News for hackers. Stuff that matters.

kayman

Re:Work with Git Forges from Magit on Sunday June 26, 2022 @09:22PM (#31889664)
If you're an emacs user and you code in emacs, magit works really well with your workflow.
I feel like development has come full circle. Initially, it was all server side.

Then we had to use javascript to do some frontend stuff.

The javascript became frameworks which templated some of the patterns to make the frontend dev easier (led by React and Angular)

Frameworks like Blazor and Phoenix/Elixir are bringing the frontend dev back to serverside.

This has helped me form my view PFOF is not as bad as it sounds.

https://a16z.com/2021/02/17/payment-for-order-flow/

Re:An Introduction to Limit Order Books on Wednesday July 21, 2021 @07:38PM (#27913529)
I used to do limit orders - try to save some money by buying a stock when it's at lowest during the day.

Then I read a book by Fischer called "Common Stocks, Uncommon Profits"which suggested that when you have a long investment horizon, say 5-10 years, and you have done the research to have the confidence, a limit order gives you no real benefit.

Say a stock is $100 today. In 5-7 years you expect it to be $500, the benefits of doing a limit order are less significant.

Re:Ask HN: Do you self-host your database? on Tuesday June 29, 2021 @01:54AM (#27672291)
For bootstrapped projects without a PMF - which are my side projects I self host.

Postgres hot hot with 2 servers.

For clients I always recommend PaaS

Re:Ask HN: Have you found a good desk chair? on Saturday June 19, 2021 @12:28AM (#27557758)
Try the steelcase leap v2.

Aeron Miller was the 2nd alternative but ended up going with steelcase.

I've had it for almost a year and would still recommend it.

Re:GitHub – nushell/nushell: A new type of shell on Wednesday June 16, 2021 @02:53AM (#27525633)
Similar to "bourne shell" and "bourne again shell" aka bash

I can see the evolution now. "nushell". Next iteration: "nuer shell" (newer) or "renushell" (renew)

It’s because the average person has so many passwords in various formats that they forget. But that person most likely has access to their email. Instead of taking the user on a password reset journey, just shortcut to login. The attack vector is restricted to email no matter what.
I’ve answered this previously here.

https://news.ycombinator.com/item?id=24238783

In a nutshell it’s to handle federated identities.

The reason your username and password are on different pages is to handle federated identities. Take a typical saas product. Initially you build your own login username and password. As you grow your users ask to login using gmail, LinkedIn or Microsoft so they don’t have to remember multiple usernames and passwords. If you enable third party login it means you have to redirect the site to the third party login page to authenticate.

To accomodate that you design your page so the user first enters username. In your system you check based on email who the identity provider is and redirect to that login journey.

For e.g. if Microsoft you redirect to Microsoft login page to authenticate.

If successful the third party login provider will send you back to your app with a JWT. In your app you check if the JWT is valid - if so allow access.

On first entering email on login, If your login provider is your own app, you redirect to your own login password page.

In my experience, when people build apps without having to write code, the first iteration is awesome. Get something working and shows great promise. But as complexity grows, the app ends up being a badly designed excel screen on the web.
I've been off Facebook for many years now. I deleted my account when I found myself typing "f" into my browser. Facebook dropdown, select and lose time scrolling feeds.

I never got into instagram. As an american expat I find whatsapp convenient to contact my family overseas using their day-to-day telephone.

Re:Building a Kickass Portfolio on Friday August 03, 2018 @02:27AM (#17677651)
As someone who has been on both sides of the coin. My take is: Don't make your site for anyone and everyone. Keep a target audience in mind. Most of the time, the person that hires you is usually the target audience.

Don't try to be too cute. For example, I have seen sites/resumes where the whole thing looks like HTML tags. My first impression is "cute" but it makes it hard to read as you try to gather real information.

Most of the time when someone is looking at your site, they are asking themselves: - Who is is this person?

- What do they do?

- How much will it cost me. (Does it look expensive, cheap or reasonable what tier do they fall into. ex: Dominos pizza or Gourmet Pizza)

- Have they done any projects that are similar to what I'm looking to get done.

- Are they competent

- Do they look like someone I enjoy working with. (energy, attitude, views...)

