Hacker Newsnew | past | comments | ask | show | jobs | submit | more testing12341234's commentslogin

The easiest to understand response to this question that I've seen so far is from this comment [0]:

The contest limitations rule out most of the likely attack vectors for breaking the protocol in the real world. It's like saying "Our bank vans are 100% secure. Just try stealing money from them without puncturing our tires or bribing one of our employees."

[0] - https://news.ycombinator.com/item?id=6936949


In particular none of the attacks described in TFA (Known Plaintext, Chosen Plaintext and Chosen Ciphertext) are possible within the frame of their contest (since Telegram controls all inputs).

Yesterday someone blogged an example of a completely broken cryptosystem that would still pass Telegram's challenge with the same limitations: http://www.thoughtcrime.org/blog/telegram-crypto-challenge/


That's Moxie Marlinspike, developer of TextSecure.


With a very valid challenge.


It may even be possible to factor the RSA Key

More to the point, KPA,CPA, etc are very important, and systems should be definitely tested against them, but in real attacks, they may not be available


Laravel is technically at 100%, however the unit tests are throwing a lot of warnings.

compare:

php 5.5: https://travis-ci.org/laravel/framework/jobs/15683979

hhvm: https://travis-ci.org/laravel/framework/jobs/15683980


And yet one of the father's of written modern English, Chaucer himself often used double negatives [0].

ex:

"Ther nas no man no wher so vertuous" ("There never was no man nowhere so virtuous")

"He nevere yet no vileynye ne sayde / In all his lyf unto no maner wight" ("He never yet no vileness didn't say / In all his life to no manner of man").

The modern English language (written and spoken) has been in constant flux for the last 600+ years. What was once required is now antiquated, and what was once verboten is now required.

At this moment in time, double negatives are frowned upon. However, that may change in the future, and it's possible that irregardless is the start of a new set of changes in the language.

[0] - http://en.wikipedia.org/wiki/Double_negative


> And yet one of the father's of written modern English, Chaucer himself often used double negatives [0].

It's worth noting that neither of your examples has a double negative. Triple negative (the second possibly quadruple), sure, but not double.

> At this moment in time, double negatives are frowned upon.

I don't know that there's really a shift in time with the double negative, its a stylistic rule, and, much like the Pirate Code, stylistic rules in English are more what you'd call guidelines than actual rules.

Or, looked at another way, more like training wheels.


Guidelines indeed. For reference, here is an example of a double negative from the Prologue to the Canterbury Tales:

Nowher so bisy a man as he ther nas [0] (Nowhere so busy a man as he there none)

[0] http://www.bartleby.com/40/0102.html line 321


It appears to be available right now

http://ubislate.us/product.php?prodid=1


It looks like it has some weird custom skin.



Yes "Unless you're Fabrice Bellard" should be included in the oath. :)


There's only one Fabrice Bellard.


So how does a developer determine their own value? For example:

1.) I do web development every day. I'm not a spectacular designer, but I can put a work flow together and I'm comfortable on both the client side javascript (JavaScript proper, jQuery, Backbone, AngularJs) as well as the server side (Ruby, Node.js, PHP 5.5 (Laravel mostly), C#).

2.) I do development in the form of sysadmin/devops type tasks (bash/powershell/vbscript)

3.) I currently do IT related tasks with regards to servers (not desktops) such as building servers from parts, loading them in to racks, setting up firewalls/routers/networking, etc

4.) I'm not perfect with attention to detail. Things fall through the cracks, but I know when to skip details (because they can be easily rectified if missed) and when not to (because the work really is mission critical, or rectifying the mistake would be particularly painful)

5.) I'm self-educated with minimal college. However, I devour books about algorithms, AI, language references, etc

6.) I have terrible work-life balance. I love my wife dearly, but if there is a problem to be solved, I can't let it go. I often dream about problems that are on my mind.

