HN user

m_herrlich

78 karma
Posts0
Comments41
View on HN
No posts found.
Vibechart 12 months ago

It might not incompetent to assume the audience is not very discerning

What a great read, it reminds me of "True Believer" by the great Eric Hoffer. "Stupid" as a word is a translation choice, it would be more effective if they had chosen a less derogatory term. 'True believer' would work better than 'stupid person'.

You can set the wind to 0 and the speed somehow stays at 35 knots, I don't know much about sailing but that can't be right

Some people like to show off their creativity by making tenuous claims that every single thing is racist

Great visualization but lost me at the end when it got a bit too preachy. Turning socioeconomic issues into race issues doesn't help anyone.

I love this. It's a book about craftsmanship and the philosophy of excellence and knife sharpening is almost incidental (it takes a while to find the part that actually says how to sharpen stuff).

This kind of trade craftsmanship is rare these days but the lessons apply to any kind of productive pursuit.

I can barely finish a leetcode hard in a few hours, let alone something I would call a project. Still, this is an inspiring approach to tackling day to day work in incremental micro-projects.

I love building and developing software, and despite the fun and interesting challenges presented at my last job I quit because of the operations component. We adopted DevOps and it felt like "building" got replaced with "configuring" and managing complex configurations does not tickle my brain at all. Week-long on-call shifts are like being under house arrest 24/7.

I understand the value that developers bring to operational roles, and to some extent making developers feel the pain of their screwups is appropriate. But when DevOps is 80% Ops, you need a fundamentally different kind of developer.

How does one even get into the cofounder speed-dating circuit? My background is software engineer, SE manager, occasionally playing PM/TPM at a big company. I want to build something cool. Ideas are cheap, need someone who understands execution.

I had impostor syndrome for years and eventually stopped caring what other people think. I have a fancy title. I say dumb stuff in meetings and smart people roll their eyes. I am an actual impostor now.

Some of the things people currently believe are so patently absurd and obviously made up that labeling them as false would not make much difference. It's would be just one more conspiracy vector.

Even if it did, how could the regulators possibly keep up with the gish gallop of misinformation? There are those who seriously examine and rebut the claims of q-anon et al. but can you imagine a more thankless task?

A better approach is to teach good informational hygiene to kids. Pull from a variety of information sources, weight the ones that correct errors, awareness and taxonomy of cognitive biases, stuff like that.

It's exploitable through apple's web-based login flow used by web sites and Android devices. There are multiple round trips between the user and apple, and state is passed over the wire. The state could be modified at a certain point in the flow to cause the final result (the JWT) to be compromised. The flow is still the same, they seem to have fixed it entirely by adding checks server-side.

The apple endpoint returned an apple-signed jwt with an email of the attacker's choice in the sub field. It didn't even have to be an email associated with an apple id. Relying parties verify the id_token against Apple's cert and that is Apple's guarantee that the email is correct.

I've always assumed speeding tickets are more about income than safety, since speed is a very rough measure of safe driving when you ignore the vehicle and driver skill.

This approach costs more (cops babysit speeders) and the state doesn't get paid. Doesn't seem practical from a policy standpoint.