HNHacker News
TopNewBestAskShowJobs

kiklion

194 karma · joined August 9, 2021

submissionscomments
kiklion··on ‘Trojan Source’ Bug Threatens the Security of All Code
So after reading other parts, I get where I was mistaken but still believe proper coding practices of avoiding magic strings would avoid many of the potential issues.

My mistake was thinking the initial Unicode character was changing the comparison string similar to a non printable character could. But instead it flips the ordering so that the comment is part of the comparison string and then the string is terminated.

kiklion··on ‘Trojan Source’ Bug Threatens the Security of All Code
Sorry, still don’t get it.

Isn’t the issue that they are using magic strings? If the strings were something like RoleConstants.Admin then this is avoided?

Though I don’t understand the point of the Unicode characters in the comment string so I must be missing something.

kiklion··on Long Beach has temporarily suspended container stacking limitations
Elsewhere someone mentioned it’s cheaper to build a new container in China than to ship and empty one over from the US. Even if you are already sending the boat.

This sort of implies that it’s incredibly cheap to make the container, and/or it’s expensive to add that weight to the ship, and/or our ports are incredibly slow at loading empty containers onto ships.

kiklion··on Long Beach has temporarily suspended container stacking limitations
Even if there are businesses that you don’t want, it can be solved outside of broad strokes zoning.
kiklion··on Google said it had successfully ‘slowed down’ European privacy rules
> That cookie banner is mostly corporations trying to be sneaky and trying to trick people into giving consent, or just flat-out misunderstanding the regulation.

If the cookie banner satisfies the regulations and is the path of least resistance, then companies are going to use it.

If the EU doesn’t want the cookie banner everywhere then the regulations need to not allow it.

It is much, much easier to put a banner up than to audit every application and technology used to ensure nothing tracks the user.

kiklion··on Former Netflix executive convicted of receiving bribes from contractors
Add a reward for whistleblowing on people accepting bribes?

Then it’s optimal to offer bribes indiscriminately, just to turn around and report them for accepting.

kiklion··on AWS Communism: How we cut our Load Balancing cost by more than 96%
Sounds like AWS is incredibly simple to use if you have your developers trying to minimize costs instead of actually getting it to work. Which is a lot better than other products out there which may be cheaper but end up not working as advertised after spending half a year ‘integrating’.
kiklion··on Former Boeing 737 Max Chief Technical Pilot Indicted for Fraud
> It can be done, it just costs money.

Well money and time.

You speak as if you think that if only the great billionaires accepted a little less money then we could have safety.

How many lives are you willing to lose for a multi year delay to accommodate the FDA recreating every required test that the pharmaceutical company did? How many lives are currently lost because the current system doesn’t work?

Your suggestion is akin to voter id’s as a requirement to prevent voter fraud. How many legitimate voters are going to be prevented from voting due to the new rules to stop how many prior confirmed cases of voter fraud?

This isn’t a lack of resources. This is society deciding that the resources are better used elsewhere.

kiklion··on Strict Id Laws Don’t Stop Voters: Evidence from a U.S. Nationwide Panel
> It's possible to exploit this: you can claim somebody else's name, and apparently get away with casting their vote.

This is made more likely by voter rolls being public. In NC, you can even see if a given person voted in a given election. Not their vote, but whether they voted or not. Which is information you could use to identify identities up for impersonating.

kiklion··on Record share of small businesses in U.S. report job vacancies
Can’t find the source, but the long of it is that the value of commercial property is a function of the rent that you can get.

If you are ‘looking’ for a renter at a given rate, then the value isn’t reassessed.

If you lower your rate and rent it at a reduced rate, then the value gets reassessed. If it gets reassessed too low, now your loan gets margin called and you need to pay cash to keep your loan to value within a set range. If you don’t have that money, then it’s in your interest to keep looking at unrealistic rents.

There is also commonly a provision to tack missed payments on to the end of the loan + interest so the financiers aren’t that quick to foreclose. Finally, any changes to the agreement require a % of financiers to agree which gets difficult when the financiers get more numerous.

kiklion··on Record share of small businesses in U.S. report job vacancies
Not to mention that raising wages really only helps localized labor shortages.

If you raise wages and get employees from your competitor, then you’ve moved the labor shortage to another company but it still exists.

The only way raising wages helps with a labor shortage is if you hire from a pool of people either currently unemployed or people working in a field with a labor surplus. For the latter, I don’t know what fields have a labor surplus right now and it’s uncommon for people to be skilled enough to do two completely different skilled labor jobs that are worth equal pay that this can be an option for the company.

