HNHacker News
TopNewBestAskShowJobs

oniTony

716 karma · joined January 9, 2011

submissionscomments
oniTony··on The US Government Keeps Harassing a UW Researcher Who Speaks for WikiLeaks
The secure way would be to upload an encrypted copy of the harddrive, bring across wiped hardware, and re-download the contents after clearing the boarder. FedEx packages go through customs, encrypted internet data does not.

That is to say -- if the intent is to sneak some data into the country, it seems obvious that it should not be available in plaintext on a physical device. With that in mind, is there ever a legitimate reason to seize all electronics, up to and including gaming consoles[1], from a security researcher (warrant had to do with MySpace, not anything console related)?

[1] http://www.youtube.com/watch?v=fEmO7wQKCMw#t=40s

oniTony··on How to Build an Effective Startup Press Kit
Dropping off a physical press kit that is unique and design~y enough might get some press coverage... about the kit itself.
oniTony··on Detecting Cheaters
That's why there were experiments with different wording of the problems. All of the logical setups and solutions are identical (when expressed in abstract P/Q, true/false), but some problem domains (took a plane) is a lot more difficult for average people to comprehend than others (ate the vegetables).

This is not in the article (I'm just familiar with the exercise), but people are also much better at dealing with logic when the questions are about legal drinking age.

oniTony··on Self-Taught Programmers vs CS-Educated Programmers
But wouldn't a Ph.D., as in reading research papers and arriving at some unique new insight, be closer to "self-taught" than "taught existing knowledge from someone's lecture"?
oniTony··on Evercookie
Evercookie is the herpes of user tracking. Wear protection (don't run JavaScript from untrusted websites).

Still, there are some interesting ideas for places to hide trackers. I wonder which parts actually survive (as wiki suggests that something does) after doing a full "clear browsing data" on something like Chrome (which comes with a super helpful link to clear Flash cookies).

oniTony··on Show HN: My weekend project, tracking the services you can't have in Canada
To be even more precise, Canadian SkypeIn numbers are not available in Canada. I've certainly had a US number that worked in Canada (makes sense for receiving calls from America).
oniTony··on Amazon on Cloud Player: we don't need no stinkin' licenses
Wait, so use of partial downloads (say reading from a stream buffer) is legally different than the same use of a full download? (If my connection is fast enough for the second song to _fully_ buffer before the first one finishes playing, does this change anything, since the player is now reading from effectively a "full download"?)
oniTony··on What Location Tracking Looks Like
Oh neat, this is kind of like 4sq, but without opt-in and happening ~200 times per day (also, no badges).
oniTony··on 23-year-old donates US$1M to support Waterloo student entrepreneurs
VC monies from Fred Wilson and co. http://www.avc.com/a_vc/2011/03/kik.html
oniTony··on I hope IPv6 never catches on
Sorry, I meant it as "or". I guess I should have used || instead of /
oniTony··on I hope IPv6 never catches on
On the plus side, this (staying with IPv4 behind NAT behind NAT...) will further instil the idea that an IP address is not a person. As soon as governments/corporations loose the ability to track/sue individual people, they'll be all over IPv6.
oniTony··on Results for: Pick a number from 1 to 10
Even distribution, instead of bell-curves around popular/bias numbers.
oniTony··on Pick a number from 1 to 10
I was going to pick 4, but then realized that 4 has been my default "random" number, ever since http://xkcd.com/221/
oniTony··on Silicon Valley Hiring Perks: Meals, iPads and a Cubicle for Spot
There are also laundry (Facebook), massages (Google), mini-day spas (Microsoft; maybe? private to employees but not clear on pricing), etc. Haircuts are very much in theme with "work and live on-campus" approach.
oniTony··on Silicon Valley Hiring Perks: Meals, iPads and a Cubicle for Spot
From another HN discussion a while back: "entry level", as in starting position at a company is not the same as "entry level" as in first job ever. Yes, the article mentions recent grads, but I bet most of those who end up hired already have industry experience (through internships or otherwise).
oniTony··on Flux: Better Lighting for Your Mac
Late night at the library a friend notices f.lux in action...

"why are your colours so messed up?"

"no, it's supposed to be this way at night. Check this out" disable f.lux; the bright flash starts burning our retinas

"woah"

oniTony··on I'll take "Sticking it to United" for $49
From the linked page:

> However, even though booking ploys might be a breach of contract and against airline rules, the illegality of such endeavours has been disputed by legal experts

"airline rules" and illegality are quite different.

oniTony··on A minimal business card
If the QR code simply links to a short URL, why not just print that URL in plaintext?

One of the problem with such a minimal designs is that "assuming you forgot the context of your meeting", the card itself provides no clues (and the "dynamic" info on the website might not match the context, if it really does change that often).

oniTony··on Youngest Y Combinator Founders Launch MinoMonsters, The Pokemon Of Social Games
So here's my bug report:

- Quest completion progress doesn't update until I manually click through into the details.

