HNHacker News
TopNewBestAskShowJobs

techjuice

344 karma · joined January 13, 2014

submissionscomments
techjuice··on Ask HN: Why is Python so popular for ML/DS?
Java, R, Python, C and C++ are massive in machine learning and Data Science. The reason Python is at the top is because it has the largest set of machine learning and data analysis tools, tutorials, easy setup and easiest use-ability and extremely minimal to no boiler plate needed to get results.
techjuice··on Ballistic Missile Alert System Redesigned
Good points and prototype design. Things of such importance should be designed to help remove as much human error as possible.

For example, the big red button in modern data centers, they are purposely behind a somewhat weighted glass or plastic casing with clear instructions on it's purpose that has to be manually opened and lifted in order to be pushed. It is a button that cannot be accidentally pushed, unless there is no casing which would be a major design, engineering, management and implementation flaw just waiting to accidentally be pushed.

There should be extremely high standards of ease of use and good UX/UI any emergency system, it should remove the capability of accidentally being engaged in a live environment that goes out to the public. If that system is engaged then there should be no doubt it is a true emergency and the individual or individuals operating the system engaged it on purpose.

For testing, there should be a clear and informational way to know the system is in testing mode versus production mode. Many experienced engineers have seen what happens when test and production are not separated properly (junior engineer wipes out or causes a disruption in production by properly following a documented process that should have been updated to insure that production, test, staging and dev cannot talk/hurt each other).

It is good that this large issue is being addressed, and I hope the entire government takes steps to improve interface design to the emergency systems as when they are needed it should be extremely simple for the operator to insure they are not making any mistakes and should be very difficult for an accident to occur.

techjuice··on Ask HN: Why CPU manufacturers did not foresee Meltdown?
Main reason is cost to secure vs profits to be made. We technically could have more secure chips, but that would delay the regular release cycle of processors that businesses, investors and consumers have come accustomed too.

Now if things were secure by default with no option to disable it we would be in a much better place right now security wise (not sure about how easy the use-ability would be though at first) as engineers would have to adapt to programming more securely on the hardware and software level. Though I did find it strange that when you read the Intel documentation everything is not accurate and there is a large amount of illegal opcode [0].

There is a chance that these vulnerabilities were reported internally and externally, never made it past a manager or never reported to the vendor, seen as not exploitable or theoretical by management or higher level engineer until someone else found it and figured out how to exploit it with time.

This is the same case with encryption algorithms that have been implemented on chip, in theory they are hard to brute force, but with time normally a method is created that can reduce this time by using artifacts found in the algorithm or certain symptoms that occur during the process of attempted encryption/decryption that could be a game changer that was not thought of or documented.

[0] https://github.com/xoreaxeaxeax/sandsifter

techjuice··on Ask HN: I made a ridiculous amount of money and feel “depressed”
First, congratulations on gaining so much wealth at such a young age. I would recommend looking into turning that into a million or more before you hit 30 to insure your future is good to go (retirement age, when you cannot or just do not want to work anymore).

In terms of keeping active, I would recommend moving closer to a major metro area, this could be on the outside of the beltway so you possibly drive or take a ride in to reduce your rent/mortgage. Remember, it is hard to keep the mind busy when you live in a place with little to no activity.

Have you tried spending time working on your other hobbies, looking into things you would like get involved in (learning the ins and outs of cars, setting up a home datacenter, getting more in-depth knowledge about your favorite music genres, designing your own clothes, car mods etc.). If you do not want to move have you looked into ways to enhance your local community to bring some life into it, create jobs, get to know the locals better, conduct local hackathons, and start small conferences to get others interested into what you do, etc.?

techjuice··on Ask HN: Trump Tax Plan Effect on Sole Proprietors / 1099
Best to ask a CPA as there could be other instances that affect what you will need to do on your 2018 tax returns (e.g. you take a salary or not from the business and other things that may occur (you end up going over $157,000/year or you are married)).
techjuice··on Tech company contract – disclosing creations after leaving the company?
Be smart and talk to a lawyer before signing, they may be able to have your contract renegotiated in more favorable terms. When I leave a company it is no longer their business what I create once the official last day of employment has ended. If you start your own company you would possibly end up giving away your own proprietary company information or for if you work for someone else you may not be allowed to disclose what you create publicly and signing those terms could conflict with the terms you agree to with another employer.
techjuice··on Ask HN: How long did it took you to master programming?
It will take years to master C and Assembly. This time also increases especially for Assembly when you start learning new architectures (e.g. MIPS, PowerPC, SPARC, ARM, etc.). The best way to speed up the learning process is to use an applied approach (e.g. game development, systems programming, network programming, microcontroller programming, etc.).

