News for hackers. Stuff that matters.

Sreyanth

Re:Google's AI doesn't understand restaurant menus on Sunday June 12, 2022 @10:34AM (#31714803)
I see a CAPTCHA opportunity here. Show the line item and ask people to type both the dish name and price in two boxes. Or may be give a couple of options that the end user must confirm before they can proceed.
Re:GitHub Releases Dark Mode on Tuesday December 08, 2020 @02:05PM (#25349883)
If only they can read my dotfiles and create the theme just for me! ;)
Re:Show HN: I built an After Effects for dummies on Wednesday August 05, 2020 @09:24AM (#24060485)
Two things that drive product value & growth insanely:

    1. Dogfooding your own product
    2. A free-tier pricing that actually helps one-time users
You nailed both of them. Congrats on the launch. Using it right away. :)
Re:Myths about Patents and Trademarks in startups on Saturday June 27, 2020 @06:28AM (#23660862)
On the contrary, the question I had while building my product was - “Am I infringing someone else’s patent?”

That was years ago. Now, I focus on value creation first and let the product succeed before venturing into patent research.

Hardware might be much tougher though. Would be interesting to see someone with hardware experience to share their real life experiences.

Re:BrowserStack SpeedLab on Wednesday June 10, 2020 @10:18AM (#23477252)
Hey folks - I’m a product manager at BrowserStack. Thanks @pulkitsh1234 for the shoutout!

SpeedLab is a free tool that our team built to help you test website speed across multiple browsers and real devices. You’ll get a cumulative score of your website’s speed across desktop and mobile browsers, so you can identify browser-specific or device-specific page speed issues.

We encourage you to take it for a spin. Questions and feedback are welcome!

EDIT: added that it is a free tool. No need to create an account too!

Re:Ask HN: Who is hiring? (February 2020) on Wednesday February 05, 2020 @02:48AM (#22244812)
BrowserStack | Product managers and product strategists | Mumbai, India | ONSITE | https://browserstack.com

We’re looking for geeks who are passionate about developer focused products. This will be perfect for you, if you:

- Have significant experience writing code and love building things for fun

- Try out the latest developer tools and have a list of things you like and hate

- Can discuss tech concepts, architecture and trade offs with developers from the best tech companies in the world

- Can quickly create customer specific prototypes and present it to them with conviction

- Are curious to learn about different problems people face in the testing space and want to influence the way those problems are solved.

We’re also hiring kickass engineers (backend, frontend and platform - usually with great Ruby, React, networking skills) and solutions engineers & architects.

We’re also hiring for our Ireland and San Francisco offices. All roles can be found at https://browserstack.com/careers

Drop me an email at sreyanth at browserstack.com with the subject “<Role Name> application : HN” if you’re interested in any of these roles.

Edit: formatting.

Re:Ghidra, NSA's reverse-engineering tool on Wednesday March 06, 2019 @12:01PM (#19320484)
Am I the only one or is anyone else thinking about what the angle here could be?

Pretty impressive software though. Finally one strong open-source alternative for reverse engineering.

Re:H-1B visa shift may favor tech companies on Saturday December 01, 2018 @07:24AM (#18576491)
I don't think you can self-petition for an O-1 without job offer (at least that is what I remember). Just checked again, just to be sure [0].

I didn't suggest a new category in EBX, I said something similar for a visa where one can self-petition without a job offer, get the visa and work for whichever company she wants to work for, all without a need for an employer sponsorship. "self-petition without a job offer" being the key phrase.

[0] https://www.uscis.gov/working-united-states/temporary-worker...

Re:H-1B visa shift may favor tech companies on Saturday December 01, 2018 @06:49AM (#18576372)
Might be an unpopular opinion, but I think H1B should slowly move to something like an EB1, where candidates can file a self-petition (but without immigration intent, and apply for a regular GC after a few years if they really want to immigrate). They can set some criteria for testing 'high skills'.

This way, a candidate can choose a company based on their interest and skill set match, rather than filtering by whether a company sponsors a H1B.

Sure, even EB1 is being gamed, but at the very least this is a fair chance to candidates.

- Eliminating the not-so-random 'lottery'

- Avoiding the body shops or the so-called fake consulting companies where students go for their OPT

- Eliminate the need to succumb to the whims of employers just to get a visa sponsorship

- Companies, big or small, need not worry about not hiring skillful employees, just because 'it is a looong and random process'

- Not entirely based on higher salaries. Sure, a high salary is a pseudo metric to indicate high skill, but what about early stage startups? This eliminates that unfair advantage

Re:Ask HN: Who is hiring? (November 2018) on Thursday November 01, 2018 @11:44PM (#18360555)
Just cracked your challenge. Should I apply? You will get a package of a developer & PM :)

I believe I might have a strong case for an O-1.

Re:Stripe Integration for Twilio Pay on Thursday October 18, 2018 @06:50AM (#18247280)
AFAIK, there are two ways in which the tones can be sent.

1. In the regular audio stream (AKA in-band) so anyone who can listen to the phone call, can also listen to these tones. These tones can be mapped to the digits pressed.

2. In a separate RTP payload (AKA out-of-band) so not everyone can read / listen to this stream of signals / tones. RFC 4733 (earlier it was RFC 2833) specifies the format of this RTP payload. This is what the payment via phone systems might be using.

There is a secure RTP with encryption support, but I am not sure if it can be implemented end-to-end to avoid anyone in middle (not a man-in-middle attacker, but a genuine carrier / network) to see these DTMFs. Just unable to imagine how this works :)

Re:Stripe Integration for Twilio Pay on Thursday October 18, 2018 @01:40AM (#18246157)
Never knew that. I assumed VoIP based telephony comes under PCI view.
Re:Stripe Integration for Twilio Pay on Thursday October 18, 2018 @01:28AM (#18246127)
I know they do pull it out to a separate band but many VoIP providers log the DTMF sent as digits to debug things - most evident in IVR use cases.

So, if attackers wants to get card details, they need not attack the business or Twilio (because it might redact these when they see <Pay>, but they can simply access logs of the middlemen for DTMFs. Concatenate all those per call, and there we should have all card numbers, expiry dates and CVC/4DBC.

Not sure how Twilio is doing it though. Unless they use some awesome encryption method to encrypt all these numbers so no one in middle can see them.

Re:Stripe Integration for Twilio Pay on Wednesday October 17, 2018 @09:43PM (#18245307)
I don't completely understand how they do this without exposing the DTMF tones / digits pressed to the carriers.

For example, when I key in my card number, my phone carrier will know it, the routing carriers know it before it reaches Twilio. How is my card information safe? I guess I'm missing something here.

May be extend a bit further to check if the return value is 0? Can be accessed via `$?` in most non-Windows systems.
While this is interesting, I will probably find this too much of work to type in all the stuff again with examples. Throwing a not-so-random extension idea - may be a tool to go through the weird commands in my bash history and suggest me to explain the commands which I just used?

Right now, I usually grep the man pages to search for things relevant to specific context. Something like,

    man find | grep -i --color=always -C10 "file name"
Worked well in most cases. So, for figuring out how to send a POST request, I would try

    man curl | grep -C10 --color=always POST
If that bombs, I would then immediately try

    curl --help | grep --color=always POST
If I end up using certain set of flags frequently, I will set up a bash command like most others. Or, make a weird joke out of the flags, for example,

    ls -lionshit
Re:Design errors Satoshi made on Monday August 20, 2018 @12:10AM (#17797666)
No expertise to comment about the tech/crypto design, but Satoshi definitely seemed to care about the users.

I once skimmed through Satoshi's code while I was in college and found this: https://github.com/bitcoin/bitcoin/blob/v0.8.2rc3/src/base58...

I've neither seen any such decision in any other project, nor have I come across any strong advocacy for such things online. FAIW, Satoshi might be a kick-ass UX designer too.

In a different tangent, do any of you remember or still see/make such decisions (mostly to build a better UX)?

Re:Show HN: Paperkast on Wednesday August 15, 2018 @03:29AM (#17764288)
Getting a controller exception.

    Showing /opt/lobsters/app/views/layouts/application.html.erb where line #85 raised:

    no implicit conversion of Symbol into Integer
Not a rocket scientist, but this article is very well written for an audience with a minimal understanding of Physics and Chemistry. Articles like these help high school students realise that what they're learning now is not really a waste of time.
On a different note, it would be interesting to know how many respondents opted for the eGift card for completing the survey. And if the responses deviated a lot when the data is pivoted with that variable.
I felt the same with Bootstrap as well as most users don't change the default styling.

I think it is the CSS frameworks that make websites look like clones and not necessarily the design systems on which the frameworks are based on.

Chrome Canary Shows Off Material Design 2 – Now on macOS

Chrome's Canary build now has the new UI by default on macOS, and it seems to look much neater.Earlier this year, it was reported that Canary users on Windows were able to access this UI by enabling the top-chrome-md flag (src: https://beebom.com/google-chrome-canary-revamped-material-design/).

( Read More... | 2 comments | 5 points | on HN )

Older »