HNHacker News
TopNewBestAskShowJobs

chokma

296 karma · joined February 22, 2009

Software Developer (Java, JavaScript), interested in security, privacy, freedom, politics, gaming, fantasy and philosophy.

I have experience with enterprise content management systems* for technical documentation as well as working on the backend of large price comparison and online marketing systems.

* https://github.com/dewarim/cinnamon4

Blog: http://dewarim.com/

submissionscomments
chokma··on Hewlett Packard Enterprise Is Said to Plan About 5k Job Cuts
You have a contractual obligation to do the stuff you're getting paid for, else that may be cause for a immediate termination (after being reprimanded). But of course no one expects you to go out of your way and put in overtime. During our last round of layoffs, the people leaving the company got ~2 months of free time and were told not to work.

On your last day, you (should) receive your letter of recommendation (Arbeitszeugnis), which by law needs to be a positive statement of what you have done, enabling you to get another job.

Slacking off in the last 4 weeks _may_ cause your employer to give you slightly less than a glowing review. Some employers take those letters seriously and if your last boss writes "he did the best he could with the tasks that were given to him", that's not going to reflect well on you.

edit: there is a whole "secret" language for those certificates of employment / recommendation letters, where employers may try to sneak in outrageous stuff ("He had an open ear for the concerns of his female coworkers" - grabbing them or being otherwise inappropriate towards them ), but since most companies do not want to haggle in front of a judge about the exact phrasing, it mostly is written in an okay way. Often you will be told: "Write this letter yourself, you know best what you did here, I am going to sign off on it."

chokma··on Hewlett Packard Enterprise Is Said to Plan About 5k Job Cuts
No, it's by law. You have a minimum of 4 weeks notice in Germany (some exceptions apply, for example you are hired for temp work). So you cannot quit on the spot, and your employer cannot fire you on the spot, unless it is for gross reasons on one side which makes it extremely unreasonable to continue employment.

Examples of this would be if you're caught stealing or harassing a coworker - or if your employer is breaking the law by repeatedly not paying you on time or endangering your health etc. You cannot be fired for being late once. Your employer has to document that he has told you "Do not be late again, or else" (and you have to sign off on this).

Work load may not be unreasonable. Usual work load is 40 hour weeks, and overtime is dependent on contractual definitions. Some people are (by union) not able to work more, others are exempt from overtime restrictions (managers), others will receive money or free time as compensation. You can enter contracts that specify a certain amount of overtime work, but unless they are specific enough, those clauses are void. You cannot get less than 24 days / year of holidays, you must not work on Sunday (unless: emergency or working in an exempt job, like healthcare), and employers risk fines/prison if they deny you those rights.

Overtime usually requires an explicit order, and is limited to 48h total work time /week. Anything more (for example: seasonal workers) needs to be compensated with free time in the following 6 months. So an employer can demand a death march for a project, but even that is limited to not more than 10 h/day.

That said, while the law may be on your side, people may work more than the contractually defined amount "because it's necessary / they need me there" or other strange reasons.

(note: there are exceptions for all rules. When your data center is down for some reason, you are not going to tell your boss "sorry, my 8 hours today are up, find someone else to restart those servers. I'll be back tomorrow.")

chokma··on Hewlett Packard Enterprise Is Said to Plan About 5k Job Cuts
The time frame is symmetrical - both employers and employees have to give 4 weeks notice (default). In my case, the US parent company decided on 12 weeks, probably to retain the software developers.

Note that depending on unions (rare in IT) and mandatory employee representation (Betriebsrat) for big companies, firing people can be harder, especially for long-term employees.

chokma··on The Icewind Dale Problem
Something like that is used in The Dark Eye and also in Ars Magica. For every virtue or advantage your character has, you should also select a flaw. This makes for some interesting and quirky characters.

Some flaws are "easier" to manage than others (having large debts is a good story hook and not that problematic for adventurers, I think. A character having memory issues however is not easily compensated, but may make for interesting role playing).

chokma··on The Icewind Dale Problem
In Angband (ascii rogue-like), there was an auto-roller to solve this problem. So char generation was also a bit of "what are my chances to get a reasonable character with two or three really good attributes in the time I am willing to wait?"
chokma··on Ask HN: Self-taught developers, what repo helped land your first job?
https://sourceforge.net/projects/daocanalyse/files/?source=n...

