HNHacker News
TopNewBestAskShowJobs

msantos

1,320 karma · joined July 17, 2012

submissionscomments
msantos··on Show HN: Everyone Panic – Almost-free downtime phone alerts using Twilio
Why reinvent the wheel?

If all you need is monitoring a single end-point, then just signup to a Pingdom free account. Very reliable monitoring and 20 SMS notifications per month (no caps on email notifications) https://www.pingdom.com/free/

And if you need to monitor more than one system, then go for Pingdom "Starter" for only £6.99/month https://www.pingdom.com/pricing/

IMO that's fairly cheap and avoid yet another system to maintain..

msantos··on TrueCrypt suggesting migration to BitLocker?
Are you sure about the domain www.trucrypt.org ? there's a typo there, no?
msantos··on Great miscalculations: The French railway error and others
To be fair, BBC's "Magazine" section has always had this kind of stuff.
msantos··on 60,000 jobs VS a killing machine.
Such as ex-PM Tony Blair and the BAE Systems deal with the Saudis.
msantos··on Number of msecs since Jan 1 1970 hits 1400000000000 at 16:53:20 GMT tomorrow
It's time to start the count down to 1500000000000 (Fri, 14 Jul 2017 03:40:00)

=)

msantos··on Ask HN: When was the last time you completely shutdown your laptop?
Every time I'm about to go through custom's X-ray machines. I'm not sure why, maybe just coincidence, twice my previous Dell XPS stopped working after going through airport xray while in sleep mode.
msantos··on Coping with the TCP TIME-WAIT state on busy Linux servers
Can't edit the above post, but what I meant was: do NOT use keep-alive if you have a high bounce rate.

Apologies for the poor wording.

msantos··on Coping with the TCP TIME-WAIT state on busy Linux servers
I meant do NOT use keep-alive if you have a high bounce rate.

High traffic and high bounce rate, will leave a lot of TIME_WAIT hanging around for precious seconds and soon enough your server won't be able to accept new connections.

Obviously this applies if you have both: high traffic and high bounce rate. Any high traffic service over TCP where a client connects to the server for a very brief moment and doesn't come back until hours or days later, or never.

msantos··on Coping with the TCP TIME-WAIT state on busy Linux servers
Yes, I meant do NOT use keep-alive if you have a high bounce rate.
msantos··on Coping with the TCP TIME-WAIT state on busy Linux servers
Unless of course you have a high bounce rate (intended or otherwise) never use HTTP keep-alive.
msantos··on One of my Drupal sites was hacked
An easy start point is checking for large number of XSS-alike requests in your httpd logs.

... a dirty example (I apologise in advance)

    grep --color=auto -i -s -P "(\/cgi-bin\/|\.exe|phpmyadmin|awstats|acunetix|(%22|%27|'|\")(%20| |\+)*and[^\w]|sqlmap|xss|BENCHMARK|eval[^\w]|phpinfo|[^\w]ord[^\w]|md5[^\w]|substr|information_schema|prompt|iframe|base64|waitfor|script[^\w]|[^\w]sleep[^\w]|hex[^\w]|unhex|chr[^\w]|char[^\w]|concat[^\w]|concat_ws|windows.*?win\.ini|union.*?select|etc.*?shadow|etc.*?passwd|\.\.\/|%(25)*2E%(25)*2E%(25)*2F|\.\.%(25)*2F|\/\.\/|%(25)*2F%(25)*2E%(25)*2F|%(25)*2F\.%(25)*2F|\\|%(25)*5C|%(25)*45%(25)*45|%[01][0-9ABCDEF])" access_log
msantos··on One of my Drupal sites was hacked
Looks like OP is another victim of Asprox Botnet.

Create a full snapshot of the machine for forensic analysis later. Then follow @patio11 advice and rebuild from the metal up.

That's the only sure way you have a "clean" machine, then sieve through‎ the snapshot and try and find the hacker's entry point.

msantos··on How we got read access on Google’s production servers
A few webcrawlers[1] out there follow HTTP redirect headers and ignore the change in schemas (this method is different of OP's but achieves the same goal).

So anyone can create a trap link such as

    <a href="file:///etc/passwd">gold</a>
Or

   <a href="trap.html">trap</a> 
once trap.html is requested the server issues a header "Location: file:///etc/passwd"

Then it's just a matter of seat and wait for the result to show up wherever that spider shows its indexed results.

[1] https://github.com/scrapy/scrapy/issues/457

msantos··on Ask HN: Recommend tools to manipulate massive (5 million line) csv files.
I use OpenRefine fairly often and I find it great when I need to normalise (millions of rows of) raw data. But it's not a data analysis tool and you'll inevitably need another tool to create charts for example.
msantos··on Mt. Gox's Bitcoins are being sold on Bitstamp?
I wonder if this is true (March 20, 2014):

"is #bitstamp about to become another #mtgox ? Uk trader seeks high court injunction to cease Uk trading operations" https://twitter.com/frankieterrier/status/446638248761503744

"#bitstamp getting sued for $1.2m Uk trader seeks freezing of assets in high court action. #bitstamp not processing withdrawls." https://twitter.com/frankieterrier/status/446637903721287680

msantos··on Mt. Gox's Bitcoins are being sold on Bitstamp?
But does the English law recognise bitcoins as "goods"?

