HNHacker News
TopNewBestAskShowJobs

Chickenosaurus

158 karma · joined July 15, 2015

[ my public key: https://keybase.io/nicktr; my proof: https://keybase.io/nicktr/sigs/aWe5NsodFv1YkKuw33f6Wh95HCX7eTzPIWScVNFbamE ]
submissionscomments
Chickenosaurus··on Tahoe's hiring crisis is unraveling small businesses during its busiest season
Paying more can entice people to commute, but there is still no housing. The real solution is more housing.
Chickenosaurus··on AWS Cost Saving Recommendations
Netcup was founded in my hometown in Germany. They have a very good reputation. However, they were aquired a while ago by Anexia. I am not sure if that changed anything.
Chickenosaurus··on Pulumi 3.0
Pulumi also allows storing state yourself in different backends [1]. The SaaS is a convenience.

[1] https://www.pulumi.com/docs/intro/concepts/state/

Chickenosaurus··on SpaceX: World record number of satellites launched
There are more than 1 billion cars on earth. Cubesats are smaller than a car and can be distributed in an additional dimension (altitude). I think there is little risk of oversaturation currently.
Chickenosaurus··on User power, not power users: htop and its design philosophy
You can use the kubectl debug command to add ephemeral containers to a running Pod. It's an alpha feature introduced in v1.18.

The ephemeral debug container can contain htop while the application container doesn't. This way minimal application containers aren't complicating debugging when something goes wrong :)

Chickenosaurus··on Danes Get 20-Year 0% Mortgages
This theory doesn't make sense to me. Banks could simply buy foreign currency to achieve the same without the additional risk of defaulting lenders.
Chickenosaurus··on Gitlab compensation calculator is not open to everyone anymore
I feel this says more about the mental stability of that specific person and has very little to do with giving feedback, no?
Chickenosaurus··on FritzFrog: A New Generation of Peer-to-Peer Botnets
Yes, you are surely right. I was mostly wondering if the bot net is actually secure.
Chickenosaurus··on FritzFrog: A New Generation of Peer-to-Peer Botnets
It seems to me this bot could be disabled.

Every bot has a list of peers and their SSH credentials. This way, peers can reinfect machines that were restarted, thus allowing the bot to be volatile on the infected machine.

The article says the researchers can join the peer-to-peer network. The researchers should be able to get a list of all infected machines including SSH credentials. These credentials could be used to remove the backdoor SSH key, kill the bot & netcat processes and maybe change the SSH password on all infected machines at the same time.

Am I missing something?

Chickenosaurus··on Manage Active Directory Objects with the New Windows Ad Provider for Terraform
Yes, for a second, I was very confused about the connection between active directory and advertising.
Chickenosaurus··on I tried starting a manufacturing unit in India
It's trivial to capture if there is a will. Send an agent who offers a bribe, fire the worker if the bribe is accepted.
Chickenosaurus··on Show HN: Textdb.dev – simple data sharing for fun projects
If a cryptographic hash function is used, the security of this scheme doesn't rely on keeping the algorithm secret, though. Therefore, it's not security through obscurity. Of course, weaknesses could still exist (e. g. a too small input space because the ID that is hashed has too little entropy).
Chickenosaurus··on Estonian Electronic Identity Card: Security Flaws in Key Management
Yes, the laws don't care about who you bank with. If your "center of life" is in Germany, you are required to pay income taxes. Although "center of life" is not defined in detail in german tax law, there are a number of known indicators that are considered. For example, if you reside in Germany for 183 days per year or more, you are required to pay income tax on all of your income.
Chickenosaurus··on Ask HN: Which tools have made you a much better programmer?
Maybe the person meant to say Visual Studio Code is preferable to Visual Studio.
Chickenosaurus··on Finding secrets by decompiling Python bytecode in public repositories
I suspect his thought was to use something like "%UserProfile%/pycache/" on windows and "$HOME/.pycache/" on Linux.
Chickenosaurus··on Bad times in corporate wireless networks
That might work nicely for plain TCP traffic, but it's not very useful for TLS encrypted connections by itself.

