HNHacker News
TopNewBestAskShowJobs

mjmasn

498 karma · joined August 21, 2015

submissionscomments
mjmasn··on Show HN: A collection of support replies to make your support stand out
Might be a British/American difference but I found all of these incredibly patronising and insincere. You need empathy and sincerity to be good at customer service. At the very least just think of the reply you'd expect if you had the same problem with a different company.
mjmasn··on Millions of vehicles have unexpected, dangerous front blind zone
I spent a few years in Singapore in the 90s aged 5-8. We were taught to cross the road with a hand in the air. I think this is still the case for children in SG today. It wouldn't help so much in a driveway situation but at pedestrian crossings it can be the difference between getting home safely or not.

Kids should be taught to be aware of their surroundings and that if you can't see the driver of a vehicle, then they likely cannot see you either.

Ultimately though, all that is really just a last-resort safeguard against driver inattention and/or poor parenting. The driver of the vehicle should be 100% responsible for their actions, regardless of safety assistance features like cameras.

Even in my own experience of rear view cameras, pedestrians crossing close to the rear of the vehicle are obscured by the rear pillar until the last second, so it doesn't make mirror checks optional. I imagine similar issues exist for forward-facing cameras where a child walking towards then across the front of the vehicle could be obscured by the A-pillar until it's too late to stop. Again, the driver is responsible to check those areas by moving their head or even getting out of the vehicle and physically checking the blind spot if there are any doubts.

mjmasn··on Tesla autopilot clips wing mirror of parked car
It would definitely be interesting to know if the Tesla 'saw' the black car at any point (and what it was identified as), or if it just looked like another piece of tarmac and kerb. I'm still pretty skeptical we'll ever see safe full autonomous driving other than on motorways, and even then probably with some additional road infrastructure.
mjmasn··on Ask HN: Anyone Work at PayPal?
Thank you so much, I'll pass on the message. Really appreciate it!
mjmasn··on Minnesota Will Pay Residents to Grow Bee-Friendly Lawns
Great news for the bees! In related news, I was just reading about a number of councils in the UK leaving roadside verges to flower, saving them money and encouraging wildlife to flourish.

Would be great to see more of this in towns and cities too, new developments that cover an entire area with concrete and a few token trees/shrubs are not a good long term outcome for anyone. I guess it comes down to how much a planning authority can enforce both the implementation and long term upkeep of 'wild' spaces by the private developers and management companies.

https://www.bbc.co.uk/news/uk-england-48772448

mjmasn··on Show HN: IP-Api.io – Geolocation by IP
Well I hate to be the bearer of bad news but the capital of Wales is not London...
mjmasn··on ACME v2 and Wildcard Certificate Support is Live
> Oh, so you know better than me what kind of content is on my site? So a static site with my resume needs SSL then to protect the other users?

Without TLS how do YOU know that the user is receiving your static resume. Any MitM can tamper with the connection and replace your content with something malicious. With properly configured TLS that's simply not possible (with the exception you describe in corporate settings where BlueCoat's cert has to be added to the machine's trust store in order for that sniffing to be possible). Hopefully in the future even that wont be possible.

mjmasn··on Genetic Study Supports Carbohydrate-Insulin Model of Obesity
It's 49% calories from fat, that's pretty high. A healthy diet is <20% calories from fat. Even that is much more fat than we need.
mjmasn··on ThyssenKrupp Multi – world’s first rope-free elevator [video]
Took me a while to parse but I think he means they taped paper to the floor, then observed that the paper was still on the floor (as opposed to the ceiling) after the elevator looped around. The entire elevator was carpeted so it wasn't obvious if this would be the case or if indeed the elevator flipped over before beginning its descent.
mjmasn··on How MTA shut down my app for Penn Station commuters
Chicken and egg yes, but he had the recent historical data and a bunch of paid-up users.

I'm just amazed this app was even necessary in a first-world transport system. For all their faults, the UK rail network is pretty good at providing timely information (and as some other comments have mentioned have solid APIs for this stuff). Same with the LTA[1] in Singapore.

[1] https://www.mytransport.sg/content/mytransport/home/dataMall...

mjmasn··on How MTA shut down my app for Penn Station commuters
Would have been interesting to see if you could reliably crowd-source the data from commuters themselves.
mjmasn··on Why MailChimp Doesn’t Let New Hires Work for Their First Week on the Job
Just on your personality test point, the Birkman Assessment mentioned in the article is absolutely the pinnacle of personality assessment. It's not like the meaningless toy tests like MBTI/Hogan/16pf you may have experienced before. It covers the usual motivation and behaviour pieces but it is unique in surfacing the underlying needs and stress reactions which often have no correlation to your visible 'normal' behaviour that other people see. Really helpful in determining your approach to different members of the team as well as giving you the common language to explain your needs to other people. In short it's both insightful and actionable for you and your team members in your personal and professional life. Plus it's stable over time, so you take the assessment once and have 20+ years of value from it.