A Dark Age of Camelot (MMORPG) chat log file analyzer written in Perl in 2003-2005 helped me land my first dev job.

I switched careers (due to lack of job openings) from becoming a protestant pastor to being a full time developer. I had almost no proof of having programmed in Perl for close to 6 years as a hobby, but the company desperately needed another coder and their senior programmer at that time had taken a look at my SF page. The boss was impressed when I said that my code had been downloaded by over a 1000 users, and so I got my first job, rewriting an SMS-messaging platform.

Now, over 10 years later, my GitHub profile only rarely comes up when recruiters try to reach me - some, I think, use web scraping to match profiles with LinkedIn / Xing to say nice things as a conversation starter in generic emails.

chokma··on P&G Cuts More Than $100M in ‘Largely Ineffective’ Digital Ads
Do you mean digital influencer in the sense of social influencer? The latter can be measured quite well, depending on the method.

Using affiliate-like CPC click-through links on their social media accounts allows the ad network to observe exactly what is working. The problem is that social influencer status probably only really works for stars with a huge following of real life fans. One example (@work) was a celebrity posting about a nice pair of shoes. Those sold out within minutes, and the shoe company's store page crashed due to the unexpected demand. So it can work, but like most things in marketing, if everyone does it, it won't work for most.

chokma··on Amazon Chime
And the price for Biba Pro (on which Chime is based) previously was $10/user/month...
chokma··on AdNauseam: Fight Back Against Advertising Networks and Privacy Abuse
Okay, I see the appeal of sticking it to the man (in this case, the privacy invading tracking agency). If I could have an addon that _reliably_ hides my web browsing habits from advertisers and evil government agencies while making their life harder, that would be cool.

I just do not see how this act of online vigilantism is going to change things or help. The cost that merchants encounter are opaque, they have mostly no control over the publishing side, if they even know where their ads are shown at all. So, advertising gets more expensive, but as one commentator here said: "I must advertise, else I will have no sales at all."

Lastly, to click on an ad, the user will most likely need to execute the javascript associated with the ad. At that moment, they already have been tracked, and any malicious drive-by-downloads will run on their machine. Clicking on all ads you encounter will just make your browsing trail that much wider (user reads HackerNews, browses late in the morning, stays long on sites with cat memes), and your unique browser footprint will be associated cross device with your profile so you get more targeted ads on your mobile devices.

chokma··on AdNauseam: Fight Back Against Advertising Networks and Privacy Abuse
Hm...

From the perspective of the ad network:

Lower click quality drives up the merchant's cost of sale (COS). Sitting between the merchant and the publisher, the ad network tries to balance this out, by

  - mixing good and bad traffic sources
  - encouraging the merchant to spend more money 
    so they can buy better traffic and/or rank the offers higher on their publisher's sites
  - punishing the publisher for sending bad traffic by lowering the amount the publisher is paid for each click
  - filtering out extraordinarily bad traffic
AdNauseam will increase the amount of bad traffic. Merchants have to pay more money to get their ads through to those people who do not create fraudulent clicks. Publishers will receive less money per click. Ad networks will try harder to invade your privacy(1) so they can get more comprehensive data about those people who are worthy to be targeted. Startups which promise to detect fake traffic will get a boost. Companies which manage advertising via social influencers or in-game mobile ads etc cannot care less.

I do not see the direct benefit of this for the end user...

(1) for example by paying more money to antivirus providers to send your browsing habits their way.

edit: formatting

chokma··on OpenAI is Using Reddit to Teach An Artificial Intelligence How to Speak
If you want to download the set as a torrent (to save pushshift.io some bandwidth cost), you can do so via

  magnet:?xt=urn:btih:UGFLA4QNEXGEFKYYY5ZU37JIHWEEYY5R&dn=reddit_data&tr=udp%3a%2f%2ftracker.openbittorrent.com%3a80&tr=udp%3a%2f%2fopen.demonii.com%3a1337&tr=udp%3a%2f%2ftracker.coppersurfer.tk%3a6969&tr=udp%3a%2f%2ftracker.leechers-paradise.org%3a6969
which I have put together. It contains the data up to April 2016.