I would recommend getting into building things that have already been built before (bootloaders, ISO creator's, GUI frameworks, bandwidth monitors, firewall, kernel modules, etc.) so you have some real world projects under your belt. As by widening what you work on outside of just textbooks makes you a better engineer and normally only learned through personal projects or working for an employer.

techjuice··on Ask HN: What to do if you hate working for someone else and arent an entrepreneur?
If you are not the type of person to run your own business then you would need to get a job working for someone else. Now it seems the issue is not you really working for someone else, but not properly being compensated for performance.

Now, the good thing is until you have enough time, money and feel comfortable taking the plunge into being your own boss you can work on gaining the skills by working for someone else. If you are working at a company that does not conduct additional compensation based on performance leave the company for one that does. You owe nothing to a company that is not properly compensating you for the value you provide, especially as your time increases there and you are a top performer.

There are companies out there or should I say sections within companies (even the big ones) that will normally do the following: Annual raise based on performance, annual bonus based on performance, spot bonuses, quarterly bonuses and increasing your base salary to keep competitive with the market (i.e. if your showing mass improvement beyond what you were originally hired for or your actions keep improving your coworkers productivity you could see your base salary increased by 10 to 20 percent or more to better place your skills and talents within the company and insure you are being properly compensated).

A company that cares about attracting top talent, growing and retaining top talent will properly compensate you to where you could technically become rich within (within reason of their income and the value you bring to the table) a few years of working there. As the good companies see that the value you bring to the company increases their bottom line and will make sure to keep your pockets filled with cash so you do not have to worry about it and can spend time doing what you do and have fun doing it.

I would recommend you do some searching for areas near you and compare your skills, talents and abilities to what the average household incomes are near your next possible employer - https://www.incomebyzipcode.com/

Insure that what you ask for in salary is a minimum of what the average household income is for the zip code of your employer. Also ask about compensation based on performance and how any bonuses, raises or salary adjustments are calculated. If the potential employer looks at you funny and doesn't know what your talking about move on to the next potential employer until you find one that does not just pay a base salary and does raises but also pays bonuses based on performance.

techjuice··on Ask HN: If Quantum Computers Destroy Keypair Encryption, What Are Alternatives?
More scientific research on the power of quantum computing against modern day encryption would need to be done. There are still only a small amount of companies with quantum computers, the bulk being defense contractors, top governments (U.S.A., China, Russia, Japan, Germany, India, Iran and Israel) and a few private sector focused companies (Google, Microsoft, IBM, etc.) and top research universities that are capable of doing the research. If there is a flaw found in the mathematics used for the current standard encryption algorithms, new algorithms would be created to take their place. As rolling your own crypto has always been bad practice if you did not have the proper mathematics background and work experience as a full-time cryptographer.

It may require new hardware or enhancements to hardware to accommodate the changes (e.g. AES instruction sets added to the x86, ARM, SPARC, MIPS, etc. processors) to help speed up the processing of encryption and decryption requests. When that time comes there will be a quick rush from vendors to patch and or upgrade systems when possible.

techjuice··on Ask HN: Considering State Vocational Program for Network Administration
The best experience for network administration is hands on experience. If this program has old and modern equipment from old school copper hardware to modern fiber ranging from routers, switches, firewalls, and working server equipment take it. As hands on experience trumps everything, especially if you are an ambitious driven individual in an interview. One of the great benefits about the network engineering field is the better you get the more you will be compensated for your skills, talents and abilities, especially the closer you are to a metro area.

Though, I would also recommend at least reading and watching through the certification material for CCNA, CCNP and CCIE Routing & Switching, Security, Collaboration and Datacenter when you have a chance from something like Safaribooksonline or Udemy. The amount of knowledge you learn just by reading through the certification material and applying it is breathtaking.

