Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
zawerf
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
7 ms
·
1.
▲
by
zawerf
5y ago
People who get this should donate their excess bandwidth to a "worthy" cause. For example e-hentai.org serve their images from a p2p system called hentai@home and their total network is only using ~4Gbit/sec: https:/&#x
2.
▲
Hackers force MangaDex to shut down
(mangadex.org)
5 points
by
zawerf
5y ago
|
3 comments
3.
▲
by
zawerf
7y ago
CAPTCHA isn't just a matter of protecting your site. One of the most evil attacks nowadays is "Distributed Spam Distraction", where you spam your victim with thousands of emails per second so an important email (e.g., fraudul
4.
▲
by
zawerf
7y ago
Yea someone else also mentioned that generalization (called a tiered vector) in that thread: https://news.ycombinator.com/item?id=20873110
5.
▲
by
zawerf
7y ago
Express Helmet also turns it off by default and included a rationale for why (tldr: privacy leaks when there are random external links posted on a page): https://helmetjs.github.io/docs/dns-prefetch-control/
6.
▲
by
zawerf
7y ago
There was a really interesting post on this topic recently where you have a circular array of circular arrays of size sqrt(n). [1] The result is you can do O(1) access, O(sqrt(N)) insert and delete at arbitrary indices, and O(1) insert at h
7.
▲
by
zawerf
7y ago
I think people are supposed to report their salary with the stock price at grant, not after appreciation (at least on levels.fyi). But yea it's a lot more because google stock is half their comp and it keeps doubling every 3-4 years.
8.
▲
by
zawerf
7y ago
It's no secret that content moderators moderate content. Most of the stuff on HN is shaped by a few people who gets to decide what's interesting enough to get a boost or not. It definitely feels like gaslighting when you notice it
9.
▲
by
zawerf
7y ago
It wouldn't help if new features extend the capabilities of existing stuff (which is done all the time). For example the CSS Shader example from before adds new syntax to the existing 'filter' css style, which you might'
10.
▲
by
zawerf
7y ago
I am always irrationally(?) scared of using these sanitizers despite their successful history. As soon as new html/js/css syntax/features are introduced, won't your security model need to be reevaluated? Which seems like
11.
▲
by
zawerf
7y ago
(We're getting way off topic) but I think the problem with auto increment is that it can't be sharded easily since multiple shards can increment to the same value. If you then try to go back to random ids you're now stuck wit
12.
▲
by
zawerf
7y ago
I am trying this out and I am still on the edge of whether I like it or not. Create a table with a json column: CREATE TABLE Doc ( id UUID PRIMARY KEY, val JSONB NOT NULL ); Then later it turns out all documents have user_i
13.
▲
by
zawerf
7y ago
Technical note: big oh isn't a useful measure here. Most databases use b-trees (yes, even mongo) so lookups are at best O(log(n)). That goes for you and the people replying too. The constant factors are way more important here. It'
14.
▲
by
zawerf
7y ago
Here's the guy he said he got inspiration from: https://jakealbaugh.com/ I think if liked those you would also like: http://acko.net/ http://worrydream.com
15.
▲
by
zawerf
7y ago
I think we're way past that point already. Everyone with a phone already has their location tracked at least by their phone company. You might've even given it away to other companies willingly: https://www.google.com&#
16.
▲
by
zawerf
7y ago
I didn't believe that number but it seems like it's true if you restrict it to just north america monthly active users: https://thespring.io/investing/facebook-makes-more-revenue-p... Average revenue per user
17.
▲
by
zawerf
7y ago
The two communities have surprisingly different cultures (despite having high content overlap).
18.
▲
by
zawerf
7y ago
I have recently been struggling with versioning(and learning devops in general) myself so I would love to hear more on this topic. For example if you rollback a deployment (or if you just have browsers who haven't refreshed yet), how d
19.
▲
by
zawerf
7y ago
It's sad that you're getting downvoted. I was trying this out on my phone and although I had to switch to landscape to make the UI fit, it was buttery smooth! I was really impressed with the sheer amount of features included, many
20.
▲
by
zawerf
7y ago
Figma is pretty successful and is written in C++ compiled to webassembly: https://www.figma.com/blog/building-a-professional-design-to... https://www.figma.com/blog/webassembly-cut-figmas-load-time
21.
▲
by
zawerf
7y ago
I don't work with webgl much but I remember there being a max texture size of around 2048 or 4096 on many devices. Wouldn't you end up needing to tile the texture and stuff?
22.
▲
by
zawerf
7y ago
Machine learning researchers aren't working on language modeling because they want to enable fake news. They are working on it because it improves all downstream NLP tasks. See: http://ruder.io/nlp-imagenet/ . BERT
23.
▲
by
zawerf
7y ago
I was expecting this to be about fractional cascading which is a really clever trick: http://blog.ezyang.com/2012/03/you-could-have-invented-fract...
24.
▲
by
zawerf
7y ago
I upvoted for Terry's very insightful meta-commentary on when partial results can or cannot help with the full proof: https://terrytao.wordpress.com/2019/09/10/almost-all-collatz... I thought it was inte
25.
▲
by
zawerf
7y ago
This is a pretty tame use of the 2012 Linkedin breach. The breach also contained unsalted hashes which has mostly been cracked by now. They all ended up in a huge collection (773 million records) containing email/password pairs from ma
26.
▲
by
zawerf
7y ago
Can you describe how you can exploit this? It's good for defense in depth, but you have to pwned the user in another way to set the cookie in the first place right? If you're using httpOnly cookies you should be fine? (Not an expe
27.
▲
by
zawerf
7y ago
> know which modules are well supported, and will be for the years coming Doesn't matter if you're coming from outside or not, no one can predict the future. For example winston was probably the most recommended logging library
28.
▲
by
zawerf
7y ago
They are the same people behind the javascript port of the tesseract OCR engine: https://github.com/naptha/tesseract.js Here's an online notebook for trying it: https://observablehq.com/@tmcw/
29.
▲
by
zawerf
7y ago
I remember uninstalling this due to malware reasons. I guess it has been resolved for a long time now? "Our Copyfish extension was stolen and adware-infested": https://news.ycombinator.com/item?id=14888010
30.
▲
by
zawerf
7y ago
The Count of Monte Cristo
More ›