News for hackers. Stuff that matters.

msmith

Re:The Twelve-Factor App on Friday August 28, 2026 @12:40PM (#49481091)
How did you see a connection to Intuit? I believe this originated from Adam Wiggins, cofounder of Heroku - acquired by Salesforce.
Re:DNS-Persist-01: A New Model for DNS-Based Challenge Validation on Wednesday February 18, 2026 @08:30PM (#47068802)
To mitigate the threat from an attacker who controls the network between the cert issuer and the DNS server, CAs will check the DNS records from multiple vantage points.

Let's Encrypt has been doing this for several years, and it's a requirement for all CAs as of 2024.

[1] https://cabforum.org/2024/08/05/ballot-sc067v3-require-domai...

1 is the lowest score. 10 is highest
- “G4” the TV network, not to be confused with the series of Mac computers
https://www.infracost.io/ might do what you're imagining
Re:Turbo Pascal Turns 40 on Thursday November 30, 2023 @06:42PM (#38480871)
I had a similar experience in the same era. In addition to the deviant stuff I also used it to tinker with graphics programming using inline assembly for the “performance critical” (for a 386SX) parts. That experience definitely laid the foundation for what I do today.
This sounds like how we use a CVSS score to gauge the severity of software vulnerabilities.

Maybe the world needs a standardized place to catalog and rank all the data breaches that have been disclosed.

Re:Cloudflare API Down on Friday November 03, 2023 @12:28AM (#38124531)
I feel the same way. What about Akamai, Fastly, or Okta? Maybe Cloudflare gets more attention because of their low end plans are accessible to anyone.
It boggles my mind that Google Fiber has been available in Austin, TX for 10 years but is still not available in the communities next door to Google HQ.
Re:Tesla earns $690M less than expected in third quarter on Wednesday October 18, 2023 @08:23PM (#37936653)
I'm going to guess dboreham is Canadian?
Re:Better HTTP server routing in Go 1.22 on Monday October 16, 2023 @02:39PM (#37904172)
I think you're assuming that the panic happens when a request is received, but it actually happens when a conflicting route is registered.

To me, that's reasonable behavior and is consistent with other things such as https://pkg.go.dev/regexp#MustCompile

Re:Ask HN: Show me your half baked project on Friday October 13, 2023 @06:37PM (#37876374)
Definitely. I have a couple use cases for it at <dayjob>.

Thanks for sharing that link. https://www.url2png.com/ is another I know about.

Re:Ask HN: Show me your half baked project on Thursday October 12, 2023 @07:24PM (#37864481)
https://www.pagesnap.app/

Webpage screenshots as a service. I was scratching a personal itch with this one but maybe some day I will make it something others can use at scale.

Backend powered by Google Cloud Run, Pupeteer, and headless Chrome. Website is Next.js.

Re:HTTP/2 Rapid Reset Attack on Thursday October 12, 2023 @05:33PM (#37863438)
Can your example be solved by having the k8s cluster resource reference the network resource’s “name” attribute?

Doing that allows Terraform to create both resources in one plan/apply step, and it also helps Terraform understand the dependency between the resources so that they are created in the correct order.

I use New Retirement and one of my biggest complaints about that app is that it expects you to provide the optimistic/pessimistic rate of return for each of your investment accounts. I would love to have a tool that provides some guidance on setting those numbers, based on historical returns and the asset classes in the account.

I can see value in having similar guidance for things like mortgage interest rates. Maintaining all of this educational content and keeping it up to date may be a challenge, though.

I love to see more tools like this for do-it-yourselfers like me. I've only just now tried using ProjectionLab for about 20 minutes, so take this with a grain of salt, but I've watched Rob Berger's review of the tool and I've been a subscriber to New Retirement for a few months now.

First impressions:

- It's obvious you've put a lot of love into this tool and it really shows. The UI is very responsive and I think I would enjoy using it.

- At first glance, it compares favorably to the core features in New Retirement: Tracking your assets and investments; Showing projections based on different scenarios and assumptions.

