HNHacker News
TopNewBestAskShowJobs

w8rbt

1,857 karma · joined October 2, 2014

[ my public key: https://keybase.io/w8rbt; my proof: https://keybase.io/w8rbt/sigs/kKhQPR9DV30u4BLVAipAEeTFptKrcKQmGN_0dNj_5Xw ]
submissionscomments
w8rbt··on We are clueless about how long things should take
If managers come to developers with problems that are NP complete, no matter how well they transfer the idea/vision, or set time expectations, the problem cannot be solved efficiently. And, unless the developers have been trained in CS/Math they may not even understand that what they are being asked to do cannot be done.

For example, say a manager has an idea to find the largest group of friends in a massive social network. He wants a developer to write an app for that and has a 20K budget and 2 months. You could not write this app with 10 times that budget or time.

How can you determine which group of friends is the largest?

https://en.wikipedia.org/wiki/Clique_problem

https://en.wikipedia.org/wiki/List_of_NP-complete_problems

w8rbt··on OSSU: A path to a free self-taught education in computer science
You could also get a free Udacity account and watch the Georgia Tech CS Master classes (OMSCS). Algorithms, Machine Learning, Operating Systems, etc. It's a good program.
w8rbt··on Ask HN: How do you handle/maintain local Python environments?
This is my biggest issue with Python. I absolutely love the language, but Python 3 ought to be Python 3 no matter where/how you got it. If you are using 3.5 and I'm using 3.7 we ought to be able to share code and things just work. Unfortunately, that is not the case.
w8rbt··on Breaking Pills
If you majored in CS at university, you probably suffered through a lot of it. It sinks in after awhile and is rather useful.
w8rbt··on The Czech Cyber Billionaire Who Founded Avast
I did use it then and I never experienced that. I bet it was some unrelated coincidence. They would not do that.
w8rbt··on The Czech Cyber Billionaire Who Founded Avast
I have never heard this. Can you provide a link with more details?
w8rbt··on Handshake: Decentralizing DNS to Improve the Security of the Internet
Right, thanks. And I hope my question does not sound too critical. I was just genuinely curious why JS was used.

I think JS is fine for small to mid-sized tasks, prototyping and testing ideas. However, for real DNS servers, used by a lot of clients, I believe C, C++, Go or Rust would be an absolute requirement.

w8rbt··on The boring technology behind a one-person Internet company (2018)
Absolutely, but a great idea when combined with other defensive tactics. Obscurity is why armies use camouflage.
w8rbt··on DNSCrypt encrypts communications between a DNS client and a DNS resolver
I use CoreDNS as a stub resolver to do DNS over TLS. It works great. https://coredns.io/
w8rbt··on LastPass bug leaks credentials from previous site
It's 2^15 rounds of pbkdf2 with long inputs. There is no master password as nothing is stored. Good luck.
w8rbt··on LastPass bug leaks credentials from previous site
This is one reason why I believe that browser based password managers are flawed. I've written about this in the past (link below). These apps are popular with normal people (due to convenience), but long-term, we should not trust web browsers plugins or add-ons as password managers.

https://github.com/w8rbt/dpg#why-traditional-password-manage...

w8rbt··on Why Go and Not Rust?
I like to think that Go is C for the Cloud.

And don't let detractors get you down. No matter what you do, or how successful you are, there will always be critics. Ignore them.

w8rbt··on Building a Better Go Linker
Ken Thompson wrote B which is the direct predecessor of C. He was and is certainly a language designer and implementer.

https://en.wikipedia.org/wiki/B_(programming_language)

w8rbt··on Why Ada Is the Language You Want to Be Programming Your Systems With
C would recognize it, but not over-react. Log it and continue rather than going full abort/self destruct which is what ada did.
w8rbt··on Turn off DoH, Firefox
Absolutely. This warning seems disingenuous and will confuse many normal people. DNS over HTTPs and DNS over TLS are good things and increase our privacy. People should switch to them.
w8rbt··on DontDuo: Bypass 2FA with DTMF Tones
IT admins at your org can enable or disable 2FA methods allowed via the Duo administration console. Many US edus disable TOTP.
w8rbt··on DontDuo: Bypass 2FA with DTMF Tones
I think the point is that relying on phone calls and DTMF tones for two factor authentication is trivial to bypass. Anyone can record DTMF tones in a voicemail message and forward calls to that number.
w8rbt··on Richard Stallman spoke at Microsoft Research this week
Telling them to use GNU/Linux.
w8rbt··on Software U2F Authenticator for macOS
Does oathtool take stdin? Last time I looked it did not. I keep my TOTP secrets PGP encrypted and pipe them to goathgen.

    $ gpg -d encrypted-secret.txt | goathgen
https://github.com/w8rbt/goathgen
w8rbt··on Slack’s Shares Plunge After It Predicts a Larger Loss
https://get.slack.help/hc/en-us/articles/360002079527-A-guid...
w8rbt··on Slack’s Shares Plunge After It Predicts a Larger Loss
Sorry, I don't mean that as snark. Many people born after 2000 have known nothing but Gmail as email and are surprised to learn that other email systems/providers exist.
w8rbt··on Slack’s Shares Plunge After It Predicts a Larger Loss
Gmail was not the first email program (which is what the OP asked about). Gmail came several decades after email was invented and already in widespread use. You may or may not realize this fact (depending on your age).
w8rbt··on Slack’s Shares Plunge After It Predicts a Larger Loss
Slack is nothing at all like email. It's proprietary, non-federated and has built-in data discovery/spying mechanisms to record every click/keystroke made by users.
w8rbt··on Go 1.13 Release Notes
Awesome news. Go is C for the Cloud.

Can I trademark that? ;)

w8rbt··on Go Module Mirror and Checksum Database Launched
Yes, I don't mind if it shows up in the index. I have nothing to hide.

That just seems wasteful and clutterish. If too much of that occurs, the index could be littered with it. Sort of like old PGP keys that never go away.

w8rbt··on Go Module Mirror and Checksum Database Launched
Thank you for this. It seems they've thought of almost everything we do.
w8rbt··on Go Module Mirror and Checksum Database Launched
This is probably a dumb question, but here goes... I'm testing go modules with an internal project that uses a private github.com repo. It depends on other public go packages and modules is nice to manage those but the general public will probably never see or want to use this code.

Are modules in private repos impacted by this in any way? Would they show-up in the index somehow?

w8rbt··on Linux kernel drivers in Rust might become an option in the future
I think setuid executables would be a good place for rust or go, but I have reservations about the kernel itself.
w8rbt··on Software Engineering Grads Lack the Skills Startups Need
Non CS people may not understand this at first, but you are exactly right. A 'tree' is connected and has n-1 edges. So there can only be precisely one path between any pair of vertices.

He may have meant a general connected graph (not specifically a tree). In which case, there could be multiple paths and some may be cheaper than others.

w8rbt··on Why didn't the Romans contribute much to mathematics?
I was under the impression that the Romans were more applied/practical and less theoretical, but I may be wrong. I got that notion from a professor I had years ago who was fond of saying, "The Romans built roads. The Greeks talked about building roads." Has anyone else ever heard that saying?
Page 1 of 18Next →