HNHacker News
TopNewBestAskShowJobs

yashafromrussia

78 karma · joined April 7, 2015

submissionscomments
yashafromrussia··on Shai-Hulud compromised a dev machine and raided GitHub org access: a post-mortem
I'm wondering why storing creds in env variables as plain text is acceptable - e.g. they better be dynamically fetched from a secret manager with 2FA in the way
yashafromrussia··on Preliminary Post Incident Review
Well I'm glad they at least released a public postmortem on the incident. To be honest, I feel naive saying this, but having worked at a bunch of startups my whole life, I expected companies like CrowdStrike to do better than not testing it on their own machines before deploying an update without the ability to roll it back.
yashafromrussia··on Show HN: Logdy.dev – web based log viewer UI for local development environments
Something like this has been on my wishlist for a while now. I'll take it for a spin, thank you!
yashafromrussia··on ReasonML – React as first intended
Exactly my thought. It seems to me that it's just internal component state.. not application state
yashafromrussia··on ReasonML – React as first intended
Someone who knows React can easily be using ReasonML. So to me, the question is, why not? You can get most of the features of ReasonML with 3rd party libs - TypeScript for type safety, Redux for state management, and Immutable. However, when I look at the build time comparison, I doubt you'd get something as fast with JavaScript, at least not today.
yashafromrussia··on Show HN: A Node.js open source library to send transactional notifications
ahh this looks awesome! will try it out. I love the fact that you can use any queue with this <3
yashafromrussia··on PayPal 2FA Bypass
What kind of API design is this? Post data should be sent within the request's body over HTTPS. Not as a url query.
yashafromrussia··on Heavy SSD Writes from Firefox
Sounds sweet, ill try it out. How is it comparing to ack (ack-grep)?
yashafromrussia··on We’ve Just Encrypted All of WIRED.com
What are the challenges of migrating to https only protocol? I have done it before, not on wired.com scale though. We use AWS and it's not that difficult to start supporting https and have all http requests redirected to https. Can someone explain why it took them a year to do this?
yashafromrussia··on Show HN: Min – web browser with better search and built-in ad blocking
I really like the direction this browser is going in. I noticed I cannot go back/next using a mouse or keyboard (though i can imagine one would be able to swipe to do that).
yashafromrussia··on A story about &lt;input&gt;
This makes me want to dive in deeper
yashafromrussia··on Netflix Data Reveals When TV Shows Hook Viewers
Pretty good list of tv shows to watch :P definitely watching the shows that you get hooked onto from the 2nd episode