Proxies like unotelly may send more of your traffic through their service than you would like. You can protect your traffic but still use the tunnel if you only send bbc.co.uk DNS lookups to unotelly.
Here's how to do this in Ubuntu 12.04. The DNS has changed in 12.04 to use NetworkManager, which makes the process more convoluted than it should be. The below instructions could be improved but it'll get you some BBC Olympics coverage.
$ nslookup bbc.co.uk
# you should see a UK IP e.g. 212.58.241.131
$ vi /etc/NetworkManager/NetworkManager.conf
# comment out dnsmasq
#dns=dnsmasq
# save+quit
$ vi /etc/dhcp/dhclient.conf
prepend domain-name-servers 127.0.0.1;
$ service network-manager restart
# create a new dnsmasq.conf with unotelly California DNS 184.169.139.227 206.214.214.28
# note that server=192.168.11.1 is my router (which handles my upstream DNS) and you'll need to change that IP.
$ vi /etc/dnsmasq.conf
I lived abroad for years and was double taxed on part of my income. The tax treaties and exclusions are limited to certain dollar amounts. He's likely well above those limits.
@Michaelochurch great response! Where do you work?
@HN I've been a hiring manage for years. Take the advice about what to avoid with a grain of salt, and be sure to read some of the other excellent comments in this thread.
Anecdotal, but a few of the best software engineers I've known did not have CS degrees. You certainly do not need one to write a CRUD app in Rails/Django.
It's ironic that the top voted comment in this thread is about how wonderful Ubuntu is, followed by how we no longer need "ops" for linux, while further down we have problems like this bootloader update failure that no normal user could surmount.
"The market's meteoric rise is typically justified in the popular culture by some superficially plausible "new era" theory that validates the abandonment of traditional valuation metrics."
Hopefully you change your employer more frequently than your spouse, hobbies, family, or friends. :)
The vast majority of people in the world do not have the luxury of loving their work. For those, 25% of their lives working for someone else in a job they tolerate but do not necessarily enjoy is a means to an end. Maybe it's 20 years of comfortable retirement, or the relative security of a regular paycheck to support their spouse and children.
Most of us on HN are lucky enough to enjoy coding and are well compensated for it. We get caught in the feedback loop of tech chatter and forget that the majority of our friends and family, outside the blissful tech world, do not enjoy their work.
Is it really that easy to hack someones gmail account?
I realize phishing and key loggers are easy ways to grab a password, but if you avoid typing your gmail password at public internet kiosks and the like, is it really that easy for someone to get at? Assuming you use a reasonably long and impossible to guess password, the captchas would prevent brute forcing.
An attack targeted specifically at you will inevitably succeed but most of us are not that special.
The article's advice seems far too easy to lock yourself out (losing my wallet with my magic paper codes and my phone could do it). The additional inconvenience does not seem worth it.
Most of us have used physical 2 factor authentication (like RSA SecurID) for banking and work related VPN access. This works well because the provider (your office, your bank) has a vested interest in getting you back into your account if you get locked out. Google, Yahoo, MS, etc. have no such obligation.
I've lived in SF and Tokyo and spent time in NYC. @potatolicious is spot on with this post. NYC streets and subway cars are, generally, cleaner than the equivalent in SF. Crime's lower (per capita, not totals) in NYC than SF too. You also don't witness as much derelicts and gang bangers on an evening stroll down a NYC street as you do in SF.
@cletus was right about the job scene though. Most tech companies HQ are in SF and there's a wealth of jobs. NYC's tech scene is still up and coming. As we've seen with Austin , Seattle, and NC/Research Triangle, "up and coming" can last for a long, long time.
@Jon Seriously awesome work. Thank you! People like yourself raising everyone's awareness are one of the few hopes we have of avoiding the dystopian world that @ck2 and others have already resigned themselves to.
Exercise in the morning, or at least before noon, for 30 minutes or more, and eat a decent meal just after. You'll find that'll give you energy throughout the day, including after a long day at work. Then, pick one thing, focus on it, and achieve clear goals. Refer to what the original article terms success spirals.
