HNHacker News
TopNewBestAskShowJobs

brianpgordon

3,290 karma · joined March 17, 2013

[ my public key: https://keybase.io/brian; my proof: https://keybase.io/brian/sigs/pOrpc9JT66_CJmX_oqQuOqqrcN8TB3Iv6Qsu-Ev_pFg ]
submissionscomments
brianpgordon··on Tilde.club is giving accounts to waitlist
Ah, right, I was misremembering how FIFOs work. You can't even write to it until a reader opens it. I was thinking that you could just dump data on it and the operating system would buffer it until someone came along to read it.
brianpgordon··on Tilde.club is giving accounts to waitlist
How does the process know that you're reading the pipe? Does it just, like, write a hundred copies of the desired output with EOFs in between so that it can be read multiple times?
brianpgordon··on Square wants to be a bank but not be taxed like one
Or Uber claiming to be a "technology platform for several different types of digital marketplaces?" :)
brianpgordon··on EasyDNS threatened with criminal complaint if client data not disclosed
"What you do?" You mean like breaking a customer's domain name for the next year if EasyDNS thinks they brought a DoS attack "on their heels?"
brianpgordon··on Tesla has applied for a patent for a new electromagnetic windshield-wiper system
More critical in the case of Tesla, where there are cameras mounted behind the windshield (on the rear-view mirror). This is one of the typical talking points in the LIDAR vs optical debate, because the rain makes it difficult to see with passive optical sensors.
brianpgordon··on Tesla has applied for a patent for a new electromagnetic windshield-wiper system
If they want to have one single blade move back and forth, that's cool, but this seems like a bafflingly complex way to do it. What's wrong with a normal linear actuator? It's powered by a regular electric motor (something right in Tesla's wheelhouse), can be built very reliable, and is plenty efficient. There's no reason to build the Space Shuttle when people just want an electric car, and won't be able to tell the difference under the hood anyway. Maybe they want as many solid state components as possible for durability? Talk about diminishing returns...

No, my guess is that this is to lock down the patent so they own it (and as many other even vaguely plausible concepts as possible) and can wield it in patent battles with other automakers. More charitably, you could look at it as clearing as much land as possible so that 10 years down the line their engineers are minimally encumbered by patent concerns and can build whatever they want. Typical corporate R&D, and not particularly deserving of a Car and Driver fluff piece.

brianpgordon··on France and Germany Agree to Block Facebook's Libra
> This conflict means that, no matter how well intentioned, policy makers will be feel compelled to devalue their own currencies. It's a race to the bottom, but without a bottom. Alternatives, especially private alternatives readily available to citizens, will increasingly be viewed as the enemy.

The ability to devalue their currency is an essential tool that central banks wield to battle financial crises.

Keynes pointed out that workers don't want to take a pay cut (and employers don't want to offer a pay cut, because they fear causing resentment), so nominal wages are "sticky." When they need to fall to reach price equilibrium, the economy tends to experience mass unemployment instead. It would be very difficult to convince all workers universally to accept a pay cut. The alternative is to devalue the currency so everyone is affected through the currency rather than by trying to propagate policy changes throughout the private sector.

Also, countries can have huge problems when they take on debts in a hard currency which they can't devalue. This is how you get runaway hyperinflation. Their revenues are in the local currency, but their debts are in (usually) USD. If they run low on foreign currency reserves, they can be forced to sell huge amounts of the local currency on the forex market in order to acquire sufficient USD to pay their debts. I can see why France and Germany wouldn't be eager to see yet another USD rise to prominence and leave them disadvantaged in debt financing.

Another talking point which comes up all of the time is the tension introduced when different regions (like Germany and Greece) are forced to use the same currency, even though normally economic forces would cause the weaker region's currency to move against the stronger one's. Devaluation would be fantastic for Greece but it's hobbled by crushingly expensive exports since it's in the Euro monetary union.

brianpgordon··on Carcinogens Have Infiltrated the Generic Drug Supply in the U.S.
I thought the article did a decent job of explaining exactly what the problem is in this case and communicating the scale of the risk. Your comment, on the other hand, sounds like a kneejerk dismissal entirely based on the headline not agreeing with what you thought was true.

Yes generics have proven to be broadly safe. That doesn't mean there aren't still issues that need to be addressed by tweaking or adding regulation. Yes even with carcinogens the contaminated generics are probably better than taking nothing. That doesn't mean that the contamination is acceptable.

brianpgordon··on Rich Hickey on Datomic (2012) [video]
So Rich's talk about Datomic's architecture is taking place at Oracle? I love the radical openness. There's something cheeky about going to your competitor's office and inviting their engineers to learn about how your product works and how they can make better databases.
brianpgordon··on Update on AB5
I have a few parallel objections:

1. It's not like it would be difficult to track all of the little chunks of time worked and add them all up. Everything is automated anyway, and nobody is filing time cards.

