HNHacker News
TopNewBestAskShowJobs

daave

354 karma · joined November 13, 2011

Aussie in Seattle. Dad. Network/Storage/API geek.

Engineer at Snowflake. Co-founder at Radiopaper, PerfectSchedule. Ex-Google. Ex-Mixpanel. Ex-Stripe.

Views here are my own.

submissionscomments
daave··on Violent crime plummets 36% in downtown Seattle, lowest since 2017
HackerNews - aka local news for residents of the Bay Area, Seattle & NYC

I wonder what percentage of the world’s software engineers live in these 3 cities?

daave··on Secretive: Store SSH Keys in the Secure Enclave
You're certainly more of an authority on it than I, so I trust when you say most schemes don't keep long-term keypairs around; but of the two companies I've worked at that use SSH CAs: one used Teleport, and the other had long-lived keypairs, but fairly-short-lived certificates -- you had to get your public key re-signed each day. They used Yubikeys to store (or maybe just unwrap?) the private key material during the SSH handshake; much as a TPM or the Secure Enclave could be used to do this.
daave··on Secretive: Store SSH Keys in the Secure Enclave
This is a non-sequitur, even if you use SSH certificates you still need a public/private keypair, hosts just authorize the key by checking the signature from a trusted CA on the public half of the user key. The OP is about a way to store the private key part of the user key that can't be extracted even with physical access to the machine. So, this is an equivalent/alternative to using a YubiKey, that is conveniently built in to a popular piece of hardware; not something orthogonal to using SSH certificates.
daave··on Show HN: Radiopaper – Troll-resistant public conversations
Re caching:

I had a look into it, and it seems we set the following headers when retrieving user images:

> cache-control: public, max-age=3600

So I believe your browser _should_ be caching these.

daave··on Show HN: Radiopaper – Troll-resistant public conversations
Done - https://radiopaper.com/Stavros

Being able to change your email address is a known gap, sorry about that. For now if you want to use a different email you'll need to make a second account. We plan to make account merging possible in the future.

A short-sighted technical decision on my part: we use the Firebase Auth UIDs as our internal user IDs, but Firebase Auth does not allow you to have multiple email auth-providers on a single account. So we need to add a layer of indirection in our data model.

daave··on Show HN: Radiopaper – Troll-resistant public conversations
Yes! They will receive an email with the message, and some boilerplate explaining that it was sent from Radiopaper and that if they reply to the email the message will be published. They'll also receive a link to view the post on the site if they prefer.
daave··on Show HN: Radiopaper – Troll-resistant public conversations
https://radiopaper.com/about

It's helpful feedback that this isn't as discoverable as it should be. If you hover your cursor towards the bottom of the explore page, some links show up.

daave··on Show HN: Radiopaper – Troll-resistant public conversations
We don't have usernames!

You can log in with OAuth, or by Email.

You can change your _display name_ on your profile page, and that's what appears publicly on the site (your email doesn't appear publicly, even if you log in by address!).

Today to get a custom profile URL like radiopaper.com/Dave, you just need to ask and we'll create an alias for you. There isn't a self-serve alias mechanism available today, but we're thinking about how to provide one. Any profile can be linked by the URL radiopaper.com/uid, for instnace my profile can be reached at https://radiopaper.com/user/AwQLwnOgQFdyDfNoYfNCSSsVdx43, "Dave" is just an alias.

Clearly having separate concepts of login method vs display name vs profile URL is all a bit confusing, this is helpful feedback!

daave··on Show HN: Radiopaper – Troll-resistant public conversations
Adding a feature to block specific accounts is on our short-term roadmap.

We'll also endeavor to block accounts from the platform that violate our policies (https://radiopaper.com/policies).

daave··on Show HN: Radiopaper – Troll-resistant public conversations
Hacker News has definitely pushed us out of the free tier for today, but these services are still impressively cheap. We may have a $5 cloud bill this month.
daave··on Show HN: Radiopaper – Troll-resistant public conversations
The ability of the OP to accept or ignore replies is in addition to, not instead of, regular spam filtering techniques. Certainly we'll want to automatically block bots and other bad actors that violate our policies to reduce the burden on users.
daave··on Show HN: Radiopaper – Troll-resistant public conversations
Thanks for the feedback!

1. We're certainly looking into this, and other approaches to content discovery.

2. You can already add bios! Go to to your user page (link in the top-right), and it should be clear how to add a bio.

3. Thanks for the suggestion, we'll definitely think about this more.

daave··on Show HN: Radiopaper – Troll-resistant public conversations
Michael,

So glad that you're excited to use the platform.

Would you like a custom alias (radiopaper.com/MichaelLeonhard or similar)? At the moment we provision those manually, on-demand.

We saw your message to Socrates, I'm afraid he's not around to reply today, so it'll likely remain unpublished.

daave··on Show HN: Radiopaper – Troll-resistant public conversations
Thanks for taking a look! For now there are two ways to find an interlocutor:

1. Send a message to someone you already know, using their email address.

2. Comment on or start a conversation with someone whose post you find interesting.

We expect to add more features around discovering both users and conversations in the future.

daave··on California port truckers ‘drowning’ in supply chain inefficiencies
Fellow Seattle-worker here

As a counterpoint- I take express bus 545 from Redmond to Seattle between 8 and 9am on weekdays, and there’s typically less than a half dozen people on the bus. I get from my home to the office in 30-40mins. The slowest part is the tiny stretch of I-5 with no bus lane.