For the second group, hiring the unemployed, $10 an hour is already significantly more than $0. So if you think raising it more would make a difference, you need to explain what $11 an hour would do that $10 doesn’t.

For instance, some people can’t work because the cost of daycare exceeds the income they’d bring in. Raising wages could change that formula… though I’ve also heard from daycare operators that they are dealing with a labor shortage. If they raise wages then they raise daycare costs then other companies need to raise their wages even more.

Some people can’t work because school is doing remote learning. These people can’t work no matter what the wages offered are.

kiklion··on Things I’ve learned in my 20 years as a software engineer
> The limit isn't how fast they type. Its how correct the code is

And how good your autocomplete tools are, or you repertoire of code based to copy from.

kiklion··on Things I’ve learned in my 20 years as a software engineer
Unless it’s consumed by an AI. Which I don’t fully understand but am comfortable assuming that the AI might be able to ‘teach’ itself to consume an API.
kiklion··on Things I’ve learned in my 20 years as a software engineer
> At the end of the day, if you dig deep enough, the why will be related to human happiness.

At one of my jobs, one of my tasks was to take client HR feeds and load them into downstream systems for travel management. On your second day of employment at your company, you should have a profile in our system which was a portal that displayed all travel policies and a profile in whatever booking tool your company used.

We knew who your manager was so approval emails went out automatically. We knew what corporate card was assigned to you, so you never had to deal with that. We knew what preferred vendors your company had agreements with etc

All I was doing was data manipulation and loading on a scheduled or triggered basis. But ultimately it allowed new hires in a new environment to have an easy time booking their trip for mandatory training.

Any time our process failed, you had a traveler stressed out that they wouldn’t be able to book the trip in time or have to outlay money and reimburse later or get stuck at a distant airport.

kiklion··on USS Connecticut (SSN 22) struck an object while submerged on Oct. 2
One of these videos gives some good information. And all of them are interesting.

https://youtube.com/playlist?list=PLjHf9jaFs8XWoGULb2HQRvhzB...

kiklion··on Tesla’s headquarters will move to Austin
Am I misunderstanding or are you basically saying that the monthly cost of housing is roughly equivalent so more taxes = lower home prices, such that taxes + principal + interest is the same in both places?
kiklion··on Apple to face EU antitrust charge over NFC chip
But if you are chasing sign up bonuses, that typically doesn’t happen all at once.

Assume you have a card for restaurants, one of travel, one for grocery’s, one for gas, one for entertainment and one catch all.

That’s 6. What else do you have a dedicated card for? 14 cards with sign up bonuses? All at the same time, each with minimum spending requirements to earn that bonus?

Let’s add some more. I have one card that pays $25 every quarter that I pay off in full every month so I use it once every month. I have a card with rotating categories. Even with multiple rotating categories I don’t see this going up past 12 cards.

kiklion··on Is 40 the New 60?
> Computing hasn't changed radically in a long time and certainly not programming.

This might depend on what you consider radical.

Web forms vs MVC vs react + restful API are fairly different coding paradigms.

Trying to create a windows service in net framework 2.0 is totally different than net core 5.

Or using SQLDataReader to read executed sql strings vs entity framework?

Even just dependency injection and scope definitions (transient, singleton, scoped) is very basic yet is something I’ve seen older developers tripping over. At least it’s an easy to identify run time error as it validates the container when running in development.

I’m not saying older developers are bad, but developers with the mindset that coding now is the same as coding 20 years ago are either using a language that never developed itself or are going to stumble over the changes that did occur.

kiklion··on Is 40 the New 60?
I’m only 33 but I had 0 difficulty in finding employment, even a few months into Covid. However I’m also a ‘senior developer’ already, so there isn’t much room title wise to go in 7 years that isn’t management.

But that’s also kind of expected. As a senior developer, I can code faster and better than our junior devs but more importantly I can teach them to be better by reviewing their code. As I get older I am spending less time coding myself and more time reviewing others code.

A 40 year old developer is going to be telling stories of their first gig going through code printed out on paper reviewing it for a y2k bug… when I wouldn’t be surprised if 99% of this years college graduates never heard of y2k.

kiklion··on Intel breaks ground on $20B Arizona plants as U.S. chip factory race heats up
What is ‘using water’ in this context? Is it boiled off? Contaminated and needs to be cleaned?
kiklion··on Food fraud and counterfeit cotton: detectives untangling the global supply chain
> Western medicine has largely ignored environmental effects.

