HNHacker News
TopNewBestAskShowJobs

jtolj

155 karma · joined July 25, 2011

I make digital things, mostly with PHP (gasp), Golang, and JavaScript.

Email: jesse [at] objectfactory [dot] io

https://greasyfork.org/en/scripts/510432-hacker-news-dark-theme

submissionscomments
jtolj··on Give HN: *.til.io resolves to 127.0.0.1
It's around $50 a year for the domain, which is a cost I'm happy to eat as I'm using it myself.

But yes, if you're working on top secret projects or something that might leak sensitive data it's probably not a good idea to use this or any of these other services.

jtolj··on Give HN: *.til.io resolves to 127.0.0.1
I actually was using .local previously, but my co-workers all use .dev so I assumed that was more common ;p.
jtolj··on Give HN: *.til.io resolves to 127.0.0.1
Both of these are really useful, but a lot to type if you just need 127.0.0.1.
jtolj··on Give HN: *.til.io resolves to 127.0.0.1
If you develop multiple websites on your local machine, you distinguish them by using different domain names for each of them. You might have site1.dev and site2.dev.

There are a variety of methods to handle this, but commonly you add a record to your system's host file to resolve these domain names to the ip address 127.0.0.1 (your local computer).

Using site1.til.io and site2.til.io instead eliminates having to manage that host file (which is a minor and repetitive annoyance).

jtolj··on Give HN: *.til.io resolves to 127.0.0.1
Not following how this might present a security issue, but I'm curious for you to expand on this. Seems like even if the DNS record managed to change in the midst of a POST request, the post would pretty obviously fail to perform as expected.

But yes, an obvious disclaimer of "don't trust me by POSTing your bank passwords to any of these subdomains" might be in order.

jtolj··on Give HN: *.til.io resolves to 127.0.0.1
I got tired of editing my host file for local development. Have been meaning to do this for a while, but I never had a domain name short enough so as not to be annoying to type.
jtolj··on Sticker shock: Why are glasses so expensive? [video]
That's actually the biggest reason I prefer to buy online, it's nearly impossible to get glasses locally without a huge brand name plastered on the side.
jtolj··on Sticker shock: Why are glasses so expensive? [video]
I think that a big change in prescriptions can cause it temporarily as well, but definitely have them re-check the prescription/PD. A surprising number of mistakes are made.

Also if you notice that your eyes aren't centered vertically in the frames, that can mean the optical center is off which can lead to headaches.

jtolj··on Sticker shock: Why are glasses so expensive? [video]
I've tried a bunch of cheap online vendors (Zenni, Optical4Less, Goggles4U) over the years. All were acceptable and probably averaged about $40/pair total with high-index lenses, but the frames always felt cheap and occasionally I'd get a pair that give me headaches (I later learned that likely either the pupiary distance or optical center were off).

When I did have an issue, the return process was pretty tedious and annoying, so I usually just ended up eating the cost and dropping the glasses in a donation bin.

After a few years, I probably ended up spending roughly the same as if I'd gone to a local shop with the advantage of having spare glasses with the correct prescription for the first time in my life.

Recently tried Warby Parker and although they seem extravagantly priced ($95/$120) compared to the others, the quality of the frames were noticeably better and the customer service in a completely different universe. I had to return my first pair from them since the frames ended up being narrower than I expected/gave me headaches and the exchange process was incredibly quick and painless.

I will say, for anyone thinking about ordering glasses online, try your best to get your pupiary distance measured by a professional. It's not easy to get opticians to do anymore, since they know you are going to buy your glasses online but it's a difficult measurement to get yourself and being off by just a few mm can cause headaches.

[edit - got the price of WP high index lenses wrong]

jtolj··on Inputs.io hacked – 4100 BTC stolen
As a Linode & GApps customer that uses DFA I'm curious about this as well... Are they talking about Google, Linode or their own app?
jtolj··on Another Security Blunder Takes Down Another Dark Web Drug Emporium
http://iobm.net/forum/dos/index.php/topic,17.msg113.html#msg...

This is evidently some of the code that was leaked. It's some pretty ugly PHP.

jtolj··on Linode Longview
I've been beta testing Longview for a while. It's been kind of nice to have. I most liked the at-a-glance visibility of whether there were any system package updates available.

The pricing structure is disappointing. I would have rather seen per system pricing ($3-5 mo/server is roughly what it would be worth to me). I have 4-5 nodes running. I'll likely never have 10 so $40/mo doesn't seem like a very good value proposition.

jtolj··on Desperate times call for desperate measures
For me, Google shutting down Reader was a huge wake-up call that I should be paying for the things that I depend on as much as I did GReader.

I signed up & paid for both pinboard and newsblur within a week of the announcement, and purposely avoided theoldreader and others that didn't have any sort of sustainable business model (although there were/are plenty of other solid projects out there).

Glad I didn't have to learn that lesson twice.

jtolj··on My startup is Microsoft-based, here's why
Very true. It's expensive and complex to have real HA/redundancy, but they can't even bounce a DB server without taking down every one of their apps. I have no idea about administering Windows servers, but based on my experience with Windows Update on the desktop, I would imagine that you need to do that relatively often.