I don’t think public transit has failed to keep up, it’s under-utilized, in part due to anxiety about COVID. These same routes were jam packed in 2019.

daave··on My own personal AWS S3 bucket
I use LastPass’s Emergency Access feature for this.

You can designate people who can access your Vault, after a certain waiting period. If they request access prematurely, I can revoke it during the waiting period.

There are written instructions for my next of kin on what to look for in the Vault.

The main difficulty is if my next of kin forget their LastPass master password.

I’ve been thinking of distributing a key via a set of USB stick using Shamir’s secret sharing, with written instructions to use them to recover a backup of the Vault kept offline… but have not gotten around to this.

daave··on Problems with math rendering on the web (2020)
You could achieve this with CSS by using “vw” units for everything, including font sizes
daave··on NASA's Perseverance rover sends stunning images
It's not pointless, but I do think it's reasonable to question whether this is the best thing one can do to have an impact.

Could the time spent taking the neighbors trash away be spent doing something even more impactful?

Is the interaction with these neighbors caring and educative, or antagonistic? In the latter case they're unlikely to emulate it or pass on the idea to others.

daave··on Tips for a Better Life
If you're paying off every month, why does APR matter?

Agree with finding good rewards and I'd substitute low APR for low/no annual fee.

daave··on Tips for a Better Life
I take it the author is not a fan of w3schools.com, a web site that's been around for a very long time and is highly ranked for many html-related queries.

Personally I find most of their content to be pretty decent, so I wouldn't filter it out as a rule.

daave··on Poll: Will you take the Covid vaccine?
Having antibodies does not guarantee immunity.

We don’t have enough information yet to say how protected someone might be from being infected again if they have antibodies to the virus.

https://www.cdc.gov/coronavirus/2019-ncov/lab/resources/anti...

How long IgM and IgG antibodies remain detectable following infection is not known.

...

it remains uncertain to what degree and for how long individuals with antibodies (neutralizing or total) are protected against reinfection with SARS-CoV-2 or what concentration of antibodies may be needed to provide such protection.

https://www.cdc.gov/coronavirus/2019-ncov/lab/resources/anti...

daave··on I tried the first no-kill, lab-grown chicken burger
Also in Australia they're called chicken burgers.

Before moving to the US I always thought it was the style of bun that made it a 'burger', whereas if you put it between two pieces of sliced bread it would be a 'sandwich'.

daave··on Breach exposed more than one million DNA profiles on a major genealogy database
Seems unlikely to be a sustainable business.

For GEDMatch, Ancestry.com, 23andMe, etc, most of the value comes from being able to aggregate many people's data. If they had to delete it after collecting, they'd have to charge a lot more, and there's just no market for that.

Perhaps they could anonymize the data (at least, purge foreign key references to account/billing info) after 6 months, but not delete it.

daave··on Epic Tells Customers It Will Stop Google Cloud Integrations
That page links to https://cloud.google.com/terms/data-processing-terms, which has a lot more detail.

I believe usage for ads is highlighted on the non-legalese privacy page because it's a common question/concern, but the terms specify that data can only be processed as requested by the customer (IANAL, but that's my read and understanding as a Googler who works on Cloud infrastructure).

daave··on Epic Tells Customers It Will Stop Google Cloud Integrations
Google states unequivocally in its Cloud privacy documentation:

  3. Know that customer data is not used for advertising.
  
  You own your data. Google Cloud does not process your data for advertising purposes.
https://cloud.google.com/security/privacy/
daave··on Show HN: Calculate your 2017 and 2018 federal taxes
Hopefully folks find this helpful for understanding their tax liability under the new Tax Cuts and Jobs Act, and how it may impact their budget in 2018. Let me know if you have any feedback!
daave··on Managed SSL for Google App Engine
Agreed this is super-exciting.

Hope they add the same functionality for Google Cloud HTTPS Load Balancers soon as well.

daave··on Alphabet Announces Fourth Quarter and Fiscal Year 2016 Results
..and yet, TV advertising is still a huge business

YouTube can target ads much better than TV, and with TrueView ads the advertiser only pays if the viewer doesn't skip, so more of the revenue is going to be coming from ads that mutually add value (at least that's the theory)

daave··on What I Wish I'd Known About Equity Before Joining a Unicorn
Did you consider using something like ESO Fund to finance the exercise of your options? If so, why did you decide not to use them?

Assuming they're willing to do the deal, if your alternative is letting the options expire worthless, it seems like a no-brainer to take a loan with no recourse unless there's a liquidity event. You wouldn't have made the full $300k, but at least a solid portion of it.

daave··on Ask HN: Who is hiring? (January 2017)
Mixpanel | San Francisco, Seattle | Full-time, ONSITE

Mixpanel's mission is to help the world learn from its data. We help companies learn how people use their products and applications so they can grow their business. Every day we face and solve new challenges with scaling, reliability, design, and making our customers happy.

We're looking for Software Engineers with Front End, Back End, Full Stack, Machine Learning or Distributed Systems/Infrastructure focus. We're also hiring Site Reliability Engineers, Product Managers and our first dedicated Security Engineer.

https://mixpanel.com/jobs/#openings

- Dave, Seattle Site Lead

david.claridge@mixpanel.com

Page 1 of 4Next →