HNHacker News
TopNewBestAskShowJobs

mixologic

1,536 karma · joined October 2, 2013

Multi disciplinary generalist. Fullstack Developer + DevOps + IA + Consultant.

irc:mixologic:irc

submissionscomments
mixologic··on Sun, Oracle, Android, Google, Mozilla and JDK Copyleft FUD
Reading the GPL at length, it seems as though it were written as if the only build process were C, and the only way to run software was on a single computer. The GPL is unclear when it comes to how it applies to something as complex as a content management system that could be deployed and running as a single service across multiple servers. The language it uses (linking, distribution, even 'code' itself) is ambiguous. And apparently the only clear way to ensure that you are in compliance with it is a shakedown from the Software Freedom Conservancy to grant you permission to use it in ways it was never written to handle.

The principles of copyleft are tremendously valuable, I just wish we had a modern license that reflected the reality of the modern internet, and modern software.

mixologic··on Star Castle 2600, the Story
I was all ready to support the kickstarter. 3 years too late :(
mixologic··on Perforce introduces GitSwarm
What got my attention was the "narrow cloning for greater security". Im really curious how they are managing to implement narrow cloning with git.
mixologic··on Fry's Electronics owns and operates a rare 747SP
Maybe because it has 46000+ hours on it? thats almost 3.5 hours a day, every day. Also, owning a plane like that comes with some ridiculous expenses - you gotta park it somewhere, you have to maintain mechanical on it (annuals), and you have to pay for fuel. The cost of the plane probably pales in comparison to the cost of owning that plane.
mixologic··on Monkey the Cat Hunts for Dinner
It would ultimately depend on what you're trying to optimize for. Length of life does not necessarily correlate to quality of life.
mixologic··on Some analysis of the 1M most popular sites on the web
The main reason is sometimes you have *.domain.com authentication cookies for single sign in across a suite of sites, however you do not want those authentication cookies sent to domains that do not need authentication.
mixologic··on Some analysis of the 1M most popular sites on the web
It is pretty standard practice to host assets on a "cookieless" domain you control, but not on the same domain as the original site. For example, www.example.com has all the html, but all of the images are hosted at www.images-example.com. That would skew the results considerably.
mixologic··on Malware and Hacking Forum Darkode Is Shut Down; Dozens Arrested
Why would the Feds pay for something they can just take?
mixologic··on The Logic of Stupid Poor People (2013)
Quotation marks would serve to clarify the voice of the article, yet they would weaken the message of the article.

The Logic of "Stupid Poor People"

As an old man, I learned something by clicking on that.

mixologic··on Gonix – Unix tools written in Go
Except for the fact that it'll be years before all of the subtle bugs are worked out and you can rely on those apps to be as stable as the ones we've got:

http://www.joelonsoftware.com/articles/fog0000000069.html

mixologic··on How the Freightliner Reveal Was Projected onto the Hoover Dam
I think "of its time" is probably left out of that top engineering marvels quote. Look at what else was achieved by 1939 when they finished all the major construction.
mixologic··on Mark Twain stories, 150 years old, uncovered by Berkeley scholars
Why are they typewritten, with corrections? Did somebody find them years after the typewriter was invented and transfer them from handwritten archives?
mixologic··on Ask HN: How much does Amazon contribute to the open source community?
I know that in an effort to provide SDK's for their services, they have also produced some greate high quality supporting Libraries.

Guzzle, an http library for PHP came out of their PHP SDK: https://github.com/mtdowling is the author, and participates in the php framework interop group on behalf of Guzzle.

mixologic··on Quantifying Online Advertising Fraud: Ad-Click Bots vs Humans [pdf]
Actually, thats really awesome. I've been researching maxmind, threat-metrix, and neustars offerings to protect a large site that gets targeted with a lot of spam. Threat-metrix and neustar are both too expensive, and maxmind didnt really work all that well.

This paper basically touched on everything I wished for in a bot detecting product, at a price that seems totally reasonable.

mixologic··on A dead man's switch for your computer?
This might work once, for somebody. Then law enforcement would understand what it is for, what it does, and cut the lanyard/string instead of removing the usb stick before apprehending the device.
mixologic··on Weekly Coding Interview Problems by Email
I would walk out of a job interview that asked brain teasers. It's not revealing of anything and tells the interviewers that either you've heard that piece of trivia before, or you got lucky and reasoned it out. And "we just want to see how you think" is evidence that the interviewers hadn't thought about how to actually determine what kind of an engineer you were.

The best interview I ever had was basically a small amount of spec work accompanied by a writeup of why I did what I did.

mixologic··on Drupal Core – Highly Critical Public Service announcement
and by long tail we mean 75% of drupal 7 sites.
mixologic··on Drupal Core – Highly Critical Public Service announcement
Definitely drupal 7 : http://www.whitehouse.gov/misc/drupal.js
mixologic··on Drupal Core – Highly Critical Public Service announcement
Have fun trying to get your microframework to satisfy the requirements of massive governmental organizations(http://australia.gov.au/misc/drupal.js) , universities (http://www.harvard.edu/misc/drupal.js), and gigantic media sites (http://www.nbc.com/misc/drupal.js).

