HNHacker News
TopNewBestAskShowJobs

d4l3k

523 karma · joined March 2, 2014

https://fn.lc

https://github.com/d4l3k

https://www.linkedin.com/in/d4l3k/

submissionscomments
d4l3k··on Dropbike: Data Breaches and Free Bike Rides
Sorry if it's not a traditionally formatted Show HN. However, I did write an open source version of their app while doing this.

https://github.com/d4l3k/opendropbike

It's not quite production ready, but does most of the basic things.

d4l3k··on Dropbike: Data Breaches and Free Bike Rides
Hey HN, I spent a couple of days digging into the backend APIs for the new bike share on my university campus. Wasn't terribly impressed by what I found and here's a write up of the issues that I let them know about.

You can also check out a bike trip visualizer for the past couple of days that I threw together: https://d4l3k.github.io/dropbike-visualizer/

If you have any questions about these issues or how I found them, let me know!

This post is also available on IPFS: https://ipfs.io/ipns/Qmea45XwFtdwaCGAPLRMxFmoUP5YLnknc2WGCGQ...

d4l3k··on Show HN: Acolytefight.io – Multiplayer Skillshot Arena HTML5 Game
This game is pretty much unplayable on Firefox on Linux due to how slow it is, even with an 8th gen i7 processor. Seems to run fine on Chrome, but having to switch is super obnoxious
d4l3k··on Google’s first all-hands after 2016 election [video]
It's normally product announcements and any other issues/news about the company along with a Q&A session with the top leadership.
d4l3k··on Elastic files for an IPO
To be fair, both MongoDB and Elasticsearch have had serious issues as pointed out via the Jepsen tests.

https://aphyr.com/posts/317-jepsen-elasticsearch

https://aphyr.com/posts/323-jepsen-elasticsearch-1-5-0

Though, all those issues have been fixed for both MongoDB and Elasticsearch so it's not necessarily fair to judge them based off past performance.

https://www.elastic.co/guide/en/elasticsearch/resiliency/cur...

https://www.mongodb.com/mongodb-3.4-passes-jepsen-test

d4l3k··on How to Simulate an Avalanche – And All Its Subtle Mechanics
I'm not sure what it is, but every time I see simulated snow there's just something wrong about it. My brain just instinctively tells me "that's not snow" and suggests sand or something else. There's a definite uncanny valley effect for snow
d4l3k··on Instructions from Facebook not to touch the posts of the cabinet minister
To be fair, the position of most governments is that Facebook isn't doing enough to censor fake news, hate speech, drug selling etc. I don't think having the government step in is going to fix any of these problems.
d4l3k··on Musk mulls taking Tesla private, Saudi sovereign fund builds $2B stake
The SEC chairman likely doesn't do the actual legal work in bringing cases to court. Would you expect Jeff Bezos to know how to navigate his warehouses and ship packages out?
d4l3k··on Thoughts On Machine Learning Accuracy
Since you're comparing facial recognition to guns and guns are regulated by law and have strict rules for use, perhaps facial recognition should as well?

I think there should be a discussion about laws/regulations about facial recognition use. Even if Amazon removes their service there will always be companies that don't care about the ethics as much. Strict rules instead of public shaming seems like the better approach

d4l3k··on Is WebAssembly the Return of Java Applets and Flash?
There are some bad JS websites, but most of them do have proper bookmarking since pretty much every web framework supports adding multiple pages including forward and back navigation. Browsers are also good enough to handle #links as well within a SPA app. Also, they tend to have faster than typical loading times for navigation within the site.

Flash didn't have any of that, and was much slower to load than modern JS websites.

d4l3k··on The Data Transfer Project
I feel like this will actually lower the barrier to entry. Currently there's no easy way to migrate from the big 4 websites to other providers. If you were a new startup competitor, having to only implement one import format seems to be a good thing
d4l3k··on The Data Transfer Project
iCloud has a lot of similar data to what Office 365/GSuite has, so there's probably a lot that would be worth transfering.
d4l3k··on The Data Transfer Project
The current "data models" appear to be Calendar, Contacts, Mail, Photos and Tasks. That fits pretty well with the data from Microsoft Office 365/GSuite. Interestingly enough it doesn't have a model for Tweets/Facebook posts so I'm not really sure those companies are part of this unless there's something more planned.

https://github.com/google/data-transfer-project/tree/master/...

d4l3k··on The Data Transfer Project
That feature already exists for all the supported platforms.

Google: https://support.google.com/accounts/answer/32046?hl=en

Twitter: https://help.twitter.com/en/managing-your-account/how-to-dea...

Microsoft: https://support.microsoft.com/en-us/help/12412/microsoft-acc...

