rrjanbiah (u/rrjanbiah)

rrjanbiah commented on Ask HN: Who wants to collaborate? (April 2022) · Posted by u/cloudsec9

rrjanbiah · 3 years ago

react2solid is a ReactJS to SolidJS code converter https://github.com/rrjanbiah/react2solid

I have started the development today (after months of thinking & gathering ideas).

Any contribution is welcome. Would prefer contributions in to the code transformer rules; something similar to https://github.com/rrjanbiah/react2solid/blob/main/_transfor...

rrjanbiah commented on Accepted and ghosted: interviewing for a leadership position at Stripe · Posted by u/danrocks

temp7536 · 4 years ago

For those who have worked around and at Stripe for the past decade, this is not a surprise. Stripe, and especially the founders, have a quite a poor reputation for screwing over people in and around their orbit.

Almost every fintech startup has the story of Patrick reaching out about an acquisition, mining them for information playing along and then ghosting - same thing for candidates. They leadership team, specifically Patrick and Will Gaybrick are extremely smart but have screwed over a ton of people - be very careful about trusting.

You don't hear anything about this online, they're incredibly effective at squashing hit pieces and have a huge amount of reporters and power brokers under their control. On HN and silicon valley Stripe and Patrick are a PR machine. Patrick has almost direct control over YC and HN, you'll notice that every single Stripe post automatically has pc as the first comment, regardless of anything else. Everything negative gets buried.

With Patrick now living in Woodside, Will on permanent vacation in Malibu and John permanently in Ireland the company is definitely a bit in chaos mode internally. Their entire people team has turned over and they're having major retention issues - so I'm not super surprised that stuff like this is starting to leak out.

I run a $XB fintech, and am afraid to use my name given the backlash.

rrjanbiah · 4 years ago

Inspired by this comment, I have created a tracker in the Open Market Research project https://github.com/OpenMarketResearch/Labs/issues/new?labels... Please feel free to share any comments or suggestions.

rrjanbiah commented on My worst tech interview experience jessesquires.com/blog/202... · Posted by u/ingve

avl999 · 4 years ago

I generally don't mind whiteboard programming interviews but even so asking someone to implement merge sort is a bad question.

My sanity check for any question I ask is- Is the question I'm asking something that someone in the past published a paper about? If so then that's probably not a good fit for a 45 minute whiteboarding interview. This question falls in that category. Generally those algorithms are complex enough that it is unrealistic to expect someone to get them right from first principles so at that point you are just selecting for people who just happened to have dealt with them, memorized them or implemented them recently.

I have a co-worker who used to ask people to past to parse and evaluate infix notation expressions in interviews (and there are companies that ask that question). Always stuck me as weird as multiple papers have been written about that problem, are you really expecting someone to implement a solution to a problem that people spend weeks (months?) thinking about before publishing? Could even Djikstra have come up with the Shunting Yard Algorithm in a 45 minute interview (with implementation on whiteboard) if that was his first exposure to the problem of expression parsing?

rrjanbiah · 4 years ago

FWIW, I have created a tracker under the Open Market Research repo to track such broken hiring and fake job posts https://github.com/OpenMarketResearch/Labs/issues/new?labels...

rrjanbiah commented on Gmail is opening and caching URLs within emails without user intervention (2019) support.google.com/mail/t... · Posted by u/_wldu

obuda · 4 years ago

Yeah, I don't know about that. Wouldn't it be that the query strings differentiate the two links?

I assume so, because of an old trick where query strings are used for ad-hoc cache control as in /style.css?1629472765

rrjanbiah · 4 years ago

Query string is to differentiate the links (to understand which case is getting triggered)

rrjanbiah commented on Gmail is opening and caching URLs within emails without user intervention (2019) support.google.com/mail/t... · Posted by u/_wldu

_wldu · 4 years ago

I built a small Go web app to do some security testing. When a user registers for an account, I generate a 128-bit secure token and email it to the address they provided (as a URL). Token URLs look like this:

/validate/email/1d00a5c2648c211befd33f5a8a7cbfab

The token is cryptographically strong and disappears after access. It can't be guessed and no one but the email account holder should click it, but I am seeing the URL accessed multiple times from multiple IPs, so I investigated.

