coo1k
coo1k on Hacker News
Posted by
coo1k on Friday October 11, 2019 @04:11AM
from the self-post dept.
TLDR; If you have two-factor authentication on, don't have trusted devices and are bad at remembering passwords then don't lose your iPhone.So a friend of mine just lost his iPhone and tried to find it using Find My iPhone feature from my phone. Only problem he can't remember his password. No big deal we thought. He still has access to his email used with apple id, so we can reset the password...
Got it. Good advice. I’ll try that.
That’s what I’ll eventually do. Right now I don’t have a product at all. Just want to evaluate the idea.
Posted by
coo1k on Thursday October 11, 2018 @12:42PM
from the ask-hn dept.
tldr; I’m looking for some kind of signal before I spend significant amount of time building something.I want to build a competing software product for a particular type of small biz. I see in reviews that people are not happy with the leading software provider for that niche. But how should I validate that there is a market opportunity for it and people will actually be interested in it? I...
I find BitMessage protocol truly decentralized. I worked on implementing a java client for it a while ago. It stores encrypted message on your machine, although only the intended receiver can decrypt the message. Although inefficient it's impossible to identify origin of the message.
On the downside the p2p message propagation could take time. I wish it was more popular.
Source: https://bitmessage.org/wiki/Protocol_specification
Just curious, technically what stops AA from simply cancelling the approved holidays? I'm not saying they should, just want to know can AA or any employer for that matter cancel a granted time off? Are there any legal implications for that?
Posted by
coo1k on Tuesday May 16, 2017 @12:42PM
from the ask-hn dept.
Saw this in my linked in feed.
https://www.linkedin.com/hp/update/6268389249687613440I really resent this idea, specifically because I did not do well in my initial interviews.
Apart from being unfair to interviewees, isn't this a breach of privacy/trust?"Let's Help Each Other(For HR Professionals)
So, I have come up with an idea and I hope it will make a difference.Being an HR, we do build our...
I did get some interviews through networking but I couldn't clear those. Till now I couldn't understand why, till my last interviewer told me since I'm from small company operating at small scale I'm not suitable for senior position.
10 to 12 phone screens in last 2 years and I was constantly trying to arrange interviews. out of those 3 progressed to onsite interviews, but was rejected in all 3. I'm in bay area, but need to move to seattle soon for personal reasons.
Posted by
coo1k on Tuesday February 07, 2017 @10:19PM
from the ask-hn dept.
I'm being constantly rejected at interviews. I was lazy not to change company early in my career. Now after 12 years when I finally started trying, I feel like I am obsolete and no company wants to hire me.
Thing is I am not a worst programmer. I did receive many performance awards in my company and for most of the years received good salary hikes. In last few interviews I did well in coding...
I have posted my tech stack.
Thats a great advice. I recently developed lot of interest in machine learning. I could probably create something useful out of it.
I do know other languages. It's just that Java is primary language used at work. I've updated my post with my tech stack.
Posted by
coo1k on Sunday November 13, 2016 @02:01PM
from the ask-hn dept.
I am a Java developer with 12 years of exp working for same company.Couple of years ago I got shortlisted by Amazon and 2 other companies, but couldn't clear interview.I gave up after a while.This year I started trying again. I am targeting Seattle area specifically. I don't have much of a network, so I search jobs on indeed.com. However this year I am not even getting replies to my...
I have macbook air 13" with 4 gb RAM. I use it for app development using XCode.
Posted by
coo1k on Tuesday September 27, 2016 @08:37PM
from the mercurynews.com dept.
Yes, but since the key resides with admin and not on server, I am assuming the private key will be stored securely.
OR you could encrypt user password with your public key. Then when you login, you can decrypt user password with your private key. Then go on decrypting user information with that password. This way you won't have to make copy of information posted by users and still will be able to view it with admin login.
There is a way to get around #3 although inefficient. Everytime information is posted by your users you can create 2 copies of encrypted information. One with users password for them to view. The other would be using your key, but you cant simply use password for encrypting your copy, that would be insecure since you need to store your password on server. Instead you can use asymmetric encryption such that you can use your public key to encrypt the information. Then you can use your private key to login to you website and view all information.
Disclaimer: I am far from a security expert.
If your website is used by authenticated users i.e. requiring username password to login, then you could use their password to encrypt relevant data and decrypt it in runtime when the user logs in. However make sure you destroy the password and decrypted information from memory after user logs out or after a certain timeout, whichever is earlier.
Since now you are not storing keys on your server, attacker wont be able to decrypt sensitive information even if he gains administrative access to your server. Each user will be holding key in form of his password. The attacker will have to get password of each user.
Use https so that the attacker wont be able to sniff out password of the user.
Downside:
1. Forgot password functionality will be hard to implement
2. If users try to login to your application after attacker gains access to it, attacker will come to know of the password and use it to decrypt information pertaining to that user.
3. Even you won't be able to see the information since you won't have the decryption key.
Posted by
coo1k on Wednesday June 15, 2016 @10:07AM
from the self-post dept.
When iPhone app for Xbox one was updated few days ago, I saw that the setting to share real name was ON by default. I had to set it off manually. Did anyone else experience this too? Shouldn't this be off by default? I bet no one would want to share their real name without explicit permission.
The problem isn't with finding new job, it's with time. There is no grace period for H1b. If you are laid off without any advance notice, you have to pack up your stuff and leave the country immediately. Not to mention, you have no time to sell off your car or any other property, unless you have friends who can do that after you leave.
So unless you are proactively looking to change company, you are always under constant fear.
Source:
http://www.uscis.gov/tools/ombudsman-liaison/practical-immig...
See Q2
On an unrelated note, your page took 1.2 minutes to load completely. And I have very fast internet connection.
Neon signs are confusing during day. They are not bright enough in bright sunlight. You have to look closely to see if they are on or off.
Flip boards seem very practical and do their job well in day or night. I see purpose in having name of the shop done in neon as it's the brand name. Don't see why Open signs should also be in neon. Initially, I thought thats what the article was about.