Hopefully they have a staging environment running somewhere internally at least.

jtolj··on My startup is Microsoft-based, here's why
>> All our stuff runs on one (1) server > This has nothing to do with MS, but why would you set up such an architecture? If one of the apps hits a memory leak > (their HeatTest project did), than all of your other critical services/apps are interrupted.

It's hard to believe a company would "admit" to running all of these services on a single server. There's no way I would pay for a CRM or Ticketing App (relatively mission critical for many companies) that wasn't highly-available.

jtolj··on Google Reader Apocalypse Extremely Fucking Nigh
Yes, this. I was confused by it too until I uncovered that in a GetSatisfaction thread. If you lock it about 1/4 of the way from the top, the auto mark-read behavior is like GReader.

It should probably default to being locked...

One of my favorite things about Newsblur is how minutely configurable it is, but I think all of that is probably throwing off new users.

jtolj··on Poll: Which RSS reader have you switched to?
I was a heavy GReader user and I settled on Newsblur. It was the closest experience to how I used GReader (uncluttered full screen view, j/k/spacebar to navigate through the list, acceptable and improving android app).

"o" to open the full article in a background tab is pretty useful.

If there was a keyboard shortcut to send to pinboard it would be nearly perfect (for me).

I was initially resistant to paying for something until I realized how much value I get from a hosted RSS reader, $24 a year was a no-brainer.

jtolj··on Drupal.org compromised
Ditto. I'm unable to login with my credentials, and have yet to receive the password reset I requested (although I assume they are getting a lot of those right now, so it may be queued). All these compromises sure are getting tiring. I've already been hit with Evernote, LivingSocial and Linode so far this year (that I'm aware of).
jtolj··on Security incident update
Shoot, you are correct. Definitely an attack vector.

The connection is to the same TTY when I log in via the web terminal and SSH at the same time, so if you are logged in via LISH anyone with the LISH password has access to the logged in user's console + scrollback.

I wasn't able to send BRK from Putty though.

jtolj··on Security incident update
I'm pretty sure this is correct. The LISH passwords just give you console access via ssh (as an alternative to the web-based terminal in Linode Admin), which is essentially the equivalent of getting to an ssh prompt. A login/password would still be required to access the machine.

It doesn't appear that you can reboot or enter single user mode from the LISH console login prompt.

jtolj··on Linode hacked, CCs and passwords leaked
I have two accounts with them, one for my day job and one through my LLC. Right now neither card is showing unusual charges.

My day job had some Google Apps account compromises last month, and this is making me paranoid that the database that contained hashed/salted passwords for our Intranet hosted on Linode was the culprit. The time frame doesn't seem to line up, but we didn't see any evidence of phishing or compromised desktops being involved.

(Don't want to spread fear - I haven't been able to find any evidence our Linodes were compromised either.)

I'm normally huge a Linode evangelist, but I'm severely disappointed with the lack of transparency on this. I'm debating right now whether to rebuild all our nodes from scratch as I'm not sure they can be trusted.

jtolj··on Stripe Button (beta)
Maybe has something to do with this: https://stripe.com/blog/stripejs-and-jsonp (they mention JSONP only supporting GET requests)?
jtolj··on Ask HN: who started something in 2012 that didn't or won't become profitable?
This is so old, you may not see this... but placeshifting -> start watching in one place (laptop/work), close window, pick up where you left off in the video later (Boxee Box/home).
jtolj··on Ask HN: who started something in 2012 that didn't or won't become profitable?
Thanks for the suggestion. When I initially starting brainstorming on the idea, I had some Twitter integration included: auto-adding videos from your timeline (stolen from the Boxee folks) and hashtag "subscriptions"... but it started getting more convoluted to explain to people, so I thought I'd start more simply with just allowing folks to subscribe to "shows".

Obviously my execution is not resonating with people (great signup conversion rates, terrible usage rates), so when I have time I may reboot it as something more like what you're describing.

I still think there is something to the idea of improving the leanback and placeshifting experience for all this great long format web content that's out there (Rev3, This Week In, etc). I'm apparently just not smart enough to figure it out on my own ;p.

jtolj··on Ask HN: who started something in 2012 that didn't or won't become profitable?
Awesome job! I would definitely use this - but I'm getting a 500 error trying to enter my email address with plus character in it.
jtolj··on Ask HN: who started something in 2012 that didn't or won't become profitable?
I quietly launched/brought out of beta http://requeue.com this year. I built it mainly for myself, since I found myself watching more and more long-format web video and wanted a better way to organize it.

The terms of the Youtube API pretty much rule out monetizing the site with advertising, but usage has (sadly?) been low enough that I just eat the cost of the two Linodes it takes to run.

jtolj··on Facebook chooses DIY servers over Dell, HP options
This is exactly why I went with Pogo Linux instead of Dell or a variety of other vendors when my employer was looking at storage appliances. Total transparency on pricing and hardware right on their website, and no persistent calls from d-bag sales guys. Some of the sales reps I talked to made it feel like I was in a used car lot. I had to start screening my calls after a while.

It felt a little risky spending so much money with a smaller company, but so far so good. I thought I was going to have a heart attack when of the $(five-figure) boxes was severely damaged in shipping, but they handled it beautifully and painlessly.

← PreviousPage 2 of 2