MitchellCash

Joined 10 years ago

Karma
76
Submissions
26
Member since
Aug 16
[ my public key: https://keybase.io/mitchellcash; my proof: https://keybase.io/mitchellcash/sigs/PX5OzxkSr8RZsFZxwWJMVnOwN4dU7d_hqNWRm9So1KY ]
View on Hacker News

Recent submissions

Comment · 2 years ago
I’m going to out myself, but you just do it anyway…
Comment · 3 years ago
It's the ISBN of Edward Snowden's book "Permanent Record: A Memoir of a Reluctant Whistleblower". The numbers in the poster differ because it's the ISBN of the Swedish translated copy of the book.
Comment · 4 years ago
> a change in the indentation used in our bundle files (4 spaces -> 2 spaces)

I find it interesting that one of the reasons given for the reduction in package size is due to such a simple indentation change from 4 spaces to 2 spaces.

Not interesting that 2 bytes are less than 4 bytes, rather, TypeScript is a large project and it would be interesting to know how much size was saved from this one specific change? Seems like a trivial change, so why not do it sooner? And assuming readability isn't required in the bundle output why not bundle with no indentation at all and put everything on a single line, would this not be even smaller again?

Comment · 4 years ago
I replaced my companies Google reCAPTCHA validation with Turnstile and so far the implementation experience has been fine. Not so different from the Google implementation and no major issues I have come across thus far.

In terms of how it actually performs, it’s only been deployed in staging and a limited user preview version of the site so far, so it’s yet to experience much of the bad traffic or edge cases that might hit the production site.

Comment · 4 years ago
As a child my cat would favour drinking water from our chlorinated pool rather than her water bowl. Interesting to read another anecdote about cats and chlorine. They say curiosity killed the cat, but maybe I’ll take the gamble and see if I can find an answer as to why!
Comment · 4 years ago
Comment · 4 years ago
Comment · 4 years ago
I think we can get the best of both worlds by hiding lock files by default and always showing any actual code file diffs. Performance may be a factor for very large diffs, but this would actually be my preference to how the default behaviour would work as I agree with you and the parent post.
Comment · 4 years ago
I prefer to run Ubuntu machines and at least in terms of provisioning a new secure server I built an Ansible playbook I called 'ANU' (as in A New Ubuntu). I'd expand to other distros, but then I'd have to change the name!

https://github.com/MitchellCash/ansible-anu

It is based on the DevSec OS/SSH hardening playbooks, but I lean closer towards ease-of-use over security where I think it makes sense. For example, I disable forced password rotation and I keep the default umask value of '022' instead of the more secure '027'.

When I come across something the upstream playbooks change that "gets in my way", I will disable it if the security trade off makes sense for me. I'm not running highly sensitive systems, so these trade-offs make sense for me, and maybe they will for you as well!

In terms of ongoing security upkeep, I run the usual `apt update && apt dist-upgrade` when I can, but I’ll be keeping my eye on this thread for additional advice.

Comment · 5 years ago
Yes, to both Vue and Nuxt via Open Collective. I use both tools so I like to give back to ensure work continues. I also like the idea of backing the 2nd horse in the race, so to speak, to keep competition active. A lot of backing and money is already behind React and its ecosystem, so putting my money towards Vue development feels like a win for me as well as potentially keeping the other frameworks and tools innovative.
Comment · 5 years ago
> Continuing work to restructure Firefox’s JavaScript memory management to be more performant and use less memory.

I went back the last few versions major release notes and didn’t see mention of the initial work to improve the JavaScript memory management. Is anyone aware of this work/what’s going on to improve memory management here? Interested to read more about the technicals!

Comment · 5 years ago
> Under Swiss law, it is obligatory for a user to be notified if a third party makes a request for their private data and such data is to be used in a criminal proceeding.

They’re not explicit with regards to the activist, this would mean the activist was notified upon ProtonMail receiving the request?

I’m not sure there’s much you can do but lawyer up if you receive such a notice, but potentially the activist could have immediately started using Tor (maybe too late though, because to read the notice they might have already leaked their IP).

Comment · 7 years ago
I did, it was non-mandatory and most of the (small) company would be on the call each day. I would turn my camera off and opt for just audio, but others would leave theirs on.

I enjoyed it for being able to have a quick back and forth when I had a question for something that was stopping my current task. Alternatively, I would be waiting on an unknown response time to a chat message which lead to a lot more task switching mid progress. But most of all, I just enjoyed the general talk that comes from being on a non-specific all day call - sports, family, news, etc. I learnt a lot more about my work mates that I otherwise wouldn’t have, which made us closer and work more enjoyable, plus working remotely can just get lonely sometimes.

I say all this and must mention that this call would happen daily for 6 months or so, but has slowly lost participants or only happens every other day as the company changes/grows. For me, I would like to see it come back!

Comment · 7 years ago
Comment · 7 years ago
The CyberWire is a daily (Mon - Fri) podcast for cyber security news. Each episode goes for around 20 minutes and breaks down any significant news from the last 24 hours/weekend.

This is about the only cyber security news I directly follow and it tends to keep me abreast of the major going ons and the 20 minute length is short enough to digest daily.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton