Hacker News: calvins

New comment by calvins in "Tetris Game Shows Promise in Reducing PTSD Symptoms"

calvins — Sat, 21 Sep 2024 21:02:28 +0000

The paper itself: https://bmcmedicine.biomedcentral.com/articles/10.1186/s1291...

New comment by calvins in "Show HN: Pydantic – Data validation using Python 3.6 type hinting"

calvins — Sat, 03 Jun 2017 18:52:54 +0000

What do you mean by 'out of the box'? jsonschema needs to be installed. It's not in the stdlib.

New comment by calvins in "LastPass release fix for DOM manipulation vulnerability"

calvins — Sat, 01 Apr 2017 16:27:47 +0000

It seems no security audit has been performed, but they plan on it at some point: https://discussion.enpass.io/index.php?/topic/404-security-a...

Their responses in that thread do not inspire confidence in the product for me, to put it mildly.

New comment by calvins in "Show HN: RSA Public Key Encryption in Python"

calvins — Mon, 02 Jan 2017 19:53:35 +0000

I think you should put the disclaimer at the top of the github page, and clearly state that it is not secure.

The disclaimer currently is near the end of the document and says only "Purely experimental project. Designed for learning purposes not production use.".

Some people will miss that at the bottom of the page (after how to install, how to use, etc.), or might not realize that textbook RSA is insecure (https://crypto.stanford.edu/~dabo/courses/cs255_winter00/RSA...).

New comment by calvins in "Why HTTPS for Everything?"

calvins — Mon, 02 Jan 2017 19:29:26 +0000

https.cio.gov SSL Labs test result: https://www.ssllabs.com/ssltest/analyze.html?d=https.cio.gov

Of note is that they're using a Let's Encrypt cert and running in AWS.

New comment by calvins in "Blox – Open Source Tools for Amazon ECS"

calvins — Sat, 03 Dec 2016 20:39:18 +0000

Not the OP, but I'd really like to be able to run containers with all unnecessary capabilities dropped:

https://github.com/aws/amazon-ecs-agent/issues/223

New comment by calvins in "Facebook is imposing American censorship on the rest of the world"

calvins — Mon, 12 Sep 2016 17:13:41 +0000

But doing a 360 doesn't mean doing a 180, and then sometime much later, doing another 180.

New comment by calvins in "Comparison of Programming Language Package Managers"

calvins — Sat, 30 Jul 2016 02:39:59 +0000

Pip has a constraints file now. Running

  $ pip freeze -r requirements.txt > constraints.txt

after you've installed all your packages gives you a constraints file that can be used to reinstall exactly the same versions:

  $ pip install -r requirements.txt -c constraints.txt

New comment by calvins in "Blue Ocean: a new user experience for Jenkins"

calvins — Sat, 28 May 2016 13:29:25 +0000

It's easier to disambiguate shapes and colors than just shapes or just colors -- something like a checkmark of one color, and an X of a different color.

New comment by calvins in "Ansible 2.1 Released, with Network Automation, Containers"

calvins — Thu, 26 May 2016 15:06:56 +0000

> if it's _truly_ agent-less why do they care about the python version on the target, I feel that python target code is the agent?

"Agentless" means that it works by pushing to the machine and that there isn't an agent process already running on the target. It doesn't mean that there aren't any requirements on what needs to be installed on the target already.

New comment by calvins in "Java Generics Are Turing Complete"

calvins — Thu, 26 May 2016 14:43:24 +0000

> it should hopefully reduce the FUD around alternatives with better type systems (Scala), if the type system is turing-complete in any case.

Beware of the Turing tar-pit in which everything is possible but nothing of interest is easy.

Alan Perlis

https://en.wikipedia.org/wiki/Turing_tarpit

New comment by calvins in "SSL Labs in 2016 and Beyond"

calvins — Tue, 17 May 2016 02:29:00 +0000

I'm also a happy user of SSL Labs and reader of Bulletproof SSL and TLS. One very cool thing about the book is that if you purchase the hard copy (I got it from Amazon, for example), they'll email you epub, PDF, and web versions for free. The web version is perfect for reference at work. And the book gets updates too (http://blog.ivanristic.com/2015/08/bulletproof-maintenance.h...).

Thanks Ivan!

New comment by calvins in "“I must, sadly, withdraw my endorsement of Yubikey 4 devices”"

calvins — Sat, 14 May 2016 02:39:33 +0000

> Either you verify from the bottom or you can't verify at all.

So 'curl ... | sudo -' is just fine now because we can't verify from the bottom, so there's no sense in verifying what we're piping to sudo?

New comment by calvins in "Ask HN: Good throw-away email service?"

calvins — Fri, 29 Apr 2016 23:47:56 +0000

There is spamgourmet (https://www.spamgourmet.com/index.pl). It doesn't satisfy 4 exactly, but it's pretty close. If you give out an email like 'foo.20.myusername@spamgourmet.com' (there are other domains too), then it'll forward 20 emails to the configured email for your account, but you can always log in and set it to 0 remaining at any point, regardless of how many emails have been received.

New comment by calvins in "Are We Living in a Computer Simulation?"

calvins — Mon, 11 Apr 2016 21:29:25 +0000

If we were in a simulation and the simulation would fail to realize its purpose if a sufficiently large number of beings in the simulation became aware of the simulation and changed their behavior, how smart would it be to try to get more and more people interested in the issue and look for "smoking gun" evidence? ;=-)

Transport Layer Security (TLS) Extension to Support Code Execution

calvins — Mon, 04 Apr 2016 05:31:03 +0000

Article URL: https://gist.githubusercontent.com/anonymous/3e4d157f744c8a4f5ab0551e822db2f3/raw/502e2340050867fe8f2363665c53c60304796317/draft-yolo-tls-server-code-exec-01.txt

Comments URL: https://news.ycombinator.com/item?id=11419622

Points: 1

# Comments: 0

New comment by calvins in "Unintuitive Things I’ve Learned about Management"

calvins — Mon, 04 Apr 2016 04:25:08 +0000

> You need to allocate at least 30 minutes per day (1 hour is better) just talking (averaged over the week) and not micromanaging.

What do you talk about for an hour a day, every day, that is so important that it justifies allocating 16% of all development hours to communication? I don't see how this much communication could ever be a net win (or even come close to breaking even).

New comment by calvins in "A Government Error Just Revealed Snowden Was the Target in the Lavabit Case"

calvins — Fri, 18 Mar 2016 02:06:26 +0000

"It is better to be a human being dissatisfied than a pig satisfied; better to be Socrates dissatisfied than a fool satisfied. And if the fool, or the pig, are of a different opinion, it is because they only know their own side of the question. The other party to the comparison knows both sides."

- John Stuart Mill

New comment by calvins in "Ten Years in the AWS Cloud"

calvins — Tue, 15 Mar 2016 04:19:59 +0000

Yes, us-west-1 has always seemed a bit of a second-class citizen. For years it has just been two availability zones, but they're named '1b' and '1c', as if there was once a third.

New comment by calvins in "Yann LeCun's comment on AlphaGo and true AI"

calvins — Tue, 15 Mar 2016 03:52:27 +0000

Shane Legg (a DeepMind founder) and Marcus Hutter collected and categorized 70 different definitions of intelligence: http://arxiv.org/abs/0706.3639

Their attempt at a definition that synthesizes all the others is:

> Intelligence measures an agent's ability to achieve goals in a wide range of environments. - S. Legg and M. Hutter