r4vik · HackerTrans

r4vik

no profile record

Submissions

Continuous Enforcement and Continuous Verification

aguilar-pelaez.co.uk

3 pointsby r4vik29 gün önce0 comments

House Testimony of Shou Chew CEO, TikTok [pdf]

docs.house.gov

1 pointsby r4vik3 yıl önce0 comments

Stadia Bluetooth Mode Firmware Dumped

github.com

1 pointsby r4vik4 yıl önce0 comments

California cities are going on a zoning holiday

zoningholiday.com

1 pointsby r4vik4 yıl önce0 comments

Security.txt: A File Format to Aid in Security Vulnerability Disclosure

rfc-editor.org

2 pointsby r4vik4 yıl önce0 comments

Sniffing browser history using HSTS and CSP

github.com

17 pointsby r4vik11 yıl önce0 comments

CockroachDB: A Scalable, Geo-Replicated, Transactional Datastore

github.com

1 pointsby r4vik11 yıl önce0 comments

Negotiations at the IRL/URL Border

motherboard.vice.com

1 pointsby r4vik11 yıl önce0 comments

Paperman: latex editor with a markdown feel

paperman.io

2 pointsby r4vik12 yıl önce1 comments

Riml, a relaxed Vim script

github.com

2 pointsby r4vik13 yıl önce0 comments

Ask HN: What would Excel's formula language look like if you invented it today?

30 pointsby r4vik13 yıl önce41 comments

Generalized Knight's Tours

plus.google.com

1 pointsby r4vik13 yıl önce0 comments

A Reliable, Effective Terascale Linear Learning System

techtalks.tv

2 pointsby r4vik13 yıl önce0 comments

Calca 1.2 - Experiments in Text Editing

praeclarum.org

1 pointsby r4vik13 yıl önce0 comments

Levels of uncertainty

johndcook.com

2 pointsby r4vik13 yıl önce0 comments

A Leiningen plugin for building Clojure/iOS projects

github.com

4 pointsby r4vik13 yıl önce0 comments

Building Clojure Services at Scale

blog.josephwilk.net

149 pointsby r4vik13 yıl önce21 comments

Becoming prolific.

tehgeekmeister.com

1 pointsby r4vik13 yıl önce1 comments

Google Analytics Launches Real Time API In Beta

analytics.blogspot.co.uk

6 pointsby r4vik13 yıl önce1 comments

I’m 16 and I am a clinic defender

thelastabortionclinic.wordpress.com

2 pointsby r4vik13 yıl önce0 comments

comments

2 yıl öncediscuss

Novata | Senior Developer Experience Engineer | Full-time | London, UK (Hybrid)

Novata is pioneering the way in ESG (Environmental, Social, and Governance) data management and analytics, empowering private market firms to enhance transparency with stakeholders. Our platform simplifies the collection and analysis of critical ESG metrics.

Are you passionate about developer tools, k8s and Typescript? Come work with me in our platform squad and be responsible for delivering a first class Developer Experience to our colleagues and team members in other squads.

You will focus on coaching engineers to better improve their understanding of the "Ops" side of their skillset, improving tools & processes, documentation, and support channels to make the development journey smoother and more enjoyable.

Apply: https://wrkbl.ink/gj3k2rd

Hybrid in our case means come in when you feel it would be useful, there is no x days per week mandate.

We are also hiring for a bunch of other roles both in London, UK and New York, US: - Data Engineers - Support Engineers - Mid and Senior Full Stack

Full list: https://wrkbl.ink/4MyPLK8

3 yıl öncediscuss

After months of not seeing any outside ir35 contracts I've seen about 3 today

3 yıl öncediscuss

Bytedance (Security Engineering) | bytedance.com | Singapore, Sydney, Australia | Onsite | Full Time | Visa sponsorship available

As part of our team, you'll engage in unique and high-impact projects, tackling security challenges on a scale not typically seen in the tech world. You will design and implement new approaches for system security, apply trusted computing, and track cutting-edge security technologies.

We're hiring for: Site Reliability Engineers - Singapore: https://job.toutiao.com/s/i2chcXA

Site Reliability Lead - Sydney, Australia: https://job.toutiao.com/s/i2vTUqD

Site Reliability Engineer - Sydney, Australia: https://job.toutiao.com/s/i2c8kSV

4 yıl öncediscuss

they've always been lying, the can't find someone with the skills is just a hoop to jump through.

4 yıl öncediscuss

it's totally plausible. and best practice.

If you have a localised blog for multiple regions you will probably have your main blog set up to be indexed and your regional blogs set up to be no-indexed so that Google isn't indexing the same stuff twice.

4 yıl öncediscuss

I only ever restart it for updates every month or so

4 yıl öncediscuss

trades are brutal for your body and I wouldn't recommend picking one up in your late 30s.

