HNHacker News
TopNewBestAskShowJobs

getsat

2,041 karma · joined November 29, 2010

submissionscomments
getsat··on A Way to Detect Bias
It's really more like this version of the image: http://i.imgur.com/DqKXPF3.png
getsat··on [dead]
A URL shortener link to a thinly-veiled affiliate marketing page?
getsat··on Algorithmic surrealism: A slow-motion guide to high-frequency trading
I see. Thanks for your side of the story. You are a very interesting person! I'm going to read more of your site later.
getsat··on Mongo BSON Injection: Ruby Regexps Strike Again
Hey Homakov, I'm a big fan of yours. :)

No, money wasn't being stolen, but the validation error meant that clients' money was being spent and not being tracked. The company had to eat the costs.

getsat··on Algorithmic surrealism: A slow-motion guide to high-frequency trading
I just spent 15 minutes Googling this guy because his site in his profile was interesting. He humblebrags about employability, but he's incapable of finding work. He also makes bomb threats: http://blog.up.co/2012/04/30/not-even-bmob-threats-could-det...
getsat··on A Constructive Look at TempleOS
Nice, hadn't seen this one. Thanks!
getsat··on A Constructive Look at TempleOS
I'd love to see a VICE-style documentary which interviews him and really dives into his story.
getsat··on Apple WWDC 2015
Have you looked at C++14? It's a completely new beast.
getsat··on Apple's Tim Cook talks diversity, women, 'the future of our company'
As much as I dislike using overly broad labels:

Liberals tend to favor equality of outcome while conservatives tend to favor equality of opportunity.

These kinds of diversity reports usually show that "white people are overrepresented" and "hispanic and black people are underrepresented". They usually do not mention that asians are GROSSLY overrepresented. It doesn't fit the agenda because, despite being the most successful ethnic group in the US in terms of income, they are not considered "powerful".

getsat··on Ask HN: I'm starting a new job as a PHP developer tomorrow
>They said I have to use a VM. They also mentioned I can't bring my own hardware.

>Suggestions welcome.

Keep looking for a new job. I guarantee this is the tip of the nightmare iceberg you're about to hit.

I hope I am wrong, but I've seen this enough times before to know that I'm probably not.

getsat··on Tell HN: The usage of “ninja” in Who is Hiring? comments has been increasing
No, it was a posting looking for "RUBY ON RAILS DRAGON SLAYERS" if I recall correctly.
getsat··on Mongo BSON Injection: Ruby Regexps Strike Again
Actually, I am reminded of an error that happened which was similar to this. After I left a past company, an engineer flubbed a validation which allowed a subtle bug to go undetected for 10 days which cost the company $500,000.

$50,000/day is an expensive lesson!

getsat··on Tell HN: The usage of “ninja” in Who is Hiring? comments has been increasing
Any openings for a "zen master"?

The most ridiculous one I've seen was "dragon slayer".

getsat··on Three months of Rust
I ported a project to Rust and then ported it to C++14 (which is awesome!), but I only did that because Rust was in a state of massive flux at the time and I got tired of the project breaking every two days due to changes to the compiler/syntax/stdlib. I plan to reevaluate Rust once it's settled down a bit.
getsat··on Mongo BSON Injection: Ruby Regexps Strike Again
It's not trivia. If someone doesn't know the difference, they're going to allow bad data into our database. Large webapps with poor model validations are security and maintenance nightmare.
getsat··on Mongo BSON Injection: Ruby Regexps Strike Again
I use ^$ vs \A\z as an interview question for senior engineers. Sadly, it filters a lot of them out.
getsat··on An email template for candidates frustrated with unresponsive employers
The reason you don't get a reply (in the US anyways) is for legal reasons. If you say anything which could be even remotely (mis)interpreted as some sort of bias, your company could lose lots of money/time and potentially go bankrupt due to a discrimination lawsuit.

It's sadly safer to just not reject candidates at all. Don't hate the player, hate the game.

getsat··on Why Not Use Port Knocking? (2012)
It's not people, though. It's bots! While changing the ssh port adds a comically small amount of security (if any), it isolates you from 99.99% of automated attacks and keeps those logs clean, so I'd recommend it for everyone.

Just remember that the port argument to `scp` is -P and not -p like it is for `ssh`. :p

getsat··on Freedom Act Passes: What We Celebrate, What We Mourn, and Where We Go from Here
>we have every reason to believe that President Obama will sign USA Freedom into law

His official Twitter account said he'll be signing it: https://twitter.com/POTUS/status/605841647193030657

getsat··on Why Not Use Port Knocking? (2012)
Changing the port to something other than the default (even to something obvious like 22222) will get rid of all the log spam. You could also use something like fail2ban, but changing the port is much simpler.
getsat··on All United Flights Grounded Due to Mysterious Problem
Or bots who subscribe to Twitter feeds and open trades based on sentiment
getsat··on Hello World: Windows 10 Available on July 29
Great news, thanks! I apparently signed up for the Windows Insider program a few months ago. :)
getsat··on Real time bidding in Erlang (2012)
That's great!
getsat··on Real time bidding in Erlang (2012)
I gave your presentation a quick look.

Maxmind - good. Not like there's many choices here, though. :)

Instead of "waking up to sync logs", consider using something like NSQ to emit events as they happen. You can scale the number of servers/processes generating messages and the number of workers consuming those messages (and committing them to your database) very easily.

You could also replace the writing of the transaction log with a NSQ event. It lets you avoid having to write and scale the log shipping stuff.

We precalculated which ads a given user was eligible for and a separate process was contacted when a bid request came in to get the info for the ad to show. We never had to do anything funky to do geotargeting exclusion at scale.

Instead of having your adserver connect to a database, have a separate process generate a working set (as JSON or whatever you fancy), compress it, and ship it to the adserver periodically. The adserver can just do a straight load from the file every minute or whatever interval you'd like. If the file's mtime is too old, raise an alert and stop serving ads if necessary. Keeping things separate and simple lets you scale more simply. Our working sets were on average about 2gb uncompressed and they could be loaded in a few seconds (C++/JSON and later Go + JSON).

Seems like it was a fun project and I hope you learned a lot!

getsat··on Real time bidding in Erlang (2012)
I'll write a blog post on it later called "So you want to build a realtime bidding system?" and submit it to HN. :)
getsat··on Real time bidding in Erlang (2012)
Yes, you are correct. The 300k was total across all datacenters. 85% of that was in the US, 10% in Europe, and 5% in Asia.
getsat··on Real time bidding in Erlang (2012)
Anycast will spread incoming requests out to N physical machines, then you can do your layer 3 load balancing, then you can do your SSL termination and HTTP load balancing.

We didn't use anycast, though. I suggested it to our CTO many times and it would have saved us over $5,000/mo in DNS costs, but it never got done.

getsat··on Korean is virtually two languages, which is a problem for North Korean defectors
Maybe it's more specific... like a person from the "southern" USA meeting someone from Wales? They'd have quite a hard time understanding each other.
getsat··on Hello World: Windows 10 Available on July 29
Should I just buy a Windows 7 license to get a free upgrade to Windows 10?
getsat··on Hello World: Windows 10 Available on July 29
Thanks for the tip. I've been playing games on Windows 8.1 without any noticeable issues, but I will keep this in mind. I'll likely not upgrade this pirated copy of Windows 8.1 to 10 (since it literally only has Steam installed), but I will buy 10 to run it in a VM for development.
Page 1 of 32Next →