HNHacker News
TopNewBestAskShowJobs

rchiniquy

94 karma · joined January 29, 2009

submissionscomments
rchiniquy··on Replit Mobile App
Love to see this on the Steam Deck.
rchiniquy··on ‘If You’re Not a Criminal, Don’t Be Afraid’– NSO CEO says
One problem is that dissent can be criminalized to intentionally break the information feedback loops which preserve liberty.

Another problem I have with it is civil rights (I believe in them).

rchiniquy··on Show HN: Video conference and synchronized YouTube video to do fitness in groups
Which projector did you get, do you like it, is keystoning a problem?
rchiniquy··on Apple tried to buy Tesla for more than it’s currently worth in 2013, report says
The validity of the comparison aside, if Apple had bought Tesla in 2013, I feel pretty confident Tesla would be worth more now than it is.
rchiniquy··on Nonce-misuse resistant cryptography 101
Another great description of cryptographic mechanics from lvh… Kind of do want to understand how authentication works with nonces too though. Any good sources for that?
rchiniquy··on Ask HN: Where to go to learn Modern C?
I've been writing C on and off for 27 years or so and I still enjoyed this book from the list on your stackoverflow link:

21st Century C - Ben Klemens http://www.amazon.com/dp/1449327141/?tag=stackoverfl08-20

You asked about "Modern C" and that caught my eye. Most instructional resources on C focus on facts about C without putting them into perspective as to which C era they belong to. "21st Century C" takes an explicitly modern perspective, is opinionated as to which aspects of C you can postpone or ignore, and provides updates for people (like me) who have mostly been familiar with K&R or C89. I found it a really fun read and would definitely recommend it as #1 for your question about "Modern C".

As to if you should learn C, I am super opinionated but I think C still has a lot of value, even for someone who doesn't describe themselves as "full-stack". The reasons are obvious: the kernel is written in C, libc is written in C, the webserver serving your web application is almost definitely written in C, but if it isn't, the compiler that compiles the language it is written in is almost definitely written in C (hats off to Golang for getting off their C compiler). Despite its flaws, I love C.

rchiniquy··on OpenSSH: client bug CVE-2016-0777
If you were to mandate a key rotation across all employees and mandate all employees use a keypair prepared for work and no other purpose I would rate those mandates as not being excessive.

As patio11 notes, this would not at all be excessive as a response to the threat model, but even with an aggressive key rotation mandate, this still doesn't make your production infrastructure as secure as your corporate Confluence wiki with SSO. Your employee's private key is still a static credential, and any rotation policy (14 days? 30 days? 90 days?) will leave a significant window for an attacker to use a stolen credential. Additionally, using a single key per employee for all infrastructure access magnifies the attack surface of a stolen credential to everything you operate.

Full disclosure, I'm a co-founder at ScaleFT, a startup focused on solving these sorts of problems. We're releasing a patch to fully mitigate this for our users this morning.

rchiniquy··on N Guilty Men (1997)
Thanks so much for posting this. I read it so many years ago and have frequently wanted to refer back to it, but didn't remember the title. Very grateful.
rchiniquy··on IsMounted is an Antipattern
Definitely true. Anywhere you see this general pattern it is probably hiding a bug like: https://github.com/react-bootstrap/react-bootstrap/issues/11...
rchiniquy··on Chernoff's Faces
Utterly surprised not yet to see a reference here to Peter Watt's Blindsight [1], which integrated Chernoff's faces as a data visualization. If you haven't read it yet, go read it. You'll thank me.

1. https://en.wikipedia.org/wiki/Blindsight_(Watts_novel)

rchiniquy··on Introducing - Scale Access – SSH keys done right
Hi!

I'm also one of the founders. We all have extensive open source experience, have grown up in open source communities, and love open source. We're not committing to 100% open source yet. We'll be pragmatic.

We all want to open source as much as useful to the community, rather than just a code dump. This will probably look like open sourcing the individual libraries we use to build the client, rather than a single open-but-monolithic client. The client is written mostly in javascript[1] so we'll be publishing modules on NPM when the modules we need don't exist already. I think we'll need to build a Go client library pretty soon also. So, for the purpose of code re-use and learning, we'll be open source.

I'm sure we'll also be sharing the complete source for the purpose of security audits. If this is your concern, the answer is Yes, we'll let customers see the code they're relying on for their infrastructure.

Hope that helps!

rch

1. https://github.com/atom/electron

rchiniquy··on Is San Francisco losing its soul? (2014)
btw, since this Guardian article uses the "Compare Oakland to Brooklyn" trope, here's a great article putting change in Oakland into a historical context: http://nextcity.org/features/view/oakland-gentrification-lib...
rchiniquy··on Is San Francisco losing its soul? (2014)
Thanks for chiming in, media from London. Is it possible to write about this issue from a far-away or recently-arrived perspective?

