Hacker Newsnew | past | comments | ask | show | jobs | submit | MCRed's commentslogin

Could the selection of primes derived from Pi be optimized to find weaker ones vs. stronger ones? eg: calculate a very large set of them and then pick the ones that are weakest and then publish that as a standard (of course you wouldn't let on that you had chosen the weakest, you could pick an arbitrary function that gets you the weak ones which would then look really good because pi is objective and that function is objective.)


Does anyone know where one can get a free wildcard certificate? Need it for development and foo/bar/baz/biff.example.com change names regularly (they include the hash of the code commit) so I would like to get a *.dev.example.com wildcard cert. (one that won't give warnings that scare the business types who are testing the code, and won't understand what self-signed means.)


If it's just for local development, you can make a self-signed certificate and add it as trusted to your browser(s).


To anyone wondering, this is also what the "big boys" do, so dont feel like this is a hack. Most big companies have their own company root CA, and install that cert on their company computers. They then have all internal apps use a cert signed with that root CA (or derivative thereof)


And that's how the CA system is actually supposed to work. You add to the trust store those entities you trust rather than those that are trusted by the browser makers...


I've been thinking about grabbing the last release of ngrok and some internal setup of lets encrypt or just wildcard to run something like that.


CloudFlare does that. You could run a self-signed certificate on your server, relying on the wildcard certificate CloudFlare generated to do its proxying of your domain.


Amazon Cetrificate Manager seems to do this, but it's only available in one region right now.


Other than Amazon Certificate Manager as moatra mentions (which I don't think let's you export the certificate), I don't think there is currently an option for free wildcard certificates.

As an alternative you could incorporate provisioning of a Let's Encrypt certificate for the new subdomain into your deployment process since the process is designed to be automated.


Current rate limiting wouldn't really make it possible, unfortunately.


Not if you have more than five subdomains, you have to wait for a week, like me.


... if you need a different certificate for each subdomain. You are limited to 5 certificates per domain per week, each of which can be valid for many subdomains. Bad if you want to be able to add them dynamically every time a new name comes up, but if it is a static set...


I used SubjectAltNames on my setup. One domain/one cert, though I only did 2 subdomains.


You could automate getting Let's Encrypt certificates, so it can automatically generate a certificate for each domain.


You will run into rate and other kind of limits if you issue many names for a single TLD+1 name. Constantly ran into this while developing a plugin for cPanel.


You can get sub-€100/year wildcard certs on gandi.net (free the first year for their own domains I think?), which shouldn't be a problem for a business expense.


The iPhone has never prevented you from running your own code on it. It shipped with a javascript SDK and then within the year they opened it up to objective-c programs. They charge you $99 a year for the certificate signing service, but it's really no big deal... if you can afford an iPhone you can afford $99 a year. (Hell, I think these days you don't even need to be a paid developer, the free developers can run their code on their phones.)


You no longer need to pay $99 to run code on your phone. You pay only if you want to distribute it through AppStore.


10k distinct combinations-- if, and only iff, they used a 7 digit all numeric pin. The odds of this are not bad for most people, but in this case the person who had this phone has shown better than the average criminals level of OpSec.

One thing is for sure- for phones with TouchID where you only need to enter the pin on reboot, it makes sense to make the pin something other than numeric and longer than 4 digits.


iirc iOS 9 now requires 6 digits passcode on devices with TouchID.


Not true -- 4 digit passcodes work just fine (and are default) on Touch ID phones.


"The default for passcodes on your Touch ID–enabled iPhone and iPad is now six digits instead of four." ~ http://www.apple.com/ios/whats-new/


Does anyone really believe he can do it? Is anyone taking him seriously?

I see this as a campaign stunt for the LP nod. But for me, it only confirms that Gary Johnson is the right choice. McAfee isn't exactly striking a resonant chord for liberty here. He's coming off like a braggart.

I wish the FBI would give him a shot at the data- cause I'd like to see him eat a shoe on live TV, or STFU and go into hiding if he doesn't have the guts to eat the shoe.

Cause I don't think for a second he can break AES.


Is McAfee the Donald Trump of the tech world?

#MakeSecurityGreatAgain


Lets see, english major up to her ears in debt, moves to San Francisco for a CSR job?

I think we need to up the math requirements for english degrees.

Alas you can't teach common sense.

I would be a lot more sympathetic if I weren't constantly being bombarded by BernieBros insisting we need "Free" college educations and all kinds of other handouts.

Sorry, I grew up poor, I didn't get lucky, I worked hard. I made my own luck.

She made her own bed, and then set it on fire.


I agree, the post was a terrible idea. And yes it comes off as a bit whiny and yes there are certainly improvements that can be made to her personal finance skill. All that said, your comment is not fair.

