Readit News logoReadit News
chrisabrams commented on The FIPS 140-3 Go Cryptographic Module   go.dev/blog/fips140... · Posted by u/FiloSottile
tptacek · 8 months ago
It's interesting and kind of neat in an inside-baseball way that the standard Go cryptographic library (already unusual in the major languages for being a soup-to-nuts implementation rather than wrappers around an OpenSSL) is almost fully NIST-validated; in particular, it means vendors who want to sell into FedGov can confidently build with the Go standard library.

Having said all this: nobody should be using crypto/fips140 unless they know specifically why they're doing that. Even in its 140-3 incarnation, FIPS 140 is mostly a genuflection to FedGov idiosyncrasies.

chrisabrams · 8 months ago
> Having said all this: nobody should be using crypto/fips140 unless they know specifically why they're doing that. Even in its 140-3 incarnation, FIPS 140 is mostly a genuflection to FedGov idiosyncrasies.

What should folks use then?

chrisabrams commented on Cursor Has Raised $60M   cursor.com/blog/series-a... · Posted by u/ent101
deisteve · 2 years ago
interesting...and if you have this type of revenue who do you approach
chrisabrams · 2 years ago
If you have this kind of revenue, you don't approach anyone, they approach you.
chrisabrams commented on Zen, a Arc-like open-source browser based on the Firefox engine   zen-browser.app/... · Posted by u/femou
chrisabrams · 2 years ago
I tried downloading this for MacOS Silicon and was told the dmg was damaged :/ Guess I'll wait a little bit for things to iron out.
chrisabrams commented on How Google handles JavaScript throughout the indexing process   vercel.com/blog/how-googl... · Posted by u/ea016
dlevine · 2 years ago
I work for a company that enables businesses to drop eCommerce into their websites. When I started, this was done via a script that embedded an iFrame. This wasn't great for SEO, and some competitors started popping up with SEO-optimized products.

Since our core technology is a React app, I realized that we could just mount the React app directly on any path at the customer's domain. I won't get into the exact implementation, but it worked, and our customers' product pages started being indexed just fine. We even ranked competitively with the upstarts who used server-side rendering. We had a prototype in a few months, and then a few months after that we had the version that scaled to 100s of customers.

We then decided to build a new version of our product on Remix (SSR framework similar to nextjs). It required us to basically start over from scratch since most of our technologies weren't compatible with Remix. 2 years later, we still aren't quite done. When all is said and done, I'm really curious to see how this new product SEOs compared to the existing one.

chrisabrams · 2 years ago
Given that your Remix version has been ~2 years in development by X number of developers, what are the other expected outcomes? It sounds like potential SEO performance is unknown? Is the development team happy with the choice? I can't recall working somewhere that allowed us to work on a project for two years and not release to production, how did you get business buy in?
chrisabrams commented on Ask HN: Who is hiring? (May 2024)    · Posted by u/whoishiring
chrisabrams · 2 years ago
WebAI | Software Engineers, Systems Engineers, ML/AI Engineers | Austin, TX (US), Grand Rapids, MI (US), or Remote (Anywhere) | REMOTE or ONSITE | Full-time or Contract | $150k-$250k base + equity | https://www.webai.com/

WebAI is building the future of Human-AI interaction and we’re a community committed to building the future of decentralized artificial intelligence. We believe that democratizing AI is key to unlocking its full potential and creating a better world for all. Our new product Navigator enables users to create custom AI models to meet their needs, while our WebAI Intelligence Network is critical infrastructure required for a decentralized AI future.

Senior and Staff roles available.

Desirable experience for our various roles:

  - Full-stack Python, Go or Rust

  - iOS (Swift)

  - P2P, encryption, or cryptography

  - Managing multi-cloud and/or on-prem infrastructure

  - Distributed training

  - Custom DNN architectures (pytorch/tensorflow/mxnet/burn)

  - Optimization via quantization/compression techniques
Apply here: https://boards.greenhouse.io/webai (company name change in progress from Iris to WebAI)

chrisabrams commented on Ask HN: Who is hiring? (October 2023)    · Posted by u/whoishiring
chrisabrams · 2 years ago
WebAI | Software Engineers, Systems Engineers, ML/AI Engineers | Austin, TX (US), Grand Rapids, MI (US), or Remote (Anywhere) | REMOTE or ONSITE | Full-time or Contract | $150k-$225k base + equity | https://www.webai.com/

WebAI is building the future of Human-AI interaction and we’re a community committed to building the future of decentralized artificial intelligence. We believe that democratizing AI is key to unlocking its full potential and creating a better world for all. Our new product Navigator enables users to create custom AI models to meet their needs, while our WebAI Intelligence Network is critical infrastructure required for a decentralized AI future.

