HNHacker News
TopNewBestAskShowJobs

evfanknitram

216 karma · joined July 26, 2017

submissionscomments
evfanknitram··on Google and Microsoft Push Websites to Go Password-Less
But isn't it still a stronger form of authentication than the average password?

I would not use it for authentication against the missile launch system, but my ex will probably not chop of my finger to access my Facebook account, nor will random bots trying to access my Gmail account.

evfanknitram··on A brief list of what Scrum gets wrong
> The problem is, on the ground, that is not what scrum is.

The companies I have worked on who claim to use scrum does not suffer from the issues OP brought up. So I question your statement. I also have >20 years experience.

> If the process is just as often implemented incorrectly as correctly, that is a failing of the process.

That's bs. That would be like putting a tractor driver in a Cessna and when the plane crash clamr that Cessnas are inherently unsafe to use. Yes, scrum requires buy in and some basic level of competence. If one or both of these are missing in an organization and they still say they use scrum then that can hardly be blamed on scrum.

evfanknitram··on A brief list of what Scrum gets wrong
What kind of 'credit' are you talking about?

The scrum guide talks about roughly 1hour/week for the scrum team to show stakeholders (such as upper managers and customers) what has been done. Any engineer can at any time reach out to people in the company to demo what has been created, if there's interest.

So I'm not sure what point you're trying to make with starting your own company if you want visibility outside the team.

evfanknitram··on A brief list of what Scrum gets wrong
Not sure if you are joking but unfailing people is no requirement of scrum. Scrum requires the people participating in the process to at least have some fundamental grasp of the process though. If the actors can't be bothered to learn this, then of course it won't work.

If you don't know what values scrum brings over for example traditional waterfall, then the scrum handbook is a good place to start to learn.

evfanknitram··on A brief list of what Scrum gets wrong
Meh... All of these items are more or less misinformed so I'm just going to bring up one.

> Because all product decision authority rests with the “Product Owner”, Scrum disallows engineers from making any product decisions and reduces them to grovelling to product management for any level of inclusion in product direction.

The product owner is part of the scrum team. She or he is responsible for the backlog but if she has trust in the engineers she can let the engineers add their own things to it.

I think OP just works in a bad place.

evfanknitram··on Post-Mortem and Security Advisory: Data Exposure After travis-ci.com Outage
When I look at our development, devops and operations people, the likely hood of making stupid mistakes seems to be correlated to skill-level rather than what title the person has. The developers who work part time with operations seems to cause less problems than pure operations-people, maybe because they only do it part time and therefore are a bit more careful.

But I'm sure you can enlighten me with some actual research-based facts?

evfanknitram··on Post-Mortem and Security Advisory: Data Exposure After travis-ci.com Outage
Yeps. Pure operations people don't make mistakes.
evfanknitram··on Post-Mortem and Security Advisory: Data Exposure After travis-ci.com Outage
Maybe because developers do operations for the production system?
evfanknitram··on Tesla driver reproduces fatal autopilot accident [video]
I don't think the word reproduction is always used as strictly as your definition. In computer software/hardware the word is used even if the geographical location and hardware is different. I don't see using it to reproduce car issues would be any different.
evfanknitram··on Quit Social Media, Your Career May Depend on It (2016)
Maybe you misread what I wrote. I wrote that I do understand this.
evfanknitram··on Quit Social Media, Your Career May Depend on It (2016)
No I don't. I'm typically using Facebook app on android and I never see any news. Logged on to desktop version now and none there as well. Scrolled through about 100 items on my feed and the only thing I see are posts from friends and intermittent ads from companies which are "liked" by my friends.

I'm guessing maybe it's because I'm in/from Sweden and they haven't set up newsfeeds for this place.

I do see how showing negative news to people would have affect on what people post. And maybe it's a cultural thing as well - one of the hot topics in Sweden is immigration but very few people post about it, probably just because it's such a divider and few good things will come out by starting a Facebook discussion.

evfanknitram··on Quit Social Media, Your Career May Depend on It (2016)
Is there some study showing that your first sentence is correct? The reason I ask is that I never ever see stuff like that in my feed.

Is it your friends who share that kind of stuff or is it showing up as ads or? And why are those people encouraged to share stuff such as bacon giving cancer?

