HNHacker News
TopNewBestAskShowJobs

dthakur

444 karma · joined January 18, 2009

Founder @ https://yard.bot
submissionscomments
dthakur··on Show HN: TLS cert expiration dashboard
I've been working on a hosted version of such a service. This is just the kick I needed to finish it up.

Keep an eye out for 'Show HN: Expiry alerts' this weekend.

dthakur··on Lyft's Nice-Guy Strategy Leaves It Struggling to Catch Uber
Yup, I thought it was worth pointing it out. re: http://www.paulgraham.com/submarine.html
dthakur··on Lyft's Nice-Guy Strategy Leaves It Struggling to Catch Uber
5 days ago: Lyft gaining on Uber as it spends big on growth (sfgate) https://news.ycombinator.com/item?id=11509461

Today: Lyft's Nice-Guy Strategy Leaves It Struggling to Catch Uber (nytimes)

Confusing world.

dthakur··on Why you hate Comic Sans
It's a font.
dthakur··on Twitter’s Fabric now serves 2B active devices
Context unclear. Did the OP solicit upvotes? If yes, then where?
dthakur··on jQuery.sheet – Easy and fast spreadsheets for the web
I'm not the author but I imagine it would be hard for the author to decide which way to go.

He/she could choose a library/framework (say react or angular) but then you'll exclude people not using these libraries.

jQuery is the common denominator which would allow the broadest support.

EDIT: of course eliminating jQuery entirely would be even better

dthakur··on Posting successful SSH logins to Slack
How quickly we forget that Slack was hacked not more than a year ago.
dthakur··on Peach App Token Reuse Flaw
Sounds like a storm in a teacup if indeed the endpoint is served over TLS.
dthakur··on Database leak exposes 3.3M Hello Kitty fans
Start here: http://codahale.com/how-to-safely-store-a-password
dthakur··on Database leak exposes 3.3M Hello Kitty fans
If there are other ways to confirm whether a user exists or not (signup email check for example) --

I would add that the 'bonus' of not informing of the correct error provides minimal security gain and hurts usability.

dthakur··on Show HN: Bitcoin Price – simple app to keep up with the price of Bitcoin
I focused on simplicity; yet something that's useful.
dthakur··on Bitstamp problem and warm wallets
Relevant and possibly more in-depth: "Multi Tiered Cold Storage Scheme" https://bitcoinsecurityproject.org/SecureStorage/MultiTiered...

// plug: check out Celery https://www.gocelery.com

dthakur··on Reverse-engineering the Kayak app with mitmproxy
> From that folder, get the mitmproxy-ca-cert.pem file onto your mobile device by emailing it to yourself, for example. Then follow certificate installation steps for iOS or Android.

You can just go to http://mitm.it on the device. It's a 'magic domain' for the proxied host. See http://mitm.it/doc/certinstall/webapp.html

dthakur··on Mozilla accepting Bitcoin donations
Yes -- 404 from coinbase

https://coinbase.com/assets/buttons/donation_large-36ee93618...

dthakur··on Ask HN: What do you hate most about renting a car?
Opaque pricing.
dthakur··on Virtual Currencies: Emerging Regulatory and Consumer Protection Challenges [pdf]
An interesting piece of info in this doc is the sheer number of working groups that are looking at digital currencies.

Names from appendix ii:

Bank Secrecy Act Advisory Group (BSAAG) [FinCEN (lead); CFTC; DEA; DOJ Criminal Division; FBI; FDIC; Federal Reserve and others]

Digital Economy Task Force [Thomson Reuters and the International Centre for Missing & Exploited Children (lead); FBI; ICE-HSI; Secret Service and others]

Electronic Crimes Task Forces (ECTF) and Working Groups [35 Secret Service field offices (lead) and others]

Financial Action Task Force (FATF) [intergovernmental organization with 36 member countries, including the U.S. Treasury as the lead agency of the U.S. delegation]

Federal Financial Institutions Examination Council (FFIEC) [OCC (rotating chair), CFPB; FDIC; Federal Reserve; and others]

Interagency Bank Fraud Enforcement Working Group [DOJ and others]

International Organized Crime Intelligence and Operations Center (IOC-2) [DOJ and others]

Terrorist Finance Working Group’s New Payments Systems Ad Hoc Working Group [Department of State and others]

Virtual Currencies Emerging Threats Working Group [DOJ, FinCEN and others]

dthakur··on Ask HN: Who is hiring? (September 2014)
BTX Trader - https://www.gocelery.com - New York, NY - Full-Time - Mobile Developer

- Who are we

We're a funded bitcoin startup focused on broad digital currency adoption. Our primary product, Celery, is a easy and fast way for customer to acquire digital currency.

