Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
yuliyp
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
57 ms
·
661.
▲
by
yuliyp
13y ago
That recruiter is bad at their job, then.
662.
▲
by
yuliyp
13y ago
A phonebook as trie would only apply if you had tabs for each letter all the way down. It's a vector of pages.
663.
▲
by
yuliyp
13y ago
Fewer physical buttons doesn't make the interface less confusing. If a button does 5 different things, it becomes more confusing, because a given button is really 5 actions that you have to understand when they apply before using that butto
664.
▲
by
yuliyp
13y ago
The query plan for that is simple, but the number of bytes transmitted per query is O(size of table) (as is the disk IO on the DB), which should clearly set off a red flag if you know that size of table can get large. You don't need a large
665.
▲
by
yuliyp
13y ago
What does "poor queries" mean other than queries with poor asymptotic complexity based on the query plan?
666.
▲
by
yuliyp
13y ago
No. Abstracting away the client-server divide in web apps is a broken concept. The server runs in a trusted environment. You can trust the results of decisions it makes ("can the user write to this object?", "can the user see this object").
667.
▲
by
yuliyp
14y ago
People want to work remotely. They want email on their iPhones/Androids/Blackberries. They want to e-mail people at other companies. Every once in a while you need a nontrivial amount of information to cross that airgap. Then you have Stux
668.
▲
by
yuliyp
14y ago
This sounds like it's orphan works legislation. Apparently The Register feels as though the standard created for what constitutes an orphan work is too low. Can anyone who understands UK law actually clarify what it actually means? The arti
669.
▲
by
yuliyp
14y ago
The physical analogy falls apart because generally envelopes are tamper-evident against most attackers (i.e. it's hard for a malicious postal worker to take your envelope, open it, read what's there, then repackage it without it being detec
670.
▲
by
yuliyp
14y ago
DNS runs over UDP, which means the source of requests for information can be spoofed. Also, the amount of data of a response is significantly larger than the request, so you can use DNS resolvers to send significantly more data to a victim
671.
▲
by
yuliyp
14y ago
This has nothing to do with the takedown and indemnification sections. It has to do with the sections which make talking about, writing, distributing, and running certain types of code illegal.
672.
▲
by
yuliyp
14y ago
When you look at the page with text when it's done, you're going to be focusing on the text too. Judging the page in a more realistic scenario makes sense.
673.
▲
by
yuliyp
14y ago
Generally I'd imagine carriers being very unlikely to object, unless the boosters end up causing worse reception for some of their customers in certain places.
674.
▲
by
yuliyp
14y ago
DRM is not meant to stop the flow of content to thepiratebay, and never has been. Its purpose is to stop casual sharing, enforce region restrictions, and encourage repurchases. That's all.
675.
▲
by
yuliyp
14y ago
The general idea is that startups which shut down like this impose a cost on _every other startup_ out there, because it makes people more hesitant to actually use and rely on services provided by startups due to their memory of being burne
676.
▲
by
yuliyp
14y ago
I'd hope that you would have higher expectations of Harvard students a bit more strictly than monkeys.
677.
▲
by
yuliyp
14y ago
Expected value gives you the "If I look at 5000 shower-takings with a 1/1000 probability of a shower-taking resulting in death, I expect to see 5 deaths on average". Of course when applying it to a single lifetime, the correct thing to cons
678.
▲
by
yuliyp
14y ago
This works until you put the definition of d into the English language version of Wikipedia
679.
▲
by
yuliyp
14y ago
To be fair, running any internet-facing apps in a chroot jail is a good idea no matter which language they use.
680.
▲
by
yuliyp
14y ago
This feels somewhat MitM-able. Say I want to get access to your account on site Foo. I create a web site and entice you to log in on it using Clef. However when you initiate the flow I don't create a Clef code normally, but I replace it wit
681.
▲
by
yuliyp
14y ago
You have to be careful of how you sample for the A/B testing. Even if they properly chose a set of users to get Feather, and a set of users to stay at baseline, their results would STILL get skewed, since the remote users who now got Feathe
682.
▲
by
yuliyp
14y ago
At some point, the results of what the side process did have to get communicated to the parent process. You can reduce the size of the channel, but you can't close it completely. Bugs happen. Bugs in never-executed code happen and tend to
683.
▲
by
yuliyp
14y ago
Why is storing them encrypted locally any better? Someone with root has access to the decryption keys anyway.
684.
▲
by
yuliyp
14y ago
Text is a sequence of characters. HTML is a sequence of tags and HTML-encoded text. Some text can be interpreted as HTML. Some of that HTML can be malicious. The bottom line is if you take text, and you give it to something which expects HT
685.
▲
by
yuliyp
14y ago
The URL can be attacker-controlled
686.
▲
by
yuliyp
14y ago
I hope nobody ever thinks this is a good idea.
687.
▲
by
yuliyp
14y ago
I'm having a tough time understanding talent acquisitions. You have a set of people working for the startup and the outside investors in the startup, and you have an outside company trying to purchase them. The outside company offers $X for
688.
▲
by
yuliyp
14y ago
This is confusing authentication and authorization. Is this phone legitimately tied to this Apple ID? Yes. Is the owner of the account authorized to make such a purchase? No. A short appstore PIN could solve this much more easily.
689.
▲
by
yuliyp
14y ago
Making an assumption that will fail approximately one time in the entire history of the universe is safe.
690.
▲
by
yuliyp
14y ago
Doesn't this add a new vulnerability? If I can see the salt for a user, I can easily add a new password for that user _without anyone possibly being aware of it until it is used_ by just adding the hash of the desired password with the exis
More ›