Senior and Staff roles available.

Desirable experience for our various roles:

  - P2P, encryption, or cryptography

  - Managing multi-cloud and/or on-prem infrastructure

  - Distributed training

  - Custom DNN architectures (pytorch/tensorflow/mxnet/burn)

  - Optimization via quantization/compression techniques

  - Rust
Apply here: https://boards.greenhouse.io/webai (company name change in progress from Iris to WebAI)

chrisabrams commented on The tech job recession is over   businessinsider.com/the-t... · Posted by u/pseudolus
CoastalCoder · 3 years ago
I'm currently interviewing with Meta, but the process is amazingly slow:

- early June: a Meta employee submits my referral

- mid June: talk to Meta recruiter

- late July: screening interview with hiring manager

- mid August: still scheduling an interview-planning meeting with the hand-off recruiter.

I'm guessing that on their side, either the recruiters are super busy, or there's no sense of urgency.

Maybe a blessing in disguise, since it gives me more time to work on their coding-practice problems. Which are great, btw.

chrisabrams · 3 years ago
It's possible that candidates are getting shuffled around, as some of the Meta recruiters themselves have been laid off. I know multiple people that were/are in the Meta process that this happened to. Takes a few weeks for the new recruiter to go through their double/triple work load of candidates and schedule.
chrisabrams commented on US Job Market Clues Seen in Drop in Employee Hours Worked   bloomberg.com/news/articl... · Posted by u/pg_1234
instagib · 3 years ago
I worked for a place which allowed a high amount of “leave without pay”.

There was a limit based on years with the company but a new employee got 3 weeks paid leave and up to 9 weeks unpaid. You pay the company the unpaid time x salary and then they give it back to you when you use it.

It worked out pretty well so if I was sick I could take the day off or if a coworker was sick and came to work, I could leave. I tend to keep a cold twice as long as other people.

I was able to take 3 one month vacations or every Friday off for a long time or somewhere in between.

chrisabrams · 3 years ago
What would happen if you paid for unpaid leave and didn’t use it?
chrisabrams commented on TypeScript 5.2's new keyword: 'Using'   totaltypescript.com/types... · Posted by u/Lwrless
ajanuary · 3 years ago
The verbosity comes because they are demonstrating both how to write the library code to support the feature, and how to consume it. But in reality a lot of the time someone else will have written the library code for you.

In this (still contrived) example, we end up having to do nested try/finally blocks.

Before:

  let totalSize = 0;
  let fileListHandle;
  try {
    fileListHandle = await open("file-list.txt", "r");

    for await (const line of fileListHandle.readLines()) {
      let lineFileHandle;
      try {
        lineFileHandle = await open(lineFileHandle, "r");
        totalSize += await lineFileHandle.read().bytesRead;
      } finally {
        await lineFileHandle?.close();
      }
    }
  } finally {
    await fileListHandle?.close();
  }
  console.log(totalSize);
After:

  let totalSize = 0;

  try {
    await using fileListHandle = getFileHandle("file-list.txt", "r");

    for await (const line of fileListHandle.readLines()) {
      await using lineFileHandle = getFileHandle(lineFileHandle, "r");
      totalSize += await lineFileHandle.read().bytesRead;
    }
  }
  console.log(totalSize);

chrisabrams · 3 years ago
Thank you for this example; it wasn't clear to me reading the article, but this is the main problem I was hope being solved. Will make writing tests much smoother.
chrisabrams commented on Deno 1.34: Deno compile supports NPM packages   deno.com/blog/v1.34... · Posted by u/unripe_syntax
Etheryte · 3 years ago
I'm very happy with the direction Deno is taking in its development. At the same time, I'm not sure when I would feel comfortable deploying something to production with it. Is anyone here running Deno in production?
chrisabrams · 3 years ago
I have a small Deno powered bot that generates Shopify listings from some inputs. It’s been running for a few months with no crashes or restarts.

I think it really comes down to what APIs or packages you need. I have had trouble with projects such as Prisma and wouldn’t do that in production as the generated output is slightly different for some reason (haven’t had time to inspect).

u/chrisabrams

KarmaCake day1466May 23, 2012View Original