An attacker wants to decrypt the packets passed on as the man in the middle without alerting the victim. A big red "insecure connection" browser warning due to an untrusted certificate used by the MITM can easily thwart the attack.

To make this work, the attacker needs access to a CA the victim trusts to sign certificates on the fly. If the attack is limited to a single target page, stealing the associated private key from the legitimate website operator is an option, too.

Chickenosaurus··on Show HN: Help Me Decide Please
There are some downsides to that approach. The <form> element has semantic meaning which is lost if it's missing. Screen readers for blind people, browser features such as form auto-fill etc. might not work as expected without this semantic information.

Most web applications I have seen opt to use the form element. The default form browser behaviour can be suppressed easily.

Chickenosaurus··on From Mac to Linux – the setup I've grown to love
I completely agree. Having used Manjaro (xfce and i3 variants) as main OS for half a year, it has been a good experience.

To be fair, I can't compare with other distros as this was the first time I used Linux as main OS.

Chickenosaurus··on The Fastest and Shortest Algorithm for All Well-Defined Problems (2002)
Right, the critique is evaluating algorithms based solely on asymptotic time / space characteristics is insufficient. Constants can be significant if they are big enough.
Chickenosaurus··on Real-world dynamic programming: seam carving
Seam carving is the second assignment of Algorithms Part II. I also highly recommend Princeton's Algorithms course on Coursera.
Chickenosaurus··on You don’t want a child prodigy
I am not sure I fully agree with you, but you put it beautifully. You have a real way with words.
Chickenosaurus··on India: Google engineer latest victim of mob lynchings fueled by WhatsApp rumors
Legal ground for the prosecution of individuals who participated in mob lynchings exists but is rather weak at the moment. The source for the above statements is https://www.thehindu.com/opinion/lead/its-time-to-enact-an-a...
Chickenosaurus··on India: Google engineer latest victim of mob lynchings fueled by WhatsApp rumors
It's great WhatsApp took steps to prevent the spread of false information but that isn't the root of the problem. The root of the problem is of a cultural nature.

At present there is no law that criminalises mob killings. For that reason, the perpetrators are often not prosecuted by the police. A law that makes clear mob killings are unacceptable would go a long way in changing the cultural stance towards such acts.

Thankfully, the Manav Suraksha Kanoon (law to protect humans) could close this legal gap soon.

Chickenosaurus··on An Illustrated Proof of the CAP Theorem
Partition tolerance isn't about a system's behavior when some part of the system is down. Partition tolerance is about preventing diverging state in multiple sets of nodes that can't reach the nodes in another set, usually because of networking problems.
Chickenosaurus··on Police raid at Zwiebelfreunde: Donor data compromised
I hope the judge who approved these actions or the people who carried them out without approval will face appropriate consequences.

Treating witnesses in such a manner is reprehensible and abusive.

Chickenosaurus··on Facebook Q1 2018 Earnings Slides [pdf]
You have to enter a value in the tax allowance field ("Jährl. Steuerfreibetrag"). The first 9000 € (if not married) a year are not taxed.
Chickenosaurus··on Facebook Q1 2018 Earnings Slides [pdf]
I do not see how a person making 50k € in Germany would have a gross/net difference of 50 %.

According to [1], the gross/net difference would be about 34 % in the worst case (highest tax class, no children, not married etc.), which includes social security, health insurance and so on. The calculator gives realistic results for my own income.

[1] https://www.brutto-netto-rechner.info/

Chickenosaurus··on Python 2 will be replaced with Python 3 in the next RHEL major release
from typing import List

a_list: List[T] = []

Visit https://docs.python.org/3/library/typing.html for more information.

Chickenosaurus··on Ask HN: Where are you?
I am in Germany, not far from Stuttgart.
Chickenosaurus··on History of Spring Framework and Spring Boot
The major advantage IoC provides is decoupling of components. Components do not instantiate their dependencies and therefore are not coupled to specific dependency implementations. Any dependency that satisfies the interface the component expects can be injected.

This is especially useful when implementing tests because it is easy to inject mock implementations of dependencies.

Page 1 of 3Next →