HNHacker News
TopNewBestAskShowJobs

shortstuffsushi

1,048 karma · joined May 13, 2013

I develop software. I'm also rebuilding an old farm house, inside out.

[ my public key: https://keybase.io/shortstuffsushi; my proof: https://keybase.io/shortstuffsushi/sigs/r-76oM_TodYPjC4wswgy20_NEnYmx_iE-sSMu8-yKiI ]

submissionscomments
shortstuffsushi··on Ask HN: Is it ok to use traditional server-side rendering these days?
> Javascript frameworks are amazing and can provide a much richer, much better experience.

I think this is the point worth inspecting if you're considering server side rendering. If you're making a page that just displays content, I don't see any reason to throw Javascript in front of it. Just render your HTML and send it. If you want to make changes to the content dynamically, if it's going to take super long to load and you want to show users a loading screen, if they can interact with the content, etc, that may be a case to throw Javascript into the equation.

shortstuffsushi··on CHVote: Open-source e-voting system from Switzerland
In the US, at least, we tolerate a fair amount of error. See the WI recount this election, which exposed the totals to be off by over one hundred votes. I'd be willing to bet if you recount again, it'd be off from that total as well. It isn't absolute is my point.
shortstuffsushi··on Hyper 1.0.0
Hmm, I've never personally heard of or used the product, but I immediately understood it was, just from the release notes. What more were you looking for to clarify what it is?
shortstuffsushi··on We turned $140k on Kickstarter into $40k debt and broke even
Indeed, and I don't mean it to come off that way. I'm sure in that time he experienced some distribution hiccups as well, so weighing that against his experience here, he must still be finding that the Chinese company will provide a better outcome (since he's still talking about printing with them in the future).
shortstuffsushi··on We turned $140k on Kickstarter into $40k debt and broke even
I don't see this mentioned in the article, but I think the author makes the assumption that his Chinese company would have been more reliable / more experienced and would not have made these sorts of mistakes (which could be accurate, don't know the two companies). Imagine the setbacks his company had, except then add the delay of cross ocean (air or ship) shipping. Unless things had gone perfectly with the Chinese company, they may still have gotten a faster turn around having it in the US. He mentions in a comment here that they're thinking about doing a second batch overseas, I'm curious to see the turnaround on that.
shortstuffsushi··on To Know If the Election Was Hacked, Look at the Ballots
Going back to my earlier point, how is this different from handing over a paper ballot? You have no record of your paper ballot, and can't prove how it was counted toward totals either. Sure there is a "physical" record of it, but I'm sure (or at least I would hope) there are logs for the voting system as well that could be analyzed.

If you're unwilling to trust a computer system counts in a non-corrupted fashion, I'd be surprised to learn you use them for anything at all. Heck, who knows how the messages you're typing in here are showing up for me? Who is to say there isn't a middle man re-interpreting everything you type? How can you have any confidence in any system, unless you wrote it yourself? And deployed yourself, and completely control 100% of the system it's deployed on.

Hyperbole, sure, but why trust any system if not your vote recording system? I'd like to think (and again, I have no research to back this) that these are maintained by relatively "non-partisan groups," and that they are audited to evaluate for any sort of corruption or tampering. But even if they aren't, I don't think that paper ballot systems are any more so. The qualifications to be a ballot worker in my area seems to be that you've reached the age of retirement and are white, which could very easily bias the vote here. Should I not trust my results?

shortstuffsushi··on To Know If the Election Was Hacked, Look at the Ballots
My phone isn't working for some reason, second paragraph:

I don't think it's fair to say that the intent of the voters is unclear unless you're wanting to entirely throw out the results of the electronically collected and processed votes as completely invalid. That seems extreme to me.

shortstuffsushi··on To Know If the Election Was Hacked, Look at the Ballots
That really seems like a tin foil hat perspective. Sure, in the literal sense, there is no way for them to prove which way their vote was cast because it's managed by an opaque (for them) computer system, but the same is true if it were paper ballets that are handed over to a processing clerk. Once youve cast your vote, the collector "owns" the results, and their counting process is opaque in either case.

