kogir

24 ms·

211.
by kogir 10y ago
Insist on accountability, and that tasks and responsibilities are assigned to specific people. Then stop picking up the slack. If your organization won't hold people accountable, or unfairly holds you accountable, you should consider y
212.
by kogir 10y ago
I've not tried recent versions of node but have had to port things like Brendan Gregg's flamegraph tools from node to other languages because node would die with even pedestrian memory use (well under 4GB). Does anyone know if Cha
213.
by kogir 10y ago
Stuff like this is a nice touch. I wonder how long it will stay up? It would be controversial but really interesting if they dropped an actual 0-day during the show as well.
214.
by kogir 10y ago
Racket's documentation is wonderful and the community around it is very welcoming and helpful. I'm a huge fan and my only wish is that it supported OS threads so it was possible to fully utilize a machine with a single process.
215.
by kogir 10y ago
I use a 32" 4k monitor about 3-4 feet back on my desk. I run it at native resolution and it fills my field of view without requiring I move my head nearly at all. Compared to what you're considering, I'd be really worried abo
216.
by kogir 10y ago
I like my storage to persist across power failures :)
217.
by kogir 10y ago
With EBS you can't just match size, since the IOPS and latency matter far more.
218.
by kogir 10y ago
Yep. Most used by the ZFS ARC, the rest by Racket and HN itself.
219.
by kogir 10y ago
Most of it is redundancy. Either duplicate copies, parity, or previous snapshots (off of which the backups are based). I think the whole HN dataset is well under 100GiB, and maybe even under 30GiB.
220.
by kogir 10y ago
Back when HN was still running with millions of files in one directory on UFS, maybe there was something to talk about (not much more than sysctl tweaks). Oh, and UFS snapshots (for tarsnap to reference) sometimes panic'd the box. Wh
221.
by kogir 10y ago
It's really important both to backup the FDE keys and have regular backups. I lost a volume to BitLocker AES-XTS 256 earlier this year and luckily only lost a few days of work. I've since substantially improved my backups and even
222.
by kogir 10y ago
I may be an oddball, but I expect engineers at at startup to help with support, and would absolutely hire someone who had worked in a support role over someone who hadn't if they're otherwise equally qualified. The experience is s
223.
by kogir 10y ago
I listen to my flash briefing (news podcasts/summaries) every morning, and occasionally reorder bulk items like paper towels and toilet paper.
224.
by kogir 10y ago
When I worked on HN we actually talked about this and specifically decided against it. Currently, everything on HN is public, except for password (hashes), emails, and who [voted for|flagged|vouched] what. If all HN user data leaked right n
225.
by kogir 10y ago
Nobody at YC would balk at your applying, and all would probably encourage you. If you're worried about a YC alum at the partner company seeing your application, reach out to YC - I'm no longer involved in the software, but there
226.
by kogir 10y ago
Make sure keeping your old insurance via COBRA isn't the right choice. That's what I did. Comparable plan on my own would be much more expensive.
227.
by kogir 11y ago
Get a substantial number of their current (or now former) customers using it. Until you can demonstrate your offering is real and the market thinks you matter, they won't think you do. There's really no way to skip this step unles
228.
by kogir 11y ago
Looks interesting. Does the Windows service need to run as Local System? Seems like Network Service may be safer and equally functional.
229.
by kogir 11y ago
You're right, I just looked for reject and picked the first I saw. As for the defaults, you have much more faith in other people's correct implementation of them than I do. Why not just be explicit?
230.
by kogir 11y ago
I had this problem. Back when I finally took action I was receiving 500+ bounce notifications a day. If you fully and correctly implement SPF[1], DKIM[2], and DMARC[3], you'll see a massive improvement as much of the SPAM gets dropped
231.
by kogir 11y ago
No. They revoked that single developer's certificate. I think you're referring to an Apple certificate that simply expired and invalidated many App Store signatures.
232.
by kogir 11y ago
For routing, VPN, and firewall, I run pfSense on a Jetway NF36-2600 I bought 4 years ago. I intend to keep using it for another 6 more years. It's still massively overpowered for my limited bandwidth and can run normal FreeBSD packages
233.
by kogir 11y ago
Looks fine to me, though I tend to write my lisp narrower and taller. Part of that is breaking long argument lists out onto multiple lines with proper indentation. Here's some Racket code in DrRacket: http://i.imgur.com&#x2F
234.
by kogir 11y ago
That works if you have sessions. HN doesn't.
235.
by kogir 11y ago
That only applies to browsers. I can request it from my server just fine. See https://news.ycombinator.com/item?id=11178922
236.
by kogir 11y ago
What stops an attacker from requesting the CSRF token?
237.
by kogir 11y ago
wget, curl, whatever. If I'm the attacker, I ask for a new one from my server each time and put the result in the form I serve your browser.
238.
by kogir 11y ago
That's actually not always enough. For example, to fix this login CSRF on HN, you need a per-visitor secret an attacker can't read (like a cookie) plus a form value based on that secret . Note it can't be tied to the user ac
239.
by kogir 11y ago
Not sure how I feel about Amazon referral links being on the front page of HN.
240.
by kogir 11y ago
For this to work, either your mail client is not enforcing TLS be used, is not validating the certificates presented to it, or trusts Stanford's MITM certificate. Perhaps you should try port 465 with forced SSL. Stripping TLS is unforg

More ›