HNHacker News
TopNewBestAskShowJobs

danielvf

9,793 karma · joined December 13, 2013

daniel at leancoder dot com

Long time builder: - Web applications - Embedded firmware - Blockchain applications and security.

submissionscomments
danielvf··on Diffusion with Offset Noise: Finetuning SD to generate very dark or light images
From experience in related things - you are going to get a fairly grey orange, and fairly grey overall image.
danielvf··on North Korean hackers stole a record $1.7B of crypto last year
As a blockchain security guy, it's really easy to spot the occasional North Korean heists on Ethereum. The big tells are:

1. They hack computers not code. Their normal plan is to steal keys by compromising users and computers. This is in contrast to the normal "hack" that works by finding and exploiting bugs in code.

2. They immediately exfiltrate the stolen money back to the real world via bazillions of mule accounts that are already standing by. In contrast to the "normal" hacker who attempts to obfuscate and hide funds on-chain, and slip away with some at a far future date.

Here's a writeup from a company after the big 600 million dollar NK hack.

https://roninblockchain.substack.com/p/back-to-building-roni...

danielvf··on Is there a market failure in child care?
The cost of childcare services per child has a fairly hard floor on it. Working class families tend to have more kids in the US. Thus, the total expenses of childcare approx nets out around the same for a working class family as for an upper-middle class family.

But the "higher class" family has a lot of extra income to be earned by having two parents working vs one. So its often bad economics for a poorer family to work two jobs and pay for regulated childcare. And good economics for a rich one.

And this is how it works out in reality too. I checked a bunch of census stats, and the percentage of children in childcare facilities in the US rises steadily with family income. (interestingly enough, the percentage of children watched by their grandparents also rises steadily with family income too)

danielvf··on The design of in-car climate controls has gone backward
Toyota Tacoma - still has all the knobs and buttons just like God intended. Touch screen is small, works with CarPlay, good for podcasts and maps. Everything else, just reach over and touch it. And a Tacoma is the very definition of reliable.

Console view:

https://toyotaassets.scene7.com/is/image/toyota/TAC_MY21_000...

danielvf··on Southwest and FedEx Planes Nearly Collide on Austin Airport Runway
From the comments:

"I’ve been a controller for 26 years now and this incident has left me absolutely speechless. There is no defence for what I can only describe as one of the most horrifying displays of non-controlling you will ever see.

First, its CATIII conditions with very limited visibility. The plan to depart SWA ahead of FDX would have been a bit ‘sporting’ on a clear VFR day – Generally you’d not want to depart anyone holding short with inbound traffic any less than 4 miles away. In full blown low vis operations its absolutely ridiculous. Second on a CATIII approach the ILS needs to be protected because signal interference from objects within the ILS sensitive area can result in loss of accurate guidance from the localiser and glideslope. On an autoland that could cause crash because the autopilot is following that guidance all the way to touchdown. This is why CATIII holds are further back from the regular holding points.

Similarly on runways where there a mixed mode of operation extra spacing is required between arrivals to ensure that any departures in the gaps are airborne and past the end of the runway before the inbound gets to a certain distance from touchdown – which off the top of my head I think is at least 2 miles. This is why when fog hits and we go to CATIII ops the delays build up because the runway capacity goes down massively.

In this case there was zero hope of the SWA being airborne and past the end of the runway before the FDX was 2 miles from touchdown, so the moment he lined SWA up the FDX approach was compromised. You can run it tight on a visual or CATI approach but absolutely not on a CATIII.

What I found more disturbing than anything besides the gross error of judgement in his initial plan was once it became apparent that the plan was not working he simply gave up controlling at that point and allowed the aircraft to sort themselves out. Once he identified the SWA was slow to roll (totally understandable given the low vis) it should have been blindingly obvious that this needed to be fixed immediately. SWA, cancel takeoff clearance and hold position. FDX go-around. That was the only option at that point.

He would have been unable to see either of the aircraft given the reported RVR, so relying on a visual separation solution was out of the question. Instead he did absolutely nothing which is unforgivable. Even more so given that none of the pilots could see each other and would effectively be flying blind in regards to what the other was doing. Also at that low height TCAS would be inhibited so that would not offer them any help either.

Mercifully the FDX crew seemed to be several steps ahead of everyone else and they absolutely saved this situation from being catastrophic. They should be commended and awarded for their excellent airmanship. The only thing I would say about the SWA crew is they should frankly have refused the takeoff clearance hearing landing traffic was only 3 miles out in those conditions. It was an unnecessarily risky clearance from the get go.

This incident makes me feel sick honestly. Every controller at some point in their career makes an error of judgement, which is why we have safety margins. When you make one though its critical you recognise it and then do something about it. Doing nothing really is an unforgivable sin. This unfortunately was appalling ‘controlling’ from start to finish. The initial plan was bad – it was never going to work in those conditions and then he somehow managed to make it all worse by doing nothing to fix it.

