HNHacker News
TopNewBestAskShowJobs

zalebz

167 karma · joined July 10, 2013

submissionscomments
zalebz··on Ask HN: What is one book you would recommend everyone to read?
It's been a couple of decades since I read Siddhartha and I am very curious how my take on the book will be different from my younger self.
zalebz··on FOSDEM 2022 is going on now
Since I had to look it up: Free Open Source Developers’ European Meeting (FOSDEM)
zalebz··on Bitwarden: Free, open-source password manager
I wouldn't say it was extremely simple but I managed to move our company from LastPass to Bitwarden a few months ago. There is definitely an export & import process available. I did have to do some minor CSV cleanup on what LP generated though. Additionally, I purged and repeated the import process a few times once I familiarized myself with how "Collections" and company-wide sharing works in BW. But in the end it was certainly worth it despite the effort.
zalebz··on Shenanigans on Microsoft Feedback Hub
Fortunately, there is a registry setting to fix this nonsense.

Unfortunately, I'm a side-taskbar user and there is no equivalent registry fix. I had to pay for a 3rd party tool.

zalebz··on Companies that had successful pivots
There is a great podcast called Land of the Giants and they have a "season" about Netflix (as well as Amazon, Google, Apple); based on the information I learned there I would certainly say it was a risky pivot.
zalebz··on Ask HN: What you up to? (Who doesn't want to be hired?)
As a primarily backend C# guy myself, I'm curious if you considered Blazor? I find it intriguing and if I had the motivation for a personal/side project I'd likely do an initial proof of concept with it.
zalebz··on What do people want in a co-founder?
A few initial thoughts jump out at me:

someone I respect in a domain of life I respect (could be music/athletics/relationships/humor/whatever but ultimately it is a reason I enjoy them as a person and in times of adversity can't dismiss them as a disposable generic employee)

moreover, the above attribute also often demonstrates a healthy life balance outside of work, and this will help prevent workaholic burnout which is a very real pitfall ina startup

someone that has motivation/ambition in a domain(s) that I do not (maybe I can do a particular skill and even at a competent level, but I'd rather have a partner that enjoys it and reads up about it in their spare time even if they aren't as "good" at that skill as I am right now)

someone that has been challenged in life in some fashion. again the domain isn't as important as the experience of facing pressure/adversity and finding that extra gear within oneself to emerge. and furthermore then wanting to start the next challenge despite having already gone through the wringer. in my experience there are people who thrive under pressure and those that tend to hide/crumble when challenged. you obviously want the former and some that has been tested.

there are plenty of other attributes that are covered by great replies that I won't repeat. I felt these seemed a bit distinct (at least when I posted) and worth mentioning

zalebz··on O&O ShutUp10++ – Free anti-spy tool for Windows 10, 11
agreed. I've been using this and similar tools for several years and the cognitive load for every single setting is infuriating. especially given the very obvious underlying reason everyone is launching this tool.
zalebz··on Coinbase Breach Notification
I just recently found out about a great cybersecurity podcast called Darknet Diaries (and having been binging it ever since). Episode 9 covers Mt Gox and it goes into detail of timeline of the developers and the numerous breaches. Highly recommended.

All that is to say that Coinbase and Mt Gox were operating in completely different leagues of sophistication.

zalebz··on A single laser fired through a keyhole can expose everything inside a room
"Your scientists were so preoccupied with whether or not they could, they didn’t stop to think if they should."
zalebz··on Show HN: Side project passed $2.5k/mo revenue after 2 years (Phoenix and Vue)
I would also appreciate any advice you could provide to find such a person.
zalebz··on Running my own DoH relay and getting Pi-hole protection away from home
I believe the comment was highlighting the advantage of a router vs a local DNS service rather than asserting the openwrt implementation has features beyond vs the pihole implementation.

The advantage is the router itself is literally routing all the traffic and thus even hostile clients (e.g. smart tv) that ignore the (dhcp provided) pihole DNS still have to pass their traffic through the router and thus it always has an opportunity to take action on the packets.

As was mentioned in a sibling comment, even with just a pihole and a non-openwrt router you can still configure your network to force all DNS traffic through the pihole but it is more config and more error prone vs the single openwrt router network.

zalebz··on Logging into Gmail on Chrome links my Google Account to the browser
I'm a containers early adopter and have 38 containers (just counted them) that are highly configured. There are many extensions that not only honor containers but allow for detailed customization.

