HNHacker News
TopNewBestAskShowJobs

CryoLogic

1,910 karma · joined December 24, 2015

I'm a software engineer and application penetration tester. I like to read books in my free time.
submissionscomments
CryoLogic··on Tableau Software Threatened? Rival Growing at 70% Just Raised $103M
Just a question on wording, but doesn't 70% imply currentRevenue * .7. Whereas they really mean 170% aka currentRevenue * 1.7?
CryoLogic··on Why Do Hospitals Hate Sleep So Much?
It's actually just melatonin, L-theanine and magnesium in one pill. So nothing sketchy but also not anything new or interesting. Just a combo pill like most other supplements on the market.
CryoLogic··on Google Tried to Patent My Work After a Job Interview
Yeah it is definitely possible it was just a coincidence. But that was a couple years ago, and if Amazon has taught me anything it's that backstabbing is definitely part of the culture in many of these tech companies.

While it could be totally an accident, I could also see it being stolen. Truth is, I will never know if it was just bad timing or an actual malicious interviewer.

CryoLogic··on Google Tried to Patent My Work After a Job Interview
At the time, I could not find a single social media site that was using link-rewriting to make affiliate money.

Blogs and fan sites for niche products had been using this to make money for a while, social media sites had not yet tried it.

The close proximity with the announcement and my interview is what really bothered me. I have a strong feeling (but cannot prove) that someone I interviewed with took the idea and ran with it. I had done a lot of research into how much money Reddit would make off of this and how to implement it at scale without breaking existing affiliate links and such.

I had literally planned it as my pitch for what I wanted to work on and why they should hire me.

CryoLogic··on Google Tried to Patent My Work After a Job Interview
Something very similar happened to me.

When I was at university studying CS I was running a Arduino fansite and a fansite for a videogame - both of whom made most of their money from affiliate revenue (a couple hundred bucks per month).

I thought it would be cool to work at Reddit (was close to graduating), and I had read blog posts from here and various other sites and IRC about how hiring managers liked projects.

I took to it to build a JS library that converted links to affiliate links, for example amazon and some other small retailers I had used.

Basically you just parse any URL you embed in the page with this library and it would convert the existing (non-affiliate) links to affiliate links with your signature attached so you got a revenue share.

In addition to this, I had done research on Reddit's traffics and crawled reddit to see how many affiliate-capable links existed. I talked about this in the interview and suggested they could make around 2 million per month if they hired me and used my script.

--> I was rejected after the interview, but a couple months later Reddit announced it was experimenting with a new feature that would re-write links as affiliate. They ended up implementing this feature that I am 95% sure I came up with and someone else stole.

It was one of the shittiest experiences I have ever had interviewing, especially since I didn't get a job out of it but I believe they have made millions off of this idea so far.

I huge put off, but I've learned since then backstabbing and stealing ideas is a big part of politics in most corporations. What a bummer.

CryoLogic··on The Baseline Costs of JavaScript Frameworks
In Ember3.0+ you can strip down the framework all the way to just the rendering engine if you would like. It's all modular now.
CryoLogic··on A Guide to Statistics on Historical Trends in Income Inequality
Another side of this to consider, is that low-skill many jobs today are literally not worth as much as they used to be.

In labor economic there is a very well established understanding that jobs requiring high levels of skill are typically harder to fill hence corporations must pay more to get those individuals.

But the reverse is true, low skill jobs are easy to fill so we don't have to pay as much.

But here's the kicker, many branches of economics focus on technology as a eliminator of work. Basically, two guys becomes one guy and a machine. Eventually a machine might replace both of the guys.

There is an intermediary between a job being automated entirely away though, where a physical human's work loses value. McDonalds for example has been rolling out automated ordering systems so that they don't have to employ as much "front-office" staff. If they keep those on payroll, there job brings much less value to the company than it did prior.

Technology creates skilled jobs (aka maintain the robot) and eliminated unskilled jobs. But technology can also reduce the value-add of another unskilled employee.

What I am getting at is the sad truth that it's totally possible unskilled labor is not worth as much as it used to be.

If we continue to base our salaries entirely capitalistically, maybe these gaps will widen as low skill employees become less and less valuable while high skill employees gain value but less of them are required.

CryoLogic··on Testosterone Treatment and Alleviation of Depressive Symptoms in Men
There are many more sex hormones than estrogen and testosterone.

For example on the androgenic side there is DHT, androstenedione, DHEA, A5, etc. On the estrogenic side there is estetrol, estrodiol, estrone, etc.

