HNHacker News
TopNewBestAskShowJobs

barake

582 karma · joined March 29, 2010

email, base64'd

bWF0dGhldy5zLmhlbnNsZXlAZ21haWwuY29t

submissionscomments
barake··on ASP.NET Core Elevation Of Privilege Vulnerability
Since the 1.0 release the docs, tutorials, quick starts, etc have said not to expose ASP.NET Core Kestrel based apps directly to internet traffic.

Here is the current version of the docs that mention this: https://docs.microsoft.com/en-us/aspnet/core/fundamentals/se...

The warning was repeated all over the place - you can search the web dig through the git history of the docs and see the warning to use a reverse proxy all over.

They probably should have made Kestrel complain loudly if it detected it was exposed and "force" everyone to be successful, but it's only partially their fault if people ignored the documentation.

barake··on U.S. Charges 13 Russians, 3 Companies for Interfering with Election
Trump has claimed many times that we "don't know" whether it was Russia, and that he believes Putin, who says it wasn't Russia. More recently the message has been that if Russia did interfere then the campaign was not involved/aware.

https://www.cnn.com/2018/02/13/politics/trump-unconvinced-ru...

barake··on Open Source .NET three years later
.NET Core does not have an implementation of WCF, and I can’t imagine to ever will.

.NET Core has a pretty good MVC framework you can build REST services on, GraphQL, or gRPC etc.

Most of the framework baggage was left behind.

barake··on Four DB2 Code Bases?
Informix is a pretty great database. Much like you mentioned with DB2, it can take really varied workloads on the same database and keep on trucking. Just requires some basic indexing, no need to carefully tune to a particular use case.

The best part is how resource light it is. I was using Informix on a dual 200mhz HP K class box until about 8 years ago. HP literally just gave us a RP3440 to get us off it...

barake··on Google Home Max is now available
Except Apple is ran by bean counters these days. I mean, they now have “enhanced” the terrible App Store search with terrible ads that regular people confuse with legitimate results.

Heck, Face ID is the perfect ad technology. They can charge based on attentiveness now.

barake··on AWS Cloud9 – Cloud Developer Environments
Twitter suggests they’re having load issues. Should have prewarmed those laps balancers!
barake··on Beer giant ABI bought many craft brews and is now buying beer rating websites
Sorry I wasn’t clear, only talking about retail distribution, not direct package sales.

No question plenty of breweries have found a way to be successful outside of normal retail. But they should be able to distribute, without large multinationals strong arming retailers in to not carrying competitors products.

Absolutely agree that many breweries have been successful not distributing

barake··on Beer giant ABI bought many craft brews and is now buying beer rating websites
This would be a problem even with direct distribution. Just replace distributor with retailer.

Here in Kentucky, AB Inbev owned a distributor and was quietly playing these games. After some shenanigans, KY adjusted the three tier rules to prevent breweries owning distributors, even if they’re from out of state.

FWIW the three tier system is dumb and should go away. But removing it doesn’t automatically level the playing field.

barake··on Beer giant ABI bought many craft brews and is now buying beer rating websites
The big alcohol companies force distbutors to carry certain products, or even not carry comepetitors products.

An example: you want to keep selling a macro like Bud or scopes that makes up 40% of your revenue ? Drop that local brewery, we have a “craft” IPA to sub out.

They get the revenue the same, you get the illusion of choice, and the new company gets to pound sand.

barake··on America’s ‘Retail Apocalypse’ Is Really Just Beginning
The charts are over a decade, wouldn’t be surprising if North Dakota could be explained by the oil boom that happened there. No idea about Utah...
barake··on WebJack: Two-way communication between the browser and Arduino using SoftModem
IF you run in to this again, Adafruit gives away an app for Arduino that can easily display data and control I/O. It's pretty neat!

https://itunes.apple.com/us/app/adafruit-bluefruit-le-connec...

barake··on Why you should join the .NET Core and ASP.NET Core train
Entity Framework replaced LINQ to SQL years ago - it’s had multiple major revisions, and two major revs of the .NET Core version.

The initial version in 2008 was a total mess. It wasn’t until a few years later that the XML definition and code generation junk was removed and it became useable.

barake··on A Closer Look at the $13B Premium Eyewear Market
Zenni is astonishingly good if you know what size frames fit you. If you’ve already got glasses that fit, the dimensions are often printed on the arms.

It takes a bunch of time to check sizes and narrow down the options but 100% worth it. I have 3 pairs that cost $80 total and paid for extra alike high index and anti-glare.

barake··on iMac Pro
Supposedly a modular, easier-to-integrate updated hardware Mac Pro is coming at some point [1].

https://daringfireball.net/2017/04/the_mac_pro_lives

barake··on Universities are broke – let’s cut the pointless admin and get back to teaching
Is tuition actually going up by that much? Most schools raise prices to raise scholarships to raise rankings, leaving revenue virtually flat.