As an interviewer, to indicate things are going well, you can smile, nod, give happy words of encouragement, get excited, etc.
When things are going poorly, you can frown, say "not quite", give sour words of encouragement, linger on the same unsolved problem, etc.
While HR / Legal usually have policies prohibiting direct feedback ("You're a 5 of 10 and we have 30 candidates who are all better than you. Also you went to Yale and that's lame."), there are many ways to provide feedback to the interview candidate without opening the company up to legal trouble. There are no laws against being human during an interview.
It's tragic that engineering interviewers extrapolate a candidate's mistakes on a whiteboard during a tense, time pressured interview situation to the calm day coding at a keyboard during a real day at work. It's almost as if we forget what it's like to be an interview candidate when we're the interviewer.
There's often a distinction between APIs intended for general consumption (platform APIs) and APIs optimized for JavaScript and/or mobile clients ("private" APIs).
A platform API tends to be stable, versioned, well documented, and "unoptimized" or strongly RESTful. GETing a resource (noun) returns just that one representation.
e.g. GET /v1/user/123/profile or GET api.linkedin.com/v1/people/id=123
"Private" APIs tend to return more data in bulk, optimized to reduce the quantity of remote calls and improve page load times. The responses tend to be structured in a way that's easier for the client (browser/mobile app) to render content, usually by including more tangentially related data than a traditional REST resource would contain.
e.g. a browser's load of https://github.com/rails/rails does GET github.com/rails/rails/graphs/participation
Twitter uses the platform API in the browser.
e.g. GET api.twitter.com/1/trends/1.json
I'd be interested to hear from others leveraging APIs in their browser/mobile clients what they're using for MVC (e.g. backbone.js vs server side) and whether they've "optimized" their APIs for the client.
Here's how to do this in Ubuntu 12.04. The DNS has changed in 12.04 to use NetworkManager, which makes the process more convoluted than it should be. The below instructions could be improved but it'll get you some BBC Olympics coverage.
# https://gist.github.com/3202101
Ubuntu 12.04
$ nslookup bbc.co.uk # you should see a UK IP e.g. 212.58.241.131
$ vi /etc/NetworkManager/NetworkManager.conf # comment out dnsmasq #dns=dnsmasq
# save+quit
$ vi /etc/dhcp/dhclient.conf
prepend domain-name-servers 127.0.0.1;
$ service network-manager restart
# create a new dnsmasq.conf with unotelly California DNS 184.169.139.227 206.214.214.28 # note that server=192.168.11.1 is my router (which handles my upstream DNS) and you'll need to change that IP. $ vi /etc/dnsmasq.conf
server=/bbc.co.uk/206.214.214.28212.58.241.131 server=/co.uk/206.214.214.28 server=/bbchdsodsecure-f.akamaihd.net/206.214.214.28 server=/bbchdsodsecure-a.akamaihd.net/206.214.214.28 server=/bbchdsodsecure-b.akamaihd.net/206.214.214.28 server=/bbchdsodsecure-c.akamaihd.net/206.214.214.28 server=/bbchdsodsecure-d.akamaihd.net/206.214.214.28 server=/bbchdsodsecure-e.akamaihd.net/206.214.214.28 server=/bbc.co.uk.edgesuite.net/206.214.214.28 server=/bbcfmhds.vo.llnwd.net/206.214.214.28 server=192.168.11.1
# save+quit
$ nohup /usr/sbin/dnsmasq --no-resolv --keep-in-foreground --no-hosts --bind-interfaces --pid-file=/var/run/sendsigs.omit.d/network-manager.dnsmasq.pid --listen-address=127.0.0.1 --conf-file=/etc/dnsmasq.conf --cache-size=0 --proxy-dnssec &
$ tail -f /var/log/syslog
$ nslookup bbc.co.uk # you should see unotelly proxy servers e.g. uk-cluster.unostructure.com