That said, even just the "built-in" Multi-Account Containers will allow you to pin a domain to a particular container - i.e. amazon.com will always open in a Shopping container, wellsfargo.com always in Banking, slack, github, netlify always in Work, twitter only in Social Media, Gmail and YouTube in Google, etc.

Containers themselves are effectively just a label and a (limited) privacy sandbox. So far I have experienced no performance hit nor other issues so I create new Containers at will. Thus if you have 6 gmail accounts you can create Google1, Google2, and stay logged into all of them all of the time.

Additionally, I use the Cookie Auto Delete extension to only persist specific cookies to specific containers while all other cookies are wiped. I can maintain my YouTube subscriptions in a container that stays logged in my primary gmail account while being able to also watch other random videos in my Random container without polluting my real account history.

For work I have about 6 different accounts that I can be actively logged-in with; each tab is a different user with an entirely different role (for testing) and all can exist side-by-side.

As other have mentioned, you can always right click on any link from any container and open that link in a different container.

For me there is no going back to "standard" browsing. I can remain independently logged in to whatever I choose and feel confident those cookies are segregated from any other browsing activity. (obviously my IP is the same and some forms of fingerprinting surely still manage to track me in some manner)

Recently I added the Containerise extension which allows for even greater granularity with the always-open-in-a-container feautre: it allows for subdomain & even regex-based url rules. So, for example, console.aws.amazon.com can open in an AWS container (logged in my work email) while amazon.com can open my Shopping container (logged in with my personal email).

TLDR - containers plus extensions are extremely flexible and powerful

zalebz··on Ask HN: Who is hiring? (January 2021)
ZeeWise | Atlanta/North GA | Software Developer | https://zeewise.com/ | USA REMOTE | Full-Time and/or Contractor

ZeeWise is a very small software company that provides data aggregation and reporting for the franchise sector. We've actually been around for over a decade and have some very well-known customers despite our modest employee count. I'm one of the original tech founders and just took over as CEO. We're beginning the process of overhauling our product/tech stack.

We are looking to hire Software Developer(s) to tweak/update/transform our somewhat legacy platform into a more refined and scalable product.

Our stack is .NET and MSSQL with Angular (moving to Vue) on the frontend, however we're essentially rethinking everything so convince us why we should switch to your favorite stack instead of optimizing what we have.

Our platform has a lot of moving parts and though we are open to junior developers we're too small to be a training grounds/stepping stone position where you'll be compartmentalized to one tiny aspect of the product and playing ping-pong most of the day. We're ideally looking for senior/experienced devs (dare I say "full-stack") that are excited and confident about making systems architecture decisions that will have immediate real-world implications for tens of thousands of small businesses around the world. If you're junior but are confident in your abilities this might be an incredible opportunity and definitely don't be afraid to reach out.

We realize it is a very competitive market out there and are definitely prepared to pay competitive salaries for the right people no matter what level (junior/mid/senior) you're at and we're also prepared to negotiate ownership stakes/substantial stock options. As mentioned we're a small team and all have a very healthy work/life balance and a relaxed but productive work ethic.

If you made it this far and are still interested contact us at hackernews@zeewise.com

In all honesty the above is a copy paste of my last posting and some minor tweaks since then:

We're primary looking for a front-end Vue/React guru to implement (1) an MVP of a new product (2) a refactor/redesign of our existing product. The redesign is already 90% complete while the MVP is in active planning at the moment but the initial (alpha) phase is also mostly ready for implementation.

In a perfect world we're looking for someone that loves javascript/typescript and has launched a few SaaS products but also either has experience or informed opinions about backend features (when to leverage existing tools vs build yourself, boring tech vs bleeding edge, PaaS vs self devops, etc)

zalebz··on Google Maps changes a route after the drama of young people lost on a ghost road
I think the answer is to put up a gate with keypad and just provide the code to the landowner that has right of way. expensive but 100% effective.
zalebz··on Electric shocks to the tongue can quiet chronic ringing ears
wow, dramatic difference, thank you for bringing this tool to my attention.
zalebz··on Ask HN: Who is hiring? (June 2020)
ZeeWise | Atlanta/North GA | Software Developer | https://zeewise.com/ | USA REMOTE | Full-Time

ZeeWise is a very small software company that provides data aggregation and reporting for the franchise sector. We've actually been around for over a decade and have some very well-known customers despite our modest employee count. I'm one of the original tech founders and just took over as CEO. We're beginning the process of overhauling our product/tech stack.