If you want to work with this dataset on your workstation, there are some code examples in https://github.com/dewarim/reddit-data-tools

chokma··on Making Humans a Multiplanetary Species [video]
I am currently doing a (simple) sentiment analysis for the complete reddit comment set. Perhaps when I am done with that, I can have a look at the HN corpus (where to download?) for correlations between upvotes and users, though I doubt that rating post quality by sentiment is easy.

But it could be useful to look at the comment history of a user. When someone who is an overall positively minded contributor (with a high average positive sentiment) suddenly writes one scathing reply, this could mark a potentially interesting thread.

chokma··on Ask HN: What is your experience with Scala?
I've been using it for a couple of months for Apache Spark - it allows me to create succinct big data jobs running on a Hadoop cluster. Short code which does not try to be too clever for its own good is really great at making the algorithms be more comprehensible.

One problem I have is sbt - our projects are all defined in Maven, and for many library / dependency problems, Google leads me to sbt solutions which are hard to understand. Guess I will have to learn another build system.

I would like to use Scala again in a larger project, but there are so many existing Java frameworks out there that can solve the problems we have. So it is hard to define a business use case that requires experienced Java developers on the team to switch to Scala and use libraries and frameworks that are not as thoroughly tested and supported compared to the already known ones.

Tooling: The Scala plugin for IntelliJ is getting better, but it had some bugs like suggesting to remove required imports which broke classes. I like the easy navigation between Java and Scala libs - sure, you get "null problems" from using Java, but you can use almost all your existing Java code (Just don't try to use commons.StringUtils.join instead of Scala .mkString ;) ).

chokma··on Germany plans to remove owner liability for piracy on open Wi-Fi hotspots–report
This is still a problem even if the Störerhaftung (WIFI-owner being liable for misuse) is removed: When the police comes looking for someone distributing CP, they go by the IP address and take everything that remotely looks like a computer for forensic examination.

So, having an open WIFI is like painting a huge target on your back, albeit a somewhat smaller one when media companies are removed from the list of potential trouble makers.

(See also: http://www.lawblog.de/index.php/archives/2016/05/12/dein-wla... (in German), for a defense lawyer's perspective)

chokma··on Parkinsons-Like Neurodegenerative Disease Linked to Prion
Prions are indeed scary - I still remember a comment to the effect that pathologists can never be really sure their instruments are safe to work with again.

( http://pipeline.corante.com/archives/2011/11/29/a_things_i_w... )

A bit more about that from a better source: http://www.scientificamerican.com/article/surgical-exposure-...

chokma··on We Are Abstracting on the Shoulders of Giants
A good way of finding your own giants is trying to comply with all licenses your own software depends on.

When writing a LGPL licensed CMS server, I tried to find all sub-projects to make sure we could distribute the software safely. Sadly, not every framework and plugin does list its own dependencies correctly - often you will find components in the lib/ folder that require specific attribution with the author's name if the software is to be used legally.

http://cinnamon-cms.com/de/cinnamon-server/lizenz-ubersicht

And for a list of Giants and Dwarves:

http://cinnamon-cms.com/de/standard/riesen-und-zwerge

edit: clarification / fix typo

chokma··on The Heartbleed Bug
Same for hetzner.de: the default sources.list points to their [for the moment] outdated update-server.
chokma··on The Heartbleed Bug
With "openssl version -a" you can see the built time.

  root@x ~ # openssl version -a
  OpenSSL 1.0.1 14 Mar 2012
  built on: Mon Apr  7 20:33:29 UTC 2014
chokma··on A Guide to the Good Life
When reading chapters 1 and 2, the author focuses heavily on the "nothingness" (hvl - wisp of air) of all human endeavors. But I think it's significant that he does not loose hope altogether:

"There is nothing better for a man [than] that he should eat and drink, and make his soul enjoy good in his labor."