I wouldn’t say they ignored it, instead environmental effects aren’t in scope to medicine. If your doctor said ‘you live on Long Island so you have a higher chance of breast cancer, combined with your family history, I advise you to sell everything and move your family.’ The vast majority of people are going yo ignore that.

Even if you have the means to move, your doctor can’t quantify your local ties and relationships in a meaningful way to determine if increased risks from the environment are worth it.

kiklion··on Disclosure of three 0-day iOS vulnerabilities
Sometimes you need to accept you just aren’t the target audience of a product.

You may love cars. You might think Tesla’s are amazing. But if you live on a small island without an electrical grid, it might not be the car for you just because it doesn’t come with its own solar panels.

kiklion··on BlackRock and HSBC funds boosted Evergrande holdings as crisis loomed
If they are holders of debt, don’t get possibly get some vote on debt restructuring?
kiklion··on The reason employees aren't returning to work in America [video]
> Both parents working all day and the kids getting a mediocre upbringing under the care of strangers

The only problem here is the ‘mediocre’ upbringing. My daughter is in a daycare where she is learning Spanish words/phrases in addition to English.

My daughter will be 2 in December and the daycare has her recognizing most letters, numbers, colors and shapes through dedicated practice. She uses tongs and spoons to practice picking up items and separating them by color or by number ‘grab 4 purple fuzz balls!’

These are teaching programs I would never have thought of at her age. I’d just point to fingers and toes and count to 10 or sing the ABC’s.

My daycare printed out paper with every letter and asks her to grab the letters of her name. Or she has an image with lower case letters on it and she asks my daughter to match the upper case letters out of a pile.

Long story short, raising kids newborn to 5 is a specialized skill just like teaching 5 to whatever, and society can benefit from having better educators for our children than what random adults turn out to be.

kiklion··on Lumber crash leads to 'blowout' sales as prices crater
I financed 250,000 of a mortgage last year, and my mortgage payment is about $1200 a month (including taxes and insurance)

Assuming taxes and insurance correspond with a % of home value, a 1 million mortgage would be about $4,800 a month.

Or about $4,000 a month if talking about a $1 million dollar house with 80% financed.

kiklion··on Stripe banned us for payment disputes but we never had a single dispute
> Ideally, good companies will find a balance with AI and human operators that's also sustainable as a business.

This is the crux of it. What do you define as a balance? In this example, Stripe shouldn’t be using ML to actually ban accounts but instead to flag accounts for manual review.

My company distributes advertisements. We need to watch every ad we ever distribute to ensure both its quality and legality. We have and still are investigating ML to improve this process, but because regulations put the cost on us for false negatives, we would use ML only to identify when it knows an ad fails our checks. It would then pulls it from the QC queue before any tech manually reviews it and emails the client informing it was blocked and why it was blocked and a link to a form where they can request a manual review if they think it was a false positive.

Our contracts allow for a fee to be imposed on the client if they challenge a block which is upheld after manual review.

Doing it this way we reduced our tech workload by removing clearly violating ads from QC queue and we give the client a clear and quick way to challenge the results of the ML.

At least, that is the plan here. It’s still in R&D.

kiklion··on The effects of remote work on collaboration among information workers
It kind of depends on the details.

My company has offices that you can go to, but if you want to work remotely then it’s up to you to manage your environment.

The company already has offices. Why would they pay for more just because you don’t want to go to the offices.

There is a one time budget for hardware, such as a second monitor at home, we’ll have to see how that plays out with upgrades in a few years.

kiklion··on Problems with Oracle SQL
I found the same. C# being on GitHub combined with the Microsoft documentation has made working with it a breeze. If I ever have any doubt, I just step into the code itself and figure it out.
kiklion··on Rent control isn’t working in Sweden
Isn’t rent control, as a means of addressing housing affordability, one of the things that nearly every economist agrees doesn’t work?

If you want to use rent control as a means to ensure individuals of various levels of wealth intermingle… then there is a conversation to be had. But it completely fails to make housing more affordable overall.

kiklion··on Coinbase Drops Promise of Token’s Cash Backing That Wasn’t True
I have no crypto investments, but this is basically where the line is for me. If they took the 1 USD backing the coin and invested it in US government bonds so that only a fraction is immediately available (but a large enough fraction to cover the most likely withdrawal rates) then it would be fine with me though they should advertise that more clearly.

If they take the money and invest it in ‘good’ companies, that is too much risk to the underlying assets.

Though I’m American and could see foreigners not thinking US bonds were safe enough.

← PreviousPage 2 of 2