HNHacker News
TopNewBestAskShowJobs

nevir

2,815 karma · joined August 26, 2011

submissionscomments
nevir··on Due Diligence Report on Otto and Anthony Levandowski
If his machine was not configured to secure erase files (unlikely; not the default) when emptying trash, they can be "trivially" recovered by firms like this (HFS+ makes it harder than it should be)
nevir··on Ask HN: Who is hiring? (October 2017)
Convoy | Software Engineers | Seattle, WA | Full-Time | ONSITE

https://convoy.com

Help us optimize trucking and logistics - a $800B industry that still runs on fax machines and phone calls.

We would love more engineers, up and down the stack, and anywhere on the generalist <-> specialist spectrum. We use pretty cutting-edge tech (React, React Native, TypeScript, Node, GraphQL), but we're more interested in engineering chops than any particular tech skills.

I've been here since the beginning (over two years now). The team has grown quickly, but we still have a tight-knit and incredibly smart group of engineers. We have an endless supply of interesting problems including machine learning, service architecture, mobile/desktop/web UX, complicated business modeling, and much more.

Some of our backers include Y Combinator (Continuity Fund), Jeff Bezos, Bill Gates, and Greylock Partners. You can read more about us:

http://www.mosaicventures.com/mosaicblog/2017/7/25/our-inves... https://www.theverge.com/2017/7/26/16027650/convoy-trucking-...

If you're interested in hearing more, reach out and grab coffee with me or one of our other developers. Help us grow an amazing tech team from a very early point in our company's history!

http://jobs.convoy.com

nevir··on Hacker News Clone Using GraphQL and React
It certainly does introduce side effects (by default, for Apollo or Relay):

* A network request is kicked off if the cache doesn't contain the data the component declares a dependency on.

* other components that depend on any part of the requested subgraph will update when the response comes in

* query observers (which HoC'd components really are) will similarly fire, potentially triggering other side effects in your application

nevir··on Equifax C.E.O. Richard Smith Retires After Huge Data Breach
Companies that take this sort of thing seriously ALSO have breaches occur. They just do a better job of mitigating them, and messaging them.
nevir··on A new kind of map: it’s about time
I wonder if some sort of projection would help there: expand areas around the points of interest, and compress space between points.
nevir··on Ask HN: Who is hiring? (September 2017)
Convoy | Software Engineers | Seattle, WA | Full-Time | ONSITE

https://convoy.com

Help us optimize trucking and logistics - a $800B industry that still runs on fax machines and phone calls.

We would love more engineers, up and down the stack, and anywhere on the generalist <-> specialist spectrum. We use pretty cutting-edge tech (React, React Native, TypeScript, Node, GraphQL), but we're more interested in engineering chops than any particular tech skills.

I've been here since the beginning (over two years now). The team has grown quickly, but we still have a tight-knit and incredibly smart group of engineers. We have an endless supply of interesting problems including machine learning, service architecture, mobile/desktop/web UX, complicated business modeling, and much more.

Some of our backers include Y Combinator (Continuity Fund), the founders of Amazon and Microsoft, and Greylock Partners. You can read more about us: http://www.mosaicventures.com/mosaicblog/2017/7/25/our-inves... https://www.theverge.com/2017/7/26/16027650/convoy-trucking-...

If you're interested in hearing more, reach out and grab coffee with me or one of our other developers. Help us grow an amazing tech team from a very early point in our company's history!

http://jobs.convoy.com

nevir··on What the f*ck python
https://github.com/denysdovhan/wtfjs
nevir··on [dead]
Wait, why does the volume of their countributions matter for an issue like this?
nevir··on [dead]
If members of your community are feeling discouraged to the point that they're asking for a CoC, it seems like something worth taking notice of.
nevir··on Android Oreo
It's really hard to do well, and in a performant manner. I'm glad they built it.

Measuring glyphs, dealing with reflow, kerning, whitespace breaking rules, etc is no fun

nevir··on Firefox 55 and Selenium IDE
Their sites aren't very clear - what differentiates their open source version (http://devexpress.github.io/testcafe/) from the paid ($500/dev/year) version? (https://testcafe.devexpress.com/)
nevir··on Learn GraphQL with GitHub
Most likely PDT. There aren't any regions currently observing PST
nevir··on Qbrt – Cross-platform HTML/JS desktop apps using the Firefox Gecko runtime
How important is binary size for desktop apps, though?
nevir··on Convoy raises $62M from Bill Gates and other luminaries to transform trucking
Freight brokerages typically have margins around 15%

https://www.quora.com/What-kind-of-margins-can-non-asset-bas...

nevir··on Soft U2F: A software-based U2F authenticator for macOS
It's really not that much less secure than physical 2FA: I'm willing to bet that most people just leave their hardware key in their laptop at all times. (where "most people" ends up being corporate U2F users, who are probably given YubiKey Nanos and the like)

At that point, your laptop is basically your 2nd factor - which this software is pretty similar to.

nevir··on Pik – a new lossy image format for the internet
Pik pics
nevir··on REST in Peace. Long Live GraphQL
Some random points:

* The caching clients (Relay, Apollo) out there are dog slow for medium to large response payloads. (they're working on it)

* It can add more complexity than you need if used for service<->service chatter (pure RPC may be preferable)

* It's still pretty damn awesome as a data layer, especially to public clients

nevir··on How a VC-funded company is undermining the open-source community
Don't forget that there are actual people that come up with, and write the code for projects like React.

