HNHacker News
TopNewBestAskShowJobs

graffitici

229 karma · joined April 5, 2012

submissionscomments
graffitici··on ASUS delivers BIOS/UEFI auto-updates over HTTP with no verification
Out of curiosity, how would an attacker exploit this to run a code s/he wants?

Try to direct the DNS requests to their own server instead of the LiveUpdate one? If so, how?

Also, would we be a better design? Hard-code IP addresses to prevent the DNS trick? Use HTTPS and hardcode the public key of the server on every machine?

(Only asking out of curiosity, clearly.. Seems like a good case study for designing things right.)

graffitici··on According to Forbes, Theranos CEO Elizabeth Holmes now has a Net Worth of Zero
I'd imagine she probably took some money off the table in some of those investment rounds. Though no way of being sure, of course..
graffitici··on All European scientific publicly funded articles to be freely accessible by 2020
Does anyone have any insights regarding the "foreign startup visas". Does that legislation have a name I can use to track progress?

It's quite annoying to have to apply for week-long business visas every time I have to travel to Europe. Especially in the summer, when it takes 2 months just to get an appointment with the consulate..

graffitici··on Jason: Scriptable iOS JSON Client
Looks really neat! Thanks for putting this out there!

Any chance the code for this will be open-sourced?

graffitici··on Spark 2.0 Technical Preview
The new Structured Streaming API looks pretty interesting. I have the impression that many Apache projects are trying to address the problems that arise with the lambda architecture. When implementing such a system, you have to worry about dealing with two separate systems, one for low-latency stream processing, and the other is the batch-style processing of large amounts of data.

Samza and Storm mostly focus on streaming, while Spark and MapReduce traditionally deal with batch. Spark leverages its core competency of dealing with batch data, and treats streams like mini-batches, effectively treating everything as batch.

And I imagine in the following snippet, the author is referring to Apache Flink, among other projects:

> One school of thought is to treat everything like a stream; that is, adopt a single programming model integrating both batch and streaming data.

My understanding of Structured Streaming also treats everything like batch, but can recognize that the code is being applied to a stream, and do some optimizations for low-latency processing. Is this what's going on?

graffitici··on PostgreSQL Scalability: Towards Millions TPS
Are there any best practices for using PostgreSQL for storing time series data? Would it be comparable in performance to some of the NoSQL solutions (like Cassandra) for reasonable loads?
graffitici··on Introducing Kindle Oasis
I wish Amazon would start investing more effort into the software of the Kindle, and make it more into a platform. I still use mine mainly to read eBooks. I would love to use it for reading my Pocket list, for instance. I've been waiting for such an integration for a while.

Amazon's doing a much better job with third party integration in the smart home domain. I still hope the eBook division will follow suit..

graffitici··on Introducing d3-scale
Yes, this would be fantastic!
graffitici··on Introducing d3-scale
Is the idea to have the next version of d3 be completely modular? So that if we use a tool like webpack, we'll he able to pull in the parts that we need?
graffitici··on The Best Books I Read in 2015
I wonder how much that video must have cost him! It's such a great production. I really like the way the table and the props match the theme of the relevant book. I'm guessing $10K for the one minute video?
graffitici··on Using Protobuf with PyPy
So would it be possible to use the pure-Python implementation with PyPy without having to resort to Reflex et al?
graffitici··on The 100-Hour Rule
On this note, if people have more resources related to sales, I'd be happy if they could share..! I think for most technical entrepreneurs, sales is likely one of the challenging areas to master..
graffitici··on Not Even Scientists Can Easily Explain P-values
From what I understand, p-values are typically used by frequentist method for verifying that the "prediction" seems correct. On the other hand, the Bayesian approach is to split the data into training and test sets, and verify how much of it holds.

Does this make sense? If the p-values are not very good at conveying "confidence in the prediction," is this another argument in favor of a more Bayesian approach to statistics? Any thoughts would be appreciated!

graffitici··on Python 3.5 type hinting in PyCharm 5
So how do we get some of these benefits if we don't use PyCharm, but use Vim? Are there standalone tools, or VIM plugins?
graffitici··on Berlin public transport in real time
Now I'm even more glad I moved to Berlin from NYC..!
graffitici··on Five years of Scala and counting: debunking some myths
I had read somewhere that there were talks of creating a smaller subset of Scala, one that's easier to learn. I believe it wasn't going to have implicit arguments (or conversions?).

I think Odersky had mentioned something of this kind. Anybody else remembers something of this sort?

graffitici··on DMTK: Distributed Machine Learning Toolkit from Microsoft
Not sure if this was ready for public release.. The chess demo released this morning seems more polished than this library.. Also, probably not the best decision to post it a day after the TensorFlow release..
graffitici··on Show HN: Sodocan.js: Documentation Made Easy
I see. But shouldn't documentation in the source code be the "only source of truth". Say I upload the documentation JSON file, and somebody else edits it online. If I re-generate the documentation from the same source code, I will no longer be able to push the changes, right?

Also, is there a demo view, as to what the generated documentation looks like?

Great project!

graffitici··on Show HN: Sodocan.js: Documentation Made Easy
I'm trying understand what this fulfills. I understand it extracts documentation from comments, and writes them to a JSON file. There are have been countless tools to do this.

But the difference of Sodocan is that it then sends these JSON files to an API server, which hosts these documentations?

So basically instead of using JSDoc + static site generator, one would use this method?

And the benefit would be that the generated documentation would be crowdsourced?

graffitici··on When Rust Makes Sense, or The State of Typed Languages
Can somebody expand on the "social issues" with Scala?
graffitici··on Announcing Meteor 1.2 – ES2015, Angular, React, and More
Is it fair to say that Meteor is an alternative to Relay and Falcor for managing state with the server? It also seems like it's competing with Redux and all the Flux libraries, right?

The plus side of all this is that React seems like it's becoming the ubiquitous "V in MVC". This is great news, since this means designers should soon feel at east working with JSX, regardless of which platform the company uses. It also should mean that using Meteor for developing mobile apps using React Native should be straightforward..

Not sure if I'll get into using Meteor, but I'm definitely very glad I have a head start on React..! Truly a technology worth mastering.

graffitici··on The Internet of Pointless Things
I actually think the industrial side of the story is where real value will be created. I'm also working on an industrial iot application, and would really like to chat! Is this your company?

http://www.zeefaxcms.com/images/data_sheets/zeefax_data_shee...

graffitici··on Tmux Resurrect – Persists tmux environment across system restarts
Brilliant, looking forward!
graffitici··on Tmux Resurrect – Persists tmux environment across system restarts
I didn't know about Teamocil, I use Tmuxinator for the same purpose. The latter seems to have more stars on GH, any reason why prefer the former?
graffitici··on GraphQL: A data query language
Want the specification for graphql already released? Are these just the official announcements, after the technical previews?
graffitici··on Relay: Declarative data for React applications
But Relay was already announced a few weeks ago, right? What's new with this blog post now,?
graffitici··on Sangria – Scala GraphQL Implementation
Excellent package! Speaks very highly of code quality in the Scala ecosystem. It's documentation also seems far superior than that of Scala, the language, or the Play framework. I wish they get to improve those as well..
graffitici··on Cow Magnets
Maybe your mother was the first one to discover cow placebo effects :)
graffitici··on Doradus – A graph-based data model, advanced indexing and search for Cassandra
Does anybody know of something similar for time-series based models?
graffitici··on React Color – Color Pickers from Sketch, Photoshop, Chrome and More
It's becoming more and more common. Check this out:

http://blog.vjeux.com/2014/javascript/react-css-in-js-nation...

← PreviousPage 2 of 4Next →