7.) I work well in teams, but I prefer solo work as I can often get in the "zone" easier when not distracted. I am not socially awkward, but I prefer smaller groups. I won't do sales, and while I can do direct customer service, I find it exhausting and my day is often shot afterwards.

8.) I understand how to deal with, and juggle, multiple "number one" priorities.

9.) I generally don't do on call, but if there is a fire, I'm always available to work on it.

10.) I'm constantly on the lookout for techniques to enhance myself, and the team as a whole. I often do presentations on up and coming software stacks, or training on technologies that I think would be worthwhile to implement.

11.) I live in Portland, Or. Relocating to SV or SF is not an option.

Given all of that (and more since it's never binary), how do I go about valuing myself in the market without wasting a ton of time?


Almost none of the above matters (except the location).

Offers are made based on your past experience and interview, before an employer can do a full psychological profile to see if you're a good fit.

So number one priority is to have a good resume.

Then you just "feel out" the current rates based on what you currently make and taking in other signals like glassdoor, salary ranges in job postings in your area (jobs listed on AngelList are most transparent about that) and talking to your peers.

The best way to get good salary is to get multiple job offers and increase your demands with each successive offer.

Yes, it is time consuming, but much less than writing code and with much better long-term effect on your salary.


> Almost none of the above matters (except the location).

Not even that one. http://www.weworkremotely.com


That still matters a lot. Almost universally one of the reasons to hire remotely is to hire people in lower cost-of-living areas and pay them accordingly.

Adjusted for cost of living you might be making more on taking a few basis-point discount since the Valley is so insane, but location absolutely factors into remote work salaries.


> Almost universally one of the reasons to hire remotely is to hire people in lower cost-of-living areas and pay them accordingly.

I currently work for a decent sized Drupal shop. I was told upfront that the company went with remote employees because there simply weren't enough within commuting distance. Based on how the knowledge Drupal people in another state have been snapped up, I completely believe it.


> How do I go about valuing myself in the market without wasting a ton of time?

It takes a ton of time, but interview people. Seriously, you would not believe what the applicant pool is like, even after resume filtering and phone screening. After interviewing 20-30 people you may have a very different perspective on which decile of value that you fall into. If you are in the top 10% of developers, then your value is the top 10% as well.


Note that those you get to interview will tend to be the less attractive candidates because they will tend to do more interviews before getting a job (and may be job hunting again sooner) BUT THAT DOESN'T MATTER. You only have position yourself amongst the AVAILABLE candidates anyway


Seriously, I dropped out of college and worked my way back up to the position of 'lead developer' and it took me a couple of interview rounds, when we tried to fill open positions, to realise that there are so many clueless programmers on the market. Before that, I thought this was mainly limited to the companies I knew. So, if you have experience and browse HN, chances are that you are already in the top 10%. Of course this is an oversimplification and based on anectodal evidence. By the way, I was of course desperate after I dropped out and thus was lucky just finding a job.


just talk to your peers and break the barrier of 'taboo' talking about salary. that taboo is /only/ in the interest of your employers.

transparency wins imo.


I must disagree, you'll stir up too much drama.

What you do is talk to peers in the industry, every opportunity you can find, especially ex-coworkers.


this is a better suggest for sure, at least in terms of avoiding social awkwardness


Until you make $30-$40k more or less than a colleague who is supposedly on the same level of you. That shit's awkward.

You and I know it's negotiating skill, expertise, tenure...and yet it's still awkward when it happens (as I've had happen).


Yeah, but why is it awkward? What you get from this is that they either get the information they need to realise that they are being screwed, or you get the realisation that you are overpaid for whatever reason. It could be that there is a genuine gap and you are worth that much more, or it might be as simple as you having learned earlier than them that 'not being money oriented' is a bad interview tactic if you are experienced and capable...

Whatever it is I don't think it hurts unless you don't really deserve that money and have good reason to feel guilty about it - even then its not your fault, or anything bad about you, its the employer who is 'screwing them over' in that case and you are giving them the information to realise it.