We are looking to hire Software Developer(s) to tweak/update/transform our somewhat legacy platform into a more refined and scalable product.

Our stack is .NET (C#) and MSSQL with AngularJS (moving to Vue) on the frontend, however we're essentially rethinking everything so convince us why we should switch to your favorite stack instead of optimizing what we have.

Right now we're prioritizing for an experienced front-end dev that is proficient in VueJS/React. I'm personally partial to Vue because of the easier drop-in to a legacy project however there is no denying React's popularity (for good reason). That said we're primarily interested in finding quality team members since we're small and any new addition is going to be fundamental to our future.

Our platform has a lot of moving parts and though we are open to junior developers we're too small to be a training grounds/stepping stone position where you'll be compartmentalized to one tiny aspect of the product and playing foosball most of the day. We're ideally looking for senior/experienced devs (dare I say "full-stack") that are excited and confident about making systems architecture decisions that will have immediate real-world implications for tens of thousands of small businesses around the world. If you're junior but are confident in your abilities this might be an incredible opportunity and definitely don't be afraid to reach out.

We realize it is (despite COVID) a competitive market out there and are definitely prepared to pay competitive salaries for the right people no matter what level you're at (junior/mid/senior $80k-$150k+) and we're also prepared to negotiate ownership stakes/substantial stock. As mentioned we're a small team and all have a very healthy work/life balance and a relaxed but productive work ethic.

If you made it this far and are still interested contact us at hackernews@zeewise.com

zalebz··on Ask HN: Who is hiring? (August 2019)
ZeeWise | Atlanta/North GA | Software Developer | https://zeewise.com/ | USA REMOTE | Full-Time

ZeeWise is a very small software company that provides data aggregation and reporting for the franchise sector. We've actually been around for over a decade and have some very well-known customers despite our modest employee count. I'm one of the original tech founders and just took over as CEO. We're beginning the process of overhauling our product/tech stack.

We are looking to hire Software Developer(s) to tweak/update/transform our somewhat legacy platform into a more refined and scalable product.

Our stack is .NET and MSSQL with Angular (moving to Vue) on the frontend, however we're essentially rethinking everything so convince us why we should switch to your favorite stack instead of optimizing what we have.

Our platform has a lot of moving parts and though we are open to junior developers we're too small to be a training grounds/stepping stone position where you'll be compartmentalized to one tiny aspect of the product and playing ping-pong most of the day. We're ideally looking for senior/experienced devs (dare I say "full-stack") that are excited and confident about making systems architecture decisions that will have immediate real-world implications for tens of thousands of small businesses around the world. If you're junior but are confident in your abilities this might be an incredible opportunity and definitely don't be afraid to reach out.

We realize it is a very competitive market out there and are definitely prepared to pay competitive salaries for the right people no matter what level you're at (junior/mid/senior $80k-$150k+) and we're also prepared to negotiate ownership stakes/substantial stock options. As mentioned we're a small team and all have a very healthy work/life balance and a relaxed but productive work ethic.

If you made it this far and are still interested contact us at hackernews@zeewise.com

zalebz··on All extensions disabled due to expiration of intermediate signing cert
in my case I had to copy the link and paste into a fresh tab as clicking actually caused firefox (nightly) to block the install with a message: "news.ycombinator.com - Nightly prevented this site from asking you to intsall software on your computer"
zalebz··on Linus: Facebook, Twitter, and Instagram Are “A Disease”
I don't care
zalebz··on Facebook’s third act: Mark Zuckerberg announces his firm’s next business model
of course the subtext here is that FB currently can and does snoop on these services (which is certainly no surprise to the HN crowd). regardless, IMHO this is refreshing news in that a media barrage of bad publicity over privacy concerns has actually caused one of the largest companies in the world to change their behavior (assuming Zuck follows through on this promise to the full extent).
zalebz··on Spotify will now suspend or terminate accounts it finds are using ad blockers
more like they threw a party where you could pay a cover charge to get into the room with no clown or you could get in for free and know you had to deal with a clown. you decide to go in for free and just duck tap the clown's mouth shut because you felt you deserved to be at the party without paying and without having to deal with a clown.
zalebz··on Spotify will now suspend or terminate accounts it finds are using ad blockers
no kidding, not only does it deliver a ton of value but a large portion of their revenue goes to artists. people are able to listen to nearly any band on any device at the push of a button and literally don't want to pay a penny. (I think I had about 1500+ hours of listening last year ... 60 days or so)
zalebz··on Spotify will now suspend or terminate accounts it finds are using ad blockers
similar for me, very long time premium subscriber and it is extremely annoying how seemingly all the "improvements" over the years have been nothing I cared about while features I actually found useful have been removed