Have we reached a point where only those with STEM degrees and $100k+ salaries deserve to live in SF? You didn't just work hard, you were lucky enough to have the aptitude and interest in a field with stable job opportunities. Others may not have the same interests or abilities. And how boring would it be if we were all engineers anyway?

The author is frustrated with student debt, stagnant wages, and an inflated SV housing market. All valid concerns that millions of other Americans are echoing today. To top it off she is treated as expendable and fired as soon as she starts speaking out. Given that, maybe you could have some compassion? Or at least not resort to making an ad hominem attack?


Here you go, using the same word that got "the author" in her situation. 'Deserve'. I don't know whether she - or anyone else 'deserves' to live in SF. But I know that she was not able to - or, at least she was not able to find the standards of living she wanted.

Being able to is a math question. Take your salary A after taxes, subtract B = rent, subtract C = payments on the loan you are planning to take to cover the move, subtract D = other monthly costs of living, subtract E = food costs. A-B-C-D-E = X . If X is less than acceptable (or even less than zero) don't move.

'Deserve', the word you (and "the author", although she does not spell it directly) use, is a proxy for 'wanna wanna wanna'. Guess what, even if you 'wanna wanna wanna' ('deserve', 'have a dream to') to live in SF, that won't help you a bit. An adult is supposed to be able to understand this. That's why there some of us don't have much compassion for the author.

P.S. 'Deserve' is also a political tool, most often used lately to justify wealth redistribution. That's why user MCRed immediately connects the author to the Berniebros. I do too.


These are people who are being employed by companies in SF and yet who are not paid enough to live in SF. It's a disgrace. You can get people to fill these jobs because a lot of people are desperate right now, but that doesn't make it ok. If the author hadn't taken this job, someone else would have, and that person would be in exactly the same dire financial straights.


Did you even read the OP? "The author" moved from somewhere to SF, found a job and took it. She was not desperate, not without stretching the meaning of the word too far.


You clearly didn't read my post, because I didn't say that the author of the article was desperate. My point was that even if a job radically underpays, it's still possible to fill it right now. Yelp are exploiting people who for whatever reason are willing to accept offers for jobs that don't pay a living wage. Judging by her description of her hourly wage she's not making more than $30,000 a year, even if you assume that she's working 7 days per week every week. More realistically, she's probably making more like $25,000. I lived in DC from 2007-2010 on $23,000 with roommates, in a city that was much cheaper than SF is now, and it was basically impossible. I certainly ended up getting into debt. I would not judge someone who is having a hard time paying their living expenses in SF on that sort of wage.

Also, why are you putting "the author" in scare quotes? She is the author of the article we're discussing.


Maybe at some point we should stop doing jobs that don't pay us enough to survive...?


How do you expect people to survive if all they get are bad job offers? Sure she should move to a different city, but it's really screwed up if a city is unable to provide decent jobs to an entire group of people.


How is that screwed up? Nothing wrong with that. People are just bitter because they want in at a special price to something that has already been built and already shown to be great.

Why not move somewhere else and help make it great?

Anyway, if it continues like this, SF will collapse on its own and all those people who fought for special benefits to get in will be fighting for equally special benefits to leave.


I'm not saying that taking the job was a good decision. But it isn't just because of her personal situation, I just don't know who this job would be good for. It wasn't a good opportunity for advancement, she found out she had to wait a year before she could transfer. It didn't pay enough so people could afford to live without getting money elsewhere. And I don't think going into debt for this job would provide any benefit for a career. Sure, that specific job might be great for a few people in very specific circumstances, but it didn't look like Yelp was concerned about job fit. And her coworkers were having problems too. So what is screwed up is a company expecting people to make major financial sacrifices to work there. It look like yelp is taking advantage of their workforce.

I agree with you, if this is a really accurate picture of what it is like in SF, it might collapse. But I think companies will have some responsibility, not just workers who took bad job offers.


A year in a paying position is an excellent opportunity for advancement. The author's entitlement shines incredibly brightly when she makes her point. What's so special about her that she should be offered advancement faster? Her English lit major? Pshaw, I can get one in every Starbucks.

Fun fact: one word not in this article: roommate. 'The author's greatest expense is rent yet living with others does not enter her world. By the way, you asked "who this job is for"? People willing to share rent for starters.

People willing to make dumb decisions will face the consequences. The author tries to make it about Yelp, but it's not about Yelp, or any other company paying people "$8.15 an hour after taxes". If you want someone to take responsibility, it should be Talia Jane.


A year in a paying position is good, but I see no extra value that Yelp is having that would make the idea of losing money working there a good position. Sure, maybe they liked to promote within, and maybe she could have changed departments in a year, but I would want to believe that the company would commit helping me change departments at the end of the year. I don't see that commitment from Yelp. Without that I would assume any decent media job would be better than staying at Yelp as a CSR. Getting a job as a CSR doesn't seem to be that intrinsically interesting if you wanted to get a job in media.

