Maskawanian

Location: Winnipeg, MB, Canada

Remote: Yes, Hybrid OK in Winnipeg

Willing to relocate: Only to Vancouver Island

Technologies: C#, .NET Core, Go, TypeScript/JavaScript, Vue.js, React, PHP/Laravel, Python, Java, HTML5/CSS, Node.js/Express, PostgreSQL, MySQL, MongoDB, Entity Framework, Eloquent, RESTful APIs, Docker/Swarm, Kubernetes, Nginx/Apache, Git/SVN, CI/CD, Linux

Résumé/CV: https://www.dsaul.ca/Resume Codeberg: https://codeberg.org/dsaul Linkedin: https://www.linkedin.com/in/dan-saul/ Portfolio: https://www.dsaul.ca/Portfolio

Software Certificates are viewable on LinkedIn.

Email: hn2026 at my website's domain

Please only send emails if you are employed by a company who is hiring, or a recruiter, and working in a role related to hiring. If you are a referral bot/agent/orchestrator/job site founder, don't send me emails.

Hello HN, I'm Dan Saul, a full-stack software developer with 10+ years of experience building and shipping production systems across SaaS, telecom, and business automation. I enjoy turning complex requirements into working software that people actually use.

How I work: I take ownership of features end to end, write tests and documentation as part of the job, and care about code review and solid SDLC practices. I participate in Agile processes as a team member, mentor junior developers, and contribute to architecture decisions. I build software directly and use agent-driven tooling pragmatically, treating generated code like any other contribution that needs review and verification.

What I'm looking for: Full-stack or backend-focused product teams where I can write real code, solve real problems, and help ship reliable software. Interested in SaaS, internal tools, telecom/comms, and practical business applications. I work best with teams that value clear thinking, accountability, and getting things done without unnecessary process.

As the hash is being encrypted with the public key in the client, that would require that the client be compromised. In which case the original password is already exposed at that point, thus a discussion of the transport is no longer the concern.

Sure, you could MITM still if all you do is that, as with anything it depends on what you are defending against.

If you are defending against clear text being discoverable, then bcrypt hashing with a unique salt on the client is good enough.

If you are trying to prevent MITM you can combine that salting with public/private key transmission of the bcrypt hash to the backend (effectively the same idea as pass keys without the downsides).

MITM just affects your service, and doesn't always matter depending on what the service is, for example, a recipe manager doesn't need to have bullet proof security.

What are you talking about? Whenever I've written authentication, passwords are hashed on the client side and never transmitted in the clear.

The way passkeys are being pushed is so clearly an attempt to add friction to leaving walled gardens. Stop talking in absolutes in a world of greys.

Location: Winnipeg, MB, Canada

Remote: Yes, Hybrid OK in Winnipeg

Willing to relocate: Only to Vancouver Island

Technologies: C#, .NET Core, Go, TypeScript/JavaScript, Vue.js, React, PHP/Laravel, Python, Java, HTML5/CSS, Node.js/Express, PostgreSQL, MySQL, MongoDB, Entity Framework, Eloquent, RESTful APIs, Docker/Swarm, Kubernetes, Nginx/Apache, Git/SVN, CI/CD, Linux

Résumé/CV: https://www.dsaul.ca/Resume Codeberg: https://codeberg.org/dsaul Linkedin: https://www.linkedin.com/in/dan-saul/ Portfolio: https://www.dsaul.ca/Portfolio

Software Certificates are viewable on LinkedIn.

Email: hn2026 at my website's domain

Please only send emails if you are employed by a company who is hiring, or a recruiter. If you are a referral bot/agent/orchestrator, don't send me emails.

Hello HN, I'm Dan Saul, a full-stack software developer with 10+ years of experience building and shipping production systems across SaaS, telecom, and business automation. I enjoy turning complex requirements into working software that people actually use.

How I work: I take ownership of features end to end, write tests and documentation as part of the job, and care about code review and solid SDLC practices. I participate in Agile processes as a team member, mentor junior developers, and contribute to architecture decisions. I build software directly and use agent-driven tooling pragmatically, treating generated code like any other contribution that needs review and verification.

What I'm looking for: Full-stack or backend-focused product teams where I can write real code, solve real problems, and help ship reliable software. Interested in SaaS, internal tools, telecom/comms, and practical business applications. I work best with teams that value clear thinking, accountability, and getting things done without unnecessary process.

Vimmy Ridge memorial is also forever given for the use of Canada by France after WW1, it is administered by Parks Canada. So we technically control land in Europe.

This is the same PP that grasped defeat in the face of victory, and is continually losing support, relegating himself to the same position of the Reform party that it was in the 90's. The same Polly that lost his riding last election, and had to have one handed to him on a silver spoon. I would take his opinion with a grain of salt.

Generally it is auto approved for Canadians, but you will soon need to do an "ETIAS travel authorization".

Agreed, and the possibility of visa free travel to the EU, plus the removal of live/work barriers is appealing. The USA really comes off as the spurned ex that calls you drunk in the middle of the night.

What is a provenance WRT Canada? :-) But it is true, our provinces have trade barriers internally that is an ongoing source of dispute. There has been movement since the USA started falling apart to remove them. The dumbest one was that hay bales had to be re-arranged on the AB/BC border.

How about treating people like adults for a start? How about starting public awareness campaigns about proper digital hygiene. Not everything has to be nanny state garbage.

Thanks for replying to a comment I didn't make. It is clear that your mind is full of American exceptionalism, I'm done in this comment thread. Thanks for your contribution.

Naïve American exceptionalism. It is going to be generations before Canadians could possibly be on as friendly terms as we were just 5 years ago.

Unsurprisingly, people in different parts of the world hold different values. Europe is generally more focused on actual people and how their lives live, than simply accumulation of wealth among the few. It is unsurprising that they focus on different things.

Good to know! For others: You open their app store, go into messaging, hamburger menu, select release channel, and choose alpha.

Does anyone know if this is something that we can install now, or if it will show up in the next OS release?

Location: Winnipeg, MB, Canada

Remote: Yes, Hybrid OK in Winnipeg

Willing to relocate: Only to Vancouver Island

Technologies: Golang, C#, ASP.NET Core, TypeScript/JavaScript, Vue.js, React, PHP/Laravel, Python, HTML5/CSS, jQuery, Node.js/Express, PostgreSQL, MySQL, MongoDB, Entity Framework/Eloquent, RESTful APIs/Microservices, Docker/Swarm, Kubernetes, Nginx/Apache, Git/SVN, CI/CD, Linux

Résumé/CV/Codeberg/Linkedin: See links on https://www.dsaul.ca/

Email: hn2026 at my website's domain

Hello HN, my name is Dan Saul, I am a full-stack software developer with 10+ years building and shipping real products across SaaS, telecom, and business automation. I like practical work: clean maintainable code, reliable systems, and solving the actual problem in front of me.

How I work: I take ownership, do the boring stuff right (tests, reviews, docs, SDLC), and ship. I participate in Agile (Scrum/Kanban) without the theatre, mentor and enjoy being mentored, and contribute to architecture and standards. I love coding by hand but use agent-driven development pragmatically: agents as junior devs where every output is reviewed and tested, not auto-merged.

What I'm looking for: Full-stack or backend-leaning product teams where I can stay hands-on, help set technical direction, and ship software real users rely on. SaaS, internal tools, telecom/comms, or anything practical. I do my best work on small-to-medium teams that value pragmatism, accountability, and continuous improvement over buzzwords.

Yup, I had to do that to get mine to work. It is a good thing that I am more experienced then the average bear when it comes to soldering. When it was **ed, I could still get it to boot with an AC adapter plugged in, so you can try that.

What I did was implement a SIP number that asks for a random digit to be pressed before allowing the call through. It also connects to my CardDAV server, and any numbers in my address book don't get the prompt. This works for 95% of bogus calls. The only thing this stops is people not on my address book calling from hands-free. But this has never come up in conversation so I think I'm OK!

Almost, as someone who used to work with telecom systems in Canada, while it is true that felony wiretapping requires 1 party to consent to not be illegal, it is not the only law. PIPEDA applies to only commercial endeavors, and requires two party consent.

This is why a company must inform you of the recording, but you do not have to inform them.

At least with Samba you can use the "veto files" and "delete veto files" global directives to deal with those, I personally use the following for veto files:

    /._*/.AppleDB/.AppleDouble/.AppleDesktop/:2eDS_Store/Network Trash Folder/Temporary Items/TheVolumeSettingsFolder/.@__thumb/.@__desc/:2e*/.@__qini/.Qsync/.@upload_cache/.qsync/.qsync_sn/.@qsys/.digest/

I understand that I may loose resource forks, but that isn't a problem for the use case of my server.

Tearing and hidpi is why I left Linux for Windows between 2012 ans 2022. Once wayland was good enough I returned. Tearing is awful, and should be opt in (which wayland provides), not opt out.

No, that's every bit of software out there. Dynamic linking really does cause that problem even though allegedly it has security benefits as the vendor is able to patch software vulnerabilities.

NixOS actually is a bit better in this respect since most things are statically linked. The only thing is that glibc is not because it specifically requires being dynamically linked.

This issue also applies to macOS with their Dylibs and also Windows with their DLLs. So saying that this is an issue with Linux is a bit disingenuous.

Until everybody standardizes on one singular executable format that doesn't ever change, this will forever be an issue.

I know you are trying to make a point about complexity, but that is literally what NixOS allows for.

There is always the analog hole. Even HDCP can be worked around. Even if they do manage to stop all computers from doing direct bit copies, there are still old things such as Kinescopes which they used to use to broadcast television from film. There of course is a quality loss, but that's kind of irrelevant to the point.

When you benchmarked Postgres did you disable WAL for the cache table? That may minimize the difference.

That isn't the same as vendor-izing unless you are committing node_modules to your VCS, which would be insane.

Golang at least gives you the option to easily vendor-ize packages to your local repository. Given what has happened here, maybe we should start doing this more!

Absolute lies, where I live it is one party consent. I can still record with another device on speakerphone.

No, you are putting words into my mouth. Try to argue in good faith through understanding the other party's viewpoint before responding.

I don't see much difference between killing chicks after them being born, or stopping them from being born in the first place. The only difference is in the efficiency of business operations.

If my values are that each deserves a chance at a life--whatever life it may be, I can advocate for searching for a better solution. I did not prescribe an alternative, don't pretend that I have.

EDIT: Damn, the hostile responses (Ad hominem, bad faith arguments, etc) to such a simple philosophical discussion I've been getting are unbelievable. I don't think there is much value in participating anymore. Thank you everyone for your responses.