I stay a subscriber because of (1) the size of the catalog and (2) the 'discover weekly' constantly delivers me new songs/bands that I thoroughly enjoy and would never have discovered on my own

zalebz··on Supreme Court rejects industry challenge of 2015 net neutrality rules
"Just use" the exact same company for a dial up option. "Just use" a cellular provider that does not actually provide a data signal (dropped calls and constantly resending texts is my reality not tethering my computer for fast data). I guess technically I have the "option" to use overpriced satellite service that has a latency that makes RDP to my data center 80 miles away unusable (geo stationary orbit altitude is a bitch). I actually appreciate that I even have 5Mbit DSL but don't tell me I have a weak argument about ISP choice - there is but one choice - even if I grant you a satellite option I have literally two or three choices total. To re-address my original points, I first have to use an ISP to access any of the dozens, hundreds, thousands of other digital services that have been brought up. I'm not sure how you are so dismissive of this fact that alone places this service in a category unto itself. Once I have an internet pipe, I can freely use the 0.1% market share or the 99% market share social media/hosting/search engine/registrar/etc company with literally no friction and based on my whim on that day. And the next day I can cancel and choose another option. And a year later I can choose the 5% share up and coming option and so on. Explain to me how this is so similar to my ISP "choice"? I can also literally start my own social media platform, hosting company, or registrar tomorrow. However, even if I were independently wealthy and purchased spools upon spools of fiber/coax cable that totaled thousands of linear miles, I could NOT just start digging and running it where I chose and become an ISP option for my neighbors. Again, explain to me how ISPs are just exactly like all of these other examples you brought up?
zalebz··on Supreme Court rejects industry challenge of 2015 net neutrality rules
"private social media companies, hosting services, domain registrars, payment processors" - interesting how all of those on your list require me to use an ISP first. in my town there is literally one ISP option. I have used several different providers for every service you listed. there is a big difference between a near/effective monopoly and literally one option or no service at all.
zalebz··on Postmortem for Malicious Packages Published on July 12th, 2018
I use KeePass and have a local kbdx file for this reason - imo LastPass and the like are a huge target. This does require a lot more work since you have to manage keeping a file in sync on your laptop/phone/device and literally cannot get a password without one of those near you. (I have obscene overkill settings for encryption and key transformations in case I lose a device and someone tries to brute-force).

one thing that is without dispute is that a password manager will not reuse or slightly vary the same password which is what human beings pretty much always do.

also some popular ones have integrations for reissuing credentials for major sites. in theory if there were some huge compromise you change your master key and reissue as many pw automatically as possible. then focus on the ones in the list that you know have your credit card saved or are essential for other reasons (npm credentials). you also literally have a list to go down at the point anyway. what is the alternative scenario if your 'same password everywhere' pw is compromised ... try to remember which websites you use and might be the biggest issue and literally manually change every single one?

zalebz··on ESLint compromised, may have stolen your credentials
source is from github, right? can we not identify the "someone" in this case? or are we talking about a separate publish to npm process unrelated to github releases? can the eslint-scope team not figure out the someone that did the publish? I'm an open source newb but I have to think someone had to accept this malicious code at some point for it to ripple through and make it to release/publish right?
zalebz··on Options vs. Cash
you are getting the same amount of pie (your volume of food stays consistent) however the ratio of your piece vs the rest of the pie is what shrinks
zalebz··on You’ll never guess where Russian spies are hiding their control servers
Although this is certainly a clever method of obfuscation, the most shocking thing in this article is that Britney Spears has an active instagram
← PreviousPage 2 of 3Next →