HNHacker News
TopNewBestAskShowJobs

doomslice

293 karma · joined May 1, 2012

submissionscomments
doomslice··on Brave disables Chromium FLoC features
FLOC is being introduced now in advance of privacy features coming in chrome (removal of third party cookie and privacy budget) which apparently will hurt ad revenue. FLOC is supposed to help targeting without exposing user data.
doomslice··on Visa moves to allow payment settlements using cryptocurrency
The Stellar Development Foundation holds about half of the unallocated XLM.

They claim they'll use it in the following: https://www.stellar.org/foundation/mandate?locale=en (and they are a nonprofit so I assume they can't just sell it all).

doomslice··on Richard Stallman is coming back to the board of the FSF
> In 2021, yes, it is, or at least that's the set of norms we've created. To be more precise, it's bad for anyone to hit on anyone else unless one omnisciently knows the other party is interested in you and wants to be hit on.

I can't believe anyone seriously thinks this.

It's bad if you're in a position of power and you hit on someone under your influence - doesn't matter if they would reciprocate or not.

doomslice··on WallStreetBets members adopt 3,500 gorillas in six days
Anyone can participate in consensus, but you do have to be trusted by someone else who already participates in the trusted consensus, so you're right that it's not completely decentralized (but is also not strictly centralized either).

Here's a current visualization of how many participants there are: https://stellarbeat.io/

doomslice··on WallStreetBets members adopt 3,500 gorillas in six days
Stellar (https://stellar.org/) uses a novel Byzantine agreement protocol (https://www.stellar.org/papers/stellar-consensus-protocol?lo...) which practically eliminates it in comparison.

It is also insanely cheap (like $1... and even that is just "held" in the account and can be released later) to "mint" a new coin and thus is practically perfect for NFTs.

It's seen as sort of a joke in the crypto world by those who are only trying to make a buck (price of XLM, used for paying transaction fees, is relatively stable compared to others) but I think it's one of the few cryptos out there that has a chance of making a real difference in the world long term.

doomslice··on Google Cloud vs. AWS Onboarding Comparison
Maybe things have changed since I applied - but I have not talked to a single sales person and only communicated via email with the google cloud for startups team. The process was so quick and painless that I at some point felt like I was being scammed and had to make sure I was not going to end up with a huge bill after they pulled the rug out from under me.
doomslice··on Google Cloud vs. AWS Onboarding Comparison
Yes, exactly.

The grants start out small (I think the first one was $3k) -- but then once you spend 75% of them you can apply for the next round, which for me they gave me $17k out of a possible $30k based on previous usage. After I spent around $15k for that over the next year I applied again and got $100k.

Just one note though that I already had an MVP that I was running on GCP at the time I applied (but I was within the $300 free credits that I started with so I didn't pay out of pocket).

doomslice··on Google Cloud vs. AWS Onboarding Comparison
I was able to get 130k free GCP credits (over 3 years) just by filling out the startup forms... as a complete nobody. You don't even need an affiliate to sponsor you.
doomslice··on Launch HN: Aviron (YC W21) – High-Intensity Peloton for Rowing
Given that you're competing with Peloton (or at least in the same general market), how do you plan to respond to the rumored Peloton Rower? https://www.pelobuddy.com/peloton-rower

It's going to be hard to position yourself as the Peloton for Rowing when Peloton actually has a Peloton for Rowing.

doomslice··on Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide
Maybe this will change your mind: https://www.youtube.com/watch?t=20m04s&v=cJOgGsC0G9U
doomslice··on Apple’s Anti-Tracking Plans for iPhone
https://www.thetradedesk.com/industry-initiatives/unified-id...

https://www.verizonmedia.com/insights/overcoming-identity-he...

And probably a dozen other ID solutions out there that require you to be logged in and thus have some first party data to match you with.

Honestly I'm not sure what the value proposition is for the user if it's not required to log in, so who knows what the uptake will be.

doomslice··on Virtual Cybersecurity Escape Room
DDMM is what we were supposed to guess somehow. Fine to have to guess that for a pen test or real security analysis, less fun for a game where you have no clue if you're really on the right track.
doomslice··on Virtual Cybersecurity Escape Room
There's a hint in the desk drawer (you need to zoom in even further to see it) that is a reminder to change the passcode.

Similar to a TODO comment... it just never got done.

doomslice··on US Insulin prices 8 times higher than in other nations
There's also no timeframe for implementation, lacks specific implementation details, and the only teeth it seems to have is that these Federally Qualified Health Centers (FQHCs) may potentially be excluded from grants.
doomslice··on Amnesty International India Halts Its Work in India Due to Government Reprisal
I'm not saying there weren't riots/rioters/looters.

