HNHacker News
TopNewBestAskShowJobs

tachang

45 karma · joined April 11, 2015

submissionscomments
tachang··on Security Issue February 2019: FAQ
For those wondering MD5 by itself is a terrible hash for passwords. It’s really fast and without salting you can build rainbow tables against it with reasonable speed.

If the passwords were salted it still means that a determined adversary can find your password relatively quickly.

Other better hash functions for passwords include things like bcrypt. Though I do understand it is a pain to migrate users over since you can only do it when they login.

tachang··on Conversations among German Nuclear Physicists at Farm Hall (1945) [pdf]
How did we end up purifying the amount of U235 needed?

I saw on another page "General Leslie Groves consulted with lead scientists of the project and agreed to investigate simultaneously four separate methods of separating and purifying the uranium-235: gaseous diffusion, centrifuge, electromagnetic separation and liquid thermal diffusion."

Seems like a ton of work.

tachang··on REST and GraphQL really aren't that different
The reason you'd do this is because you are probably planning to return the same response for all the HTTP verbs.

Like if you wanted to return a empty hash {} for:

  GET /
  DELETE /
  PUT /
  PATCH /
  POST /
I guess just being lazy.
tachang··on Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more
This is some seriously good marketing. Tesla is in a unique position to offer their car up as a prize and target. Other manufacturers could do this but because it is hard to update their firmware they don't do it.
tachang··on Use perfect hashing, instead of binary search, for keyword lookup
Reading the discussion thread is fantastic. The postgres community culture definitely feels a lot different than some of the other open source projects I've seen.
tachang··on JIRA is an antipattern
What are you doing that I am not? Jira is slow as hell and updating statuses take forever.

Are you on an onprem version?

tachang··on Google rescinds candidate verbal offer due to low GPA
It's possible at some schools to have 89s through most of your classes which equals a B (3.0) and have a few Cs and thus have a 2.6 GPA.
tachang··on Ask HN: Is there a better way to document complex software architectures?
What product is it?
tachang··on YouTube is down
Peanut butter and jelly reload.
tachang··on Children poisoned by lead on U.S. Army bases
Where exactly in the link does it say the army discourages lead testing?

Reuters says "Yet it also “discourages” this type of lead-paint inspection" at the link https://phc.amedd.army.mil/topics/workplacehealth/ih/Pages/L...

tachang··on Serverless Best Practices
I agree with this. Having a traditionally relational store can be a huge help: lots of people know it well, the disadvantages are well known, and everything is insanely mature. I dislike how the article tries to say that isn’t serveless’s fault when it is just a trade off.
tachang··on The Performance Cost of CORS Requests on Single-Page Applications
What if you can’t because you want to use a hosted provider for your homepage like wix? Which doesn’t support reverse producing?
tachang··on The Secret API of Banks
Banks do this so they can gain the interest on the delay. Very annoying though for the end usrr
tachang··on Massive Comcast Outage Hits the US
Some of you conspiracy theorists are insane. No Comcast didn't purposely do this. I can guarantee it was just a backhoe digging around. Happens more often than anyone would care to admit.
tachang··on How 'DevOps' Is Killing the Developer (2014)
For a react developer I'd say one level is understanding reactive design and maybe how you would implement it in pure JavaScript without react. One level below that would be how you would implement JavaScript and maybe a bit of knowledge how the engine works and shadow Dom.
tachang··on ECMA TC39: “SmooshGate” was officially resolved by renaming flatten to flat
I do like the name smoosh
tachang··on NASA’s Curiosity Rover Is Able to Drill Holes into Rocks Again
It's a testament to humanity's ingenuity that we managed to put a rover on Mars. I sometimes wonder if in 1000 years we will look back and think how primitive we were and curiosity will be in some museum.
tachang··on JavaScript Promises Discussion: Make Them Monadic? (2013)
Can you explain a bit more what your code is doing?

Are you suppose to instantiate the handler class and call it?

tachang··on Inside Facebook's Hellish Two Years–and Mark Zuckerberg's Struggle to Fix It All
You're thinking too much into it. They might just record the screen every few seconds and save it to their servers. There's software that does this easily.
tachang··on Neighbor's house alarm triggers when I put my car in reverse
Which app did you use
tachang··on Reverse-engineering the Starbucks ordering API
As to point #4 I think the hardest api I tried to reverse was sim city build it. I couldn't seem to find the right signature generating code.
tachang··on Crypto Tools for DevOps: Git-Crypt – Tozny
No mention of blackbox by stackoverflow? On a phone right now but it is pretty useful for this type of stuff. The only thing bad about it is key management and new developers have to generate their own keys.