Disclaimer: I work for a company that uses the Birkman Assessment but no relation to MailChimp other than as a user of their newsletter services.

mjmasn··on Shitty url shortener, emoji and ai powered
Seems to be broken. With a https url got redirected to http://https%20//Google.com

With a http url it just redirects back to the shortener homepage.

(Google Chrome on Mac)

mjmasn··on Show HN: Kobble – Notes app that saves directly to GitHub
A timely reminder that online services _have_ to prioritise security if they want to be taken seriously. I guess day one is a good day to learn that lesson though...
mjmasn··on List of Sites Affected by Cloudflare's HTTPS Traffic Leak
Good to hear, I wasn't really trying to accuse, just frustrated at how downplayed this is for ordinary people - your customers' customers. Using language like affected sites when really you mean sites that dumped data about some unknown quantity of affected sites is already a source of confusion even on HN, let alone the wider world. I appreciate this isn't fun for you and your team right now too, so I do hope you've got lucky here and erased the worst of the damage before anyone malicious managed to get involved.
mjmasn··on List of Sites Affected by Cloudflare's HTTPS Traffic Leak
@jgrahamc how can you even answer that question when you didn't detect the issue yourselves?

The email we received was a joke, OK great our domains 'weren't affected' in the sense of memory dumps weren't being injected into our HTML, and luckily we only proxy static images/html through CF so at worst a visitor's google analytics cookie could have been leaked, but on a personal level any person who has used any CF-proxied website (e.g. Uber) in the past few months is potentially affected.

Whether or not you think it's likely anyone discovered this earlier, the fact remains that private data is still in various public and private caches around the world. It's a monumental cock-up that will require every CF proxy customer to rotate keys, invalidate tokens and force mass password resets to ensure complete peace of mind for millions of consumers who will probably never hear about this issue even though their credit card information, passwords and private messages could be floating around the internet as part of a cached version of a website they've never even visited.

Even the way you're looking for cached data to find affected customers - yeah ok, for page x.com/y you found data for customer z.com, but what about the other million times that affected x.com/y page was loaded, that could be data from a million different customers that someone else (human or otherwise) saw, whether they realised what it was or not. And trust me there are more than a few people on the planet who would know _exactly_ what they were seeing.

Forget about shareholder value for a minute, please, because it's an absolutely fatal mistake for your company to downplay an issue like this.

mjmasn··on Implementing success
Would be interesting to see some opinions from the more enterprise-IT oriented folk here, an area where implementation failures are widely reported, and costly to the organisations involved. Do you agree that blaming management or a failure of the technology is too simplistic?
mjmasn··on You Can Change Your Personality
I agree, this is confusing actual personality changes with stress behaviour. Obviously if you reduce stress you can remove unproductive behaviours such as neuroticism but the persons fundamental view of the world hasn't necessarily changed, even if it seems that way if you didn't know the person before the stress behaviours began to dominate.

Look into the Birkman Method, it's a psychometric personality assessment that, unlike other pop-quiz type tools (MBTI et al), distinguishes between your usual behaviour, your fundamental expectation of the world (needs) and your reactions (stress) when those expectations aren't met. It's unlikely that your usual behaviour changes, although it's quite possible that your stress behaviour could mask that (even for years on end) if you're in an environment you can't cope with.

mjmasn··on Show HN: JSON Browse – Fetch, filter and manipulate your JSON inside the browser
Minor reasons but a) it looks untidy (to me), and b) for example if I want to change:

    foo = {
        "bar": true,
        "baz": false
    }
to:

    foo.bar = true;
    foo.baz = false;
then I have extra quotes to delete. Those half seconds add up over a year!

I guess you could argue the opposite though, that this looks messy:

    let headers = {
        Expires: 0,
        'Content-Type': 'application/json'
    }
Which leads me to believe it's a matter of personal preference, and you should just pick one and stick to it :) And look, there's even an eslint rule for it: http://eslint.org/docs/rules/quote-props
mjmasn··on Show HN: JSON Browse – Fetch, filter and manipulate your JSON inside the browser
I assume you mean you mistakenly expect baz to equal:

    {
        bar: "qux"
    }
?

Don't you use syntax highlighting? I can't imagine this ever being an issue...

mjmasn··on Show HN: JSON Browse – Fetch, filter and manipulate your JSON inside the browser
I think the most useful feature here is JSON -> JS conversion. Relatively often I find myself copying and pasting some JSON into a JS file then manually deleting / regexing away the unnecessary quote marks around key names.
mjmasn··on US government to withdraw longstanding warnings about cholesterol (2015)
If you're looking to avoid confusion you should refer to them as starches, they are the complex carbs (such as rice, beans, potatoes etc.) that give us energy and should form the largest proportion of any healthy diet.