- A retreating pet is referred to as {{pet_name}} (problem in the template layer?)

- Using just about any special character when naming a pet <, &, \, ', (, will make the AJAX call fail and a pet will end up with untitled<hash> name instead

- A blank name will be accepted (I expected it to revert to the default name) and used as such.

-- "What would you like to call this monster?" alert box message is about as descriptive as "Would you like to perform this action?" (The offending part being just "this")

- If I'm allowed to try to use a capture card just once, this mechanic is not apparent. It just looks like the inventory disappears.

- switch pets screen appears to be cached on first view of the battle. Subsequent switches will not show damage to HP of any party members.

- sometimes the battle will just stop at "You have chosen to use Bash" message. Presumably the client has missed a response from the server and there is no retry logic?

- at some point it would start refreshing the page after every battle move is executed

- is successful escape (run away) supposed to be titled "you lost this battle"? (it also seems to have killed the in-play pet that escaped)

- after the battle, the pet graphics are always fixed, but the experience bars are sometimes re-ordered.

Some other observations:

- it's annoying to go to the dashboard after every single battle.

- the "weak bash" (0 energy move) is not available unless a pet has little energy (what if I want to just tap a wild pet , in a capture attempt?). At that point the UI is very un-intuitive, as regular bash becomes weak, and all the moves (including weak bash!) are greyed out.

- I wasn't able to figure out where pets beyond the 4th captured one are at. No apparent way to select or re-order the party.

-- as such the game quickly becomes nothing but a low-level grind, as first weak pets take up all the available slots and make it impossible to move further into the game.

- do I _have_ to explicitly click on "aquire[sic] reward" if it's only gold (presumably this is always wanted)

oniTony··on Is This The Girl That Hacked HBGary?
Sure it's plausible. The suggested _secure_ way of wiping a harddrive is to override it with random data (since a typical delete simply drops an entry from a table, making data retrieval trivial (in the current context)).

What I don't understand is that in a context of a court (and this group of competent professionals), password disclosure _should_ be considered self-incrimination (although there was at least one case in the UK where a judge came up with some loophole reasoning around that). Disclosure of multiple passwords ("we didn't like what we found, do you have any other passwords?") would certainly be obtained under great duress.

oniTony··on Is This The Girl That Hacked HBGary?
This is where TrueCrypt comes in. If you are being extorted to reveal a password, you supply one that loads a "clean" OS/filesystem.
oniTony··on Is This The Girl That Hacked HBGary?
I figure that such setups could employ a number of cron scripts to spread out actions and/or generate noise. E.g. every <random_range> minutes delete a random email out of a set of everything older than 24 hours. Adjust the constants to match the volume of information.
oniTony··on IE6IFY
It works even better after clicking the button a few times.
oniTony··on Skip Lists are Fascinating
An interesting supplemental reading is the "two bowling balls" interview puzzle -- http://20bits.com/articles/interview-questions-two-bowling-b...

It's essentially a 2 level skip list (but could be generalized where you get one extra level per bowling ball), and brings out some basic calculus to optimize lookup performance even further.

oniTony··on How Facebook is Killing Your Authenticity
so... time to start maintaining multiple facebook accounts?
oniTony··on How Facebook is Killing Your Authenticity
Sure, it's all gradients, but at 700 "friends" we are getting into an average of "half a day per friend-year" territory. Those don't sound as meaningful relationships to me.
oniTony··on [dead]
Hah. Last year I've significantly cut down the number of "friends" on facebook. 6 months later, one of them was the first to notice this missing connection. When asked why, the response was essentially "_because_ it took 6 months to notice" (on top of the original criteria for 12+ months of no communication via FB).

So in the alert message, can you include "... but it was N months since you've last talked, so whatever."?

oniTony··on Placeholder images from flickr tags
size/tag queries always return the same image. It might be useful to have size/tag/_offset_ type of a query, to diversify the placeholder images that appear on a page.
oniTony··on Ask HN: I'm an unemployed programmer in SF that will work for minimum wage
To be fair, $100k+ SDE positions and burger-flipping positions are in completely separate markets.

If you were working on a startup, then you were "self-employed", not "unemployed". Market yourself as such. And as others have already mentioned -- if you can't point at jobs held, then point at code/projects that you wrote. Some startups would rather look at your GitHub profile than a CV.

oniTony··on SEO is no longer a viable marketing strategy for startups
Perhaps a better conclusion would be that: startups should no longer consider SEO a viable __short-term__ marketing strategy.

Sure, the industry has spawned aggressive black-hat SEOs that make "profitable" keywords very competitive. But I feel that a startup that's carving out a niche that's not as cutthroat as "hotels", and more focused than content farms, can still make search engines a significant part of their traffic.

← PreviousPage 4 of 5Next →