To enhance your experience, I also recommend picking up a CCNA/CCNP lab kit off of Amazon so you have something cheap at home to put your hands on. If you do not have the money or do not want to have equipment in house there are online lab options that use real equipment that you can remote into from home. Though with that option you will not get the good hands on experience learning about all the different cable types, how to configure them properly on the routers, and switches and go through the good old troubleshooting process when cables do not work as expected that you will run into on a real network engineering job.

All of the best network engineers I have met have their own network lab setup at home or were lucky and had a test network setup at work to prototype and test things before implementing them in their staging and production environments at work.

Once you have a good grasp of physical networking and the configuration of network hardware you can really start to take advantage of software defined networking to automate all types of network designs and security requirements. This will give you a major advantage over other candidates if the program has varying types of equipment to learn on.

techjuice··on Call of Duty WW2 has made a significant step forward in face rendering
This was something the hit the computer industry hard back in 2007 when Crysis was released for the PC. I can only imagine what the will be available in 2020, seeing as most of the scenes in major action films are 100% computer generated.

With the work being conducted to increase the capability of graphics rendering while reducing power consumption, heat production and overall size VR, AR, and MR applications will probably be very hard to tell the difference between what is real and virtual.

techjuice··on Ask HN: Anyone else get dizzy when scrolling?
I am not a doctor, but if I saw you starting to get dizzy and you were sitting next to me at work or in a coffee shop I would be very concerned for you and ask if you need medical assistance. I would recommend talking to your doctor about that, it is not normal to get dizzy when scrolling. There could be an underlying problem that you have not had diagnosed yet, but it is best for the doctor to test you out.
techjuice··on Ask HN: Do you use dedicated GitHub/NPM/etc. accounts for work?
Since anything created for work belongs to work in most cases unless waived in your employment agreement. It is always best practice to keep work and personal accounts separate, even when you are the owner of the company for liability reasons.
techjuice··on Ask HN: How to learn from code reviews?
As a junior engineer with only 4 years of experience it is best to take all feedback good and bad to analyze what you may or may not be doing that is not receiving approval acceptable to make it in the production build.

Are you following code style guidelines, is your code secure, is your code fast, are you make large code pushes that takes too long to review and test, are you submitting tests when required, are you updating your documentation, did you follow spec, does your code solve a problem related to a feature, bug request, etc.? If you are then there could be other things that might be outside of what you are doing that are not being properly communicated to you at all.

Have you talked to the team lead about the issues in your code to work towards improving the code you commit? Though it would be very beneficial to have the capability to submit your code to a dev CI/CD system that tells you what is wrong with your code automatically before you submit it for production review.

Though ultimately if you are not receiving feedback on how to improve the code your committing you should bring it up with management as it is the senior and above job to help guide and mentor junior developer's or new team members with any issues in their code. If this is not being done then it could be a leadership, managerial or cultural problem that needs to be resolved early on.

If you are still getting large rejections could you give us a few anonymized samples of some of the rejection notes on your commits?

techjuice··on Ask HN: My house might burn down in the next 24 hours. Suggestions?
Gather all of your legal documents (deed to house, loan paperwork, birth certificates, pictures, social security cards, insurance docs, car titles, and any other documents and valuables), blankets, computers, 5 to 7 days worth of clothes, some food, water, drinks, snacks and other digital devices. Insure they are all secured in the vehicle you are going to use to vacate the area.

Also insure you have video and pictures of the now to include the inside and outside of your home, vehicles and land along with what the neighbors homes looked before you vacate the area.

Once you are sure you have everything, fill up on gas if possible and vacate the area and check the safety status of the area many miles away from the fire. To be safe go to a different county or city far away from the flames.

techjuice··on Ask HN: What is the typical time your contracting invoices are paid?
In my contracts I normally require half up front before works starts and payment within 2 business days after work completion. If it is a long range project (two or more weeks) I require ACH direct deposits every Friday morning before 7AM. When doing this clients will normally insure they have the payment scheduled to be paid on time automatically.

