Live data from Hacker News

Viewing profile — kichik

kichik

HN member
Joined
Mon, Jul 16, 2012, 11:03 PM UTC
HN karma
486
Public activity
169 items

About kichik

AWS consultant specializing in CI/CD and CDK

cloudsnorkel.com

Recent public activity

  1. story
    Show HN: SSO Zen

    I got tired of switching back to console and typing `aws sso login --profile WHICH ONE WAS IT AGAIN` every time my session expired. So I made a little tool that listens for those e…

  2. comment
    Comment #46493826

    Nice chain and write-up. I don't know that I would call eval() on user input, hard coded secrets, and leaked credentials small or harmless. All of those are scary on their own.

  3. comment
    Comment #46177275

    Invoke-WebRequest is also very slow if you forget to disable the progress bar with $ProgressPreference = 'SilentlyContinue' PowerShell has some "interesting" design choices...

  4. comment
    Comment #46115839

    The echo server will have no knowledge on how to construct the string to be signed.

  5. comment
    Comment #46109479

    You are indeed misunderstanding me. I am talking about returning the entire string to be signed. Not the result of the signature.

  6. comment
    Comment #46087869

    You can save the expected string to a file, save your string to a file, and run diff on a hexdump of both. Even without hexdump, you should see the difference between "\n" and "\\n…

  7. comment
    Comment #46083718

    Not exactly the point of this article, but it would be cool if APIs like this can return the expected signed string for debugging. It would have to be properly limited for security…

  8. comment
    Comment #44336618

    Wasn't ninja invented by a Google employee?

  9. comment
    Comment #43442387

    From MSN: > The largest net seller in January was Canada. The U.K. was the largest buyer in January, after having been the largest net seller in December. Norway and Japan were the…

  10. comment
    Comment #42502242

    They might be looking for some open-source fame. The contribution to their resume is more important than the contribution to the project.

  11. comment
    Comment #41947621

    You can ask for larger zip files. The maximum is 50GB. It uses zip64 which most modern systems should support. So still 6 files in your case, but at least not 50.

  12. comment
    Comment #41916325

    Google Takeout can also run on a schedule. You can do a monthly backup and they will email you when it's ready.

  13. comment
    Comment #41895110

    Keep reading down the thread. He's not trying to hide it that much. https://x.com/paulg/status/1847333998554447948

  14. comment
    Comment #41719565

    Those are the first two paragraphs of the article. Verbatim. Can't get more in context than that.

  15. comment
    Comment #41635896

    The texts he sent are in the PDF.

  16. comment
    Comment #41507302

    You can still charge $80 for the proprietary plastic shell.

  17. comment
    Comment #41123631

    Yeah he loves that stuff. https://github.com/kichik/nsis/blob/b4f28a7071dcd0bf3bcdb766...

  18. comment
    Comment #41123608

    Sorry, clone might not be the right word here. Foobar2000 was created out of spite because the creator didn't like what Winamp was doing. I vaguely recall something about bitrate l…

  19. comment
    Comment #41123138

    That's a funny name considering it was the Winamp creator's nickname and Foobar2000 itself is a Winamp clone.

  20. comment
    Comment #41092756

    And their local DNS servers crash with heavy usage.

  21. comment
    Comment #41086493

    For anyone as confused as me by the title, "California Forever" is a company that wanted to build an utopian city. Backed by billionaires according to the article.

  22. comment
    Comment #40406743

    > if I could keep this up and convert 10-20% of waitlist users $5000/mo for 10% of the list. Unless he factored in the list growing further. The website has pricing and it does say…

  23. comment
    Comment #40378431

    It's not a cure. It's a crutch. And it doesn't even train you for a real relationship because it's so accommodating. It never stands up for itself and has no real needs.

  24. comment
    Comment #40222168

    We need a "dumb it down for the non-lawyers" on every article that mentions courts. ELIANAL. I always try to ask my lawyer friends, but they are sadly not very good at dumbing it d…

  25. comment
    Comment #39989825

    but my server will: - require direct source code access - require go build tools - require maintaining GitHub auth - require upgrading build tools over time - not be trivial to reb…