HNHacker News
TopNewBestAskShowJobs

Nickste

187 karma · joined November 12, 2010

PM @ AWS

Previously co-founder @ Huzza.io (live streaming for creatives) - acquired by Kickstarter.

http://www.twitter.com/nickste

submissionscomments
Nickste··on PHP2Shell, LiteLLM, GitLab: Find What You Need to Patch
Perhaps? But sub "spoofed" for "Free Wifi" and it doesn't seem to convoluted?

The point is that we've been able to trust SSL to protect us on open networks. We might not trust the owner of the infrastructure, but SSL meant that we could tell when our request had been tampered with. That's no longer the case.

Nickste··on PHP2Shell, LiteLLM, GitLab: Find What You Need to Patch
pip (and Python more broadly) rely on certifi for certificates, which bundles its own certificates. You have to explicitly point certifi to a different cert store if you don't want it to use bundled certs.
Nickste··on PHP2Shell, LiteLLM, GitLab: Find What You Need to Patch
The interesting thing about the eMudhra issue is that it's not just your cloud environments that you need to be worried about. Think about this scenario:

Developer runs `pip install ruff` with pip < 26.2.2 on a public wifi network at their local coffee shop. Wifi network is spoofed, forwards all traffic except pip. Intercepts the pip requests and returns a malicious package. Machine is instantly compromised.

So any local development environment is also very susceptible to this kind of attack until pip, certifi, node, etc. get upgraded.

We've got good tools for finding this kind of issue CI/CD and our cloud environments. But good luck finding and patching every virtual environment on your local machine.

Nickste··on PyPI Prohibits inbox.ru email domain registrations
Mike is doing an incredible job of finding ways to make it harder for attackers to abuse PyPI (see the PyPI quarantine project). At Safety (previously PyUp) we've been tracking a significant increase in malicious packages that compromise you as soon as you install them. We've extended our open-source CLI tool with a "Firewall" capability that aims to protect against some of these kinds of attacks (typosquatting, slopsquatting) while not requiring any changes to the tooling you use (e.g. pip, uv, poetry).

You can check it out with: pip install safety && safety init

Nickste··on Ask HN: What are some cool or underrated tech companies based in Canada?
Safety (previously PyUp) - https://getsafety.com - software supply chain security. Offices in Vancouver but team is all over Canada. Raised a large seed round from First Round and others.
Nickste··on CloudEvents Event Specification
[I’m a PM on EventBridge] This is correct. Tim Bray, who built CloudWatch Events (which later became Amazon EventBridge) participated in the early CloudEvents spec, but as Erik said, CloudWatch Events launched before CloudEvents spec was finalized.

From the EventBridge perspective, we like CloudEvents and I expect that in future we will look to add support for it as an alternative to our existing envelope.

Nickste··on WebRTC Samples
Check out Vonage Video: https://www.vonage.com/communications-apis/video/ Their tech is based on a company they acquired, Tokbox. I used Tokbox’s services for large-scale real-time streaming; but their pricing is friendly for small-scale usage too. Solid service, with all the helpful extras you’ll likely need (recording videos, handling differences in browsers, etc.).
Nickste··on Tesla Model 3 accounted for over 12% of Norwegian auto market in Jan-July
Which is why I said gross margin. And isn’t the point that traditional manufacturers like BMW are also going to have to invest in similar levels of R&D, superchargers, and sales cost? Except they’re 10 years behind.
Nickste··on Tesla Model 3 accounted for over 12% of Norwegian auto market in Jan-July
The model 3 is estimated to have a 30% gross margin [1]. So it seems incorrect to say that the traditional manufacturers are waiting for battery prices to fall, as it’s clearly possible to build a high margin EV today.

[1] https://jalopnik.com/engineering-firm-that-said-tesla-model-...

Nickste··on We Are Now at Peak TED
Adam Savage (of Mythbusters) did a hilarious fake TED Talk at the Amanda Palmer ninjaTED show the other day: https://huzza.io/amandapalmer/live-stream/amanda-palmer-ninj...

"What if we could use data, to build the perfect snowboard?"