If the client is late paying they are charged 10% or more interest depending on the value that is charged on a monthly basis. If they are not paid up in full within 60 days I take out a Judgement Lien on their personal and business properties to recuperate any losses I may have had to incur due to the none payment.

techjuice··on Ask HN: Is anyone in the business of selling docker containers?
Many of the enterprise offerings are for subscriptions

https://store.docker.com/editions/enterprise/docker-ee-serve...

https://store.docker.com/editions/enterprise/docker-ee-serve...

https://store.docker.com/images/esystemstech

https://store.docker.com/images/gitlab-enterprise-edition

Some appear to be free/trial edition/subscription based, etc.. There are a couple that allow the end user to setup a subscription after trying out the free version of the software (trial edition) or a limited version of the software that allows end users to upgrade.

techjuice··on Ask HN: Employer can't send me salary from US
It may be illegal for the employer to send any money to you if you live in a sanctioned country. It may have also been illegal for them to allow you to do any paid work for them. You should talk with an attorney in your country for further guidance on what can legally be done, unfortunately they may not be able to pay you until sanctions have been lifted.

They would have to check with their lawyers to see what they can legally do, if they disregard sanctions they can be imprisoned, fined and have their business immediately dissolved by the U.S. Government.

techjuice··on Ask HN: Do I keep bootstrapped cash in personal or business account (pre-rev)
If you are running an incorporated business you as an owner would take any investment money you want to put into the company in the Business Owner Contributions (equity investment account)/Business Checking account.

You can easily do this by writing a personal check to your company and writing Owner Contribution by Your Title, First name Middle Initial Last Name on the For line.

Just remember you need to accurately record your personal investments into your business for accounting purposes. Easiest way is writing checks, which the bank will record the front and back of when you deposit them. If there is an emergency and you need to get money to the account faster a transfer would be ok too as long as it is properly recorded in your business accounting ledger.

If your an LLC or S-Corp it may work fine since the taxes would fall through to you. If you are a C-Corp you would want to insure these are kept separate as a C-Corp pays their own taxes which would be separate from your personal income taxes.

To make sure though I would recommend you and the other owners visit a business accountant (hire one that is good and keep them on retainer or have someone that manages your books) so they can give you a better run down and the legal requirements you have to follow and account for.

techjuice··on Ask HN: How have you reduced the pain of moving code between systems?
Configuration management systems, continuous deployment and orchestration. I have things setup so everything on the server(s) is managed through configuration management. I would recommend having the following environments setup and managed through configuration management (development, testing, staging, production), no need to do manual code pushed and configurations anymore. In staging this is normally where you would have a final review if the amount of code being pushed out is high or it is a new high profile feature that you may want to manually check out before it gets pushed out if you did not want the process to be 100% automated.

I run my code through a continuous deployment system that pushes code that I believe is ready to a testing server where my tests are run. If that goes well, then the code is pushed to a staging server where a similar or duplicate setup of production is orchestrated for each build. Once things look good and pass all the functional, behavioral and other custom automated testing and benchmarking it is automatically pushed out to production. Then production tests are run that are non damaging and check to insure that the new changes are actually implemented, if there are any issues the push can be automatically rolled back along with a report issued on the why it was rolled back along with a listing of any performance or unforeseen security issues that may have occurred.

I will at times have two staging environments if it is a website ( one that uses internal content links and proxies if behind a CDN/proxy service and one that goes through a staging proxy/CDN so I can test for any changes between two. For anything else I like to have an internal and staging setup to insure the probability of a hardware/middleware component causing an issue is decreased.

These multiple environments are little to no issue because they are all automatically setup either from scratch or a pre-built configuration managed image to speed up the orchestration time.

techjuice··on Ask HN: How best to disclose paywall loophole?
0. Insure you have documented the steps/workflow to find the vulnerability and how it was exploited so tasked with fixing it can reproduce your results. This should be very detailed with pictures, tools used and results/expected results. If you can automate this then it is even better.

1. Check if the site has a bug bounty program, as results submitted there normally go directly to the security team or someone that can get the issue resolved.

2. If you are not able to find a bug bounty program, I would recommend contacting the site support or using the contact form on the site.

3. If that is unsuccessful, email/call the contact information on the website's WHOIS query page (whois domain.tld in terminal)

4. If that fails use twitter to send a DM to the sites social media contact.

5. If that fails make a public post to the twitter contact (e.g. @newcontact "Hi there, I found a pretty serious problem with your site contact me ASAP."

techjuice··on Ask HN: Best Resources to Learn to Manage Linux Boxes via SSH
If you want to become a professional and not just a dabbler I would recommend reading some of the following books I have in my bookshelf:

[0] RHCSA & RHCE Training and Exam Preparation Guide by Asghar Ghori. This book will help insure you know your stuff as your system engineer/administrator wise.

[1] A Practical Guide to Linux Commands, Editor and Shell Programming Third Edition. This book will cover the majority of what you would need and want to know when connecting to a remote linux system over ssh.

If you want to get under the hood and become an expert, the following books should help get you started:

[2] Advanced Programming in the UNIX Environment

[3] The Linux Programming Interface: A Linux and UNIX System Programming Handbook

[4] Linux Kernel Development 3rd Edition

To get a nice general overview and get up and going quickly:

[5] How Linux works: What every superuser should know

[6] The Linux Command Line

[7] Python Crash Course

[8] Automate the boring stuff with Python. This is a great book to help you think about how to automate most of the repetitive things you will end up doing on a regular basis.

[0] https://www.amazon.com/RHCSA-RHCE-Red-Enterprise-Linux/dp/14...

[1] https://www.amazon.com/Practical-Guide-Commands-Editors-Prog...

[2] https://www.amazon.com/Advanced-Programming-UNIX-Environment...

[3] https://www.amazon.com/Linux-Programming-Interface-System-Ha...

[4] https://www.amazon.com/Linux-Kernel-Development-Robert-Love/...

[5] https://www.amazon.com/How-Linux-Works-Superuser-Should/dp/1...

[6] https://www.amazon.com/Linux-Command-Line-Complete-Introduct...

[7] https://www.amazon.com/Python-Crash-Course-Hands-Project-Bas...

[8] https://www.amazon.com/Automate-Boring-Stuff-Python-Programm...

techjuice··on Ask HN: Resources for learning to write compilers?
It is very light, but does have some nice bits on the pros and cons of certain compiler optimizations, memory handling, etc.
techjuice··on Ask HN: Resources for learning to write compilers?
The following that I have on my bookshelf have helped:

Compilers Second Edition [0]

Engineering a Compiler, Second Edition [1]

Computer Systems: A Programmer's Perspective (3rd Edition) [2]

[0]https://www.amazon.com/Compilers-Principles-Techniques-Alfre... [1]https://www.amazon.com/Engineering-Compiler-Second-Keith-Coo... [2]https://www.amazon.com/Computer-Systems-Programmers-Perspect...

techjuice··on Ask HN: Ways to deal with ADHD?
The best thing to do is for ADHD is to see a medical professional. I have meet so many people that self diagnosed their issues and were wrong on the treatment plan 100% of the time as none of them were medical professionals. By not doing so you are unfortunately just wasting time and money as the problem gets worse over time.

Most of the time they needed to take medication for awhile to help rebalance their brain because something was off balance. Over time things rebalance and they no longer needed to take as much medication or no longer need to take any medication because things rebalanced.

The bulk of answers people find online are temporary placebos that never actually helped to permanently solve or reduce the problem because what they were taking or doing were not carefully planned by a medical professional. So my recommendation is to go see the Doc, they will either work with you to do a non medical treatment plan and/or you may need to take medication to resolve the issue. Just note that since it is a mental disorder the only way to resolve it is by using professional medical help by a therapist, physiatrist and or a physician. Do not feel bad seeing a doctor, it is better to seek professional help to try and resolve the problem.

techjuice··on [dead]
Hacker's may have the temptation to blackmail you, a private investigator would keep things confidential and legal so you would have nothing to worry about when they are done with their investigation. So if you are wrong you are out the cost of the private investigator to do their investigation and that is it.

If a private investigator does find something then you have all legal documents to use, with a hacker you would have nothing that you could legally use if you chose to get a divorce because you obtained evidence illegally. Then your husband would have a legal standing to divorce you and get the bulk of what ever you two had together after getting married. Which would grant him with the ability to sue you afterwords in criminal and civil court using the evidence you obtained illegally against you.

It is a loose loose situation for you if you obtain what you want to know illegally. You can only find out what you are wanting to know illegally by getting a private investigator to legally obtain what you asking for. When they are done they will normally present you with their findings with high quality images, videos and other documents that you can have when the investigation is done to do with as you want.

