HNHacker News
TopNewBestAskShowJobs

sratner

354 karma · joined July 17, 2007

YC Badge: 0xe4bad42969186ecba2eb7e70ef0ba8b8b7f7a82f
submissionscomments
sratner··on Apple and Google partner on Covid-19 contact tracing technology
I see: SK_(t) = H(SK_(t-1)), where SK_(t) is the secret key for day t.

This seems to align with the statement that knowing the key for one day (i.e. once it is uploaded following diagnosis) allows one to derive all future keys. Is there another section I am missing?

Edit: clarified that daily keys are shared post-diagnosis, to trace prior contact.

sratner··on Children of immigrants have higher rates of upward mobility than US-born
I think you did find something imminently attractive about US life: said great job. Do not underplay the fact that many of your peers (a) wouldn't even look for "a great job in the US", and (b) wouldn't move for it if one landed at their feet. There are plenty of things I may dislike about US, yet I am also here by choice rather than necessity.
sratner··on Bluetooth's Complexity Has Become a Security Risk
Apple does hide most of this, but consider that an iPhone app isn't the BLE product most developers are building, rather it is the device that iPhone app talks to, and where the bugs lurk. (Not that Apple doesn't have its fare share of BLE bugs at the chipset/driver level, which resurface with every new iOS release.)
sratner··on Bluetooth's Complexity Has Become a Security Risk
It isn't even the API vendors' fault necessarily.

Compared to HTTP/TCP/IP, abstractions between layers of the BLE stack are extremely leaky. Examples: indicating choice of PHY coding and channels in the equivalent of a `listen/connect` call, or the three different but intertwined places where fragmentation/reassembly can happen. Being effective with BLE requires deep understanding of the entire stack, and since it is difficult for a single person to have such level of understanding, we get bugs. By comparison, being effective with HTTP does not require one to know anything about the PHY layer, or TCP stream reassembly.

I suspect this is due to not having enough independent implementations of each layer - Bluetooth is designed and standardized by one committee, and the entire stack usually implemented as a single "thing", making it too easy to break abstraction when a new feature needs to be added.

sratner··on US citizens will need a visa to visit Europe starting in 2021
It's what US already does for immigrant visas (referred to as "country of chargeability"), so there is precedent.
sratner··on How the Startup Mentality Failed Kids in San Francisco
Spend large amounts of money on bespoke design firms and a giant celebrity "launch" with every imaginable feature all at once, instead of starting small, building a product people use, and iterating? Does not sound like the startup mentality, at least not for a successful startup.
sratner··on Adobe to Acquire Magento
Also Business Catalyst, acquired in 2009 and shut down this year.

https://en.wikipedia.org/wiki/Business_Catalyst

sratner··on Where I started might not be useful to you
You can protect pages on most flash devices (e.g. internal microcontroller storage). Lock the bootloader and factory reset image, so you can still update the running firmware, but also have a way to recover from any scenario with a hardware button or sufficiently clever watchdog.
sratner··on All rise and no fall: how Civilization reinforces a dangerous myth
That's already modeled, both in the exponentially increasing food requirements for growth (growing from 10 to 11 is much harder than 1 to 2, for nearly the same benefit), as well as the housing cap and amenities mechanics in the latest iteration of the game.
sratner··on Facebook scraped call, text message data for years from Android phones
Here's another one: app needs the storage permission to attach a diagnostic log file to a bug report email. An OS that sandboxes applications should absolutely provide a way to do this without additional permissions (a file that was only ever written by the app cannot contain data not available to the app to begin with); as it is, either the user starts ignoring permission prompts because otherwise things don't work, or they deny them and the developer can't get a log file.
sratner··on Ask HN: Who is hiring? (March 2018)
Proxy | San Francisco Area, CA | Multiple Engineering | Onsite | https://proxy.co

Proxy enables interactions with devices around you through a secure mobile token exchange. Our first products include hardware and software for workplace physical access and presence awareness with just your phone, and we have strong inbound traction with Fortune 500 customers. We are on a mission to equip every person on the planet with a universal signal that augments them in the physical world -- help us get there.

* Firmware/Embedded Engineer - You live and breath C and ARM, and don't need no MMU. Bonus points for Bluetooth and network stacks.

* Fullstack/Backend/Infrastructure - You are proficient in modern Javascript (node.js), AWS, various data stores, and care deeply about security and reliability.

* iOS Engineer - You focus on the user experience, but do not hesitate to dive into the low level stuff.

* Customer Engineer - You love solving problems and interacting with customers, and do not flinch at building proof of concept implementations and integrations.

Our team is flexible, and generalists with a sense of individual responsibility are welcome. Email apply+hn@proxy.co or reach out to the founders directly and tell us what you have built.

sratner··on Remote Code Execution in CouchDB (and Privilege Escalation in the Npm Registry)
From https://www.ecma-international.org/ecma-262/5.1/#sec-15.12 -- "NOTE: In the case where there are duplicate name Strings within an object, lexically preceding values for the same key shall be overwritten."
sratner··on Y Combinator Company List
Also, while RethinkDB lives on, the company behind it is dead.
sratner··on Facebook Figured Out a Family Secret and Won't Tell Me How
Aren't the hair strands and fingerprints you leave on public surfaces also public, just like any part of your private property that happens to be visible from the street?
sratner··on Google updates Docs, Sheets and Slides with new collaboration features
Good to know. Looks like this is now a feature of "G Suite Business". https://support.google.com/a/answer/6034782
sratner··on Google updates Docs, Sheets and Slides with new collaboration features
>Files and folders that are shared with you show up by default only in your "Shared with me" folder

This here is exactly the problem; it makes folders useless in a team setting. A colleague creates a document and files it under "Project Name/Engineering/Architecture/". She then shares it with me, we have a bit of a chat about it, and move on. A week later, I try to find said document, but it is not in "Project Name/Engineering/Architecture/". Was I supposed to file it there myself? What about the other ten people it was shared with?

