HNHacker News
TopNewBestAskShowJobs

anonfunction

2,245 karma · joined March 15, 2013

Surfacing latent bias in AI models at LatentEvals.com

https://github.com/montanaflynn

submissionscomments
anonfunction··on Tell HN: Ffmpeg vulnerability allows attacker to get files from server or PC
That is correct, however the beginning of the file does have a signature: https://mimesniff.spec.whatwg.org/#signature-for-mp4
anonfunction··on Tell HN: Ffmpeg vulnerability allows attacker to get files from server or PC
It does not what? Can you share quotes from the article or the translated article source you read?

Confusion:

Are you saying that ffmpeg doesn't detect file by extension?

or

Are you saying that ffmpeg won't execute the malicious code if it's found appended to a valid video?

anonfunction··on Tell HN: Ffmpeg vulnerability allows attacker to get files from server or PC
It verifies that the beginning of a file is mp4 format. I'm actually running go 1.6 which does have the mp4 sniffing enabled.
anonfunction··on Tell HN: Ffmpeg vulnerability allows attacker to get files from server or PC
Can the malicious video file be an actual mp4 file? We're accepting video and running it through ffmpeg, however we first verify the file is an mp4 using https://golang.org/src/net/http/sniff.go
anonfunction··on A rant about application configuration
That's odd because it's the opposite of the stated policy. I came to say that the original title and article, in my opinion, had a much different meaning and intent.

    Original Title:    No, I Don't Want To Configure Your App!
    Hacker News Title: Don't Configure Applications
anonfunction··on Ask HN: PG has many essays. What's your favorite one?
I really like How to Disagree[1] which has this wisdom that I've seen ring true at startups, especially when there is loose terminology and no documented communication.

> More often than not, two people arguing passionately about something are actually arguing about two different things. Sometimes they even agree with one another, but are so caught up in their squabble they don't realize it.

Another great one is Startup = Growth[2] which is great for clarifying the term and setting some expectations to benchmark against.

1. http://paulgraham.com/disagree.html

2. http://paulgraham.com/growth.html

anonfunction··on Show HN: Algolia (YC W14) Presents DocSearch
This is awesome! I've always loved algolia and their passion. I use the hacker news search[1] all the time.

1. http://hn.algolia.com

anonfunction··on Show HN: A Werewolf bot for Slack
If you're a rubyist check out Lita[1] which is a ruby bot framework that has many adapters[2] to work with various chat services like IRC, slack, etc...

1. https://github.com/litaio/lita

2. https://www.lita.io/plugins

anonfunction··on Show HN: A Werewolf bot for Slack
I've never heard of this game, maybe a description or link to a wikipedia page[1] in the readme would be good.

1. https://en.wikipedia.org/wiki/Mafia_(party_game)

anonfunction··on Ask HN: How I do learn more about test driven development?
Here's a good article[1] I read the other day by the often exuberant Eric Elliott.

Edit: Another good article[2] that's also node specific using mocha, which I really like and is in my estimation the most used.

1. https://medium.com/javascript-scene/what-every-unit-test-nee... 2. http://webapplog.com/tdd/

anonfunction··on Blockly is a library for building visual programming editors
Here's the full featured demo with all the blocks:

https://blockly-demo.appspot.com/static/demos/code/index.htm...

anonfunction··on Blockly is a library for building visual programming editors
Here's a cool demo that is interactive: https://blockly-demo.appspot.com/static/demos/plane/index.ht...
anonfunction··on Slack Platform Launch
Really like the announcement of botkit[1], I was just looking at adding a vote bot to our slack and only found a really old example that ended up not working.

1. https://github.com/howdyai/botkit/

anonfunction··on Show HN: Hacker-Dict.com: The Hacker Dictionary
This brought a smile to my face: http://hacker-dict.com/subject/recursion
anonfunction··on Show HN: FuckFuckAdblock
I was also happy to see the reference to one of my favorite all-time movies, The Big Hit.

1. http://www.imdb.com/title/tt0120609/

anonfunction··on Tokyo police are using drones with nets to catch other drones
Short clip of the drone catching a drone:

https://gifs.com/gif/pYYzXr

anonfunction··on InfluxDB is now InfluxData, a platform for time series data
I recently switched from Grafana to Kibana due to the lack of different visualizations and sometimes data would not show up in the graphs, leaving blank spaces. The data was in influxdb. Nice to hear you're building your own project that gives you more freedom to build the best product you can.
anonfunction··on Siege – HTTP load tester and benchmarking utility
Siege is very comparable but vegeta has a lot more output options such as graphs, JSON, CSV, etc...

Another tool I forgot to mention was wrk (and now wrk2) which are unique in that they are scriptable via lua.

anonfunction··on Siege – HTTP load tester and benchmarking utility
I've used siege for a long time and never had any problems.

However, I'm easily tempted by the new and shiny which led me to find another great HTTP benchmarking tool: https://github.com/tsenart/vegeta

anonfunction··on Show HN: Commandcar – a CLI tool that can easily communicate with any API
Did you create another API doc design? Are there plans to support the other specs like Swagger or RAML?
anonfunction··on Ask HN: Which tech companies have ball pits for employees to play in?
Chartboost does, along with their twenty foot t-Rex
anonfunction··on Ask HN: What's your ideal development setup?
This is exactly what I was hoping for.

I'll go with your setup because it's pretty much exactly what I had in mind and similar to my previous setup besides the mechanical keyboard and headphones.

Thanks for the very detailed help and providing links!

anonfunction··on Ask HN: How do you fire a “B Player?”
How long has he been in the team? If he's been with you longer than six months then I would offer a nice severance package.

Just tell him the truth, it's not that his work is terrible, but you need amazing. Let him know he'll have a great reference if needed and you're still his friend.

anonfunction··on Show HN: Nixar – New design of Linux command line
I'd love to have some sort of spec to implement this in Go. I'll just go by the source but I love the simplicity compared to the standard Linux commands.
anonfunction··on Show HN: MissPlete – Misspelling-tolerant autocomplete in 200 lines of ES6
In the demo I started typing United States and it was showing a bunch of other countries above United States.
anonfunction··on Show HN: Web crawler for social profile links
Umlauts are the two dots above a letter, quite common in German I believe.
anonfunction··on Show HN: Go library for concise, unambiguous and URL-safe UUIDs
I use gometalinter which runs it through a whole suite of linters.
anonfunction··on How I decide when to trust an R package
The scroll-jacking on that site is extremely frustrating.
anonfunction··on Firefox Developer Edition vs. Chrome
I really love the developer command line in recent versions of Firefox. Shift + f2 brings it up.
anonfunction··on Show HN: Rebound – turn webhook requests into REST calls
Any plans to open source the code?
← PreviousPage 14 of 26Next →