Hacker News Reader

wcdolphinon A DNS hijacking wave is targeting companies at an almost unprecedented scale

For the MTM scenario, how would you convince letsencrypt’s CA to issue you a cert for any domain? Don’t you need to complete the challenge in order for the CA to issue you a cert?

wcdolphinon Monorepos: Please don’t

No. The worst case is that the engineering team spent more time working on “well encapsulated projects” than on the most important project for their business and are all now out of jobs. Most companies don’t fail because of tech debt. And certainly not because of version control tech debt.

wcdolphinon Intel unveils a new architecture for 2019: Sunny Cove

Sunny Cove extends virtual addresses to 57 meaningful bits...The new limits enable 128PB of virtual address space and 4PB of physical memory.

This is interesting to me. At first glance I couldn’t really figure out “why now”. But I guess with Optane there really will be a need for addressing petabytes of ram, as it will span DRAM and Optane. It seems Intel thinks it will be a competitive advantage.

wcdolphinon Get the Font

Or alternatively the market is not very efficient. There is zero marginal cost for a font to be used, yet people are currently precluded from using fonts due to price. That seems to suggest there may be an inefficiency, and reducing the price may not only reduce piracy but also increase revenue.

wcdolphinon UBlock Origin 1.17.4 released

Interesting that an iPhone XS is the fastest of all the benchmarks above.

Benchmarking, the higher ops/sec the better. Safari 12.0 on Apple iPhone (iOS 12.1).

Test 100 needles against 16 dictionaries of hostnames - Set-based x 3,763 ops/sec ±0.19% (68 runs sampled) - Regex-based x 392 ops/sec ±0.16% (66 runs sampled) - Trie-based (1st-gen) x 20,669 ops/sec ±0.15% (69 runs sampled) - Trie-based JS (2nd-gen) x 16,926 ops/sec ±0.71% (69 runs sampled) Done.

wcdolphinon Ask HN: Who is hiring? (November 2018)

Help solve America's healthcare problem, one bill at a time. CueSquared is a fast growing startup looking for key early engineers. We save medical practices millions by replacing snail mail bills with secure sms payments and appointment reminders. Looking for a full stack engineer with: strong backend data processing skills; data modeling/processing data at scale; great software design; able to both work independently and with a team.

Medical billing may be an old industry, but we're using fresh tools to tackle the problem. * Java (spring-boot / micro services) * Well built cloud-based devops experience (AWS / Google Cloud) * Modern React frontend

Competitive salary and employee-friend stock plans. Come help save America's healthcare problem.

Contact wdolphin@cuesquared.com

wcdolphinon People Hacks for Technical Leads

I’ve wrongly assumed it to be real for a long time. Thanks for mentioning this! I just skimmed https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5366351/

As it stands, I believe evidence suggests that people may report to prefer a style, but it has no measurable impact on their learning.

wcdolphinon Can this cooler save kids from dying?

Does anyone have a link to a diagram describing how this works? I don't understand how heating it re-condenses the water.

wcdolphinon Two Canadian banks say accounts compromised: CIBC 40,000 and BMO 50,000

What is wrong with stopping people from reusing the same password? It can be done securely using the same storage mechanism as passwords, ie storing hashes only.

wcdolphinon Smoked foods are tastier, less harmful with a tip from the auto industry

That was my first thought as well. Did you find anything?

wcdolphinon Link Deployment with AWS LambdaEdge

“As an alternative to cookies, then, we opted to hash the user’s IP address and their User-Agent string”.

So if a user is on a mobile device and switches networks, 50/50 they will receive a consistent version?

Did you consider using Geo based filtering? Iirc Cloudfront has support for geo restrictions, so you could create multiple distributions and restrict one to a geo for rollout.

wcdolphinon The Big Vitamin D Mistake

What if the increase in lung cancer was caused by more breathes being taken. It would be funny if both the “energy/metabolism” crowd and the “cancer” risk proponents were correct.

wcdolphinon Exploiting the Wi-Fi Stack on Apple Devices

Google is using their security research as a marketing weapon against Apple. From the article itself, Android is arguably more vulnerable as measured by percent of users running a device whose OEM has not distributed an update.

wcdolphinon Cloudflare Workers: Run JavaScript Service Workers at the Edge

Could this be used for HTTP Push across domains? I would love an easy way to take advantage of HTTP Push for assets hosted on S3 without routing requests to my origin server.

wcdolphinon Engineers in San Francisco Have Mediocre Take Home Pay

What is this based upon? Do tech companies give different equity if you e.g. Work out of the boulder office? I've been looking for an excuse to move to CO.

wcdolphinon Introducing Backup and Sync for Google Photos and Google Drive

How does that work given that a google Photos has different pricing for compressed photos?

wcdolphinon How did a 30 year-old Su-22 defeat a modern AIM-9X?