4 yıl öncediscuss

yes, it is kind of buggy as it's a live streaming platform first and a video on demand library second. Antony does have a youtube channel so you could try that instead.

4 yıl öncediscuss

could you post the salary range?

4 yıl öncediscuss

Anthony Sottile on twitch is a joy to watch https://www.twitch.tv/anthonywritescode if you like Python

4 yıl öncediscuss

which team would you rather work on anyway?

4 yıl öncediscuss

return it, it's broken - it shouldn't behave like this. Don't live with these bugs

4 yıl öncediscuss

From what I can remember when I set this up last all our MDM did was:

- Ensure full disk encryption

- Time limit on how long people can defer OS upgrades

- Report on software installed and versions

- Enforce somewhat complex password

- Enforce password after screen has become locked

- Allow us to remote wipe the machine if lost/stolen

It didn't stop you from installing / uninstalling anything - even itself. Although if your machine stopped phoning home for a certain amount of time we had some alerts set up for the IT support team to follow up.

4 yıl öncediscuss

unfortunately yes - I was in charge of this decision as a previous employer and I went with Macs+JAMF even though I'm a die hard Linux user. My work around was to run a fullscreen Linux VM but that does defeat the purpose somewhat.

I'm hoping things are better now - I think Canonical have some sort of MDM for Ubuntu but I couldn't figure out how to pay for it.

4 yıl öncediscuss

also it would let you have a common target (wasm) for plugins so it doesn't matter if you're running on ARM/x86

4 yıl öncediscuss

It's all about good hygiene early.

- MDM for laptops/phones, don't let people use their own devices. The point of MDM isn't to stop people installing their favourite IDE, the point of it is to make sure the device is patched and running latest OS. If you have a VPN (even AWS Client VPN supports this...) tie MDM together with device attestation so only patched machines can connect to your VPN.

- Unified login, for a start up you can use Google workspace or even GitHub as your identity provider (this gets weird if you have non-devs but you can push it for a bit). Don't have more than one account/password for things, you just log into your google account then use OIDC/SAML to auth against internal apps. If you do this you probably don't need VPN. Use this to auth into AWS too.

- Don't share accounts on SaaS services (e.g domain registrar), this will make rotating stuff when someone leaves a nightmare. If a service doesn't support teams or you don't want to pay for the enterprise version then it's OK for the CTO and 1 other person to have their own login.

- Minimise/avoid static credentials for your infra (e.g. web server talking to postgres) prefer to use AWS Instance roles with short lived dynamic credentials.

- Make sure network isolation is set up correctly, your Mongo db shouldn't be listening on the internet

- Use 2fa but make sure it's WebAuthn/FIDO. Issue everyone with 2x security keys. People wipe / screw up their phones/TOTP authenticator apps far too much.

- Centralised logging, make sure your apps can output logs to opensearch/datadog/whatever. Whenever a user performs an action make sure this gets logged.

- Don't let people manage prod infrastructure without using Infrastructure as code tools (CDK/Pulumi/Terraform), best thing would be not to give people prod access and all changes have to go through CI

- Make sure you know your product is down before your users start calling/emailing. Set up healhchecks.io / pingdom whatever.

4 yıl öncediscuss

seems like they need to implement surge pricing

4 yıl öncediscuss

This doesn't really fix the color space though so I tried enhanced the prompt

  ffmpeg command to convert hdr video to SDR and fix the colorspace:

and it returned:

  ffmpeg -i input.hdr -pix_fmt yuv420p -filter_complex "colorlevels=entropy_mode=1:levels=srgb:source_range=full:target_range=full:rgb_to_yuv=sigmoidal" -y output.sdr.mp4

I don't really understand this so I asked it to explain:

  how does this fix the colorspace?

It replied:

  The RGB to YUV conversion is done using a "sigmoidal" function, which basically means that it applies a non-linear transformation to the input video. This transformation is designed to "compress" the bright colors in the video, making them more manageable for SDR displays.
  The colorlevels filter is also adjusting the black and white points of the video. This is done to ensure that the video can be displayed correctly on SDR displays, which have a limited color gamut.
  Finally, the target_range and source_range options are used to ensure that the video is encoded in the correct range for SDR displays.

4 yıl öncediscuss

Source code pro: https://adobe-fonts.github.io/source-code-pro/

4 yıl öncediscuss

I don't know if the output is correct but I prompted openai:

  ffmpeg command to convert hdr video to SDR:

  ffmpeg -i video.mp4

and it returned: ffmpeg -i video.mp4 -vf format=pix_fmts=yuv420p -c:v libx264 -crf 18 -preset veryslow -c:a copy output.mp4

  This FFmpeg command will take your HDR video and convert it to an SDR video using the libx264 codec with a CRF value of 18.```