I think you haven't a clue as to what drupal's capabilities are if you've got it even in the same ballpark as Joomla and PHPNuke.

mixologic··on Drupal Core – Highly Critical Public Service announcement
This definitely happened. Major hosting providers were seeing attacks against all of their sites, in alphabetical order.
mixologic··on Drupal Core – Highly Critical Public Service announcement
Yes, except that none of the major hosting providers who host on behalf of thousands of clients (pantheon, acquia, etc) were able to find any examples in their logs of an attack signature prior to the disclosure. Just like shellshock has been sitting around for 25 years until somebody found it, it is highly unlikely that this vulnerabilty has been exploited prior to that, despite the fact that it was 'possible'.
mixologic··on Drupal 7 SQL Injection Vulnerability
The latter.
mixologic··on How feminism helped me solve one of file systems’ oldest conundrums
How would you explain that there used to be more women than men as programmers? (http://gender.stanford.edu/news/2011/researcher-reveals-how-...)

What do you think changed?

mixologic··on A Simple Guide to Five Normal Forms in Relational Database Theory (1982)
Keep in mind that preserving space was of the utmost of importance in 1982. Eliminating data redundancy was considered the utmost of design, eschewing maintainability, intelligibility, and real application behaviors.

Please do not allow your data model designs to be artificially constrained by the requirements of the past.

mixologic··on Hemisphere Project Summary: Office of National Drug Control Policy [pdf]
Law enforcement doesn't have the entire call graph. They have a service, that they can request specific data from, that takes 2-5 days to return the requested information, which is pretty much only "additional phones, and switched phones", and they have to have a subpoena to get that data in the first place. This isnt some google search they can mine for whatever. The 2-5 day lag is almost certainly paperwork bureaucracy verifying that they have a legal reason to search the database.

I suppose the folks at the "Hemisphere Regional Data Center" could theoretically match up the names to the phone numbers (not AT ALL trivial - I used to work with credit header data and telco record data - the data quality is an absolute shitshow), but that power certainly is not in the hands of any local law enforcement.

mixologic··on Hemisphere Project Summary: Office of National Drug Control Policy [pdf]
This is a database of call detail records (http://en.wikipedia.org/wiki/Call_detail_record) and the numbers they have called, and numbers that have called them. It does not contain subscriber data (names, account information) - just metadata about calls.

They use this database to find cycled phone numbers that have similar calling patterns. (Phone number 1 tends to make and receive calls from number 2, 4, 9 and 13. in geographic area X) Phone number 1 stops making calls, and phone number 50 starts making/receiving calls to 2, 4, 9, and 13 in area Y. So they can assume that whomever owns 50 is the same person that used to own 1 and now they're in area Y.

Maybe Im just being clueless today, but can anybody explain to me what is so chilling about this system? I don't see where it can really be abused unless you've got some stalker that works for LA's DEA and they're trying to find out their estranged ex-wife's new phone number?

mixologic··on Show HN: Plot.ly
I wanted to explore to see what charting types were available. I couldnt find that information anywhere.
mixologic··on Show HN: GitHub Treemaps
I really wish there was a good javascript implementation of cushioned treemaps (www.win.tue.nl/~vanwijk/ctm.pdf). The only implementation I've found so far is buried in a firefox plugin that gives a cushioned treemap of reddit comments(https://github.com/titusjan/plottit/blob/master/src%2Fchrome...), but I'd love to have one thats in a general purpose charting library.

There is a 'cargo cult' implementation in jit (https://github.com/philogb/jit/blob/master/Source%2FVisualiz...) - where they just fake some gradients to make pretend cusions, but its definitely not a true cushioned treemap, and adds nothing to the visual interpretation of the hierarchical structure of the data.

I guess I'll probably have to brush up on my JS skills and start blending things together.

mixologic··on Google, you win
You should never have been granted a trademark on a phrase this common. In the court of public opinion, trying to own a phrase that is already common parlance, not something you made up, is asinine. You're wasting your investors money on trying to own this phrase, and you're likely going to get shouted down here. GLWT.
mixologic··on Chromecast Rooted
I've completely disassembled and re-assembled my (not recent) winnebago diesel, including rebuilding the engine. Almost every part on that RV has been redone by me, because I wanted to, and I didn't have to resort to any sort of safecracking tactics to be able to do that. If microwaves were built on top of a general purpose computing platform, then yes, I would want root access to them.

The only reason that total control is not granted by default is that companies fear that they will no longer control their customer. I can understand in instances where safety or device damage may be an issue (like, no, I dont want root access to a tesla for example), but for consumer devices, I should not be forced to use apples store to add software to my phone. I should not be forced to use googles software to use their hardware either.

← PreviousPage 8 of 10Next →