But you said that the media was misrepresenting cases of this as peaceful protests and I said I haven't seen anything like that.

The links you posted are mostly them being called rioters (and one super-cut of something that's not a protest or a riot).

doomslice··on Amnesty International India Halts Its Work in India Due to Government Reprisal
> In America we are seeing rioters constantly classified by the media as protestors.

Could you show me some instances of this? I've heard this repeated but I haven't actually seen it myself.

doomslice··on Don't trust default timeouts
This doesn’t address much of your comment, but I work on systems with millions of req/s, but even with billions you can still sample to do logging and monitoring. But you’re right, we don’t care that every request works, just that 99.9% do.
doomslice··on A little bit of plain JavaScript can do a lot
https://portswigger.net/web-security/cross-site-scripting/st...

You protect against someone else abusing it on other users.

doomslice··on I was blackmailed – any YouTuber could be next
I don't have experience with AWS to compare, but I can say that my experience with Google Cloud support has been exceptional, and even for a P4 case I opened I got an initial response in 4 hours and a person who dedicated some time for the next week setting up a cluster and application in the exact way to reproduce and diagnose my issue.
doomslice··on 402 Payment Required, and why micropayments are doomed
Bitcoin (and other proof of work coins) are not suitable for the job. But there are cryptocurrencies out there that are almost purpose-built for it! Stellar, on which https://satoshipay.io/ is built, is one of those.
doomslice··on Cloud AI Platform Pipelines
For what it's worth, I can't even downvote :)

I don't know the _eventual_ direction of Kubeflow/TFX -- but in our TFX pipelines you still get to choose where it runs. From the docs:

> Apache Beam is an open source, unified model for defining both batch and streaming data-parallel processing pipelines. TFX uses Apache Beam to implement data-parallel pipelines. The pipeline is then executed by one of Beam's supported distributed processing back-ends, which include Apache Flink, Apache Spark, Google Cloud Dataflow, and others.

You can also choose to run it on Kubeflow itself.

doomslice··on Cloud AI Platform Pipelines
That's just the SDK that they're saying is merging (with TFX being the one that "wins"). If you've used them you'll know they have huge overlap but TFX abstracts a ton of what it's actually doing.
doomslice··on Cloud AI Platform Pipelines
This looks like it's basically just an installer for Kubeflow -- this is not "managed" at all.

And where did you get that TFX has been replaced by this? You can run Kubeflow pipelines (including those created by TFX) on this.

doomslice··on The sad state of sysadmin in the age of containers (2015)
Having been at 3 companies that did this, I can say with certainty that our caching proxies (artifactory in all of them) were much more likely to go down than the public repos were.
doomslice··on The cost of parsing JSON
Promises still run on "the main thread" so a CPU intensive task in a promise is still going to block things. You could use a promise if you delegated your CPU task to another process or some C code that did actual threading.

I believe you'd use Workers (WebWorkers?) https://developer.mozilla.org/en-US/docs/Web/API/Workers to actually do it off the main thread entirely inside JS.

doomslice··on Scrum is fragile, not Agile
> As long as you are also doing backlog grooming and have items groomed beyond the current sprint commitments, you can take additional items opportunistically, if there is excess capacity after doing the committed items properly.

The powers that be at my work decided that “sprint predictability” is the most important metric here. This means that if we pull in stuff near the end of the sprint but don’t finish, predictability goes down. Thus, we are encouraged to not take on extra work if we don’t expect to finish. What this means in reality is that we start working on it without pulling it into the sprint and then get a head start for next sprint.

What’s your take on that?

doomslice··on The Apple iPhone XR Review
I have the card and did the repair. I took it to the Apple store, got a repair quote, and then uploaded it to the benefits website. They sent me a check without me even repairing it yet.
doomslice··on Ledger Live: A mobile companion app for Ledger hardware wallets
Founder of StellarGuard here, so sort of in the same realm. Just wondering what additional features you'd want out of such a hardware token. Would it need to do the actual signing of transactions on the device for you to feel secure with it, or would generic U2F (Yubikey) + signing on the software be sufficient, assuming we could do it securely?
doomslice··on The State of JavaScript 2018
Having just inherited a legacy python project where I couldn't use a library due to conflicting dependencies on ancient, incompatible versions of a dependency's dependencies... I'd kill for the npm way of dealing with it. To each his own I guess.
doomslice··on Build a do-it-yourself home air purifier for about $25
Probably means they put drywall mud on top of the moldy drywall.
← PreviousPage 2 of 4Next →