HNHacker News
TopNewBestAskShowJobs

tomfakes

668 karma · joined August 12, 2009

I am a consultant providing expertise to make your Rails app scale. Faster apps make happier customers

Previously, co-founder and Chief Engineer of Offbeat Creations, sold to Playdom in early 2010.

Earlier: 10 years at Microsoft, then various Seattle area startups until I started Offbeat Creations in 2008

http://blog.craz8.com Twitter: http://twitter.com/craz8 email: tom at craz8 dot com

submissionscomments
tomfakes··on CVE-2012-5664: Ruby on Rails: find_by_* SQL Injection
This looks to be specific to the AuthLogic gem for authentication. I've been doing Rails development for 7 years and I have yet to see AuthLogic in the wild. Devise is by far the most widely implemented auth system for a Rails app.

So, to see this you must:

   1. Have a Rails App
   2. Be using AuthLogic for logins
   3. Have let someone access your app's secret key.
This still is a bad bug, but the instances of this bug being used in an attack are going to be very few.
tomfakes··on Page Weight Matters
There's a great resource for testing page load speed for different browsers/locations/connection speeds.

Frankly, I'm stunned that they run this at no cost.

http://www.webpagetest.org

tomfakes··on Faster Rails partial rendering and caching. 78% improvement of test application
I really like this technique. I've used it in a number of places, and it really does give great performance.

My usage has never been as clean looking as this though.

It's always been a bit surprising that Rails doesn't use the multi_get caching calls very much. These can be key to getting great results.

tomfakes··on Google Analytics for developers
There are many things you can do to improve the performance of your website, even to people with dial up - or worse - Mobile!

Compress data with gzip is probably the big one for modem users, but also batching scripts and CSS together, reducing image sizes, re-arranging code to reduce blocking during rendering.

These are all things under your control, and with current mobile browsers, these are things you really must care about

tomfakes··on Everything Technical in F1
I've seen reverse gear used on several cars this year to get a car back on track after going off. I think the FIA must be testing for this operation (otherwise the teams would find some way to work around the regulations)
tomfakes··on Wiring a Generator to Your House
One thing that needs to be mentioned is ventilation for the exhaust gasses of these things.

The Pacific Northwest had a similar (but smaller) storm to this in 2006. We had much less sea damage, but more wind damage from trees falling over. Power out for 10+days for some people.

14 people dead in WA state, but 8 of these came from CO poisoning - 5 in 1 family because they ran the generator in their garage!

http://en.wikipedia.org/wiki/Hanukkah_Eve_wind_storm_of_2006

My in-laws used a generator for this time. They were out for 10 days, and needed to walk 2 miles each way (due to downed trees) to get gas for the darn thing. No-one thinks about the gasoline infrastructure needed to keep vehicles and generators going if the power is out for multiple days. New Jersey is finding this out right now!

tomfakes··on Tesla's First 6 Superchargers Open to Public Today
I saw a pizza delivery guy plugged into a Walgreens charging station near Seattle last week! Don't know if he was in the process of delivering a pizza at the time, but he had the doohickey on the roof.
tomfakes··on Who’s buying the Nano? Why is Apple is still selling them?
I use my current Nano exclusively for running. I can carry a bunch of music (or audio books, or podcasts) in a device that, for practical purposes, weighs nothing.

I can use the built in clip to attach it to a shirt edge, or just put it in a pocket. Neither of these modes of use are possible with my iPhone.

I really, really hate armbands for iPhone running, and my iPhone bangs about in a crazy way if I run with it in a pocket.

tomfakes··on What the Founder’s Email Address Says About Your Startup

    john.smith@startup.com <– The founding team is all from Microsoft and can’t shake it if they tried.
For the longest time, Microsoft email addresses were limited to 8 characters for backwards compatibility with older email systems. They were always of the form "First Name + Last Name initial" with adjustments for duplicates. e.g

   billg - Bill Gates
   billgr - Bill Gross (made up)
   billgi - Bill Gibbons (also made up)
And then as they grew bigger, the system sort of fell apart for common names - I know one of at least 14 Jeff Johnsons that had email names that were impossible to guess correctly!

Of course, 'jeff.johnson@' doesn't work for the 14 identical name case either!

tomfakes··on First full-resolution images of the Martian surface
All his friends are pestering him about when he's releasing this book - he's under no pressure to publish and rather enjoys the process of digging up all this stuff and writing the code to process these images.
tomfakes··on First full-resolution images of the Martian surface
I was going to mention Don - he's a friend of a friend - and the book he's writing about the Russian Venus program. There's a lot of awesome stuff here that almost no-one knows about.
tomfakes··on Please turn on two-factor authentication
The "Find My Mac" feature is on by default. I just turned mine off in the iCloud settings
tomfakes··on Woz Buys $2 Bills in Sheets from the Treasury
You can buy un-cut US currency here: http://www.moneyfactorystore.gov/uncutcurrency.aspx

The $2 is currently out of stock :-(

tomfakes··on Woz Buys $2 Bills in Sheets from the Treasury
To be clear - he doesn't actually print these. He buys sheets of pre-printed bills and re-packages them into books instead of cutting them into individual bills.