I also can’t believe that the controller was apparently not relieved from position immediately because he was talking to the FDX again on its 2nd approach. A just safety culture requires the immediate removal from position of anyone involved in an OI on a no blame basis so that the facts can be looked into and the individual involved can gather themselves.

This whole incident just boggles my mind."

danielvf··on The Four Horsemen of the Tech Recession
I went digging on this, because I thought you were wrong.

Turns out the official book name is indeed singular, and in fact I tracked this singular usage all the way back to Athanasius 39th festal letter in AD 367, listing the accepted books of the New Testament - "the Revelation of John".

"The Revelation" is also the first word of the book in greek. (Ἀποκάλυψις or apokalypsis)

So thanks for the enjoyable rabbit trail.

danielvf··on The unequal treatment of demographic groups by ChatGPT/OpenAI content moderation
Such a fascinatingly simple experiment. Generate 6,764 negative sentences, then for each sentence, test it against each of of hundred or so demographic group.

The most powerful chart in the entire article, just summarizes how many times these same sentences are flagged as hateful for each group:

https://substackcdn.com/image/fetch/w_1456,c_limit,f_webp,q_...

danielvf··on US still has the worst, most expensive health care of any high-income country
The parent association that owns the Blue Cross brand is non-profit. However the individual companies (at least all the ones I've examined) are for profit - and in fact are quite profitable. For example, the entire revenue of the parent association is smaller than the profits of only Blue Cross South Carolina.
danielvf··on Ask HN: How do I know that I am autistic?
The "what do I do with this child?" part sounds like something that many first time parents go through. It takes a while to figure things out, and then a few months later, poof, the child changes, and you've got a new set of things to figure out. Plus, someone screaming doesn't help anyone think.

Since you are interacting, loving, comforting, and playing, I'm guessing that even if you haven't figured out solutions to everything yet, you know far more about your daughter than you when you started. And you'll continue to learn more over the next few months.

danielvf··on Ask HN: What is the weirdest or most surreal recent technology you have seen?
Agreeing with you. Psalms typically employ parallelism not rhyming. Two examples:

  The sun will not harm you by day,
      nor the moon by night.
and

  My life is consumed by anguish
    and my years by groaning;
  my strength fails because of my affliction,[b]
    and my bones grow weak.
danielvf··on Tell HN: Sundar Pichai made $8M today
If we follow the assumption that he is responsible for this stock movement, then he made 8 million dollars today and yet made investors 27,000 million dollars - creating 3,300x more value than captured.
danielvf··on Ask HN: Lead developer but I just don't enjoy management
I've had two iron rules for the last 24 years:

- Never work with jerks (either boss, customers, coworkers...) - Never be anyone's manager

It has worked out great! I've gotten to work on a steady stream of hard problems, working right at the middle of what I'm good at, what I love, and what people are willing to pay for. And for/with great people.

The guarantee you have in choosing to write code is that you get to write code!

danielvf··on Challenges with capturing and storing rainwater for drought in California
Here's a nice, simple chart of the current state of California's reservoirs. There's currently a lot of room for rain and more water, with most of them far below historical averages, (and even farther below capacity)

https://cdec.water.ca.gov/resapp/RescondMain.

However, when you look a charts on a single reservoir, you can see that the rain is making a clear increase in water levels.

https://cdec.water.ca.gov/resapp/ResDetail?resid=SNL

danielvf··on Netflix has job with almost $1M listed salary range, to comply with new CA law
Netflix is famous for its all cash compensation packages.
danielvf··on The cost of being poor: Why it costs so much to be poor in America
I spent half my twenties driving beater 20 year old cars in non-costal America. Both of which I carried fire extinguishers in - because one of them had a habit of springing exciting fuel leaks in the engine compartment.

The answer to making it work, was of course community. That and $99 per year triple A's free towing. People to get you places when the car is down, friends who look under your car, see that the stick is disconnected from the transmission, and bolt it back on with some bolts they find by the side of the road. Friends with the same model of car who know where the good garage mechanics are.

danielvf··on Who Is Rep.-Elect George Santos? His Résumé May Be Largely Fiction
That was a fun read, but I can't find him on the Bundestag's website under the official list of members. https://www.bundestag.de/en/members Did I miss it?
danielvf··on Binance's books are a black box, filings show, as it tries to rally confidence
Two good articles from the last few weeks on what has made the cut over the last few years and proven to be useful :

https://vitalik.ca/general/2022/12/05/excited.html

https://astralcodexten.substack.com/p/why-im-less-than-infin...