My "Shared with me" folder has a thousand items and no useful structure.

sratner··on Google updates Docs, Sheets and Slides with new collaboration features
Just started using Paper, and I really like it so far, especially for documents with high degree of collaboration / cross-referencing like meeting notes and project plans (person and document mentions, hashtags, date tags, etc). Editing experience is also solid in Firefox, which is more than I can say for Google Docs. Markdown auto-styling is a nice feature for me as a coding guy, but that's a matter of preference.

My biggest gripe with Docs, though, is that documents are impossible to find (ha!). Sharing does not seem to preserve folder structure, and I can never get relevant search results for some reason. I am yet to discover if this is implemented better by Dropbox.

sratner··on Ends, Means, and Antitrust
"Virtuous" and "vicious" cycles both refer to positive feedback, and differ only in value judgement they imply, so arguably the value judgement is the entire point of using these terms. I can't think of a common use term for negative feedback off the top of my head.
sratner··on Show HN: Vexlio – Create precise, beautiful diagrams
You may wish to sign your installer binary.

    Windows protected your PC

    Windows Defender SmartScreen prevented an unrecognized app
    from starting. Running this app might put your PC at risk.

    App: vexlio-setup-1.0.0.exe 
    Publisher: Unknown publisher 

    [ Don't run ]
sratner··on Base65536 encoding
Javascript strings are UTF-16 (or maybe it was UCS-2?)
sratner··on Why are hidden files with a leading tilde treated as super-hidden?
This is also just a cosmetic, view level implementation in Explorer (complete with a bug, also in Explorer). In fact, the fix was to use kernel fs functions directly.
sratner··on REST Anti-Patterns (2008)
Some of the fault for this lies with client libraries. Many, including popular ones[1], either don't provide a way to get the body of error responses at all, or make it particularly cumbersome to do so. For example, success bodies might be parsed automatically by registering the right parser for the content type, but to parse an error response you need to manually instantiate a parser and deserialise the body. Until error responses are first-class objects in client http libraries, devs will continue being lazy.

[1] Not to pick on retrofit -- it is generally awesome -- but http://square.github.io/retrofit/2.x/retrofit/retrofit2/Resp...

sratner··on What’s New in Bash/WSL and Windows Console
In the meantime, clink (https://github.com/mridgers/clink) works well. It stays out of your way, and isn't clunky like the full shell replacements. I had even forgotten that cmd.exe doesn't do ctrl-r out of the box.
sratner··on What’s New in Bash/WSL and Windows Console
You could always:

    C:\> doskey ls=bash.exe -c "ls $*"

    C:\> ls /
    bin   cache  dev  home  lib    media  opt   root  sbin  srv  tmp  var
    boot  data   etc  init  lib64  mnt    proc  run   snap  sys  usr
sratner··on What’s New in Bash/WSL and Windows Console
Unfortunately, I found Windows command-line interop isn't as useful as I had hoped. You can start Windows executables, but you can't kill them: ctrl-c gets you your shell back, but the executable is still running in the background, headless. See: https://github.com/Microsoft/BashOnWindows/issues/1614

And since USB ports aren't mapped into WSL, I have to use a Windows program to talk to them.

Besides this hiccup, everything else seems to work great.

sratner··on Yevgeny Yevtushenko has died
I have a few in front of me.

From a US passport: "Nationality: United States of America"

From an Australian passport: "Nationality: Australian"

I have not seen an EU passport, but as far as I know EU does not claim ideological erasure of any national identity in favour of some ideal "European".

[Edit: No accusation of racism had been made, whether I believe it to exist or not. The point is that it is difficult to claim ethnic identity does not exist, while explicitly highlighting it at every opportunity. The two countries I single out above make a point of being "melting pots", and are much more consistent in applying that.]

sratner··on Yevgeny Yevtushenko has died
And yet, passports said "Ethnicity: Jew". "Ukrainian". "Georgian". For a country inhabited by Soviet people, it had a surprising lack of people identified as simply Soviet in their documents; hard to have it both ways.
sratner··on Yevgeny Yevtushenko has died
It is possible to recognise without conferring a sense of preeminent victimhood, and doing so may even have benefits for internationalism; but I do not wish to argue this point. The response above is just an elaboration on the parent's simplistic claim.

From the same Wikipedia page: "An official memorial to Soviet citizens shot at Babi Yar was erected in 1976." Yevtushenko starts with an incredulous observation that there is no memorial at all, as of 1961. Your comment hints at a possible reason: it may be difficult to commemorate this specific site if one is unwilling to mention the Jews. It is imaginable that had a memorial existed--in any form--the poem may not have been written, but its lack had caused the poet to search for reasons.

sratner··on Yevgeny Yevtushenko has died
No, but it did have a tendency of omitting/censoring[1] the fact that it was primarily directed at Jews and Romani, as highlighted by Yevtushenko in his poem.

[1] https://en.wikipedia.org/wiki/Babi_Yar_memorials#Commemorati...

sratner··on Yevgeny Yevtushenko has died
To anyone reading the original or a translation, also recommend listening to the poem performed by the author: https://youtu.be/OlWWhLVDd80
← PreviousPage 2 of 5Next →