And with that said, I don't think it's fair to ,

shortstuffsushi··on To Know If the Election Was Hacked, Look at the Ballots
This reveals human nature on both sides ;) When you lose, it sucks, and you want to find a way to alter the results. When you win, it's great, and you don't want it taken away. I don't think this behavior is limited to politics.
shortstuffsushi··on To Know If the Election Was Hacked, Look at the Ballots
What does this comment mean? Are you saying that the results of the election are unclear in the state?
shortstuffsushi··on To Know If the Election Was Hacked, Look at the Ballots
To be fair, (many of) those on the right thought Donald Trump was an idiot for saying he wouldn't accept the results, so it doesn't seem unfair for them to continue they're claiming "we won, leave it be" now. They would (likely) have asked Trump to do the same in the "we lost, leave it be" situation.
shortstuffsushi··on What I learned from spending 3 months applying to jobs after a coding bootcamp
One thing that I think is worth noting here -- this guy isn't from a university where he would have learned this, and likely hasn't spent a lot of time using or understanding data structures (unlike "the rest of us"). He's just out of a code camp, studying these sorts of things make sense in that situation. I'd hope someone more experienced wouldn't need to.
shortstuffsushi··on LinkedIn launches Salary to chart what we earn
Not to say it won't happen, but which fresh set of users would Microsoft bring? Who do you know that isn't on LinkedIn (registered, if not actively using)? And of those people, what features do you think would make them want to start using LinkedIn?
shortstuffsushi··on The Pentagon’s ‘Terminator Conundrum’: Robots That Could Kill on Their Own
I'd really like to know more about the "target identification" software, specifically how it differentiates a person holding a gun from someone holding a shovel (or any stick object).
shortstuffsushi··on LinkedIn accesses Gmail contacts via ‘auto-authorization’
I posted a story asking about this (kind of) a couple years back [0]. I've seen all sorts of weird link in behavior in terms of people bring recommended to me and people "accepting" invitations I didn't send. At least now I know I'm not entirely crazy.

[0] https://news.ycombinator.com/item?id=6105715

shortstuffsushi··on DDoS Attack Against Dyn Managed DNS
Fwiw, this isn't a hack, this is a DDoS (denial of service). It seems almost certain that your information was either given out by dynu, or your WHOIS record isn't protected. Check your domains out with your favorite WHOIS tool first. Otherwise... time for an awkward conversation with dynu.
shortstuffsushi··on DDoS Attack Against Dyn Managed DNS
In (well, after) attacks like this, and really any other massive DDOS, shouldn't it be possible to identify potential botnets and try to take them out (notify their owners that they're being used, notify their hosting providers, etc) so that they can't be used again in the future?
shortstuffsushi··on Adding a phone number to your Google account can make it less secure
Isn't customer service the weakest link in both of those cases?
shortstuffsushi··on It May Not Cost You More to Drive Home in a Climate-Friendly Car
Perhaps unrelated, but is the Tesla Gigafactory intending to produce "competitor" batteries, or are you assuming that GP was only looking at Tesla's? If the GP didn't get a Tesla, how would their factory be of use to him? (Actual question, not sure if there is an implication that the new factory will drive down prices for everyone).

Also, unless GP lives in an area where those sorts of garages are available, at least in the near term, they won't have anywhere to charge, which seems a fair argument against purchase. For instance, I live in south-eastern Wisconsin, and while there are charging stations within driving distance, there aren't any that would be convenient on my way to or from work, and I couldn't simply leave it at one and walk to work (or bus, because we don't do public transit here).