I'm not saying taking the job was not a bad idea. I'm saying I can't really think of any group of people for whom that job would be a good fit, besides maybe students who weren't worried about rent. And I think Yelp is exploiting their entry-level workers.

I've had a full-time job or two from large corporations that were very low pay and did not have room for advancement. And I think I was very lucky to get those positions. I ended up getting some really great opportunities that I'm really grateful for. But I don't feel I was being exploited at all. Even though I might have been able to get more money outside of that industry, I was getting really valuable experience in a field I wanted to work in. It wasn't customer service work. And even though living in the same city as my work might have been a bad idea, I could have afforded rent outside of the city. And I basically only took the jobs for the work experience from those position. It would have been naive of me if I had been expecting the opportunities that I got.

I would have had to have been really entitled to write a public complaint about my pay and work. I don't think it would have been honest, and practically it would have cost me a lot. I might not have actually discovered how expensive that mistake would be. But I don't think I was treated unfairly. And the difference with Yelp is that I have the impression Yelp would not be able to meet their hiring needs for that position with their current offers if they weren't hiring people who were either desperate or making bad decisions.


She almost certainly had better financial options; she wasn't suffering severe disabilities. It's just that these options weren't the kind of thing that would lead her to her dream job/life.

In a sense, this is no different from the tradeoff everyone has to make between "stuff you enjoy doing" vs "stuff that will pay". Someone who knowingly makes a sacrifice to get close to the job they want is different from someone who simply can't find work at all; the author was far more like the former than the latter.


Sure, taking the job wasn't a good decision. But I don't have any compassion for companies who pay full-time employees poorly enough that they are required to choose between getting outside funding (like family or a second job) and going into debt.


The choice is actually "don't move to SF (unless you can afford it".


That is definitely her responsibility. But the company is choosing to offer salaries that do not cover living expenses. And I think that is really unethical.


Hm, that just make me realize something: we prohibit people from taking (or offering) jobs with wages below a minimum ... but we allow them to also live in places (and be offered such rentals) so expensive that that they're in poverty, under a more reasonable "discretionary income" metric.

Doesn't seem consistent.


Are you implying the government should tell you where you have to live? It's been tried before.

Perhaps a better idea would be to simply educate people in household economics with available books, podcasts, TV shows, libraries, etc.

Oh wait, we already do that.


I also grew up poor, and I also worked hard, and I've made my own luck. But the system is rigged, my friend. Only some of us will be able to "make our own luck." Are we not supposed to look after those of us who have failed?

I'm glad the OP wrote this article. Sure, I disagree with their choices, but that doesn't matter. I'm hearing about these kinds of stories more and more in SF. When are we going to do something about it?


Doing 'something' about it is doing 'something' about the choices you disagree with (= limiting people's ability to make those choices). Until you understand this all you proposing is to shield people even more from the consequences of their bad choices. This does not help.


The phone in question was a work phone, not a personal phone. In work environments the enterprise IT tools control how the phone is administered, backed up, and the like. Which means that the company that issued the phone most likely had the key to unlock the backups.


Title changes are purely to comply with 80 character limit, otherwise as close to the original articles' title.


Transplant yourself to any other police state. Anywhere with a very strong government hell bent on controlling its citizens. Eastern Germany, Or the USSR, or Germany under the Nazis.

How did the government get such power? Immediately via overthrow, or incrementally?

At what point do you draw the line? Has there ever been a government that got some power and then stopped trying to get more? Look at the history of the USA for the past 200 years.

Apple is trying to draw a line in the sand. We can debate about where the line should be, but there has to be a line.


This doesnt explain why they're not after marketing, or prove they are trying to draw a line without any other ulterior motive :)

No-ones going to ever know really, bar apple and the gov


I'm not sure which "other side" you're targeting with your argument, but as a gun rights advocate its' completely consistent to be a privacy rights advocate-- and basically a human rights advocate.

That it doesn't hurt another, do what thou wilt. Thus gay married farmers should be able to defend their marijuana crops with fully auto AK47s. Marijuana, guns and gay sex don't do bad things to society. Only people can misuse them.


> I'm not sure which "other side" you're targeting with your argument, but as a gun rights advocate its' completely consistent to be a privacy rights advocate-- and basically a human rights advocate.

I can't speak for the parent, but I'd imagine s/he has observed a correlation in that the political "right" seems to be more in favor of an encryption backdoor than the "left". The "right" is also unequivocally more enthusiastic in its defense of 2a rights.

To support this notion - at least insofar as being an indicator of public sentiment - I would point to the Republican primary field which has almost unanimously spoken out in opposition of Apple's decision. Their two Democrat counterparts have thus far been more reserved about the matter.


From my perspective, most of the crowing I see about how Apple is terrible for not immediately capitulating is coming from the American right wing, a political bloc traditionally associated with gun rights.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: