News for hackers. Stuff that matters.

bdmac97

Re:Strong_password Rubygem hijacked on Monday July 08, 2019 @10:04AM (#20382779)
Hi all. I'm the (actual) owner of that gem.

As already hypothesized in the comments I'm pretty sure this was a simple account hijack. The kickball user likely cracked an old password of mine from before I was using 1password that was leaked from who knows which of the various breaches that have occurred over the years.

I released that gem years ago and barely remembered even having a rubygems account since I'm not doing much OSS work these days. I simply forgot to rotate out that old password there as a result which is definitely my bad.

Since being notified and regaining ownership of the gem I've:

1. Removed the kickball gem owner. I don't know why rubygems did not do this automatically but they did not.

2. Reset to a new strong password specific to rubygems.org (haha) with 1password and secured my account with MFA.

3. Released a new version 0.0.8 of the gem so that anyone that unfortunately installed the bogus/yanked 0.0.7 version will hopefully update to the new/real version of the gem.

Re:5 Skills You Need to Develop to Be a Better CTO on Wednesday January 18, 2017 @12:04PM (#13427947)
Sorry I meant to lump that in under the soft skills section. It was not meant to be an exhaustive list, there would be far more than 5 items :-)
Re:5 Skills You Need to Develop to Be a Better CTO on Tuesday January 17, 2017 @11:14PM (#13423912)
There could have certainly been some of that but it didn't feel like it in the context (which I realize I didn't provide). I read the question as sincere but admit there's a chance it wasn't.

At any rate, I tried to answer him honestly with what I'd have told myself and it didn't have any bearing on the outcome one way or another.

Re:Memory Debugging – A Cautionary Tale on Friday December 23, 2016 @11:45AM (#13245648)
Apologies in advance for the length (8 minutes). I've tried to whittle it down but it's a year of anguish for me. :-)
Re:Some Thoughts on Hiring at a New Startup on Friday December 23, 2016 @11:28AM (#13245549)
IMO, and as you mentioned, your best bet in those early days is to rely on your network and have that insanely compelling vision with which to sell them on. I think you need a certain level of trust with people for them to be willing to bet a significant chunk of their time and such an inordinate amount of energy on your vision. Conversely no matter how much the person may love you, if your vision for the company is a giant pile of "meh" then you won't (and shouldn't) have much luck convincing them either.

The two go hand in hand for your first few hires.

Re:Some Thoughts on Hiring at a New Startup on Friday December 23, 2016 @11:24AM (#13245523)
Absolutely agree with these points!
Re:Tell HN: I accidentally ran up a $1000 Heroku bill on Tuesday September 14, 2010 @04:04PM (#1692069)
I got burned by this on Heroku recently as well but to a much lesser extent $$$-wise. My app typically runs on 1 dyno because it's basically not supported anymore. At some point I must have been messing around in the interface and accidently bumped my dynos. Oops.

I personally think they should have a "WTF your load is like zero, you normally have X dynos, but you're using Y dynos for no real reason... dumbass" alert email... I certainly would have appreciated it!

Re:CloudApp is live on Friday April 02, 2010 @01:37AM (#1236069)
I'm getting the same thing. Tried redownloading/reinstalling and no love. Had to 'killall Cloud' to even get the thing out of my menubar...
Re:Apple iPad on Wednesday January 27, 2010 @03:37PM (#1081702)
And yet every other device they make (basically) has one...
Re:Apple iPad on Wednesday January 27, 2010 @03:28PM (#1081659)
No GPS???
Re:IT job satisfaction plummets to all-time low on Thursday January 07, 2010 @12:27PM (#1037463)
I wonder how much of that also has to do with people that simply chose the wrong line of work? Back when I was in school it was coming towards the peak of the dot com bubble and I know there were tons of new students in CS that were there just to make money.

In the long run they are now finding out that money wasn't enough to make them happy since they don't really enjoy programming and are thus unsatisfied...

Re:Nexus One on Tuesday January 05, 2010 @05:07PM (#1033521)
I guess from that viewpoint it's moderately interesting but as a phone it's really not much to get excited about compared to other modern Android phones like the Droid. Bah... I was expecting something huge!
Re:Nexus One on Tuesday January 05, 2010 @04:22PM (#1033403)
I really do not understand what all the fuss was about. It's just another HTC Android phone. What does Google really even have to do with it (any more than all the other Android phones)? It seems like HTC could've just held their own press conference without involving Google but of course then there'd be no hype!
Re:Ask HN: What is the right way to ask for feedback twice? on Monday October 19, 2009 @04:20PM (#890886)
The right way is to use my site, http://www.launchly.com.

I created launchly for this specific reason as a result of not being able to get good "additional rounds" of feedback here on HackerNews.

Am I missing something or hasn't this already been done by others like Twittermass?
I used 99designs.
My site uses 960.gs but not for EVERYTHING. Also not sure how creative the use is but here ya go - http://www.launchly.com
Re:Ask HN: Need website screenshot generator on Thursday September 24, 2009 @10:58PM (#842801)
Other options include ShrinkTheWeb (http://www.shrinktheweb.com) and PageGlimpse (http://www.pageglimpse.com)
Re:YouTube Comes To A 5-Star Realization: Its Ratings Are Useless on Tuesday September 22, 2009 @04:19PM (#837831)
Kinda always had a feeling that's what happens but nice to see graphical proof! I feel good now about choosing +/- rating only for launchly.
Re:Why Pair Programming Is Not For the Masses on Tuesday September 22, 2009 @01:38PM (#837494)
I just want to point out that saying "You're doing it wrong" (as the article does) does not necessarily imply that you could be doing it right. It doesn't have to be taken as a condemnation of your skills/ability. It simply won't work in all situations and the article does a pretty good job of pointing out blockers to pairing working.
Re:Why Pair Programming Is Not For the Masses on Tuesday September 22, 2009 @01:35PM (#837486)
Maybe I'm blind but I really don't see too much arrogance here. He is admitting that pair programming does NOT work for everyone and the reasons he gives are, to me, compelling and true. He's not evangelizing pair programming as a magic bullet for everyone.

The mediocrity that surrounds a good programmer at a typical enterprise level shop is astounding. It surprises me that they allow some of the people to continue working there! There are a LOT of people out there that got into programming as a way to pay the bills and for those people, pair programming would probably be like torture.

Re:Why Pair Programming Is Not For the Masses on Tuesday September 22, 2009 @01:27PM (#837471)
When I tried it for a week I know I didn't feel burnt out. In fact I felt more alive and less tired than I had in years doing shitty waterfall work at IBM.

The reason, for me, was that at the end of a work day I went home feeling like I had actually DONE something of value that day. I felt that way every day. It felt good. By feeling good about what I had done I felt much less like I needed to work at night. I felt that I had "earned" some relaxing time away from work.

Re:Why Pair Programming Is Not For the Masses on Tuesday September 22, 2009 @01:18PM (#837449)
I fail to see in that article where it advocates mandated pair programming... In fact I think it does a pretty good job of pointing out when/where pair programming does NOT work (i.e. many environments for the reasons listed). If you happen to work in an environment not conducive to pair programming and they force you to do it... well then...
Re:Ask HN: Hosts you use for your projects? on Tuesday September 22, 2009 @12:32AM (#836262)
Heroku!

Older »