DNA encoding in males and females also alters the quantity of non-sex related hormones like T3, T4, TSH in the thyroid for example.

Men and women are indeed different in metal characteristics, but it is often difficult to pinpoint one specific hormone as the cause.

Many hormones influence the release of other hormones. For example, testosterone is converted to estrogen in side of fat cells through a process called aromatization. So a male with too much testosterone, may end up with too much estrogen as well. DHT another androgenic hormone is also converted from testosterone, and testosterone itself is created out of fats in your blood stream.

Many of these hormones are signaling hormones for things like stress, libido, anxiety, etc. A combination of these is what makes up characteristics of a person's personality.

CryoLogic··on Are You Ready for the Nanoinfluencers?
It’s kinda perverted how dishonest the internet has become thanks to advertising.

Children will go online looking for toy or game reviews not knowing even their friends have sold them out for a couple bucks.

CryoLogic··on Cardiff tech firm: 'We'll pay £100k, but can't get staff'
Bad Title. Actual article says "up to 100k", as in maximum. I assume most people don't get that offer.
CryoLogic··on You Want 20% for Handing Me a Muffin? The Awkward Etiquette of iPad Tipping
If anyone here has been to Japan, tipping is handled much more elegantly and with a lot more business integrity.

Instead of guilt-tripping customers into tipping, businesses in Japan up their prices if they need more money.

I remember once when I was in Osaka I was at a really good sushi place that I had visited several times prior. There was no tip option on the receipt (didn't see it anywhere in Japan) and there was no tip jar. I asked the server if I could tip.

She told me they couldn't accept my tip because they believed the food was priced correctly.

It was a totally different experience than in America where not tipping gets you poor service and unhappy waiters.

CryoLogic··on GitHub's game jam returns next month
For anyone looking to build a game but not yet settled on an engine I highly suggest giving Phaser a shot. I spent a few hours with the latest version and was pleasantly surprised how far it has come.

Most importantly the documentation and example code are now so robust that most common game components like 2d physics, collision, projectiles, multiplayer can be found here: https://www.phaser.io/examples

CryoLogic··on What you can't say (2004)
1. I didn't attack an entire group. I never said "everyone" or "no one". I said "a lot of".

2. I did make an assumption about you being emotionally charged due to:

- "your dutiful patrons of Reason and Logic (TM) "

- "You try to illicit a veneer of servitude towards reason and logic"

- "you can't help but be disingenuous about the subject you're discussing"

You also brought in a number of points lacking citation that I could not find any evidence of occurring at the protest I was saying I saw footage of. I googled and found the source footage, the whole talk is here: https://www.youtube.com/watch?v=MwdYpMS8s28

I did not see any dogs, or anyone screaming about Micheal Brown or any of the other key points you mentioned. The whole talk is recorded including the kids trying to break the windows.

Maybe I was wrong in assuming you where emotionally charged, and maybe you just have a naturally hostile-seeming way of expressing yourself including calling names and quoting and claiming without citation. If so I apologize for suggesting it was emotionally charged.

3. It literally spells out those three things in the amendment. Could you read through the amendment and explain how it does not describe what I said above?

4. I don't care if my post is flagged. I went through the due process of actually watching the clip to see if anything you claimed happened occurred which I did not. I believe you should be capable of doing the same. Don't try to witch hunt or bring on a tribal mob just to win an argument. Win it with your facts and logical process you claim to have but haven't yet expressed.

CryoLogic··on An overview of the top web hacking techniques of 2017
in MS Edge

document.cookie = 'secret=123'; const parser = new DOMParser(); const html = parser.parseFromString('', 'text/html'); console.log(html.cookie);

prints secret=123 because of an improperly implemented inheritance model. other browsers do NOT inherit cookies from main document as a result of following the spec closer

CryoLogic··on What you can't say (2004)
Please refrain from such emotionally charged posts where you don't fully read the content of the parent, and you stoop low enough to start claiming you can read my mind and calling me a lier regarding an amendment for which you didn't even read beyond the Wikipedia summary.

http://www.ourcommons.ca/Content/Bills/421/Government/C-16/C... it is literally an amendment that describes gender expression as literally anything you want to label yourself, than suggests misusing these labels is a crime and finally suggests increasing imprisonment and punishments as a result of not using these labels correct. Clause #4.

You are welcome to debate with me if you believe one of my interpretations are incorrect, but the way in which you chose to engage with me is very immature and makes it difficult to hold a discussion with you.

Please read the HN rules first before making future replies.

CryoLogic··on Ask HN: Is Ruby on Rails still worth learning?
I used to be a Rails developer, but in today's JS ecosystem I've found most of it can be replaced by full-stack JS.