We launched a month ago and the response has been positive and overwhelming. We need to get build new features, release a mobile app, scale our infrastructure while still doing a good job at handling our current customer order flow and performing bug fixes.

Our stack: JavaScript, Python, Scala, C, AppEngine, EC2, S3, Backbone, Node, Compass, D3, Redis, SQS, ELB

What we're looking for

Broadly, we're looking for a developer passionate about coding. Knowledge of JavaScript helps a lot these days but other languages are fine too.

Currently though, we need someone to take charge of building our mobile app. Want to go native? use cordova, titanium, xamarin? -- you decide. Don't know what to use? That's cool too as long as you're willing to learn.

What we're offering

  - Competitive compensation
  - Small team (6 folks right now)
  - Ability to traverse up and down the tech stack
  - Sweet co-working space with free beer (WeWork)
  - Learn stuff about the hot digital currency and payments space
  - Buy new hardware for yourself
How to apply

Shoot us an email to careers@gocelery.com

dthakur··on Seven habits of highly fraudulent users
You might find this paper about fingerprinting useful https://www.cosic.esat.kuleuven.be/fpdetective/
dthakur··on NYC taxi visualization
I'm getting a 503 after it finishes loading the initial assets.
dthakur··on Fishing for Hackers: Analysis of a Linux Server Attack
Great article. I had not heard of sysdig previously.

Based on the timestamps of the entered commands, I guess one of the takeaways for the attacker is to look into config management tools (eg ansible) :)

dthakur··on Ask HN: Who is hiring? (January 2014)
BTX Trader (http://btxtrader.com) - NYC

We're looking for a web developer.

We are building Bitcoin trading tools. We're tiny (2 people) but we've got the ambition and the backing.

Here is the role profile in terms of skills:

  - Strong grasp of core JavaScript
  - Experience with client-side frameworks (Backbone, Angular etc)
  - Familiar with Grunt/Yeoman or similar workflows
  - Familiar with, or interested in 
    using: canvas, WebGL, three.js, d3.js etc. for visualization
Get it touch! divya at btxtrader com
dthakur··on Web Framework Benchmarks Round 4
I asked for this before. Could you please add error bars to your plots?
dthakur··on Web Framework Benchmarks
Could you kindly add error bars to your test results?
dthakur··on Yammer moving from Scala to Java
Compared to Perl though, thankfully in Scala you do have a static type system to protect you from going too crazy.
dthakur··on The case of the terribly slow PayPal emails
The article is about an investigation into why outlook was taking a long time to open paypal emails.

It is not related to relying on paypal's email for payment processing.

dthakur··on Proposal: Linear Algebra Study Group
I'm in; I have the book; Is the next checkpoint on Sep 27 (Chapter 1)?

With 8 chapters, this will stretch past Dec, is this correct?

dthakur··on Show HN: My summer project - simulated CPU built from NAND gates
Another direction you might want to explore is to learn VHDL or Verilog and implement the CPU on an FPGA board.

You can get a prototype board for around $100 and should be able to build something to cover most of, say, the MIPS instruction set.

This would be a more engineering oriented project; I would follow along an 'introduction to computer organization' style course from a university (just google and you can determine the required textbook, exercises etc).

It's exciting to write some C code, compile it to mips instruction set with gcc (I had to do some fudging here because my cpu didn't implement the entire instruction set) -- and then run it on the fpga and get the right numbers.

dthakur··on Bad Code Isn’t Technical Debt, It’s an Unhedged Call Option
"Short call" might be a better phrasing than "writing unhedged Call Option".

When someone mentions "unhedged Call Option" (as in the title), it usually means long call, not short call.

dthakur··on Ask HN: How do you keep track of your ideas?
OneNote + DropBox.
dthakur··on Ask HN: Pricing question for a 'moonlighting project' for a company
Thanks for the input.

It is their product and I'll incorporate this info into the pricing factors, thanks.

I have somewhat of a spec but it needs more review before it can be considered a serious set of requirements.

Time-estimate is fine. I'd rather do it for a fixed price -- the company did agree to have a term structure for compensation 15% at start, 15% at first milestone etc.

← PreviousPage 2 of 4Next →