I've had similar happen a few times, its not really a problem, I've actually been surprised when I've encouraged them to go for more money and one guy in particular basically said, "yeah, but you actually are worth that much more to the company than me".


To get paid the maximum amount possible you will have to look around and test the market, as it's unlikely the first offer anywhere would be the highest.

But you should probably just work out how much you would like to make, what kind of company you would like to work for, what kind of work, what kind of work life balance and aim for that.

If you put your contact details in your profile would be interested to talk based on above.


Talk to some recruiters. Seriously.

Although they are considered the spawn of Satan by most devs, they know exactly what you are worth because their business depends on it.

And they will be willing to talk to you, because you are their meal ticket.


Most recruiters have no idea of what you might be able to get. They want to get you placed as quickly as possible, because placing many people quickly is how they make the most money. It's in their interest to convince you your worth less than you are, because then you'll look like a bargain and be easier to place.


What recruiters make on each placement depends on the salary you'll fetch. It's in their interest to make it as high as possible, and know exactly what the market rates are.

However, what recruiters do understand is what you'll fetch depends very much on your attitude and confidence. You act like a lamb, you'll be sold like a lamb. But that still means they know exactly what you will be able to get.

Good recruiters will coach you to increase your market value, but even the shitty ones know their numbers.


sounds like real state agents


Get interviews. Get offers. Talk with other devs. Talk with recruiters.

As a dev in Portland, I can tell you with your skill set, if you have at least 3 - 4 years experience, you can get 6 figures. But you have to market yourself as a dev, not a generalist. Especially if you emphasize Angular and Node.


I'd class myself as an above average generalist. What's the difference between marketing myself as that or as a dev?


Well, say a company is looking for an Angular expert -- are they going to hire someone who's spent the last year doing Angular, along with 50 other things, or someone who's spent the last year hyper-focused on Angular? I think there are jobs for generalists for sure, but there are also jobs for super-pressing needs (read as $$$) for specific strengths. If you spread yourself too thin, you're not going to get the job for that one skill-set they need. I could be totally wrong, but that's how I approach it. Also note that it's assumed devs have some knowledge of other technologies, so I'm not saying don't learn plenty of stuff.


It's even less than $22/hr because the 40 hours per week here doesn't include work outside of the classroom such as grading papers and projects, or "Assist students outside of class as necessary.".


It looks like the SSL certificate currently being served has been revoked. For me, it's blocked in FF, but allowed in Chrome.

Does anyone know if this is related to them moving php.net to new servers after the earlier malware attack?


Actually, after further review, it looks like the issue is with a revoked intermediate certificate that is sent along in the chain. It still causes issues in FF, but at least it's not directly with the PHP.net certificate.


To clarify the above, the video starts with the deep brain stimulation device turned on. The changes mentioned are due to the Parkinson's Disease effect showing themselves once the DBS device is turned off.


I gave the first level over to my wife (who is a non-programmer, and has no interest in programming, but loves RPGs). Unfortunately, it didn't work out too well. She was able to make it to the ogre, then then misspelled the attack command. At that point, her browser froze, then continued to give her a script error at "http://codecombat.com/javascripts/vendor.js:52612".

Which is too bad, because I'd love to show her that programming isn't as "hard" as she thinks it is.


Sorry about that testing, our server sometimes messes up the code sync; for now, just copy it, delete it, and paste it in again (all the code). We have it on our list of stuff to fix, but didn't expect another traffic spike so soon and so had pushed it off a bit!


Unfortunately, she doesn't want to try again. But good luck!


That is actually a problem in trying to introduce someone to coding. First attempt frequently is experienced as boring and/or too complex. It would be absolutely wonderful to have several standard entry points to programming for various target audiences. There are some cropping up with popular MooC courses but nothing for adults that have a barrier to better understanding that programming is not that hard.


Yeah, that's understandable, thanks for trying though, we'll have more content soon, and it should be more stable to boot, so perhaps we can impress her at a later date. :)


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: