HNHacker News
TopNewBestAskShowJobs

wmt

1,203 karma · joined September 20, 2012

submissionscomments
wmt··on Lenovo's SuperFish Removal Tool on GitHub
If you remove all the infection points of the malware, it's gone. Computers are not magic, and you rarely win by being superstitious with them. Most malware are as good as gone once they've been detected and removed by a decent antivirus.

I'm not saying this due to some marketing claims, but just by looking at the results from independent testing organisations like AV-Test (http://www.av-test.org/en/news/news-single-view/17-software-...) or av-comparatives (http://www.av-comparatives.org/removal-tests/).

wmt··on An Investor Wanted to Give Me $50,000. Here’s Why I Said No
Imagine yourself as an douchey groper - maybe you thought that the friendly pitcher was into you? You throw an offer and do a small grab imagining a solid yes followed by night of good sex. Instead, the lady immediately takes distance and then sends you a polite "thanks but we don't want your money for this politically correct reason."

You will not feel like a sexual tyrannosaurus, but realise you just got dumped. She was not into you, and walked away from your awkward sexual advances. She even ditched your money after jumping through hoops to pitch you into doing the offer you did. Of course she dumped you because you were you, not because they suddenly didn't want the money they wanted.

wmt··on An Investor Wanted to Give Me $50,000. Here’s Why I Said No
Please, read the article again, the author was the only one thinking about brushing it off while the cofounders were adamant that they should cut off the gropey investor.
wmt··on A Crypto Trick That Makes Software Harder to Reverse-Engineer
-"Should we ask from some known reverse engineer if this is true?"

-"Of course not, why would a DRM vendor lie about whether the DRM can be cracked of not?"

-"A good point!"

wmt··on Why we offer parental leave
It would be insane to demand the company to pay for the maternity or paternity leaves. That would be like charging money for elementary schools and forcing companies to also pay for thay! Small companies could collapse by just a few employees having kids at the same time.

If the government wishes for the people to have more children, the only reasonable payer for the costs is the same as with all goverment spending - the taxpayer. Handing out a proportion of your salary as the maternity or paternity benefit will also make the it more equal and not cripple the incomes of better paid people.

wmt··on What would Feynman do? (2011)
There was also that ridiculous one about "how do you put an elephant in a refrigerator"

Don't tell me someone has used that as an interview question? That's a silly kids joke, after which you'd laugh childishly. There even was a follow up question, if an elephant and a giraffe would race, who'd win to give the other guy a chance to redeem himself.

The joke works a lot better with languages without definite and indefinite versions of nouns, like Finnish, and you mess up the joke with english where using the definite preposition would ruin the joke, and the indefinite form is not honest.

wmt··on When the Boss Says, 'Don't Tell Your Coworkers How Much You Get Paid'
Do you mean tax reports, or just the taxable income? At least in Finland only your taxable incomes after deductions are public information, which a decent compromise between transparency and privacy.
wmt··on Command-line tools can be faster than your Hadoop cluster
> Side note: I'm torn between leaving this place where nobody seems to understand the point of anything remotely like engineering or keeping this job where I'm obviously being extremely useful to our customers.

You should always aim at working with people who are smarter or better than you. Unless they have stack ranking.

wmt··on BBC uses RIPA terrorism laws to catch TV licence fee dodgers in Northern Ireland
Strange it's news now, as BBC has been already pretty openly abusing the spirit of the RIPA legislation to hunt down petty fee dodgers. Here's a word from the BBC from 2012: http://www.bbc.co.uk/blogs/aboutthebbc/posts/how-does-the-bb...
wmt··on Breaking antivirus software
I can imagine AV engines having massive attack surfaces due to having to support a ton of exploitable file formats and decompression methods, and often supporting decade+ old detections. It still is a surprising that some vendors (I'm looking at you Bitdefender!) have obviously not even tried to fuzz their product. Koret's presentation is already a year old, so I hope vendors would've now gotten at least some of their shit together. I wouldn't bet too much money on it though, as it still has virtually no effect on how much the product will be sold. Take a guess many people will still give money to Bitdefender because they have had a really good review performances.