2. In the end, the wall clock is how workers experience time when they're out doing work for these companies. They get their bike out and go deliver food for a few hours, or get in their car and drive around the city picking up and dropping off passengers. It's not clear to me that the interstitial minutes between gigs should be considered free time for the workers that goes uncompensated. If they drop off a passenger and pick up a new one within five or ten minutes, they've been working continuously. They haven't had a chance to go home and take their socks off and relax. They're working. It seems like a step backwards for everyone's mental well-being to use technology to clock the exact minutes that they produce value for the company, and cut off their pay the instant they stop producing. It's like a widget assembly line monitored by cameras where workers get automatically clocked in only when they're physically touching the widgets, so that if they sit up to stretch, or walk over to the cabinet to grab a different tool, or even if the conveyor belt is sending the next widget over to be worked on, they stop getting paid. I wouldn't want to work like that.

3. The fact that someone can be doing work for multiple companies at the same time doesn't seem like such a big problem to me. If they're on a segment of a route in which they're simultaneously delivering a passenger and someone's lunch, they should get paid for both. And the same contiguous-time rules I mentioned in #2 above can apply - as long as they're continuously picking up lunches and passengers within a certain interval, they're working two jobs.

brianpgordon··on Update on AB5
Many people have multiple jobs (even full-time jobs) and receive multiple W2s in the mail every year. I'm not an expert in employment law but I haven't seen evidence that the current multi-job system isn't workable here. You can have multiple part time jobs, and if one job goes over a certain threshold of hours then they have to provide you benefits. If you have multiple full-time jobs, all of them are required to offer you participation in employer-sponsored benefits, although you typically only pick one. Is that not how it works?
brianpgordon··on The Soul of Erlang and Elixir [video]
In the talk he glosses over what he sees as serious flaws in Erlang distribution. I did some digging and it turns out that he elaborated on Reddit:

https://www.reddit.com/r/elixir/comments/bronlx/discover_wha...

brianpgordon··on Terror Watch List Finally Reined In
> history has agreed

I'm not sure where you get that idea. A 2018 poll of political scientists ranked him dead last, and a 2018 poll of presidential scholars ranked him third-to-last:

https://en.wikipedia.org/wiki/Historical_rankings_of_preside...

brianpgordon··on CDC says stop vaping as mystery lung condition spreads
Reductio ad absurdum is similar to whataboutism, but it's not the same. Whataboutism is more like an abrupt detour off into a different issue to try to confuse the conversation or transform the topic of discussion into a referendum on the personal morals/motivations of the involved parties. The appeal to extremes does have to ask the question "what about x" but it's relevant because it's done to demonstrate the logical consequences of the other person's line of argument. It's not trying to deflect, it's getting to the heart of the issue.
brianpgordon··on Apple and Foxconn broke a Chinese labor law to build the latest iPhones
There's lots of discussion on the accountability question from the last Bloomberg expose of Apple's subcontracting practices-

https://news.ycombinator.com/item?id=19133586

brianpgordon··on String Lengths in Unicode
I believe that's more of a font support thing than a browser thing. I'm pretty sure I've seen Firefox render e.g. "male shrug" correctly on MacOS but they're two separate symbols with the default sans-serif font on Windows. I can see it rendered correctly on Windows on sites that define the font to be something that actually has a glyph of a shrugging man.
brianpgordon··on Ask HN: What is the ops architecture like for AAA multiplayer game servers?
Ooh, you may be the perfect person to ask a question that I've been wondering about. Is .NET Core on Linux viable yet for serious use? I've done some tinkering with it and gotten a project working on MacOS but I did the development in Visual Studio on Windows. Is it realistic to do your development in Rider, with the open source version of msbuild for CI, and have it perform reasonably on Linux in production, without ever paying Microsoft anything?
brianpgordon··on Ask HN: What is the ops architecture like for AAA multiplayer game servers?
I share your high regard for C# and the .NET libraries but not your disdain for Java. Java the programming language is pretty ugly but the JVM is robust and there are other languages which compile down to Java bytecode. In your "scrappy startup" scenario I would pick Scala or Clojure long before Python, mainly because I'm skeptical of the idea of using a dynamically typed programming language for large-scale backend development - for human scalability reasons, not performance ones. Personally I'd also have to pass on Windows even in the AAA bigcorp scenario, because I prefer the tooling and open ecosystem around Linux and epoll isn't that much worse than IOCP.
brianpgordon··on Dead Malls
I don't see the contradiction. A mall offers the walkability of an urban center but provides plenty of free parking. Additionally, there's no space "wasted" by residential and office buildings like there is in a city. What exactly doesn't make sense here?