In short, a hacker is illegal to use and a private investigator is the route you should take to keep things private so no one knows what is going on but you and the private investigator.

techjuice··on [dead]
What your asking for is illegal, you should go the legal route instead and hire a private investigator which are legally required to do ethical investigations and are required to be licensed if required by the state you are in. With a private investigator they can get photographic/video proof that can be used in divorce/criminal court. They have been trained on what can be done legally.

If you and your husband are on the bill for the phone company you can request a record of all SMS messages and calls from them. If you want to search his phone legally you would need a warrant. As if you do something illegal you might end up on the loosing end if you go to divorce court.

techjuice··on Partial Google Services Outage?
It looks like they have updated the status page and posted information on the issue: https://status.cloud.google.com/incident/storage/17002 https://status.cloud.google.com/
techjuice··on Partial Google Services Outage?
Google status pages can be found at the following URLs: https://www.google.com/appsstatus#hl=en&v=status https://status.cloud.google.com/

Also note that this could be an issue outside of Google's control(network provider in between them) if you do not see any changes in the status page 30 to 60 minutes from now. I did check their social media outlets but do not see anything on any services being down. If they are any issues being worked on, there should be more news about it shortly.

techjuice··on How much do hackers at the CIA/NSA/FBI make?
Hopefully the following helps, it is from research I have done comparing the public sector to the private sector pay and compensation over time, specifically comparing intelligence community pay to regular government agency pay and compensation for the independent agencies (FCC, SEC, CIA, CFTC, FTC, GSA, USPS, SSA, etc.) - https://en.wikipedia.org/wiki/Independent_agencies_of_the_Un...

If they are government employees they are normally paid on the regular government GS Pay scale (title 5) - https://www.opm.gov/policy-data-oversight/pay-leave/salaries... so the really good ones get paid up to $161,900 if they can make it past the GS-14 pay grade.

Though, that is considered generally OK pay for a regular government job that is not extremely high stress, quick turn around and high demand. Though to the private sector's top hackers as many far exceed this as a senior cyber security engineer or CISOs making up to $380,000/year + stock options + other perks. In those cases the government also has Title 10 which limits pay to under the president's salary (section 102 of title 3) $400,000 - https://www.law.cornell.edu/uscode/text/3/102. This allows the federal government secretaries or heads of agency to be able to pay individuals of extraordinary talent and ability the same rate as they may pay a physician or other medical professional if that individuals salary requirements fall outside of the regular GS pay scale and they really want that person on board and want to pay them a competitive salary.

There is also the Senior Executive Service and other equivalents for the many agencies that puts the individual into a senior level(SL), scientific or professional (ST) positions. These positions may come with cash rewards up to $25,000 with approval from OPM/White House, eligibility to be nominated for the Presidential Rank Awards (Distinguished Rank (35% of annual basic pay) or Meritorious rank (20% of annual basic pay) - https://www.opm.gov/policy-data-oversight/senior-executive-s....

Though these positions for hackers would normally be reserved for those with at least 10 to 20+ years in the game with extreme in depth knowledge of the multiple operating systems, hardware and software, SCADA, Satellite, and other embedded/private/public/military communications systems out there. This normally means they are not just specialized in a few things, but have deep knowledge of many systems through practical experience working with them hands on over the years and hacking them to pieces during security audits, product evaluations, quality assurance, security validation and testing through reverse engineering to insure the products do what they say they do, etc.

There are also some agencies that use a pay band system 1 to 5, etc. and normally cap out at around $157,000/year then bump up to around $120,000 to $167,000 for their senior level positions and $120,000 to around $180,000 for their senior executive service compensation.

So in general the best of the best in terms of government employees could be paid up to $400,000/year under title 10 which is more of a government contractor type position that has to be renewed regularly, highly unlikely unless those in top positions see someone they want working for them and really want them badly to work on the inside of government. Normally the title 10 pay is around $160,000-$300,000, so in general the bulk of hackers would fall under the GS pay scale ranging from GS-9 to GS-14 Step 6. Anything higher would have to be negotiated and justified during the hiring process or worked into a promotion for those already working for the government.

← PreviousPage 4 of 9Next →