Facebook: https://m.facebook.com/account/delete

d4l3k··on The Data Transfer Project
I assume it requires credentials for each platform, so it doesn't enable anything that they wouldn't already have access to if they could log in to every single one of your accounts.
d4l3k··on How NoSQL forced the evolution of a scalable relational database
MongoDB supports a combination of shards and replica sets. Each replica set uses a protocol similar to raft for strong consistency. The replicas are a lot better than just active-secondary mirroring

https://docs.mongodb.com/manual/replication/

There's also Atlas which is the hosted version and makes it very easy to scale up https://www.mongodb.com/cloud/atlas

They also just added a free tier if you want to play with that https://docs.mongodb.com/manual/tutorial/atlas-free-tier-set...

d4l3k··on Amazon’s share of the US e-commerce market is now 49%
I've been using https://privacy.com/ to prevent this exact kind of thing.
d4l3k··on How NoSQL forced the evolution of a scalable relational database
MongoDB certainly was missing a lot of things when they first launched and were very hyped, but now pretty much everything you could want in a database is now in MongoDB.

Multi-document transactions + strong consistency: https://docs.mongodb.com/manual/core/write-operations-atomic...

Passes Jepsen test: https://www.mongodb.com/mongodb-3.4-passes-jepsen-test

Schema: https://docs.mongodb.com/manual/core/schema-validation/

Query Optimizer: https://docs.mongodb.com/manual/core/query-plans/

Backups: https://docs.mongodb.com/manual/core/backups/

d4l3k··on Arch Linux AUR Repository Found to Contain Malware
Yaourt is also unmaintained and unsafe. Please switch to something better.

https://wiki.archlinux.org/index.php/AUR_helpers#Active

d4l3k··on Firefox Lockbox
Link for the curious https://testpilot.firefox.com/experiments/side-view/
d4l3k··on The NSA’s Hidden Spy Hubs in Eight U.S. Cities
They specifically mention that room with a photo of it in the article.
d4l3k··on Pain27 keyboard
There's a ton of keyboards that have ortholinear or ergonomic layouts. Some people just like the aesthetics of staggered keys over the alternatives.
d4l3k··on Pain27 keyboard
Not 10 fast fingers, typeracer does however
d4l3k··on Docker Considered Harmful (2016)
Stack exchange has spent an obscene amount of time optimizing their infrastructure for efficiency on dedicated known hardware. Their DB instances also have 1.5TB of ram. You're not getting that for a few hundred dollars.

https://stackexchange.com/performance

Your average site wouldn't get anywhere near the same performance as them.

d4l3k··on Electron 3.0.0-beta.1 – Chrome 66 and Node 10
Might as well just use electron at that point since it's easier on the developer side.
d4l3k··on Facebook ordered to explain deleted profile
If you look at the answers Facebook provided to the US Senate they say:

"When the person visiting a website featuring Facebook’s tools is not a registered Facebook user, Facebook does not have information identifying that individual, and it does not create profiles for this individual.

...

We do not create profiles for non-Facebook users, nor do we use browser and app logs for non-Facebook users to show targeted ads from our advertisers to them or otherwise seek to personalize the content they see. However, we may take the opportunity to show a general ad that is unrelated to the attributes of the person or an ad encouraging the non-user to sign up for Facebook."

https://www.judiciary.senate.gov/meetings/facebook-social-me...

It's conceivable that Facebook could deanonymize users/aggregate the data they get from like buttons etc, but they claim that they don't use that data for ad targeting and it's only used for security.

d4l3k··on Uber is experimenting with letting riders wait longer for a cheaper fare
Drivers sometimes go to where the live GPS signal tells them you are instead of the pin. Likewise the pin is sometimes required to be in dumb spots (like the airport) even when there's a much more convenient spot 100 feet down the street.
d4l3k··on Asus replaced the touchpad on its new ZenBook Pro with a 5.5-inch touchscreen
Loading multiple scripts from one site isn't actually a performance issue. With HTTP2 there's almost no overhead since they all get multiplexed as streams over the same connection. With server push you also don't even have to have to wait for multiple round trips.

https://medium.com/@asyncmax/the-right-way-to-bundle-your-as...

AMP is more focused on UI responsiveness with things like having a fixed content layout so the page doesn't jump around when things load, as well as loading things asynchronously in the background so first paint is faster. Splitting up the JS so only the first paint JS loads immediately and then progressively upgrade the page is actually a good thing. It makes it immediately usable for slow connections.

https://www.ampproject.org/docs/fundamentals/spec#performanc...

d4l3k··on Steam store to sell VR porn video games
Is this any different from letting them use a web browser? If they want to access that stuff they probably already can.
d4l3k··on Four years after its release, Kubernetes has come a long way
Probably not. Container services really shine when you have a lot of different teams that all need to launch services and not worry about what happens at the hardware level or where they run. This makes sense at a lot of large companies like Facebook and Google where they have a dedicated team running the container layer. GKE makes it a bit easier but then you're locked into Google Cloud.

If you're only running a few services it really doesn't make much sense to setup Kubernetes. I setup a small cluster a few weeks ago and it certainly was a lot more involved than I expected. I ended up deciding not to use it, since it didn't really add much (for my use case) and I felt like if anything went wrong I'd be in a world of hurt trying to debug it.

Took a lot more time to setup Kubernetes than my entire current deployment system which uses https://github.com/pressly/sup.

However, dockerizing your projects might not be a bad idea depending on what you're doing. I dockerize a lot of my projects since it makes it super easy to deploy when using the automatic Docker Hub builds. Though I did have a problem where Docker upgraded and make all of my existing containers unrunnable.

← PreviousPage 2 of 5Next →