I find it interesting the US jet was an FA-18, which entered service November 1983 (USN) is actually more than 30 years old as well.

https://en.m.wikipedia.org/wiki/McDonnell_Douglas_F/A-18_Hor...

wcdolphinon Jupiter surprises scientists in Juno’s first flybys

Im so impressed these scientists were so excited to be proven wrong. Such a pure and genuine interest in the pursuit of knowledge.

wcdolphinon Tears

How does this theory explain the act of crying in private?

The theory explains why someone would want not to cry in front of people (loss of prestige/dominance), but not why someone would want to cry alone, in private.

wcdolphinon Dodging S3 Downtime with Nginx and HAProxy

Noo!!!

This is vulnerable to path expansion attacks. If someone passes a URL such as your site/s3/..EVIL_BUCKET/EVIL.js all of a sudden your site is serving someone else's content. Bad idea. Use virtual host style buckets instead, i.e S3_bucket.S3host/content.

wcdolphinon Introducing Cloud Spanner, a Global Database Service

Not dumb, I was being inexact. I was talking about Spanner understanding the semantics of JSON, similar to Postgre's JSONB or MYSQL's JSON.

wcdolphinon Introducing Cloud Spanner, a Global Database Service

Is JSON data type support in the works? Seems to be a very commonly requested feature these days.

wcdolphinon Show HN: s3-lambda – Lambda functions over S3 objects: each, map, reduce, filter

I thinking having the default be destructive for mapping is a strange design decision. That is going to bite someone one day soon.

wcdolphinon Amazon Aurora Update – PostgreSQL Compatibility

What sort of transactional support is there? Are Serializable transactions supported?

wcdolphinon From Kafka to ZeroMQ for real-time log aggregation

Did you ever try running 5 ZK's in the ensemble? 3 is the absolute minimum to survive a single machine failure. If you are having trouble with availability, it seems natural to increase your safety factor there.

I was surprised by the contrasting sense of importance of delivery guarantees in the article. At the start, losing a message was akin to the death of a child. At the end, shrug. Now every single machine failure (or even ømq process restart) failure will lose you log messages stored in memory :(.

Glad to hear you found a solution that worked for you though! Would love to hear about difficulties you had with the new system, in particular adding brokers.

wcdolphinon Warned of a Crash, Startups in Silicon Valley Narrow Their Focus

Is there any difference between a startup or a small business in your mind?

I see the two forms of business sometimes differentiated in that way.

wcdolphinon Undebt: How We Refactored 3M Lines of Code

I challenge that; I don't think a "bug free code base" actually exists. Joshua Bloch has a great article about this which I think may be of interest to other readers: https://research.googleblog.com/2006/06/extra-extra-read-all....

To paraphrase: We programmers need all the help we can get, and we should never assume otherwise. Careful design is great. Testing is great. Formal methods are great. Code reviews are great. Static analysis is great. But none of these things alone are sufficient to eliminate bugs: They will always be with us. A bug can exist for half a century despite our best efforts to exterminate it. We must program carefully, defensively, and remain ever vigilant.

wcdolphinon Google Posts

Is this really an intentional product launch? Being late on a Friday evening seems quite strange.

wcdolphinon “Me”: The one word journalists should add to Twitter searches

This insight seems like a great opportunity for classification or tagging. I wonder what a stream of tweets which were purely autobiographical would look like.

wcdolphinon Kafka in a Nutshell

Great post, but one thing to note is that the number of partitions DOES NOT need to be equivalent to the number of consumers. A consumer can reasonably consume multiple partitions, as most do. On the other hand, it does provide an upper bound to the number of consumers in one group, as a consumer can only reasonably consume as few as one of the partitions.