HNHacker News
TopNewBestAskShowJobs

update

238 karma · joined May 19, 2013

submissionscomments
update··on Life as a bug bounty hunter
> you would need to get, like, 10 $5,000 bounties a year to survive in the US wouldn't you?

More like 2 $5k bounties a year for me. Where I live in the U.S., I could rent a house for $500/mo ($6,000 a year), and I eat about $200 of food per month ($2,400 a year). So the cost of living per year is $8,400.

But yes, it entirely depends on where you live. For me, I specifically chose this place so that I could live comfortably on bug bounty income

update··on Life as a bug bounty hunter
> My favorite response though is still the "This is a duplicate from [random date six months ago]". Oh, so you're purposefully just leaving an XSS live on your corporate SSO? Makes sense!

Ug. I've submitted 2 bugs to Vimeo that gave this exact response. I even followed up a few months later to see if they'd patch it and they responded, "the developers are aware and working on it" ...

Seriously? Leaving 2 XSS bugs open on your website that you run a bug bounty program for?? for a year?

I really wish hackerone would punish this sort of behavior as it's a waste of every hacker's time to find a bug, write a report, only to be told it's a year old known bug so it's not eligible for a bounty.

update··on How LeBron James' new public school is the first of its kind
I've thought about this a lot over the years, as someone coming from a poor background but grew up around very wealthy kids, I never understood why people who cannot afford to give their child a good life have children. That may sound cold, and it might be, but I wondered it myself growing up in a poor household.

There's a great scene from a Michael Winterbottom movie called Jude where --spoiler-- a child asks his parents why they had him if they could not afford him and his siblings. The child doesn't like the answer and ends up hanging himself and his siblings.

I don't know if there is a solution. People want to have kids, even if they can't - in my opinion - afford them. Some religions encourage having lots of children - it's a big thing in the catholic community, at least where I grew up.

Anecdote: My cousin is married to a catholic latina, he's already struggling to make ends meet taking care of the one kid they have. He lives with her grandparents and cousins in a tiny apartment in a low income neighborhood. There is no way I could talk him out of having another child, even though I know it's fiscally irresponsible in my opinion.

I think it's a conversation worth having but I just don't know how it can go anywhere, and I have struggled to come up with an answer that isn't just me being upset with the parents.

update··on Dads Pass on More Than Genetics in Their Sperm
> For instance, mice born to fathers that experience stress can inherit the behavioral consequences of traumatic memories. Additionally, mouse dads with less-than-desirable diets can pass a wonky metabolism onto their kids.

This is likely being studied already, but I wonder what this means in regards to depression.

update··on How an Ex-Cop Rigged McDonald’s Monopoly Game and Stole Millions
Really interesting articles.

2 things that stood out

> Hanssen [...] is serving his sentence at the ADX Florence, a federal supermax prison near Florence, Colorado in solitary confinement for twenty-three hours a day.

The guy made a deal to avoid the death penalty, but from what I've read about solitary confinement this can't be much better.

and this:

> https://en.wikipedia.org/wiki/Aldrich_Ames

>U.S. mole hunters investigated 90 employees at WTC for almost a year and came up with ten suspects, although the lead investigator noted that "there are so many problem personalities that no one stands out"

update··on Ask HN: Depression and job
My drive/ambition for my job was driving me nuts. I started getting hives - for the first time in my life - from the stress.

The best thing I did was move from San Francisco to the northwoods near lake superior. You can buy a house out here for <$30k. After that, all you have to pay are utility + food bills, which is like $300 a month (vs $1800/mo rent in CA).

With cost of living being so low, you can a single one-off tech job and not have to worry about working for the next few months.

It is fantastic to be so free.

Just my experience but maybe you can gain something from it?

update··on Walmart patents tech that would allow it to eavesdrop on cashiers
previous discussion (yesterday): https://news.ycombinator.com/item?id=17515247
update··on Grand Jury Indicts Russian Officers for Hacking Related to the 2016 Election
"You cannot invade the mainland United States. There would be a rifle behind every blade of grass."

It seems like a no-brainer that an enemy force (Russia in this instance) would want to disarm the people they plan to attack/control.

