HNHacker News
TopNewBestAskShowJobs

tyleraldrich

217 karma · joined December 10, 2015

submissionscomments
tyleraldrich··on Why JWTs Suck as Session Tokens (2017)
I don't know what you're working with, but you don't need a JWT to figure out access in the request pipeline. A session ID does the same thing and allows you to associate a session to a user, and most frameworks are capable of doing this already (e.g. django has middleware that can do this)
tyleraldrich··on Why JWTs Suck as Session Tokens (2017)
But... that's not really something you _have_ to avoid. Check permissions, if they fail the test -> http401 (for an API) or some user-friendly redirect. Something similar to this is how things work without JWT currently, so it's only a problem if you make it one.
tyleraldrich··on Changing Our Approach to Anti-Tracking
Google pays Mozilla a bunch of money to be the default search engine, and Mozilla needs the money as they are a non-profit.

If somebody cares about their online privacy, they can change the default search engine very easily - I think what we should be doing is teaching the average web browser what kind of tracking goes on so that more people are willing to switch to things like Firefox/DDG.

tyleraldrich··on T-Mobile Database Breach Exposes 2M Customers' Data
This same exact strategy works with a salt as well.
tyleraldrich··on T-Mobile Database Breach Exposes 2M Customers' Data
This isn't necessarily true (and is very dependent on what your password was) - they could have iterated through lists of common passwords w/ special characters, hashed them, and compared them to their DB, forcing a pw reset for everyone that had a match.

edit - just want to state that if they disallow special characters it really is a terrible policy, my point is just that resetting your password isn't proof they are stored in plaintext

tyleraldrich··on The Age That Women Have Babies: How a Gap Divides America
I guess pointless depends on what you're reading the comment section for - I'd put you in the minority if you came here looking for book suggestions.

It's certainly unrelated to the article, and the OP didn't understand why they received downvotes, so I believe my explanation was sufficient.

tyleraldrich··on Remote Code Execution on a Facebook server
You didn't read the article.

"09.08.2018 20:10 CEST : a 5000$ bounty is awarded – the server was in a separate VLAN with no users’ specific data."

tyleraldrich··on Russian hackers targeted U.S. conservative think-tanks, says Microsoft
You may want to look into media bias and the One America News Network. I suspect you haven't rethought your position at all, and rather parrot the position you see on the media you consume. Think outside the box.
tyleraldrich··on Russian hackers targeted U.S. conservative think-tanks, says Microsoft
If your sources include two conspiracy-like youtube videos, and a legitimate article saying "maybe", you may want to rethink your position here.
tyleraldrich··on The world is losing the war against climate change
Unfortunately for us, Trump doesn't think climate change exists, so he would never do this.
tyleraldrich··on Billions in U.S. solar projects shelved after Trump panel tariff
It's now abundantly clear you didn't even attempt to read this article. Paragraph after paragraph listing developers and direct quotes from some of them:

To list a few: Pine Gate Renewables, GTM Research, SunPower Corp, Cypress Creek Renewables LLC, the list goes on.

This isn't a Q&A (and most news isn't). You're not going to get specific questions asked to specific people. Some people like to remain anonymous. Comparing this to fox news "people are saying..." is ridiculous. I don't even have an opinion about this article but not reading an article at all and making pointless commentary about it in the comments irks me.

tyleraldrich··on Billions in U.S. solar projects shelved after Trump panel tariff
> Why didn't the journalist at least cite the source of the informatoin?

The source is cited in literally the first sentence.

"President Donald Trump’s tariff on imported solar panels has led U.S. renewable energy companies to cancel or freeze investments of more than $2.5 billion in large installation projects, along with thousands of jobs, the developers told Reuters."

I'm not sure if you read this article or are just responding to comments/the title, but this article is just reporting a few statements from solar developers and isn't trying to tell you how to decide to interpret anything. They wrote the total dollar amount of frozen/cancelled investments and quotes solar developers. This is Reuters, it's a pretty boring neutral article.

tyleraldrich··on 82-Year-Old Japanese Woman Finds Success in Coding
Have you heard of "examples." They are things you provide in order to make your point more clear. Seriously.
tyleraldrich··on 82-Year-Old Japanese Woman Finds Success in Coding
> The comment is essentially saying that if I do great things and become a role model then I'm not welcome because we already have plenty that "look like me".

The comment isn't about you at all. The OP said we need more role models like Grace Hopper and less like Jobs, Woz, etc. Reading this as "White men should stop aspiring to become future role models" is silly, it's about a desire to increase the diversity of tech role models. It really just sounds like you're playing the victim here, for no real reason?

tyleraldrich··on How Strenuous Exercise Affects Our Immune System
Yeah but the OP said nothing about biking for an hour every day... OP was replying to a guy who said "We lift 2 times a week. Warm up, then do 2+ reps of a heavy set." That does not at all sound like a guy who burns 3k kcal on a rest day and burns 4k kcal on a bike a few times a week.
tyleraldrich··on Reddit’s Redesign
Reddit is also the 6th most popular website in the world, and likely gets thousands of potential new users daily that are turned off by the design and don't become Reddit addicts.
tyleraldrich··on FTC Probing Facebook for Use of Personal Data, Source Says
I think you completely misunderstand why people build fences or walls around their homes.

