HNHacker News
TopNewBestAskShowJobs

g3rv4

747 karma · joined January 8, 2017

submissionscomments
g3rv4··on Installing NixOS on Raspberry Pi 4
I'm submitting this with the hope that folks share other NixOS tutorials.
g3rv4··on I've started using Firefox and can never go back to Chrome
Replied with this on a different thread, but I built an extension[1] so that I could choose which sites are opened in Chrome... so that whenever I need to use Google Meet, it automatically opens it on Chrome.

[1]: https://onchrome.gervas.io

g3rv4··on I've started using Firefox and can never go back to Chrome
I built an extension[1] so that I could choose which sites are opened in Chrome... so that whenever I need to use Google Meet, it automatically opens it on Chrome.

[1]: https://onchrome.gervas.io

g3rv4··on Assume your devices are compromised
I agree, if I lost my memory and can't remember how to access my blog or run docker then I'd be out of my digital life.

In that scenario though, I'd also be out of my digital life even if I had access to 1password.

g3rv4··on Assume your devices are compromised
I wish I found your app before I wrote mine [1] :) you seem to be way better versed in cryptography than I am. What's the advantage of having the main document and the keys separated?

[1]: https://g3rv4.com/2022/04/using-shamir-secret-sharing

g3rv4··on Assume your devices are compromised
instructions are on my blog :)
g3rv4··on Assume your devices are compromised
I trust it enough no solve my DR scenario. If I was targeted by the NSA, I don't expect this to keep me safe.

I don't think SecretSharingDotNet has had any audits, and I'm pretty sure i hasn't been checked for side-channel attacks. I couldn't find anything in GitHub [1] saying it's no longer maintained though.

I'm pretty sure a well founded attacker would be able to hack me, but I think it's orders of magnitude more likely that I'll forget my master password, I'll get stolen, my apartment will catch on fire or I'll just die. Those are the scenarios I'm preparing for.

[1]: https://github.com/shinji-san/SecretSharingDotNet

g3rv4··on Assume your devices are compromised
here you can see how I'm using Shamir Secret Sharing, I gave clear instructions on how to use the shares and in what circumstances.

based on their dynamics, I'm feeling pretty good. I know I have some people there that are tech savvy + some that will take good care of their shares and when they should send those to whom.

Implementation is trivial (especially if you find a library) but maybe you can be inspired by my plan https://g3rv4.com/2022/04/a-plan-for-my-secrets

g3rv4··on Assume your devices are compromised
Shamir Secret Sharing could be the answer you're looking for... I'm sleeping better at night

here's a quick blog post I wrote with my plan. The app is trivial to write if you find a library for your preferred language

https://g3rv4.com/2022/04/a-plan-for-my-secrets

g3rv4··on Assume your devices are compromised
yeah, I've been thinking a lot about it... Shamir Secret Sharing and splitting the shares in a way that makes sense to me have me piece of mind.

I even wrote a trivial console app to let my wife restore my secrets if I were to drop dead tonight.

g3rv4··on A Conspiracy to Kill IE6 (2019)
Original conversation: https://news.ycombinator.com/item?id=19798678
g3rv4··on Chrome extensions are tampering with security headers
slack. I do so with my extension[0]. At one point they rewrote it and added CSP.

In order to inject my code before theirs, I had to come up with different approaches on FF and Chrome... and since it was starting to become a cat and mouse game, I just took the extension private.

After that, they didn't escalate their game. I'm thankful for that, so that I can keep enjoying it without spending lots of time figuring out how to mess with it.

[0] https://refined.chat

g3rv4··on Ask HN: What a universal remote job salary should be?
Also: nice to see you here as well, this is a small scene :P it took me a bit to recognize you!
g3rv4··on Ask HN: What a universal remote job salary should be?
ha, I'm also from Uruguay. A couple months ago I received 3 offers. One of them explained their offer was "the salary from Philadelphia adjusted to the local market". The other two offers where comparable to what I've been making (similar to a US salary). I didn't go for the "local-market adjusted" one.

The only thing they're doing is missing on some talent, but that could be ok for them.

g3rv4··on Why we built our core engineering team outside of the SF Bay Area
at a macro level? sure. At a micro level, had I been convinced that my pay was fair (it was enough to cover my needs and save) and not asked for more, I’d be making upwork money.
g3rv4··on Why we built our core engineering team outside of the SF Bay Area
I’m not Indian (I’m Uruguayan).

There were two times where I more than doubled my pay. At one point I was 1 month into a contract and I got an offer from a previous client doubling what I was getting. I used that to make my case and we figured a schedule for me to make 2x my rate.

Then, I was bored and started playing with Asterisk and Twilio. I built an integration before there were docs on how to do it, I blogged about it and people started contacting me offering me to do it for them.

For each client I asked for more money. I started at 35/h and doubled it every time somebody contacted me.

One of those clients offered me a 40 hours/week contract. They got acquired and I was a key member working 60+ hours per week.

The new company wanted me to sign a long term contract and... to sign it I asked for even more money! since I’d be giving up opportunities to work with other clients.

Once you start making more money it’s easier to get the job because... you’re already being paid that. Obviously, you need to deliver according to the expectations, but luckily that wasn’t an issue for me.

g3rv4··on Why we built our core engineering team outside of the SF Bay Area
ugh, as a developer from a remote country that’s been working for 10+ years for US companies I run as fast as possible from companies like this one.

If I provide the same value as US engineers, why should I make less than US engineers?

Fortunately, I’ve been able to make my case. I hope these Indian engineers realize they’re making 1/15th what they should.

g3rv4··on Show HN: Tight – Simplify Slack with a Chrome Extension
yeah, you would be in the same boat. DM me on twitter?
g3rv4··on Show HN: Tight – Simplify Slack with a Chrome Extension
I'm a big fan of it and already using it :) thought about doing a PR but I'm quite deep in actual job now ;)

I really liked how you avoided doing any JS at all :)

One thing I'd like to propose is making it wider.

g3rv4··on Show HN: Tight – Simplify Slack with a Chrome Extension
Jump to [1] isn't styled, maybe that's something you can look into?

[1] https://gmc.uy/jumpTo.png

g3rv4··on Show HN: Tight – Simplify Slack with a Chrome Extension
> I’m confident that we can continue improving Slack together.

A thousand times this. Thanks <3

g3rv4··on Bye bye BetterSlack
you will def see me there
g3rv4··on Bye bye BetterSlack
GO 🇺🇾! nope, I’ve never worked for a Uruguayan company ¯\_(ツ)_/¯
g3rv4··on Bye bye BetterSlack
woooooowwwwwww so... I could use riot to connect to my company’s slack?

that’s a dream come true!!! I’ll def check it out

g3rv4··on Bye bye BetterSlack
That’s a good point. I’ll def ask after I take it down and let them know. Thanks!
g3rv4··on Bye bye BetterSlack
wow... you turned down an interview at a place you liked because of their tools?

you certainly have stronger feelings about it than I do :)

g3rv4··on Bye bye BetterSlack
lol, wouldn't it be funny?
g3rv4··on Bye bye BetterSlack
that’s def something I’d like to try if they are ok with it
g3rv4··on Bye bye BetterSlack
it’s this: https://chat.stackoverflow.com but unfortunately, it’s not open source or available for other teams to use in private.
g3rv4··on Bye bye BetterSlack
Nothing is stopping other people from doing that now.
Page 1 of 3Next →