The OP asked what I'd expect from a Russian Agent as President, and that's what I'd expect one of the first steps to be. I _wouldn't_ expect a russian agent who became president of the U.S. to fight for the 2nd Amendment/arming of citizens and to push for the EU to increase their military spending.

Sure, it could happen, but I wouldn't expect it.

update··on Grand Jury Indicts Russian Officers for Hacking Related to the 2016 Election
> Hypothetically, if a Russian agent became President of the USA, what would you expect him to do?

If a Russian agent became President of the USA, I would expect him to disarm american citizens and to reduce the power of the U.S. military.

e: if you're downvoting please explain why.

update··on MacOS Mojave removes subpixel anti-aliasing, making non-retina displays blurry
So what's the solution here? Buy a new monitor if we want to use up-to-date versions of macOS?

Anyone who uses Apple's FCPX or Logic knows we'll have to update to Mojave because eventually we'll try to open the latest version of said software and be told "You must be running Mojave to open this"

I'd really ditch Apple because of stunts like this, but I really love Logic and FCPX so I'm stuck with it.

update··on Rural Americans can't check email or use credit cards because of slow Internet
Interesting article.

> Some small-town residents say it’s nearly impossible to do simple tasks like check email and stream videos. Eric Pelka, a post office employee in Julian, Pa., told Fox News at times they had to turn seven to eight people away a day because of poor Internet connection.

I'd also wager that it stops some people from moving to the area. I recently was looking to move to a rural area and a make or break factor was internet. I passed on so many beautiful locations because there was no internet available.

update··on Why aren’t Google and Facebook enriching our lives more?
> Come to think of it, those are both equally useless mottos. Most people any of us may consider evil are not evil in their own eyes. Such a motto contains nothing at all

says a lot about a company who makes that their motto doesn't it?

update··on Web Development in Go
I read the post. The language is just confusing. You shouldn't have to tell me that "You should write your next web server in Go" doesn't mean what it says on the tin.

A web server is Apache, Nginx, Lighttpd, etc. What you just described is a Web Application, which I develop all the time on python -> uwsgi -> nginx stack.

For the record, I'm not blaming you, but the author for the confusing language. The title says "Web Development in Go" -- web dev is traditionally web applications/html/css etc, not typically including servers. Then their opening sentence is "You should write your next web SERVER in Go"

/pedant

update··on Web Development in Go
> You should write your next web server in Go

Are people writing their own web servers these days? is that a thing? Seems like everyone uses nginx.

update··on Google won’t be able to resist listening in on your conversations
I use uBlock origin on all my browsers. are you doing anything extra (e.g. blocking at an /etc/hosts level?) or am I covered?
update··on Can sleep deprivation cure depression?
> Tübingen who was hospitalized for depression and claimed that she normally kept her symptoms in check by taking all-night bike rides. He subsequently demonstrated in a group of depressed patients that a night of complete sleep deprivation produced an immediate, significant improvement in mood in about 60 percent of the group.

I thought this bit was neat. I'd heard that sleep deprivation can bring on a feeling of euphoria, and anecdotally, it has worked for me

update··on Ask HN: What inspires you to persevere through adversity?
> What inspired me to persevere was the simple fact that, really, it was the only way to get what I wanted. That's what it comes down to. Do you want the thing you're going after more than you want to avoid the obstacles in the way? If you do, you'll keep going.

This is how I go about life no matter what the obstacle.

From quitting smoking to making it rich (I've done one of these so far...)

"Just do it." It's a pretty simple, definitely hard though & certainly worth it.

update··on DuckDuckGo Hits 14M Searches in a Single Day
ddg.com
update··on Want to Know Julian Assange’s Endgame? He Told You a Decade Ago
> He's literally bragging about sexual assault

No, he literally is not.

"Grab ’em by the pussy. You can do anything." != "I forcefully grab women by the vagina"

but I can see this is a losing battle.

> That's true whether or not there is evidence of his words being true.

