HN user

samsnelling

702 karma

Running https://onroi.com

Contact info: sam at snelling dot io

[ my public key: https://keybase.io/snelling; my proof: https://keybase.io/snelling/sigs/Nm5BNPdNAuEKf8aFpTuN--N_iM660AmXfieV8bentCE ]

Posts23
Comments111
View on HN
arstechnica.com 9y ago

Here comes 5Gbps networking over standard cables

samsnelling
3pts0
credentialhero.com 10y ago

Show HN: Find out if employees have been in a data breach, leak, or hack

samsnelling
7pts5
github.com 10y ago

Show HN: A self hosted Status page

samsnelling
8pts0
snelling.io 10y ago

Ad Blocking, Ad Networks, and Your IP Address

samsnelling
52pts51
blog.lenovo.com 11y ago

Retro ThinkPad Survey 3: What’s Under the Hood?

samsnelling
6pts0
statusdeck.com 11y ago

Show HN: I built a self-hosted StatusPage.io alternative. Try the demo

samsnelling
13pts1
snelling.io 11y ago

Apple Watch Woes

samsnelling
28pts5
snelling.io 11y ago

Understanding SSL Misconfiguration

samsnelling
1pts0
snelling.io 11y ago

Hacking Oklahoma State University's Student ID

samsnelling
162pts49
forums.lenovo.com 11y ago

Lenovo Pre-Instaling Adware/spam – Superfish – Powerd by VisualSearch

samsnelling
26pts5
embedkit.com 11y ago

Show HN: A Unified Embed API

samsnelling
11pts6
theverge.com 12y ago

CEO of Verizon says he expects Netflix will sign deal to pay them as well

samsnelling
2pts0
medium.com 12y ago

Recruiting Advice No One Tells You

samsnelling
11pts2
oembed.io 12y ago

Show HN: I built a free oEmbed API for the web

samsnelling
61pts17
www.popularmechanics.com 12y ago

Prediction 1957: Pneumatic Tube Roadways

samsnelling
64pts23
www.voiceandtone.com 13y ago

Voice and Tone - Mailchimp helps you understand users feelings

samsnelling
2pts0
37signals.com 13y ago

Building Know Your Company

samsnelling
9pts0
docs.google.com 13y ago

Director of National Intelligence issues fact sheet on PRISM

samsnelling
2pts0
www.whistle.com 13y ago

Fitbit for Dogs

samsnelling
140pts130
summary.io 13y ago

Show HN: My news summarization side project

samsnelling
30pts40
contestwinner.rs.af.cm 13y ago

Help me win this web contest (Vote for beer)

samsnelling
1pts1
samsnelling.tumblr.com 13y ago

Bootstrapping. Analysis and thoughts.

samsnelling
2pts0
samsnelling.tumblr.com 13y ago

High-performance web stack on the cheap

samsnelling
1pts0

Congratulations on shipping. That's the hardest part.

Very clever on Amazon links in reddit being the source of truth. That will obviously leave a lot on the table, but gives you really reliable parsing.

Honestly, this is a great site. I'd keep it simple, but you could definitely expand on the styling a little bit.

Great work!

Up voted as well. I just purchased an a6500 after quite the back and forth with myself.

Fuji actually uses Sony sensors. So the XPro2 / XT2 has the exact same sensor as a a6300 and a6500. So on paper, the Sony have a lot more going for them in terms of price to features. It should be really interesting to see what kind of pressure that puts on them.

That's not to say that the Sony's are better cameras. Fuji has a great glass selection, has arguably better ergonomics, but is also slightly larger and heavier. Fuji is a great camera company no doubt.

Overall, in the APS-C format, the offerings are pretty comparable across a wide range of price points.

Edit: Sony does not have the exact same sensor as the Fuji. Fuji's X-Trans sensor doesn't use a Bayer array. But Fuji's sensor is made by Sony.

No experience with their laptops. I can speak to their customer service, and it is absolutely fantastic. If you find a machine that works for you, I could not recommend them as a company more.

I'm working on a similar project, although mine isn't OS yet. Overall, I enjoyed looking at some of the decisions you made! Good job.

Might I suggest a few tools that have really helped me:

[1 CodeSniffer - Set up some code rules!

[2] Codacy - Good PHP support / An alternative is CodeClimate

[3] PSR guidelines - This should help with some standardizing.

-----

I'll be reviewing this more in depth later. Best of luck!

[1] https://github.com/squizlabs/PHP_CodeSniffer

[2] https://www.codacy.com/

[3] http://www.php-fig.org/psr/

Apple Watch Woes 11 years ago

There were some quotes from videos that were pretty bad, but I did try and pick the worst I could find in about an hour of reading reviews. The truth is, there just isn't much negativity around anything Apple.

[..] realized the company isn’t just selling some wrist-worn computer, it’s selling good looks and coolness [..] this Apple product works to help you look—and feel—good. [..] Even when the watch face is off, the black sapphire-crystal screen looks elegant. - Joanna Stern, WSJ

What kind of ridiculous praise is this? You certainly won't find writing like that on any other consumer product.

Edit: I am very pro smart watch, and hope Apple succeeds. I only wanted to bring some of the real criticisms to the forefront.

The killer feature here is something that no one is talking about!

We've included a soft silicone band with each Pebble Time, but all standard 22mm watch bands will fit. All new Pebble watch bands include a quick-release pin, letting you swap bands in under 10 seconds.

Standard watch bands is something that most other wearables aren't embracing. This makes the Pebble significantly more enticing.

I think you hit the nail on the head here - this isn't a super sophisticated reverse engineer. Total equipment cost is $300 (for one that prints a full color front!) and you could theoretically impersonate anyone on a wide array of systems.

While my research was specific to OSU, I do know that this is a larger issue than just my alma mater. I collected student IDs from other colleges, but did not publish them as I didn't want to get into hot water.

The thing is though, a lot of these magstripe systems have problems. We brought up in the presentation that Walmart at the time was having a large problem with people encoding stolen credit card data onto gift cards. Cashiers at the time did not check driver licenses when paying with a gift card.

@greyc

Even though I made a blank card, it was still encoded with my student ID number. That was the only reason it was allowed. The point of trying it was to prove that the name or discretionary data did not affect the card working.

While I definitely toed the line, I tried to be careful not to break any of the rules of the class.

We had pretty strict guidelines to follow to be apart of the InfoSec class. We basically signed a waiver at the beginning saying that if we did exploit something, we would be subject to expulsion. It was a "theory" based class and all actual research had to be done within a certain IP range in a particular computer lab.

With that said, this was the final report that I made in the Winter of 2013. I presented it Spring 2014 to the University staff. And now, graduated, with over a full 12 months behind it, I felt comfortable to post it.

I appreciate it. The University definitely took it seriously at the time (the project became a neat recruiting story for the InfoSec class), however outside of taking down the website to check for ID validity, I do not believe there was any other recourse. There was such a high overhead to change systems and reissue the ID's (some professors have decade old ID's), that I think it was viewed as "not worth fixing."

I grew up playing a huge amount of basketball, and therefore have a completely different frame of reference here. In sports, you watch a lot of film and study your competition. You then take the best parts of your competition, and prepare to compete with them. Sometimes you take their best plays. Sometimes you you design new plays to actively exploit the other team.

The point that I'm trying to make is: this is a competition. The fact that CB would even validate this YC company by writing this post - to me - is a defensive move rather than an offensive one.