Indoor malls died because consumers who want to shop in person turned out to prefer individual stores and strip malls. If anything you should be pointing out how weird and wasteful those detached stores are. It seems to me that the indoor mall is at least speaking the same language as you, with its "synergy and community" and walkability. The model of having detached stores and restaurants spaced widely apart is the unsustainable aberration. The indoor mall makes sense.

brianpgordon··on Sorry, we can't join your Slack
Same here. I thought the article was going to talk about vendor lock-in and the inability to access old chat messages if their client removes their access, or if their client stops paying Slack, or if Slack stops existing. The hard turn into that mainstay of startup blog posts - "Slack makes us unproductive" - felt abrupt and unmotivated.
brianpgordon··on Not a full timer
https://www.reddit.com/r/comics/comments/91kw4d/just_call_th...
brianpgordon··on Segment Security Incident
I'm just guessing here but, given that Box doesn't use end-to-end encryption, I bet that their "grant access" button is meant for their support agents, and that [some subset of] their backend engineers could access your data at any time.

It's an interesting exercise to imagine an elaborate multi-custody arrangement where all data is encrypted with keys that live in hardware security modules and at least three of five senior people are required to join their secrets any time the KEK needs to be handled directly... but I can tell you that that kind of scheme where 100% of customer data is completely opaque would be a major inconvenience in a fast-moving SaaS startup. Not only is implementing an engineer-proof privacy scheme a massive undertaking but it makes debugging production issues much more difficult. If indeed they were going to go all-out on such a scheme I would kind of expect them to brag about it but I don't see claims like that in https://community.box.com/t5/How-to-Guides-for-Account/Data-....

I'm curious if anyone's worked at big-name cloud services providers and can speak to the practical effectiveness of privacy measures in place. My guess is that even at Google, for example, a rogue engineer working on a particular product (or maybe the infrastructure it runs on) could theoretically bypass organizational controls and look at user data.

To be clear, I don't really view this state of affairs as a big problem. I've commented before on why (https://news.ycombinator.com/item?id=20513055). Professionalism and integrity (in combination with organizational controls and the principle of least privilege) work fine IME, plus the fact that nobody except you really cares about your personal data. But I do think that your expectations are unrealistic if you think that backend engineers generally don't have the kind of access I'm talking about. Unless a service encrypts on the client with your encryption keys, you should expect that the company's "employees, or a subset, has unfettered access."

brianpgordon··on Stripe Capital
The rates don't seem extraordinarily high to me. What would you consider reasonable? It's not trivial to get an apples-to-apples comparison since loan rates are usually given as an APR, not a flat fee. Also, don't confuse their "% of sales to loan repayment" number with a rate - that just determines how much of your revenue they hold back until the loan is repaid.
brianpgordon··on Mental-health information 'sold to advertisers'
This is indeed just business as usual on the web, but I'm not sure that should be an acceptable excuse. Clickbait or not, the article isn't wrong to describe in vivid terms how huge companies traffic in very private personal data so that they can more effectively put ads in your face. Given how willing people seem to be to trade their privacy for a few pennies in free services, maybe plain-language articles like this are what we need to communicate the consequences of where that kind of attitude can lead.
brianpgordon··on In a swipe at Chrome, Firefox now blocks ad trackers by default
> I suppose if he wanted to donate to a diversity campaign, he'd donate to one directly.

This interpretation of his comment is... generous. I agree that there's a legitimate point around wanting your donation to go specifically to browser development and not overhead or other side-projects, but it's pretty clear that he was using the word diversity contemptuously.

brianpgordon··on In a swipe at Chrome, Firefox now blocks ad trackers by default
I would suggest that Mozilla has enough money already- they just don't spend it on Firefox. Donating only validates their current budget and gives them a mandate to keep building their sprawling portfolio of side projects.

There was some discussion about this a few days ago: https://news.ycombinator.com/item?id=20850950

brianpgordon··on In a swipe at Chrome, Firefox now blocks ad trackers by default
Ironic- https://i.imgur.com/jBMKcN5.png
brianpgordon··on Why the Amazon Basics Keyboard Is My Favorite Keyboard
Maybe it's just because my keyboard is >15 times as expensive but I have an extremely hard time believing that the Amazon keyboard is in the same league. I can't help but feel like if the author unironically prefers a $15 keyboard (and believes that mechanical keyboards are all loud) then maybe he shouldn't be writing a blog post about keyboards because he doesn't really know what he's talking about.
brianpgordon··on Windows X86-64 System Call Table
Hm, I thought there was some issue with glibc not wanting to provide wrappers for certain Linux syscalls. What if the Go runtime wanted to use one of those syscalls for some reason? It seems like then it'd be forced to go straight to the kernel.
brianpgordon··on The “mail is hard” myth
Keep increasing the PoW cost and think about where that line of argument leads you. "One message delivered to the inbox is worth far more than a billion messages delivered to the spam folder." One single delivered message is going to be profitable for the spammer? Clearly not. This proves the existence of some break-even point at a lower cost. Mail providers just need to set the cost above this point.
← PreviousPage 4 of 33Next →