Turns out, if the user provides a Gmail or Gsuite email account during registration, Google clicks the link. I was curious if others on HN had encountered this and how they dealt with it.

rrjanbiah · 4 years ago

Here's a quick PoC:

  <link rel="prefetch" href="/actual_validate/email/1d00a5c2648c211befd33f5a8a7cbfab?prefetch=1">

  <script>
   location.href = "/actual_validate/email/1d00a5c2648c211befd33f5a8a7cbfab?js=1";
  </script>
  <noscript>
   <a href="/actual_validate/email/1d00a5c2648c211befd33f5a8a7cbfab?js=0" rel="nofollow" class="btn btn-primary" role="button">Click to confirm your account</a>
  </noscript>

rrjanbiah commented on MeiliSearch: A Minimalist Full-Text Search Engine tech.marksblogg.com/meili... · Posted by u/serhack_

qdequelen · 4 years ago

Hello, as CEO of MeiliSearch, I'm really sorry from the whole team if we did not satisfy you when solving one of your bugs. I don't know which bug exactly you are referring to, but in any case, we try to answer our users and contributors with the maximum of transparency and love.

Moreover, we are certainly, on some features, maybe a little bit late. Delay that we will more than compensate before the end of the year. Our priority until now has been to offer a robust search engine accessible to all. For us, the developer experience is really important, whether it is in the use of the API or in the communication with the community.

We will continue to try to do our best for the community. If you want to help us to improve, I would be happy to take your feedback.

rrjanbiah · 4 years ago

A few days ago, I shared a couple of suggestions for Meili. I'm not sure if you received them. You may DM me at @rrjanbiah

rrjanbiah commented on MeiliSearch: A Minimalist Full-Text Search Engine tech.marksblogg.com/meili... · Posted by u/serhack_

moralestapia · 4 years ago

If you're in the market for lightweight but fast search engines, I would recommend you take a look to typesense [1], instead; or even sonic [2], if it fits your use case. MeiliSearch does not give you anything on top of them (i.e. neither as feature complete as [1], not as fast as [2]).

And I personally stopped using them after a really bad experience I had with their "developers". They don't really care about you and it shows, also, they were kind of rude when I reported some bugs to them.

I moved to typesense and it's a whole different world, their creators truly enjoy that you're using their product; same thing with sonic, Valerian is the kind of hacker you'd want as a friend, super talented, super easy going, you could ask a completely dumb question on their GH and he takes the time to explain things to you at length. I know its open source, I know I didn't pay a dime, but for me, that kind of attitude makes it or break it. Plus, you actually get a superior product.

1: https://typesense.org/

2: https://github.com/valeriansaliou/sonic

rrjanbiah · 4 years ago

I'm not from Meili, but I like/care about it. Meili team sent me stickers (to India!) for opening 1 or 2 issues.

Can you please DM me your concerns @rrjanbiah? I'll try to coordinate with the Meili team and sort them out.

rrjanbiah commented on YouTube-dl can no longer download age-restricted videos github.com/ytdl-org/youtu... · Posted by u/makeworld

alphabet9000 · 4 years ago

As someone else mentioned in the comments, the "get cookies.txt" [0] extension works to circumvent the age restricted measure and i have been using it with success for weeks now.

get the extension, export the cookies.txt file to a folder, then run youtube-dl in that folder with:

youtube-dl --cookies cookies.txt https://youtu.be/id

it works as of right this minute [1] and in my experience that cookie continues to work even if you log out of your account in the browser and log back in etc

i'm trying to imagine a way to have a more permanent solution, maybe if youtube-dl provided some kind of login prompt type thing to enter some your credentials to virtually log in, although i imagine that would start to be another cat and mouse game of it working and then not working.

[0] https://chrome.google.com/webstore/detail/get-cookiestxt/bga...

[1] https://i.jollo.org/ytdl.gif

rrjanbiah · 4 years ago

Curious... Do we have any bugmenot like cookies sharing site?

rrjanbiah commented on Ask HN: Is Sourcehut a good GitHub/Gitlab alternative? · Posted by u/AquiGorka

rrjanbiah · 5 years ago

What about https://gitea.io/en-us/

rrjanbiah commented on Ask HN: Looking for an Alternative to Jira · Posted by u/philpem

cnorthwood · 6 years ago

You can get reasonably far with Trello, if all you're doing is item tracking. If you're trying to do anything more than a free-for-all workflow, or wanting to do reporting, it's less good.

rrjanbiah · 6 years ago

https://restya.com/board is open source Trello alternative