can answers become more extreme? If you are asked "Is this misleading? Yes/No" and it's only marked as misleading when "Yes" is the majority, then you are incentivized to answer with your true opinion. If you want the post to be marked misleading, then answering yes increases the chance that it is marked as such.

The bayesian truth sereum information score makes sense when you are trying to reward people for truthfully answering your questions; for example by paying them [0]. When asking "Is this misleading?", how do you use the information score to compute who won?

[0] - http://www.eecs.harvard.edu/cs286r/courses/fall10/papers/DW0...

evandwighton Ask HN: What problem are you close to solving and how can we help?

I'm trying to make social media moderation more democratic and using that to decide fuzzy questions like "should this post be censored", or "is this misleading" [0]. While the crowd's answer won't be perfect it will help sort through a lot of the noise and feel better than the decision of whatever mod happened to create the subreddit.

The problem: how can I make decisions based on a sample with a binary question. I think the central limit theorem applies, and I need to account for various priors and missing votes. Is there an existing solution to this problem? The server is written in nodejs, if that matters.

[0] - https://efficientdemocracy.com/about/what-is-this

evandwighton Boeing to ground Starliner indefinitely until valve issue solved

I thought it was a fixed price contract, but apparently nasa has been paying them above that.

https://arstechnica.com/science/2019/11/nasa-report-finds-bo...

evandwighton Reddit raises $410M in new funding

I think google voice may be the exception. Of the 6 other voip providers I've tried none could get short code sms.

https://support.google.com/voice/thread/1592118/wellsfargo-s...

evandwighton NodeJS security cheat sheet

Thanks for the advice. Unfortunately I don't know anyone who would do it. Do you have any good recommendations of services?

My goal was to be more secure than an out of date wordpress site - which I think I have achieved.

I don't really understand the harm that can come from an email/password/ip leak, besides spam or stolen accounts if they reuse their password. Do you have a link that might impress the seriousness of the situation on me?

evandwighton Reddit raises $410M in new funding

Very cool! Thanks for the link!!!

It's even open source!

evandwighton Reddit raises $410M in new funding

Yes. With this system it would be important to verify identities on sign up. I think verifying phone number would largely resolve the issue (SMS short codes don't work on VOIP phones). There many other levels to reduce fake accounts that can be added if problems begin to occur.

The main issue is the more difficult sign up is, the less people sign up. It's a balancing act.

With any voting system you have to detect the validity of the votes, even upvotes.

evandwighton Reddit raises $410M in new funding

Do you think having all the members of the subreddit (or the entire site) vote on who the mod should be? I think there are many ways to make this efficient by statistical sampling, proxy votes, and detecting when statistical errors occur. To restrict people to one account you'd need to verify phone numbers.

I'm currently trying to build this but I'm not a programmer so it's slow going. I'm interested in your thoughts as I'm sure I'm missing something obvious.

evandwighton NodeJS security cheat sheet

This is exactly the type of document I needed. I have no experience in web development and am making my first site. I knew some of the vulnerabilities but unknown unknowns are always a problem. This list is obviously not complete, but it allows me to catch common errors before I release.

The main recommendations that I didn't know was request size limits - though I'll probably set the limit in ngnix.