So the philosophy of Ecclesiastes is almost hedonistic (and views god more as blind fate than a benevolent force or being).

chokma··on Sydney tunnel water screen stop sign for oversized vehicles [video]
An important customer once told me "Yes, I have read about the manual, but it is so much easier to call you." - the problem with lazy customers is that they will make false assumptions about what the software does (everyone will probably do this at one time, but not reading the manual / instructions is much more dangerous).

She also refused to upgrade from a 15" monitor to a larger model, so we had to keep the screen layout in accordance with her outdated screen format. (The cost of a new screen would have been negligible compared to the profits).

chokma··on Web hosting, but good
The amazing thing (as far as I have been following it) is that Uberspace encourages its users to learn to use the command line and SSH instead of restricting them to a "safer" GUI with fewer options.

It will be interesting to see if educating a growing user base does scale (as more knowledgeable admins may ask fewer questions and can find their own answers on StackOverflow) or introduces more (and much more complicated) customer support requests over time.

chokma··on Web hosting, but good
Indeed, it's always a pleasure to work with them. Having worked with Jonas before, I can say that they are extremely competent and deliver great customer support. Ask a question by mail and you will get a detailed answer instead of random boilerplate text.
chokma··on The Startup Side Project Bubble
I do not see my side project as a distraction from my day job (it only distracts me from my other, non-commercial side projects).

Stuff I learn at work is often applicable in my side project as well - and vice versa. I can re-use the code (as most of the work-code is open source) and use the project as a testing / learning opportunity for things I may use at work.

The things which do reduce my motivation is the projects legal side (having signed a disadvantageous contract...) and not knowing if there really is a market for the kind of application I write ("$megaCorp can do this probably sooo much better.").

chokma··on Perl and Perl Module Administration in the Modern Era
Using perlbrew, I can install a version of Perl without messing up the system installation, as would the default package manager. I have to migrate data from a legacy Catalyst app which pulls in a lot of modules with specific versions, which should not reside in the OS package management system (nor should the OS try to update them).

Thanks for the FPM-link, that looks interesting for packaging my own software :)

chokma··on Why don't websites immediately display their text these days?
Indeed, RequestPolicy, AdBlock+ and NoScript are the essential default plugins, both from a security and usability perspective.

But sometimes the content will not load at all, because to show an article's text, the page uses Google's ajax, webfonts, a cdn, and the blog's master site @ wordpress.com or blogger.com etc. In that case, the content has to be really interesting for me to allow all those third-party connections.

chokma··on JetBrains Doomsday Sale - 75% off for 24 hours only
Thanks, seems I have misread the license terms :)
chokma··on JetBrains Doomsday Sale - 75% off for 24 hours only
From the license page, it does not look like you are allowed to use your copy at work (would be great if this were possible ;) ):

"Personal licenses are not available to companies in any way or form. Transfer of personal licenses to any third party and/or reimbursement for personal license purchase by a company are prohibited by the Personal License Agreement"

http://www.jetbrains.com/idea/buy/buy.jsp#personal

chokma··on 'Everyone in US under virtual surveillance' - NSA whistleblower
> the use of encryption will become illegal

The problem with outlawing encryption is: everyone needs it for business purposes and to protect public / private infrastructure. If SSL encryption were to be forbidden, e-commerce would become very difficult...

Also interesting: http://en.wikipedia.org/wiki/Chaffing_and_winnowing ("Chaffing and winnowing is a cryptographic technique to achieve confidentiality without using encryption")

chokma··on Bike light that projects the symbol of a bike down onto the road
Indeed, battery powered lights can be problematic (due to 70 year old laws...).

But a powerful LED light source is great as an additional gadget. (Although, at 4-6m range, this item is not sufficient to illuminate the road ahead).

chokma··on Google connects Play Store with Google+, reviews will feature name and picture
Health applications - a review for an app which allows you to record you stool consistence (for Morbus Crohn) could negatively affect your chances for employment as well as open you to ridicule by others.

"You gave AcmeFamilyPlanner 4/5 stars, Mrs Candidate - say, do you want to have a career or a family?" (Hm, of course this could help remove bad employers from your list of prospective work places ;) )

← PreviousPage 3 of 5Next →