In particular with an EmberJS front-end if you like the EmberJS convention over configuration methodology.

CryoLogic··on Google making YouTube slower for non-Chromium browsers?
Google does a number of things like this that give Chrome based browsers more power for Google based websites.

Another example is the *.google.com cookies, they are not deleted when you go to clear browsing history -> clear cookies.

Also a recent version of Chrome implemented "no autoplay audio or video" as a feature, but YouTube and Google music are on a whitelist pre-built into the Chrome browser.

CryoLogic··on Facebook says millions had phone numbers, search history and location stolen
Why is it that all of the times Facebook claims a "hack" it's really Facebook giving away or selling user data via an API, getting caught and than claiming it as a "hack" to avoid responsibility?
CryoLogic··on An overview of the top web hacking techniques of 2017
Much of the scariest XSS (aka, most difficult to prevent) comes from the DOM these days.

Edge, FF and Chrome don't follow the spec as well as they should, and the result is a lot of minor browser incompatibilities that are very hard to detect and fix.

Each browser is making modifications to the DOM spec, many of whom make introducing XSS and XSRF into a web app very easy.

Deep DOM and JS knowledge is a must have for pen testers these days.

CryoLogic··on 'Siri I'm getting pulled over': New shortcut can automatically record the police
More accountability for police can't hurt. In other private professions bad accountability results in loss of job, so I don't think many can complain about this.

A cool feature, maybe given attention due to the hot political climate around cop shootings. But useful nonetheless.

CryoLogic··on Avoiding Zombie Startups
Even in SF or Seattle, very few companies can offer that size of package for a senior engineer (300k+).

EDIT: downvote if you want :) you all have unrealistic expectations thanks to HN.

CryoLogic··on What is going on with measures of programming language popularity?
I have absolutely no doubts that the most used language is JavaScript - considering nearly every website in existence relies on it.

So it's really just a question of methodology. When TIOBE says popularity they must not be talking about usage rates, or if they are perhaps they are specifically sampling some subset of enterprise?

CryoLogic··on Coinbase Wants to Be Too Big to Fail
IOTA is the only crypto I am aware of with a decent TPS. It handles around 1k TPS right now.
CryoLogic··on Ask HN: Who here has built a profitable startup while keeping their day job?
And Washington State. But actually some states (Montana comes to mind) have laws that can restrict you to one employer at a time.
CryoLogic··on Twitter says bug may have exposed some direct messages to third-party developers
The worst one was at the bottom, who cares about DM -

"Twitter also said that earlier this year there was a bug where log files where created with user passwords in plaintext. Twitter urges users to change their passwords"

I mean, what type of company with over a billion dollars in VC capital stores passwords in plaintext?

CryoLogic··on The #1 Office Perk? Natural Light
Seattle might have a decent yearly average of sunlight hours/day, but during the winter there are often weeks to months of almost no direct sunlight due to the overcast.
CryoLogic··on GlobalFoundries Stops All 7nm Development
It's not a concrete distance, but moreso a range. I think 7nm is the bottom of the range so the distance would be 7nm-14nm. 10nm chips have distance ranges of 10nm to 20nm.

I think at that size it is very difficult to get exacts.

Fab refers to a plant than manufactures the chips, versus designs them. I think Intel does both?

CryoLogic··on Office Life Is Destroying Your Butt
A somewhat odd article, butt I like it as well. Hemorrhoids suck.
CryoLogic··on Verizon throttled fire department’s “unlimited” data during wildfire
If it's under 5 calories there is a margin of error rule that allows you to label it as zero. So just get the serving size small enough and it's calorie free!
CryoLogic··on Georgia Tech Creates Cybersecurity Master’s Degree Online for Less Than $10k
Another poster listed the curriculum. As a security professional from a top software company I am not really impressed.

The curriculum is as follows (tech specialization, the others are worse):

1 intro to security

1 intro to policy

1 hands on lab

1 crypto

1 netsec

2 it security

choice of (2):

basic CS courses (i.e. mobile apps, operating systems)

None of that will help you get a job at any company with a serious security org. All of those courses from what I could find are the same introductory level electives you can get in your BS degree in CS.

It is not a specialized program, it is more of an introduction to security and CS at the MS level.

Things that would help:

Client XSS, Authentication / Session Management, Secure client/server architecture, defining access boundaries, phishing / social engineering, red team / blue team setup, automated vulnerability regression tests, SSDL, threat modeling, etc.

← PreviousPage 3 of 12Next →