- These starches should preferably be unrefined (yes, quit that white bread, discover the great taste of brown rice) and eaten alongside some green and yellow vegetables to get extra vitamins, minerals and fibre.

- If you're trying to lose weight faster, avoid consuming oil and fatty foods (e.g. nuts, avocado), use sparingly otherwise.

- Avoid dairy products at all costs.

- Add meat in small amounts if you really can't live without it.

You'll be getting more than your daily calorie/vitamin/mineral/fibre needs, and by not eating a tonne of refined carbs, fats, dairy, and meat you'll be less of a burden on the planet/country/healthcare systems too!

I mostly follow the above advice, but I'm pragmatic when eating out, not everywhere caters to a vegan/plant based diet, or even vegetarian. So while you'll occasionally catch me eating a delicious chicken burger or even possibly a steak, 99%* of the time I eat a plant based diet with zero added oil.

As for the myth of sugar turning to fat: it's a process known as de novo lipogenesis, and yes it happens efficiently in cows, but in humans not so much unless you're eating carbs in greatly excess of your body's energy needs[0]. In 99%* of normal circumstances, the human body will increase its metabolism to cope with the extra calories from carbs. The problem really _is_ consuming too much fat.

* estimated ;)

[0] https://www.ncbi.nlm.nih.gov/pubmed/10365981 "Only when CHO energy intake exceeds TEE [total energy expenditure] does DNL [de novo lipogenesis] in liver or adipose tissue contribute significantly to the whole-body energy economy. It is concluded that DNL is not the pathway of first resort for added dietary CHO, in humans."

mjmasn··on Major HipChat outage
HipChat is back online, and they have updated the uptime figure to 99.058% for the past 30 days.
mjmasn··on Major HipChat outage
I'll give them the benefit of the doubt and assume that's calculated 1 day in arrears... I actually only noticed they were down because we had an increase in our own app's errors which turned out to be our hipchat webhooks failing with 503s.

Either way I hope we get a root-cause analysis later, would be interesting to know what could take them completely down for 5+ hours. Presumably not a 'straightforward' bad deployment that could be rolled back.

mjmasn··on How the Singapore Circle Line rogue train was caught with data
I don't think they particularly have minute by minute timetables on the MRT, just first and last train times and number of trains operating per line during peak/off-peak periods. On the circle line the trains are driverless and operate with a moving block system (Comms-based Train Control), so the headway between trains is fairly constant, but the absolute timings are dependant on the train ahead travelling at the ideal speed, not stopping for too long etc. (e.g. if someone holds the doors to jump onto the train last minute you'll be delayed as the doors re-open and attempt to close again). So I think you would have to extract logs from the control system or the trains themselves to establish exactly where they were at any particular time. And bear in mind that this information is probably rarely used (at least for this purpose) and may not be in a format suitable for the kind of analysis they needed to do. Funnily enough it was the use (and failure of) of the CBTC system that caused this problem.

Also remember that until they begun the analysis it wasn't clear that a single train was the cause. I imagine they were investigating trackside issues as well as issues with those trains that stopped, rather than an independent train that wasn't experiencing problems.

TLDR; It's not a case of looking at pre-defined timetables.

mjmasn··on The Myers-Briggs Personality Test Is Pretty Much Meaningless
The Birkman Method is a far better tool that doesn't 'put you in a box' so to speak. We use it exclusively at Elaura and with our hoozyu and expresso apps.

https://hoozyu.com https://expresso.elaura.com

mjmasn··on Ask HN: Where should I host my startup?
Is there a VPS provider that _hasn't_ had security issues? Linode has had a few pretty bad ones but they've also been around for a long time and always seem to be improving their systems and processes (lately communication with customers following an incident has improved a lot, and with the DDoS issues they had the improvements they're making to their network are pretty solid). For the price/performance ratio though there's no comparison.

If you can afford it, AWS is possibly a more secure choice with a whole ecosystem of associated products, but at face value if you just need a few VPSes you'll pay a lot more for the same performance than you do with Linode.

mjmasn··on Interactive graphic: Every active satellite orbiting earth
Easter egg mode: press Q once you've started the animation.
mjmasn··on HP is buying Samsung’s printer business for $1.05B
Samsung printers are awful, and their customer service is non-existent. They'll have a lot of synergy with HP ;)
mjmasn··on SSL considered bloated
Total clickbait. More like websites with black backgrounds and bright green monospace fonts considered unreadable.

No major browser will be supporting the insecure mode of http/2. I don't think I'm alone in thinking that is a good thing. I like to know that the page I'm interacting with hasn't been tampered with, whatever website I'm on. Nefarious certificate authorities aside, TLS is the way to do that.

Besides, connections (especially mobile) are getting faster all the time. I'd say encouraging better connectivity is a more worthwhile pursuit than allowing everyone to turn off TLS.

← PreviousPage 2 of 3Next →