Re:KeePassXC 2.3.0 released on Thursday March 01, 2018 @12:50AM (#16489970)
+1 for keeweb. It's central to my password management strategy now. Can't recommend it enough.

I've tried the offline versions, but I find myself often on the go - without my laptop.

The tools for mobile don't seem to support updates - read only. Keeweb does both.

Re:We Need to Nationalise Google, Facebook and Amazon on Wednesday August 30, 2017 @03:37AM (#15130342)
> That's a slippery slope argument. Do you want to nationalize nothing?

I meant where do we draw the line?

Re:We Need to Nationalise Google, Facebook and Amazon on Wednesday August 30, 2017 @02:59AM (#15130187)
Agreed 100%.

Does this mean if you ever built a company, and it gets too big, it will get nationalized?

And what will keep the law from evolving to nationalizing slightly smaller businesses as time goes.

Re:The US Army is developing autonomous armored vehicles on Wednesday August 30, 2017 @12:31AM (#15129745)
Didn't toyota recently say, we are way off from completely autonomous vehicles. But if anyone has unlimited resources to do it...its the army.
Re:Launching a Product with No Money and No Customers on Wednesday August 30, 2017 @12:10AM (#15129671)
Amen!
No. I do work in IT though. But not in the government sector.
On a positive note, the online services provided by a government agency are pretty good.

When I received a bill from the tax office I was able to go online and create a payment plan without human intervention.

There is also a portal that links multiple government services (Australian Tax Office, Medicare...) to enable access to multiple services.

A few weeks later, I also got a call from the tax office surveying about my experience.

Overall, my experience was great. (except for forking out money part :)

Re:Ask HN: What is your content discovery daily routine? on Thursday August 03, 2017 @09:32PM (#14925655)
Hacker News Wall Street Journal New York Times If I had more time, I'd read the economist.

Newsletters: Javascript Weekly Python Weekly

Re:Spotify preps to go public with 60M subscribers on Thursday August 03, 2017 @01:48AM (#14917233)
Yes. Its a company I'd invest in long term as long as I stay a delighted customer.
Re:Spotify preps to go public with 60M subscribers on Monday July 31, 2017 @08:57PM (#14897128)
I use spotify. Love it. My family uses Spotify, loves it. I hope they go public.
Block driverless trucks? I can see this only working short term. Long term, the benefits of driverless trucks are too great to ignore.

I'm curious to see how long and what tactics are used to delay this inevitable technology.

Similar to how Tesla faces all sorts of issues from the traditional car dealerships.

I'm also interested to see the politicians jumping on the bandwagon talking about saving jobs as an excuse to promote this agenda.

Re:PuTTY 0.69 has been released on Sunday April 30, 2017 @06:42PM (#14234276)
Agree. But it was a program that is far ahead of its time. Thank you Putty devs.
If only you'll be editing the site, as a dev, I always like to roll my own. Simple HTML/JS/CSS. Feel like I have more control, less learning and I enjoy it. But that's the dev bias.

If you want other non technical people to edit or make changes, choose a CMS.

Your goal is to get your message out there asap so you can solve problems.

End of day, the customer doesn't care, only you do. You can always change it later.

I see more risk in not trying to.
In software development, when I can't figure something out, it's natural to feel "incompetent". After all, someone is paying you for your expertise and you can't figure it out. You dev instinct is to hide in the corner and avoid all contact until you figure it out.

But you have to put your business hat on. Communicate with the client from a business level - you've hit a snag and it's taking slightly longer than expected. The client will then ask: "How long will it take?" Because you can't figure it out, you have no idea. But the client wants a timeframe answer. I give the client usually a range of time like "give a day or two to figure it out" or "I'll let you know later on today".

Do not tell the client to go hire someone else if you value your relationship with the client. Find that "someone else" and pay them to figure it out if you can. Do not dump the "you go find another solution" on the client.

Re:Should I learn C++ or Python? on Tuesday February 14, 2017 @12:08AM (#13641303)
Pick one, learn it. There are libraries to do what you want to do in both languages. If you get good at one, you'll figure out a way to shoehorn it into the problem you're trying to solve.
Re:New Macbook Pro power efficiency and time remaining on Monday February 13, 2017 @11:58PM (#13641262)
Yes. It's very annoying because my sessions and apps are open exactly how I want them. Anyone have a solution?

Older »