There's definitely a pattern that AV companies put their efforts in being able to say they're #1 in outside tests or in reviews. In ye olden times someone would just take multiple vendors, scan against 1000000 old viruses and rank them based on the detection %, and as the end result the "best" (and the most sold) products ended up being resource hogs. Later reviewers took notice and started also measuring file copying performance and detection capabilities against active malware, and in a year or two many vendors adapted and improved their performance and their efforts against malware that actually is being spread.

Hopefully reviewers will take notice and include some exploitability metrics in the future so that vendors need to focus on it or go out of business.

Funny thing is that despite Bitdefender having thousands of exploitable points in their product, at the moment your average user will still be less vulnerable against online criminals than most those who don't run anything.

wmt··on What Heroin Addiction Tells Us About Changing Bad Habits
I can't find the source right now, but what I've learned of heroin is that most people could actually safely try it out, and it would likely cause nothing but some mild discomfort.

The people who end up wanting to keep using heroin are typically those who don't have their life in order due to heavy stress, sadness or something similar. The thing that heroin does is that it makes even the shitty moments feel not-shitty, and doesn't really get you wasted like many other drugs.

I'm not surprised that soldiers in a war might seek comfort from heroine, but once they return to their normal lives they no longer need heroine to help make life feel okay again.

wmt··on What most young programmers need to learn
I wouldn't call the simpler implementation "commented out code", as it's doing what the best comments are doing, making complex code more readable.

Having random scribbles, alt solutions and other "shitty" comments while working on a problem is definitely not a sin if you clean them up before pushing them forward.

wmt··on Popular Myths about C++, Part 1
My biggest issue with most garbage collection implementations is the lack of RAII. While I love the ease of reading and writing Python or Lua, I'd love to be able to create a local object, like an open file or a database connection, and have it destructed immediately on return.
wmt··on Antivirus Companies Shouldn’t Have Hidden What They Knew About Regin
I'd rather get informed after getting owned than be unaware of an infection, at least you then know to bin your system and start fresh.

However, I'd also run EMET to make it a bit harder for an exploit getting past NoScript to operate correctly.

wmt··on Antivirus Companies Shouldn’t Have Hidden What They Knew About Regin
That is a good point, some companies had very different motivations for not discussing it, e.g. Ronald Prins from Fox IT had this to say to Mashable:

For Prins, the reason is completely different.

"We didn't want to interfere with NSA/GCHQ operations," he told Mashable, explaining that everyone seemed to be waiting for someone else to disclose details of Regin first, not wanting to impede legitimate operations related to "global security."

http://mashable.com/2014/11/25/regin-spy-malware-nsa-gchq/

wmt··on Antivirus Companies Shouldn’t Have Hidden What They Knew About Regin
Unfortunately Schneier first guesses that in reality nobody came out because they didn't have the full picture, instead of the reasons the companies actually gave, and then he goes on about how the reason he is guessing to be the real reason is not a good reason.
wmt··on Antivirus Companies Shouldn’t Have Hidden What They Knew About Regin
It's easy to say it should be publicised, but I'm not sure how someone can do that if the infected organisation specifically asks the antivirus company not to publicly discuss the malware, like what appears to have been the case with F-Secure. (https://mobile.twitter.com/mikko/status/536959936476221440)

Sure, they could just go ahead and disclose it against the customers express wishes, but how many would hire their services in the future if there's no expectation of customer confidentiality?

Edit: There likely is an NDA in place even before externals are allowed in, so breaching it might invite some additional problems than just image issues.

wmt··on The Case for Slow Programming
That's actually the problem! Many current engineering disciples were before handled by craftsmen until scientific principles were applied to it, making it engineering.

There have been very few scientific studies about the basics of building software, like how much unit tests really affects the bug density, and those few studies go often unnoticed when teaching future software engineers.

It would require a major effort to first study the existing emergent software craftsmanship practices to find common patterns and to scientifically evaluate their effectiveness, and the results would have to be taught in the hypothetical future curriculum where future software engineers would be made. Then we might have software engineering instead of just software craftsmanship.