There is a coordinated effort to temporarily exempt schools from antitrust rules so they can collectively coordinate a tuition drop, and stop the fake scholarship arms race.

barake··on Glimmer.js: What’s the Deal with TypeScript?
ES2015/commonjs interop currently sucks with TS. This is how you only import flatten:

  import flatten = require('lodash/flatten')
TS expects any modules imported using ES2015 import to have the shape of a ES2015 module. This is an issue for many UMD/commonjs modules. In the case of lodash, it's effectively doing this:

  module.exports = flatten
And then you're importing it like so:

  import flatten from 'lodash/flatten'
and that is being transpiled to something like:

  var flatten = require('lodash/flatten').default
Note the default.

I haven't migrated to webpack 2, but some brief experiments suggest all modules get massaged in to ES2015 format.

barake··on ReactXP – A library for building cross-platform apps
I was curious too, so: https://github.com/Microsoft/ReSub

Looks similar to rxjs or mobx based state stores.

barake··on System76 Galago Pro [video]
You can buy the Precision 5520 with a quad i5 and no Nvidia GPU. Be sure to pick the larger 97Wh battery!

http://www.dell.com/en-us/work/shop/productdetails/precision...

barake··on Cellphone Spy Tools Have Flooded Local Police Departments
Cellphone companies is one more layer in their trust circle. It's easier to just bypass them and collect the data yourself. Warrants only really became a requirement in 2015. And police were misleading judges on Stingray usage to hide the tech.

https://arstechnica.com/tech-policy/2016/03/appeals-court-no...

barake··on Connect 2016 [video]
The Xamarin tools have supported using a remote Mac to run the simulator. Microsoft has an iOS shim library and Objective-C tool chain for porting apps to Windows, but it's very much in preview.
barake··on Donald Trump Is Elected President
We currently have crazy import tariffs on Chinese made automobile tires. The result has been 1,200 jobs saved and consumers paid an extra billion dollars for tires.

There is no free lunch with trade.

https://www.google.com/amp/www.latimes.com/business/la-fi-ta...

barake··on After Mac?
You're right, that resolution is a waste of money on 12.5" screen. Can be had with a QHD (2560 x 1440) display for $200 less.

And just because I was curious: MacBook Pro 13" 1370g MacBook Pro 15" 1830g Razer Blade Stealth 1290g Dell XPS 13 1330g

barake··on After Mac?
Apple is shipping last year's mobile CPUs. Dell is shipping current gen Kaby Lake in the XPS 13 as of a week ago, so they are available in some quantity. Kind of surprising, since Intel works so close with Apple and they were the first to ship a Core M powered device.

The GPU is a new one from AMD, but isn't especially powerful[1][2]. It can kind of do 1080P games, but is more geared towards GPU acceleration for video and photo editing.

[1] https://twitter.com/DShankar/status/791712527394545664 [2] http://arstechnica.com/gadgets/2016/10/amd-radeon-pro-400-se...

barake··on Vine will be discontinuing the mobile app
It all comes down to the engagement metrics. Facebook and Twitter will stick with live video as long as people keep watching. Same reason Twitter pulled Periscope viewing in to the main app - helps them pump up the numbers.
barake··on Errors from Microsoft's Cloud
Red on the AWS status board means there has been an extinction level event, right?

Maybe that would still be a yellow - intelligent life could evolve again and resolve the outage.

barake··on .NET Core Tooling in Visual Studio “15”
Bundling the runtime/core framework isn't required. .NET Core applications can be deployed as portable or standalone.

Portable: runtime must be installed on target machine Standalone: runtime bundled with application

Portable is how non-Core .NET apps have always been, and I believe all the templates in the Visual Studio preview tooling are setup as portable apps.

The docs have a good explanation of the differences, and how to configure a project to support either deployment strategy:

https://docs.microsoft.com/en-us/dotnet/articles/core/deploy...

barake··on ARM Announces Mali Egil Video Processor: VP9 Encode and Decode for Mobile
Lack H265 support is likely due to licensing costs, despite the advantages the codec provides. Just about everyone is staying away until the cost and terms become more reasonable.

Apple is willing to eat the costs for FaceTime because of how good H265 is - It's a serious competitive advantage.

barake··on How We Saved $132k a Year With an IT Infrastructure Audit
Most CDNs by default make a request per POP. You can usually enable "origin shield", which will cause the CDN to make a single request and distribute the file to POPs internally.
barake··on GoPro cutting 7 percent of its workforce
Please be careful with helmet mounts. There have been some serious injuries attributed (maybe incorrectly!) to rigid mounts transferring energy in ways helmets aren't designed for.
barake··on Running a mainline kernel on a cellphone
If you live in the US take a look at the HP Stream 7. They run about $100 brand new, $60-70 for refurbs.
← PreviousPage 3 of 7Next →