They're often solving problems that affect large numbers of developers (initially, inside their company). And, because of the scale of a company like Facebook, they can afford to work full time on these projects.

They then open source them because there's no strategic value to keeping them private, and significant upside to building a community around them (and not undermining that).

I'd argue that some of the best open source projects come from large companies - due to the sheer number of developer hours they can throw at them. Small dev shops can't afford it, there are very few OSS foundations, and there just aren't that many people (relatively) that can devote enough time on the side to compete.

nevir··on Firefox marketshare revisited
> This explains why the market share decline of Firefox has accelerated so dramatically the last 12 months despite Firefox getting much better during the same time window.

(this quote is from the article, in reference to Google aggressively advertising Chrome)

I'm pretty sure that all the ads mentioned in the article have been around for far longer than 12 months. What else might have happened 12 months ago to influence the decline?

nevir··on ECMAScript 2017 Language Specification
Until then, lodash.mapValues is your friend :P
nevir··on The bloat of AMP
> fine but this is entirely irrelevant. the problem is that no one was optimizing for the deliverable (JavaScript). the GWT folks could have easily written an excellent compiler so it didnt generate a bunch of slow trash.

Compilers can only optimize so much. GWT/Closure do a very good job of it, too. https://www.peterbe.com/plog/advanced-closure-compiler-vs-ug...

Much of the "slow trash" is already optimized to death - it just dies under the weight of insane complexity (e.g. features), browser support, and overly-generic (IMO) support libraries

> which requires a massive slow polyfill in all but latest Chrome and results in a shit experience for all others (if i recall a related thread correctly).

Tangential: I'm not sure which version of Polymer they're using - but 1.0+ removes the need for most of the polyfilling.

nevir··on The bloat of AMP
> Guys that made the Closure compiler must take JS seriously.

Indeed; Arv is a TC39 member.

> Gmail in particular is still written using GWT, AFAIK, hence the strange HTML, etc. Its current frontend is probably an unsexy maintenance project, with little or no new development; most new features and dev efforts are likely in the "inbox" project, etc.

IIRC, Inbox is also GWT, so that they could cross-compile for the native platforms (https://gmail.googleblog.com/2014/11/going-under-hood-of-inb...)

nevir··on The bloat of AMP
> And exactly what language do these fine folks do their frontend development in, Go, C++?

For a very long time, GWT (Java compiled to JS) was the preferred approach. Then development moved to the Closure compiler (JS following very Java-like patterns), and only very recently is ES6 style code taking off.

Much of the code you see still carries the legacy of GWT/Closure (and there is so much there that porting would be an insane task). It's a slow process. But, for example, YouTube is switching over to Polymer (https://youtube.googleblog.com/2017/05/a-sneak-peek-at-youtu...).

> Google sure spends a lot of resources on this lesser language for how few engineers want to work with it.

Google is a massive company, with many different (often conflicting) initiatives. Chrome spends a lot of effort on JavaScript; but Chrome engineers are (for the most part) not the ones that are writing Google's frontend code.

nevir··on The bloat of AMP
Addy, Dominic, Eric, the Pauls, etc are (mostly) dev outreach for the Chrome team, which is why they're so well known. There are a LOT of talented frontend devs in Google; you just don't see them much externally.

That being said, there is also a toxic stance from many Google engineers (and management) that JS is a "lesser" language, and that feeling often translates to the devs that work in it.

nevir··on Amazon’s New Customer
AWS was not built for internal-first use. For quite some time (often years) after S3/EC2/etc launched, they were not available internally.

From what I hear, they are now used pretty extensively internally (and that may have been an end goal)

nevir··on Securing your API: a modern alternative to CSRF tokens
https://caniuse.com/#feat=cors and hit "show all"

TL;DR - evergreen browsers, mobile browsers (except for images), IE 11+, and IE 8+ partially supports it

nevir··on Uber Fires More Than 20 Employees in Harassment Probe
Also deal with all the crazy situations that arise from cars driving humans through cities
nevir··on Uber Fires Anthony Levandowski
Much/most of it was probably tied to his continued employment
nevir··on Jamboard is now available
Why does the stand cost $1350!? (or a mere $1200 during introductory pricing)
nevir··on JavaScript Concurrency Model and Event Loop
It's very important that JS devs be aware of the distinction there too - especially as Promises gain traction
← PreviousPage 9 of 16Next →