House wall: - keep pesky neighborhood kids from running through it and ruining your grass - keep your neighbors from being able to see you while youre swimming in your pool

Border wall: - attempt to keep Mexicans from immigrating into the country illegally

I fail to see how these use cases are at all similar. Please, if I missed a use case for a house or if your home is constantly being attacked by barbarians let me know, but I don't think anybody in California builds a wall to "defend" themselves.

tyleraldrich··on FTC Probing Facebook for Use of Personal Data, Source Says
There's a huge difference between having a wall around your home so your neighbors/peeping toms can't look at you and having a wall on the border to keep immigrants out.

These things aren't even comparable, I have no idea where you think the irony lies.

tyleraldrich··on Confidential metrics for Snapchat features
Instagram and Snapchat share exactly 1 feature ("Stories"), so I really don't see how this shows that Snapchat is failing due to Google/FB monopoly, and not due to the reason I listed above.

Instagram is more analogous to Twitter, and I assume advertisements occur both within the "Stories" and the newsfeed - this seems much more favorable to advertisers and is something advertisers are more used to.

tyleraldrich··on Confidential metrics for Snapchat features
Perhaps there isn't just a good way to weave advertising into an app originally designed to send ephemeral pictures to friends? It seems like that's the real reason Snaps fate was preordained, and has nothing to do with Google/FBs ad empire.
tyleraldrich··on Tax-Free Bitcoin-To-Ether Trading in US to End Under GOP Plan
Did you really think you'd be able to trade around money without being taxed?
tyleraldrich··on Overcoming Us vs. Them
> left-leaning google/facebook/youtube/twitter using alt-right as a banner to ban conservatives

What? Citation needed. I haven't heard of any conservatives getting banned from these services due to their political affiliation.

> Then when programmers are on a list, or a project doesn't support the diversity license, you get banned from github, hackathons or talks.

Again, what? Has this happened? I've never heard of this, and this seems like fairly extreme hyperbole.

What is your argument here? Tech companies are against conservative americans? If reading HN has taught me anything, the tech scene is full of conservatives and libertarians.

tyleraldrich··on Firefox Private Browsing vs. Chrome Incognito: Which Is Faster?
I doubt any of my non-technical friends know what DDG is.
tyleraldrich··on Announcement: RT and Sputnik Advertising
> What is concerning is that Twitter controls a massive platform and has revealed itself to be heavily biased and intent upon ideological control of the content that exists on its platform.

Your entire post is making the assumption that Twitter did this because they just believed the US/Russia election meddling stories or something.

Maybe there was clear and documented malice involved? Who knows! Certainly not you. But, reading this and immediately thinking "Twitter has now admitted they are on the side of the Democrats and believes all these Russia stories" is foolish and fails to consider that maybe something weird _might_ be going on, and maybe Twitter actually made a good decision here.

Don't worry about me though, I read plenty of international news - but I'm not going to bother with state sponsored organizations like RT.

tyleraldrich··on Announcement: RT and Sputnik Advertising
> Wasn't it revealed the Trump Dossier was paid ofr by Pedestal/DNC?

http://www.newsweek.com/republicans-trump-russia-dossier-cli...

Allegedly also partially "funded by an unknown Republican during the GOP primary."

> That said, what has WikiLeaks published that has turned out untrue?

I don't think anybody is arguing that WikiLeaks is posting fake news or untrue information - the argument is that WikiLeaks is curating the information it releases in order to send a specific message.

tyleraldrich··on Announcement: RT and Sputnik Advertising
Nothing you mentioned is being affected by this change. They are no longer to purchase advertisements, but you can still follow RT and get news updates from them.

Your post is just as much a political statement as Twitters, which is hilariously ironic.

tyleraldrich··on “Startup” asks internship applicant to build their app before phone screen
If you're applying for a jobs you should probably make sure you have at least 2 hours of spare time to do an interview... Take home or not, it's an interview, and if you want the job you can find 2 hours - it's a completely reasonable amount of time for an interview to take.
tyleraldrich··on Alphabet’s CapitalG Leads $1B Round in Lyft
Hah wow my reading comprehension is apparently not working at all today, my bad OP. Gunna just leave my comment up so I can be properly shamed :p
tyleraldrich··on Alphabet’s CapitalG Leads $1B Round in Lyft
I'm pretty sure they both operate at a loss or at least come very close to breaking even. There is a 0% chance Uber or Lyft make "billions" in _profit_ every year.
tyleraldrich··on Byzantium Hard Fork Announcement
Who knows, maybe for legacy code reasons? This seems to be the documentation: https://github.com/ethereum/wiki/wiki/JSON-RPC#eth_gettransa...
Page 1 of 3Next →