In my feed I only see the stuff from friends, such as travel photos, various fun experiences, poems and sometimes comments on local political events. And of course intermittent flooding of happy birthday messages.

evfanknitram··on Git log – The good parts
I like GitExtensions. I cringe when i see people manually entering hashes when they want to do stuff such as simple diffs. It's busy work. Hammering away on the keyboard but actually accomplishing so little.
evfanknitram··on Mozilla Presses Pause on Facebook Advertising
Because they know what their users wants?
evfanknitram··on Azure Functions – Significant Improvements in HTTP Trigger Scaling
Yes it is.

What do you mean by Microsoft-specific stuff? I run a bunch of stuff there. When I started using these things their PaaS offerings were much more mature than the AWS counterpart (since they focused more on IaaS).

evfanknitram··on Ask HN: Cookies vs. JWT vs. OAuth
Cookies are a mechanism to store data in the client. Jwt token will still need to be stored somewhere (for example in a cookie).

To me, saying Cookies vs JWT doesn't really make any sense. It's like asking what is more secure, JSON or MySql?

evfanknitram··on What to do with the one-shot scripts
If potential employers rate my skill based on one-off scripts I should probably stay away anyway.

Just add a README that the repo contains that kind of stuff.

We have a tools repo at work with this kind of random stuff. We use internal gits but if we're using public repository I would put it up there without blinking..

evfanknitram··on Major new iOS bug can crash iPhones and disable access to apps and iMessages
Waiting for everyone to agree seems like a very futile and inefficient way to achieve progress.
evfanknitram··on CI/CD Is Not a Progression
Where I'm at it wouldn't really matter if there was 100% code coverage.

I have still to understand how 100% coverage ensures that the product looks good, isn't confusing, does not contain grammar errors and actually implement what the customer wanted in the first place.

Maybe this works well in a company where everyone is great UI artists and who sits with the customers from day 1 until deploy.

Where I work we often think we have a good idea om what we want to implement but after seeing it run we realize we need to tweak some things to make it really good.

evfanknitram··on Switch to Windows 95
Program Manager had quite the run. It was included in versions up to and including Vista. I took a quick look for progman.exe on Windows 10 but looks like they stopped shipping it.
evfanknitram··on It Was Bad UX, not a “Wrong Button” in Hawaii
He didn't equate them though, that was his whole point.
evfanknitram··on It Was Bad UX, not a “Wrong Button” in Hawaii
Why do you see that as terrorism?
evfanknitram··on Intel Issues Updates to Protect Systems from Security Exploits
Thanks! I will use this if they don't understand my version of it.
evfanknitram··on Intel Issues Updates to Protect Systems from Security Exploits
This appears to be the case at least on my Windows 10 laptop.

I've installed the hotfix for Windows, but when I run the PowerShell script to determine whether mitigation is active, the script tells me that it's not active, due to lack of hardware support. The script then goes on to give the recommendation to "Install BIOS/firmware update provided by your device OEM that enables hardware support for the branch target injection mitigation."

It's a 1-year-old ASUS laptop and I would be surprised if they even give a sane response to my question to their technical support (I doubt they will even know what I'm talking about).

evfanknitram··on Testing Microservices the sane way
Why?
evfanknitram··on The mysterious case of the Linux Page Table Isolation patches
Azure in the start of January.
evfanknitram··on Zero-Width Characters: Invisibly fingerprinting text
A fun fact is that the thumbprint text box in the certificate viewer in Windows starts with an invisible character.

So if you have cert and just want to copy paste the thunbprint to some file or application which needs to load it, then copying the full thumbprint probably won't work.

When I said fun I meant frustrating.

evfanknitram··on Your Mother’s Maiden Name Is Not a Secret
So why does the US banks not have transactions capabilities? Online banking without transactions seems like a oxymoron.
evfanknitram··on Your Mother’s Maiden Name Is Not a Secret
> and a tiny proportion of the most technologically sophisticated banks provide the ability to transfer money to any arbitrary person.

In the country where I live all internet banks supports this. And all of course use 2FA. Most if not all banks here let's me do any kind or transactions. Not just viewing my data but transferring money, buying stock, setting up new bank accounts, pension management and everything else.

Maybe it's the lack of security at your place which prevents useful functionality.

evfanknitram··on Passwords Evolved: Authentication Guidance for the Modern Era
That's assuming that the master password is really strong. Otherwise you could bruteforce it by testing millions of passwords ("password", "secret", short ones and so on). I assume most people will choose somewhat weak master passwords.

With this scheme ANY site where you register can attempt to brute-force your master password offline. I fail to see how it's a good scheme.

← PreviousPage 3 of 3