Ah, the old "the absence of evidence is not the evidence of absence" defense.

update··on Want to Know Julian Assange’s Endgame? He Told You a Decade Ago
How is that sexual assault?
update··on Want to Know Julian Assange’s Endgame? He Told You a Decade Ago
> The US may have a lot of unsavory parts, but rule of law and presumption of innocence are not one of them. Perhaps the progressives can stop trying to undermine them in the name of unguided censorship (e.g. trying to censor "bro banter" by painting it as sexual assault)

This is my point exactly. Yet somehow I've gotten 4 downvotes for stating so. To be fair, I was prepared to be downvoted for that comment. Anything remotely pro-trump here is downvoted to hell.

update··on Want to Know Julian Assange’s Endgame? He Told You a Decade Ago
The author of this Wired piece:

> Trump has, of course, faced the leaks of his 1995 tax returns and a [1]damning video where he brags about sexual assault

The author links to an article with this headline: [1] "Trump recorded having extremely lewd conversation about women in 2005"

!= "Trump brags about sexual assault" (implying guilt)

https://www.washingtonpost.com/politics/trump-recorded-havin...

I do not like the opinion/politicization going on in the article. There is no evidence of sexual assault in the tape the author links.

Makes me question the bias of this whole article...

update··on My Self-Hosted Life
Good post! I run a homeserver too. It serves media content (1080p) to everyone in the house and never has any trouble. It's main purposes are running Plex and nginx, and soon, e-mail. Only port 80 is accessible to the internet atm (it's fun to read the access logs & see the latest exploit attempts)

It's hard because you have to really be on top of security, but it's worth it.

> You might say that this is a bit of a cop out, since this all runs on a virtual machine, which itself runs on someone else’s computer. I would agree, however it’s a nice middle ground between going all out with your own servers and running everything in the cloud. To me the reality that the VPS is in the cloud is obscured by the ability to control every detail of its running software.

Hmm. Contrarily, this part convinced me to completely self-host all aspects of my internet life.

Also, sorry about your blog going down! What was the cause of that?

update··on Oculus Rift creator Palmer Luckey secretly funded pro-Trump meme website
> Palmer's a smart successful guy He really is. He's also really young (24). Reading about his life[1] for the first time right now and it's inspiring to me.

[1] https://en.wikipedia.org/wiki/Palmer_Luckey

* born in 1992 in Long Beach, CA (really average city with pockets of extreme poverty)

* community college courses when he was 14

* originally majored in Journalism

> From ages 11 to 16, he experimented with a variety of high-voltage electronics projects including coil guns, Tesla coils, and lasers

> To fund these projects, he earned at least US$36,000 by fixing and reselling damaged iPhones,[1] and was also a sailing coach and did boat repair.

* Net Worth: US$700 million (2015)

I think he's entitled to his opinion.

update··on The Dropbox hack is real
I'm surprised no one has mentioned Dropbox's bug bounty program: https://hackerone.com/dropbox

You have to wonder if all those grumbling whitehats were on to something when they said bug bounties should pay a lot more than what they do and that there IS a black market interest for them.

update··on The Dropbox hack is real
> it taught me everything is breached

Everything is breached. From websites to software to hardware, I would estimate the majority of them can be/have been exploited by advanced hackers.

I'm awaiting the time when we all acknowledge that computers are fundamentally insecure.

update··on Bounty hunters are legally hacking Apple and the Pentagon
biggest news here is that Apple now has a bug bounty program
update··on Why bad-tempered people earn more and live longer
I think this hits the nail the nail on the head.

You said it eloquently.

Less scientifically stated: I personally see it as more of a point & click gesture coupled with a lot of 'Alpha' tendencies. It's a simple as "this is wrong. shut up. Make it this way which is the right way, and, do it now."

speaking as a bad-tempered, high earning person.

relevant part of the article:

> The truth is, pondering the worst has some clear advantages. Cranks may be superior negotiators, more discerning decision-makers and cut their risk of having a heart attack. Cynics can expect more stable marriages, higher earnings and longer lives – though, of course, they’ll anticipate the opposite.

also shout out to Elizabeth Hurley who was mentioned in the article :)

> To his ex-girlfriend Elizabeth Hurley's friends he was apparently known as ‘Grumpelstiltskin’.

> Hugh Grant may be famed for being moody and a little challenging to work with. But could a grumpy attitude be the secret to his success?

update··on Everyone is quitting
> I didn't believe him at that time.

why not?

update··on On Being a Black Man
One question: 127 comments. How many from black people?
← PreviousPage 2 of 4Next →