I won't summarize, beyond agreeing with the second that a lot of the view that "all of crypto is a scam" is driven by the fact that essentially all public facing crypto advertisements are for scams. However behind the scenes there are open decentralized system that do move billions of dollars smoothly and safely for millions of people.

danielvf··on I almost failed to search a 37 GB text file in under 1 millisecond
BTW, loved the article, not sure how I missed that you tried this.
danielvf··on I almost failed to search a 37 GB text file in under 1 millisecond
If we are really going all out for performance optimization...

In theory, hashes are going to be very evenly distributed. With a file of that size you could probably land within 1% of the correct location just by seeking to byte offset percentage given by the first bytes of the hash...

(It's a fun article)

danielvf··on Doors of McMurdo
McMurdo has a deepwater port, and a lot of fuel storage tanks as a part of its facilities. Tankers and can just drive up in summer and offload large quantities of fuel. It's not like the South Pole station where everything must be flown in. And the "waste heat" from the generators making electricity is routed throughout the base and used for heating.

Not to mention almost a megawatt of wind turbines in the near constant wind.

A study on the feasibility of electric vehicles had the expected cost of electricity per kWh at the base lower than California residential rates.

danielvf··on Mobile Store Owner Sentenced to 10 Years for Scheme to Illegally Unlock Phones
> To gain unauthorized access to T-Mobile’s protected internal computers, Khudaverdyan obtained T-Mobile employees’ credentials through various dishonest means, including sending phishing emails that appeared to be legitimate T-Mobile correspondence, and socially engineering the T-Mobile IT Help Desk. Khudaverdyan used the fraudulent emails to trick T-Mobile employees to log in with their employee credentials so he could harvest the employees’ information and fraudulently unlock the phones.

> In total, Khudaverdyan and others compromised and stole more than 50 different T-Mobile employees’ credentials from employees across the United States, and they unlocked and unblocked hundreds of thousands of cellphones during the years of the scheme.

> Khudaverdyan obtained more than $25 million for these criminal activities.

danielvf··on Why America’s Railroads Refuse to Give Their Workers Paid Leave
From stats I can look up, the average US railroad worker earns $130,000 year in total comp in 2021.

Railroad retirement begins full strength at age 60, and looks to be $4,838/mo for an ex railroad employee and spouse. In contrast, Social Security on $130,000 earnings would be $1,919/mo if you retired at age 62. The railroads pay for the retirement expense via tax.

So yes, by US labor standards, railroad employees are quite expensive.

danielvf··on Ask HN: Have you ever worked with a blockchain company that wasn't a scam?
Uniswap, AAVE, OpenSea
danielvf··on Kraken lays off 30% of staff
*Growth* is down in certain sectors. Many companies were staffing to support and capture possible future growth. When next year is expected to look like this year, a lot fewer people are actually needed.
danielvf··on What If We Replace Guns and Bullets with Bows and Arrows?
I enjoy your magazine! Thanks for writing.
danielvf··on What If We Replace Guns and Bullets with Bows and Arrows?
Not military combat, which is the subject of the article.
danielvf··on What If We Replace Guns and Bullets with Bows and Arrows?
Around the halfway point of the article:

> The main reason most European armies switched from bows to crossbows and then firearms was the short learning curves of these weapons. Crossbowmen and musketeers required little or no training, while it took many years of practice to build an archer skillful and strong enough to be of use in warfare. The crossbow and the firearm thus expanded the number of people in a given population that could become soldiers.

danielvf··on What If We Replace Guns and Bullets with Bows and Arrows?
> Pulling the trigger of a firearm does not require any skill or practice.

Learning and practicing how to correctly pull the trigger is probably the single biggest improvement to accuracy a new shooter can make. The difference between the right way, and the way everyone is born doing it, particularly with pistols, is HUGE. And it does take practice.

> Because bullets travel much faster than arrows, a gunner can aim in a straight line, which is easy.

Outside of being right next to your target, knowing your bullet drop and compensating for it is absolutely a part of shooting.

danielvf··on Ask HN: What sort of systemic risk to crypto is Paul Graham referring to?
Oh, the tweet is certainly true. There is systematic risk.

I think the humor comes from the tweet being phrased as secret insider knowledge, when it's something that has already been happening, and obvious to anyone watching.

(I tend to enjoy both PG's writing and tweets, but this one is a bit of an outlier.)

danielvf··on Ask HN: What sort of systemic risk to crypto is Paul Graham referring to?
As someone who has worked for years in crypto, the tweet reads as very late to catching up with things.

After the repeated huge insolvencies of the last few months, everyone in crypto knows there's massive systemic risk, and new risk from ill thought out new regulation. Everyone has their own list of which companies they guess will be next.

It's very hard to take the tweet seriously. It's like walking around in the California hills predicting a forest fire, during a super dry summer, while orange glows from nearby hills light up the smoke that is choking the air, and ash rains down.

← PreviousPage 6 of 34Next →