"In the average Silicon Valley tech company, 95% of time is wasted building tech products"

Nickste··on Startups Focusing On Enterprise Applications
Agree with you about enterprise being a more exciting space. I think the appeal for me comes from the fact that enterprise clients are a lot more likely to pay for something useful than consumers.

The company I work for is currently building a corporate travel booking system. There are hundreds of competitors out there, but all of them approach the problem from a financial system integration perspective. We try and take the "consumer" approach and apply it to a corporate environment - building products that look like a consumer product, but has all the backend functionality that a corporate would need.

So far it seems to be working!

Nickste··on Flipkart Raises $160M From Dragoneer Investment, Morgan Stanley Investment
I find that Flipkart does a pretty good job of managing your expectations in terms of delivery, even though you're buying from a 3rd party supplier. They update you when the seller accepts the order, packs it, when it is collected from the seller and finally through the entire delivery process.
Nickste··on I wish I could remember more.
Great post! Really enjoyed how Justin explores a future that is so difficult to comprehend/envision right now.
Nickste··on Rocket Internet Preparing to Go Public
As HN places significant value on innovation and entrepreneurship, I suspect that there will be a number of comments on this post calling out Rocket as a parasitic clone machine who steal good ideas from hard working startups and throw massive capital at these clone businesses in developing markets.

While this is definitely a valid criticism, I'd urge you to read this post: http://posts.richoakley.com/post/rocket-internet-respect which argues that we, as entrepreneurs, have a lot to learn from the way Rocket has managed to execute so phenomenally well in each of the developing markets it has targeted.

Especially given a few recent posts on HN detailing failed attempts at startups, I think the above post highlights the importance of being able to consistently execute in a business.

Nickste··on Show HN: a new team chat web/irc tool
I tried to register with a .co.za (South Africa) domain name and it caused the following error: not a valid email address?

Looking forward to seeing the product!

Nickste··on Ask HN: Can I visit your tech business in NY City?
Thanks for this - will definitely get in touch with them.
Nickste··on Ask HN: Can I visit your tech business in NY City?
Good point - New York City! I've edited the primary submission to reflect. Thanks for the headsup!
Nickste··on In defense of Google. And, more importantly, the user.
I think the Google Search, plus Your World explanatory video has some pretty concrete examples on how social can improve search: http://www.youtube.com/watch?feature=player_embedded&v=8...

I especially like the example of Chikoo - a type of fruit, but also the name of someone's dog. By Google knowing that you and your family have a bunch of photos with Chikoo in the caption, it will show you those pictures instead of the fruit.

My dog's name is Milo: http://www.google.co.za/search?q=milo

Nickste··on What good Web Developers should know about sending E-mail
I was wondering whether I was the only person who firebugged the background to #FFFFFF before reading?
Nickste··on IPhone Apps Design Mistakes: Over-Blown Visuals (2009)
Glad the author used the Bloomberg stock finder input as an example.

I've been teaching my father in law how to use the Bloomberg app on his iPad and this was one of his biggest stumbling blocks - he just couldnt work out why the keyboard wouldn't appear.

With the adoption of these types of devices moving to include the "non-tech savvy" population, who aren't as quick to work out unclear UI, we start to see how small UI choices can have a dramatic effect on usability.

Nickste··on Show HN: a free multi-user whiteboard with unlimited, zoomable surface
Doh - it seems to crash safari when I go to it on my iPad? iOS 4.3.5
Nickste··on TrustFabric - Most ambitious startup ever
I really like the idea of being able to centralise all of my information and be able to control who has access to certain sections of it all from one dashboard.

Facebook has gone some of the way to doing this, with me being able to remove access to apps I've previously given access to; however, I'd like to be able to upload customize custom documents, such as my passport or proof of residence, and then be able to share them with specific companies.

It seems like TrustFabric may go some of the to enabling the above?

Nickste··on Why designers need to stop moaning about 99designs.com
This post came at a pretty good time for me - I had been considering 99designs for the next redesign of one of my company's micro-sites.

What alternatives would HN recommend over 99designs? We've got our own coders, so need nothing more than an actual design/layout.

Nickste··on Ask HN: How do you manage chores, bills, and guests with your roommates?
Checkout http://www.billboxit.com/ I've got a buddy who has been using it with his roommates and says it's pretty good!