Known costs are known, less of a risk. It's easy enough to buy a new EV car if the other factors here are resolved, but I don't think it's unfair to say too many issues are up in the air at this point.

shortstuffsushi··on Introduction to Zipline: A Trading Library for Python
Upvotes, but no comments :(

If anyone comes back to this ever, still interested in knowing!

shortstuffsushi··on Introduction to Zipline: A Trading Library for Python
General question: how do you take this and interact directly with the market? Is there some sort of general, public api that you're making calls agains, where do you get an account for it, etc? Or, is this going through some firm that interfaces with the market?
shortstuffsushi··on Ask HN: What did your 'Show HN' project turn into?
I built a developer tool to help users validate Universal Link configuration on iOS [1]. At the time, Apple didn't have a tool to do so, so it was difficult to figure out why it wasn't working if it wasn't. They've since created one, so that's great for the community [2].

I still get consistent traffic of a few thousand hits per week, and my work has been forked by my former employer, Branch, to create their own version of the tool for iOS [3] and Android [4]. My goal wasn't really to take it anywhere, it was just something I wanted to build for the community since I spent a lot of time struggling with the set up, and saw a lot of similar struggle in the beta forums. I'm satisfied with how it turned out, and how many people used it (for instance, the several of the Cocoapods team members linked it, it's all over the forums, etc).

So, no story about how much money it made or anything, but personal satisfaction at least :)

[1] https://limitless-sierra-4673.herokuapp.com [2] https://search.developer.apple.com/appsearch-validation-tool [3] https://branch.io/resources/universal-links/ [4] https://branch.io/resources/app-indexing/

shortstuffsushi··on How to Compromise the Enterprise Endpoint
Do you mean MacKeeper? GateKeeper is Apple's software that prevents you from installing non-verifed apps, MacKeeper is (from what I can tell, haven't installed it or looked at the site) spamware.
shortstuffsushi··on How to Compromise the Enterprise Endpoint
Here's a question I have every time I see "RCE" type issues, and I'm completely serious when I ask: what is the use case for allowing remote execution in your software? Why would you want to allow arbitrary code to be executed? Or am I perhaps misunderstanding this, is it some sort of break out of the program bounds which allows execution?
shortstuffsushi··on Show HN: Search YouTube without stopping the video, and make your own playlists
For what it's worth, the last time I worked on an extension was in 2012, and a friend did most of the work setting it all up, I just wrote some of the code. This was the impression that I was under, but apparently it isn't the case.
shortstuffsushi··on Show HN: Search YouTube without stopping the video, and make your own playlists
I don't think you have the option to say "this app needs Read and Change for just this one domain," it's pretty much an all or nothing sort of deal. This one uses it to edit the page on YouTube, so it has to require it for all.
shortstuffsushi··on Drop jQuery as a dependency from Rails
I started on 3(.5?) and helped with a migration to 4 (which was a disgusting mistake of a process on our end). I like the format of their docs -- JSDuck was my favorite docset for a quite a while. I also enjoyed their methodology for constructing views and view hierarchies. Ultimately, I'd say I was a fan of what they were doing, I just think the implementation was rather shoddy, and the docs were frequently wrong or outdated, and (as mentioned) support was not good. When I got to React, it actually did bring back some memories of Ext, but without the full MVC hierarchy around views.
shortstuffsushi··on Drop jQuery as a dependency from Rails
What was your experience with Ext? I had to use it for a few years, and was never a huge fan. We ran into a lot of obscure bugs in their code which resulted in a number of hackaround "Ext.Overrides," and their support forums (Mitch Simmeons in particular) is a joke.
shortstuffsushi··on Push.js – A minimalist JavaScript library for desktop notifications
For push notifications, yes, but these are "browser / desktop" notifications, which only show up while the application is running. It's possible this works on mobile with the app running in the background, but I haven't seen it before.
shortstuffsushi··on Push.js – A minimalist JavaScript library for desktop notifications
These are not actual "push" notifications, they are desktop notifications. Different functionality, and no service workers.
← PreviousPage 10 of 17Next →