Worrying about this a decade or two sooner would've been more timely. The city changed dramatically from the late 90s to early 00s. We had a lull in change during the macroeconomic recession, but now the machine is getting back up to speed.

I've been increasingly sad over the years as my friends who are artists, librarians, dancers, therapists, social workers, statisticians, teachers, writers, musicians, accountants, anything other than software engineers, have been falling away from the Bay because it is just so expensive.

Rapid growth can apparently kill anything. IMO it's likely too late to do anything for San Francisco. There's still time to worry about Oakland though.

rchiniquy··on Ask HN: Who is hiring? (July 2014)
Cloud Monitoring at Rackspace - San Francisco https://monitoring.api.rackspacecloud.com/

We're the product Cloudkick grew into after being acquired. We love to collaborate with peers and make things for people who make things. We want to build the monitoring tools we've always wanted. Come join us and write code every day in Node.js, Java, C, and Lua.

More info: https://uscareers-rackspace.icims.com/jobs/10925/software-de...

rchiniquy··on Google Bus blocked, window smashed in West Oakland
It seems obvious this is the same group that obstructed a Google bus in SF earlier this month. Protesting Google from the vantage point of a privileged SF resident wasn't sufficiently sympthetic, so they're cloaking themselves in the very real oppression and problems still crushing West Oakland. Shameful.

People bringing their protests to Oakland is nothing new (like the black bloc protests during Occupy). I've been living in my Oakland neighborhood for about 9 years. On my block, that makes me the newcomer. I don't speak for Oakland and neither do these protestors or whoever contributed that article.

rchiniquy··on Introducing CoVim – Collaborative Editing for Vim
So it's like Floobits but for only one editor? https://floobits.com/
rchiniquy··on Introducing Google JS Test
I've been really happy with JazzMoney: https://github.com/pivotalexperimental/jazz_money I'm looking over the limited documentation available and so far I'm not persuaded to switch. I'm very curious about measuring code coverage - nothing seems to be mentioned there about it, but I imagine the Goog does do that.
rchiniquy··on Ask HN: What do you use to test Frontend code?
Jasmine isn't what you're asking for, but you should use it in addition to what you're asking for.
rchiniquy··on Anybody with a room for rent in SF?
Check out Berkeley if SF is full right now. There are a lot of student-group-house situations there and it's not a far Bart trip from SF.
rchiniquy··on Ask HN: Has anyone used the Freebase Wikipedia Extraction?
You can just download all their data in a giant tarball and pull it out of there yourself.
rchiniquy··on Ask HN: Has anyone used the Freebase Wikipedia Extraction?
Totally wondering about this myself. Not convinced Freebase is perfect for me.
rchiniquy··on Ask HN: How is routing done on maps?
Sure thing. You may as well try Pyroute first, since the system requirements there are a subset of the Rana requirements (it doesn't require GTK or Cairo, etc).
rchiniquy··on Ask HN: How is routing done on maps?
Yeah, I wasn't sure what kind of answer you were looking for. OSM provides exports of the street data which gives you the ability to either:

A. Run a pre-existing routing program on it, such as http://wiki.openstreetmap.org/index.php/Rana, or

B. Write your own (which would require knowledge of algorithms such as http://en.wikipedia.org/wiki/A*_search_algorithm)

There are also services where people do these things for you, and for low volume, they might not mind if you programmatically scrape their results. A good example is http://www.batchgeocode.com/

Properly, Rana isn't intended as a package for programmatic access, but it does include code which does what you want:

* http://wiki.openstreetmap.org/wiki/PyrouteLib - Pyroute is probably exactly what you want.

* Rana's routing module: http://wiki.openstreetmap.org/wiki/Rana/Modules#route

rchiniquy··on Ask HN: How is routing done on maps?
Check out http://www.openstreetmap.org. They provide open-source map data and code (like rana which has a module for routing) that does least-cost routing. There are a variety of approaches based on simple graph algorithms like naive A*.
rchiniquy··on Ask HN: Sample of code ?
Code is not always requested just for the purpose of representing the applicant. Sometimes interviewers (like me) just want to have code to hand which you are guaranteed to be familiar with; It's nicer to reference code you've actually written to ask specific questions about, say, stack vs heap usage or OO design.
rchiniquy··on Ask HN: good books about military strategy?
<i>analysis of historical battles</i>

I'd love to see a book of this nature concentrated on the Civil War.