- I didn't see any places where it's providing financial planning suggestions. New Retirement offers "Digital Coach Suggestions" which recommends various things to look into, based on the information you enter. For me, that's a valuable feature because one of the reasons why I'd pay for a tool like this is so that it can help me poke holes in my financial plan.

- Your pricing is totally fine. I see your competition as financial planners who charge a few thousand dollars for a one-time financial plan or, worse, an ongoing 1% AUM fee. I've paid a human to do a financial plan. It was worth the money because it gave me the reassurance that I kinda know what I'm doing, but I didn't see the value in paying a recurring fee for them to "monitor" my investments going forward. I'd much rather pay for direct access to a tool that lets me do that myself.

- Despite the previous bullet point, I do see some value in having a human who can give good financial planning advice. I would pay a few hundred dollars to meet with a human who can give me useful advice whenever I'm at an inflection point in my financial life. Maybe that's another potential revenue source for you in the long run.

This is great. It reminds me that I tried to recreate this effect with Turbo Pascal back in the 90’s when I first got into programming.

Sneakers, Wargames, and BBS culture were pretty influential for me at the time.

Oh, right. I meant to say 14” MBP in my parent post.
Does it support more than one external display? The lack of that feature was the primary thing that drove me to choose a 13" MacBook Pro instead.
Re:Musk’s First Email to Twitter Staff Ends Remote Work on Thursday November 10, 2022 @04:06PM (#33553368)
I wonder if you've read Turn the Ship Around [1]? It's one of my favorite leadership books and tells the true story of the Navy captain who was put in the awkward position of running a submarine class that he was not familiar with.

He adapted to the situation by leaning on the expertise of the crew in a way that was very different than the normal command-and-control style of leadership. It sounds like what you describe in type 1.

[1] https://davidmarquet.com/turn-the-ship-around-book/

Re:Apple’s next big thing: A business model change on Monday September 12, 2022 @04:04PM (#32816103)
This study claims that there was a decrease in weather prediction accuracy caused by the reduction in commercial flights due to Covid. Maybe there are still some lingering effects from that?

https://www.sciencedaily.com/releases/2020/07/200717101026.h...

Re:Ask HN: Hacker News is for tech, as X is for Y? on Friday February 11, 2022 @08:33PM (#30309079)
as Bogleheads is for investors
Re:Submarine cable map rendered onto a globe on Friday September 24, 2021 @09:58AM (#28642413)
It's interesting that there are so many cables running through the Suez Canal. I wonder if it's because of geopolitical reasons for avoiding going over land through the Middle East.
Re:Vercel Serverless Functions vs. Cloudflare Workers on Friday March 26, 2021 @12:24AM (#26588723)
We’re using it to customize Cloudflare’s default caching policies so that we can cache more content at the edge. For example, we can segment the cache based on the geolocation or device type of the client. We can also normalize the URLs before doing the cache lookup, by stripping query params which we know aren’t going to affect the content in the response.

This can save hundreds of ms from the response time of the initial HTTP request, which means all of the other page resources will load more quickly too.

It does add some additional complexity, but for large sites and hosting platforms, this can have very significant cost savings. It’s usually way cheaper to serve bytes from Cloudflare’s cache than to serve them from your origin.

Re:Simulating the PIN cracking scene in Terminator 2 on Wednesday January 06, 2021 @10:07AM (#25658360)
Turbo Pascal 7 was my intro to programming and it was such a great learning environment
That link was fascinating to me. For as long as I remember, there have been tools to evade network intrusion detection systems and stateful firewalls, but I never thought about how the same techniques can be used to evade censorship.
You might enjoy reading all the things that Marty Cagan has written about product management. I think he has a good take on what it means to be a good PM, and what you're describing sounds like what he calls a Feature Team [1]. Unfortunately, it's really common to be in an organization like this where the roadmap is driven by outside stakeholders, and product managers are treated like project managers who just implement their ideas.

[1]: https://svpg.com/product-vs-feature-teams/

Older »