Bitstamp Limited is registered in the UK, but the trading address is a proxy run by UK PLC (http://www.ukplc.com/contact-us.html)

Bitstamp is owned by a couple of Slovenian chaps:

https://www.duedil.com/company/08157033/bitstamp-limited/peo...

https://twitter.com/nejc_kodric

https://twitter.com/damijanmerlak

msantos··on Ask HN: Best GNU/Linux laptop as of March 2014?
I've got a Dell XPS L502X too, running CentOS. I bought it from Dell's outlet over 2 years ago for £583 while the same spec was listed brand new for £1100.

Overall it's a great machine: really like the keyboard, multi-touch mousepad, screen size and resolution.

The only downside is that now I play a lot less Microsoft Flight Simulator since it keeps crashing under wine.

msantos··on Ask HN: How to immigrate considering my "circumstances"?
Edit: student visa (Tier 2)

student visa (Tier 4)

msantos··on Ask HN: How to immigrate considering my "circumstances"?
> I decided in this question to focus on what I regard as obstacles to enter on another countries or finding a job.

That's the wrong approach. In most countries you'll need a job before getting a visa, so focus on job market research beforehand, then check the visa obstacles.

Unless, of course, you don't need a job because you have (loads of) funds to apply for a entrepreneur kinda of visa.

If you have never lived outside your own country, I suggest you write down a list of questions you might have and then ask them around. You might have better changes to get them answered that way, instead of generic stuff. Immigration is highly subjective, by which I mean it depends a lot in people's particular circumstances as much as in foreign laws.

msantos··on Ask HN: How to immigrate considering my "circumstances"?
Bear in mind that some countries (i.e. UK) will not allow you to change visa categories while already in the the country. You must leave and apply for a new visa from your home country.

Example: in the UK if you hold a valid student visa (Tier 2) and find a company willing to employ you based on your expertise (Tier 2), you must to go back to Brazil and apply for a visa "Tier 2" from there and then come back to the UK.

msantos··on Did Malaysian Airlines 370 disappear using SIA68/SQ68 (another 777)?
> MH370 makes for an incredible setup to 'Lost'.

I believe it's more like Timtim's Flight 714

http://en.m.wikipedia.org/wiki/Flight_714

msantos··on What is an easy way to classify a word?
If you're looking for a fairly extensive pre-compiled database, more so than getting into NLP, check out DBpedia and Freebase.

http://en.wikipedia.org/wiki/DBpedia

http://en.wikipedia.org/wiki/Freebase

msantos··on How does the Trent 800 deliver engine data?
This probably doesn't exactly answer your question, but will give you lead to where to start digging from.. https://news.ycombinator.com/item?id=7392295
msantos··on Missing Airplane Flew On for Hours
IMO Boeing and Rolls-Royce (the engine manufacturer) know more about that plane than Malaysia Airlines is letting off right now.

Ref: (43:18) https://www.youtube.com/watch?feature=player_detailpage&v=2L...

Digging an oldie, Boeing still runs SCADA on both 747 and older 777. Going as far as reading engine stats in realtime via telnet.(http://www.infosecisland.com/blogview/16696-FACT-CHECK-SCADA...)

msantos··on Image Background Removal
Renowned fashion houses overall do a great job, except when they add gradient or shadows to mask stuff. But the bulk of the problem, in my case, comes from large department stores when they blend furniture or accessories in fashion photoshoots making them complex and distracting from the main image subject.
msantos··on Image Background Removal
I work in the same market as Lyst, and can say for a fact that the images variations we get from clients even from renowned fashion houses is huge. By variations I mean compression, quality, subject's clarity and the list just goes on...

A good algorithm would surely solve part of the problem, but given the imagery non-uniform patterns a great deal of resources (engineering skills + computing power) would likely be required. Given Lyst's recent VC rounds maybe they can afford that, but I surely cannot.

So I went for the poor-man option: https://gist.github.com/mvsantos/5554663

(I'm definitely bookmarking the link you suggested and also the one suggested by sjtgraham.)

msantos··on Stripe vs. Paymill
I honestly wonder how big these markets are..

  > 17. Bankruptcy lawyers

  > 37. Mail-order brides
msantos··on Show HN: A simple IP address API
>it is thanks to your inability to use the software correctly

I disagree, but have you said it is down to my inability to explain what the problem is, then I agree.

I'm aware of the DNS leaks, and obviously wasn't clear enough and failed to explain what the problem was.

The leak only happens when you run the tor proxy daemon, and your own browser with the appropriate proxy settings.

It's down to the way Firefox, uses the defined proxy for the initial DNS and HTTP requests, but then bypasses it when doing DNS lookups for JS within the initial page loaded.

It doesn't leak DNS lookups made by JS scripts if you use the tor version that includes a mod-Firefox browser.

msantos··on Show HN: A simple IP address API
the geo ip API can be found at http://ip-api.com/docs/home and as for the geo-DNS check https://gdns.re/
msantos··on Show HN: A simple IP address API
I use http://ip-api.com/ and I find it works great (docs: http://ip-api.com/docs/).

It provides response formats: xml, json, csv, newline separated, serialized php. And enforce a limit of 240 requests per minute (that's 14,400 per hour for the lazy).

Fun fact, if you're running tor (tor-0.2.4.17 as proxy not the browser) you'll see the tor exit node in "IP:" and your actual ip i "Real IP:", thanks to gdns' EDNS (https://gdns.re/edns-demo/)

← PreviousPage 3 of 5Next →