A neat trick, but completely legal US cash money

(The US $2 bill is unusual, but legal)

tomfakes··on Instacart (YC S12) wants to be Amazon with 1 hour delivery
In Seattle, Amazon is testing Amazon Fresh for groceries. Amazon Fresh has their own delivery infrastructure with their own trucks and drivers.

They also deliver other things using this system. I received a CD via Amazon Fresh on Sunday, that I'd ordered on Saturday, whilst still paying for Tuesday delivery (free with Prime)

If Amazon can make this scale, they are absolutely competing with them directly. If Amazon can't make this scale, then it's unlikely to be a profitable business model for anyone else.

tomfakes··on Amazon Net Income Plunges 96%, Shares Follow
Hmm, the AMZN after hours trading shows them to be UP after this news. This headline seems to be verifiably false.
tomfakes··on How Amazon’s ambitious new push for same-day delivery will destroy local retail
The package I had delivered today came via Amazon Fresh - the grocery delivery service they are testing in the Seattle area. It looks like they're also using it for non-Fresh items too for small, commodity items like CDs

This is Amazon owning the entire process from order until the item is in my hand.

tomfakes··on How Amazon’s ambitious new push for same-day delivery will destroy local retail
I bought 2 things on Amazon this week, both with free 2 day shipping with Prime

Item 1 spent 13 hours on a UPS truck driving around my city and was delivered about 7pm in the evening 2 days after ordering.

Item 2 was delivered 14 hours after purchasing by Amazon Fresh at 9am.

For the same price of shipping, which service would you rather have?

EDIT To Add: The delivery guy for the 14 hour item works for Amazon - the whole experience was produced by Amazon without needing a third party. UPS is another company that will be in trouble if Amazon can make this scale.

tomfakes··on Lonesome George, last-of-his-kind Galapagos tortoise, dies
It's humbling to think of seeing an entire subspecies being wiped out by this one simple event.

I saw Lonesome George in person just last December - although at a fair distance (he wasn't particularly friendly to the tourists!)

On the same trip we saw a whole new hybrid species that had never been seen before - as confirmed by the scientists at the same place that George lived. The whole cycle of evolution is visible in a very small and isolated location.

tomfakes··on SVG, Use it Already
It is possible to do this, but there's tricks of setting font-size and background-size involved to get the background sprite image to scale correctly.

I got this info from somewhere in The Googles, so the information is out there.

I haven't yet tried this on older browsers, so it may need extra help when I decided what browsers my app will support

tomfakes··on A Better ImageMagick Gem
Why did MiniMagick not work for you? It does exactly this type of manipulation using the command line, and is working great for a large number of existing web sites
tomfakes··on 10 (or so) of the worst passwords exposed by the LinkedIn hack
Since LinkedIn didn't lock my account yesterday, I assumed my password was not leaked. However, LeakedIn has my password marked as 'leaked' but not yet cracked.

Is LinkedIn really on top of this as they say they are?

tomfakes··on Why read books if we can’t remember what’s in them?
With fiction, sometimes the entire point can be escapism. A way of taking the mind elsewhere for a time that allows other things to occur because you are not thinking about your current issues.

Like taking a shower - which can be where my best thinking can be done!

This can be a really good way of solving tricky day-to-day issues, even if the process looks like time wasting for those that are overly ambitious.

tomfakes··on Why three prongs?
I may have had it a little wrong. I can't find older legislation about this subject that confirms my supposition.

This 1994 legislation made it the law that plugs must be fitted to certain consumer devices: http://www.legislation.gov.uk/uksi/1994/1768/contents/made

Before that time, almost everything (certainly everything I purchased) came without a plug and you had to buy a plug and wire it yourself. Probably because these things are expensive, and costs could be reduced by leaving them out.

tomfakes··on Why three prongs?
In the UK, until fairly recently, it was illegal to sell a product with a plug attached. Consumers had to wire their own plugs to their electrical devices before use.

Now that is inefficient!

tomfakes··on Venus to make rare transit across sun Tuesday
Can anyone explain why this doesn't happen every year, and is on a 100+ year cycle of 2 in eight years and then nothing for 105?
tomfakes··on CEO of SceneTap insists the technology "not creepy"
The CEO doesn't get to decide what is creepy - his audience does.

I saw an investment presentation of a new startup doing something with Twitter a few months ago. The first thing I thought was 'creepy'. This is not the first thing you want your potential investors to think.

For some customers, it may not feel that way, but if enough customers do, then you have a real problem that writing blog posts and doing interviews isn't going to fix.

tomfakes··on Heroku's new $50 and $100 per month database plans
Can I access the shared DB from outside Heroku?
tomfakes··on Heroku's new $50 and $100 per month database plans
I have an app that has a number of test users with a set of data for each of them that shows off the app. Since the users interact in specific ways, I need to have several users otherwise the testing isn't useful.

My dev machine has a much smaller set of data, but on Heroku, I run stage servers with reasonable amounts of real life data that I need for final testing

tomfakes··on Heroku's new $50 and $100 per month database plans
I need a bit more than the approx 5MB of data - much more, but currently less than 20GB.

I'm kind of in a no-mans land of Heroku data plans - until today!

← PreviousPage 3 of 7Next →