It's almost a bit amazing that software "engineers" who can be very obsessive about getting the data or A/B-testing will craft software based on methods they have no data about.

wmt··on The resource leak bug of our civilization
Buggy civilization? I don't think so, the improvement through evolution favors those who aim to grow exponentially. The alternative, micromanaging extremely complex systems, will unfortunately fail.

Trying to force the global economic system into a software analogy just feels silly and wrong.

wmt··on A New Software Engineering
Automated tests are the closest thing to actual engineering in software. While communication methods like agile methods are important, to me they still are outside the scope of actually engineering software. I've found that one of most significant factors of the software quality I've produced is the test coverage of the code, and not just lines of code but the different branches of a function, which honestly feels quite impossible especially if you have exceptions or threads involved.

Some celebrate TDD, but to me it just has appears to help people not dropping out the tests.

Automatic static analysis with compiler warnings or pure static analyzers is a really good and quick solution for it, but what I'm really hoping is a fully automated dynamic analysis solution. What's really exciting is that there already are some dabbles with that approach, like the american fuzzy lop (http://lcamtuf.coredump.cx/afl/) which actively tries to find new branches from the application being tested.

wmt··on Why he vertically aligns his code (And why you shouldn't)
Next up, a blog post which shows even more readable using whitespace and syntax highlighting!
wmt··on Why the West should be worried about Chinese Eugenics (2013)
Indeed it is. http://en.wikipedia.org/wiki/Geoffrey_Miller_%28psychologist...
wmt··on Why the West should be worried about Chinese Eugenics (2013)
Your masterful logician skills appear to have failed to notice that the author being wrong and being racist were unrelated. One can be racist and right, or non-racist and wrong, but in this case the author is wrong about where China is coming from and going to, and then later also keeps flashing his racist colors.

Not all observations are extrapolations from a single observation.

wmt··on Why the West should be worried about Chinese Eugenics (2013)
2. The author writes a silly racist article celebrating eugenics and racial purity
wmt··on C Pointers Explained, Really (2012)
I'm not sure why pointers have such bad rep, they're a pretty simple concept of storing and using memory addresses.

References in dynamically typed languages however often make me nervous, as I'm never entirely sure when different types in different languages get copied or not. If I the function argument p gets modified here, did the original variable in the caller get modified? Do I have to write an elobarate check for its mutability?

wmt··on Z Launcher
Microsoft did not buy Nokia, just its mobile division, and the exclusive right to use the Nokia brand to sell mobile phones for some time. This is the actual Nokia corporation licensing its brand for a Foxconn tablet.
wmt··on China Just Blocked Thousands of Websites
Foreign students from China know they'll have a very good chance at becoming one the oligarchs ruling the country, and as such likely think any tool as keeping the people subservient is a good thing.

I find it unlikely that Chinese rulers would want to send abroad anyone but its loyal opposers of democracy.

wmt··on China Just Blocked Thousands of Websites
I don't think anyone is desperate enough to rely on VPN to access the websites of technology giants already blocked or soon to be blocked by China, as greatfire.org is also mirrored Akamai and CloudFlare. What will more likely happen is that those large technology companies will just realize not to invest too much money into countries hostile towards them, like China.
wmt··on China Just Blocked Thousands of Websites
China is trying to make every CDN blocked, not Greatfire.org. Stop blaming the victims.
wmt··on Making Ruby Faster
Come, that's just plain wrong to say that the code quality cannot be questioned because it's an optimization and because it's made by "smart people" and it "makes sense to them". No code is sacred.

It's perfectly valid to question using a macro to rename a function instead of just renaming calls, especially if the renamed function is only called twice. It also would've been more pragmatic to mention in the code that rb_obj_equal is being used due to an optimization in opt_eq_func, as it's not obvious.

There might be reasons for using a macro in this case, like wanting to underline the fact that symbols are being compared, but I strongly suspect the author was just focused on changing the implementation of sym_equal to be better, and didn't think of the option of throwing it away.

← PreviousPage 4 of 8Next →