HNHacker News
TopNewBestAskShowJobs

ghancock

60 karma · joined December 2, 2009

submissionscomments
ghancock··on JPMorgan to sell customer transaction data to advertisers
It’s real but depends on the issuer. I see it with Amex but not Citibank for example.
ghancock··on Carta's 83b Oversight: A Tax Trap for Married Startup Employees (2023)
This isn’t the sort of thing I expect people to “get in trouble” for at the time of filing. I expect that years later, if the startup turns out to be worth something and the taxpayer is audited, the auditors will go through old paperwork and discover a very large amount of taxes they can collect.
ghancock··on Passkeys: The beginning of the end of the password
This was on an iPad. My experience before had been that I was able to register an iCloud passkey for Google 2SV when using Safari on iOS/iPadOS, but I was unable with Chrome.

At that time, I inspected the registration request Google sent to Chrome and found it was passing a private option that Chrome recognized. According to what I found in web searches for it, the option created a legacy U2F key, and they needed to do that because there were existing Android devices that they could not upgrade and that would not support log-in with WebAuthn keys.

ghancock··on Passkeys: The beginning of the end of the password
I wrote about my experience with passkey support on other services here: https://news.ycombinator.com/item?id=35758918. That experience was mostly negative. For anyone implementing this, the user experience matters and requires usability testing of a lot of combinations.

In comparison to those, Google’s support seems better. It worked, was transparent about what was going on, and gave me the option to create the key on either the device I was using or another one if I wanted. The one hitch was that when I already had a 2FA key on the same platform authenticator, it just said I already had a registered key on this device and didn’t do anything. I would have expected some sort of upgrade flow for people who previously registered their devices for 2FA, or at least to more directly tell me to delete the existing security key on the device (which is what I did, and which worked).

ghancock··on Passkeys.directory
Update: I decided to go back and look at the settings pages for the two that worked.

Kayak shows a "Set up passkey" button with no indication that I already have one or any apparent way to revoke the existing one. Very bad.

Shop Pay does clearly show what passkeys exist, and allows revocation and addition. However, when I try to add one on Chrome on macOS, it only lets me set up a Chrome passkey. (These don't sync between devices. It should have let me set up whatever kind I wanted.) Also, the list just indicates passkeys by what browser type last used them, like "Chrome on macOS." So according to the list I have two passkeys that are just described as "Chrome on macOS" and they are indistinguishable.

I can't imagine recommending anyone try this unless they are consciously an early adopter.

ghancock··on Passkeys.directory
I want to be enthusiastic about this technology and at first I was, but it's getting harder. I tried to set up passkeys with the sites listed here that I already have accounts on. Results:

1. PayPal: I could not find an option to do it on either a phone or a web browser even after reading the linked instructions. Perhaps it thinks neither device is compatible (they are).

2. Microsoft: After eventually I found an option inside its settings to go "Passwordless" which sounds right, it instead tries to ram an app called Microsoft Authenticator down my throat. On passkeys.directory I check the instructions for insight and I see it says "All you’ll need is a device running Windows 11 and the Microsoft Edge browser." So much for cross-platform standards. If I had been using Windows 11, I assume I would have still needed my password to log in on my phone or anywhere else.

3. Kayak: Works fine, although the log in option is not as discoverable as it could be (I had to click to log in via email, and then click in the email field, and then an option appeared).

4. Shop Pay: Works fine, the only one about which I have no complaints.

ghancock··on Scala 3 is not production ready
I think that’s reasonable if you are on a recent JVM version and expect to upgrade very regularly. Many are in organizations where that’s not the case.
ghancock··on Topology, a Categorical Approach (2020)
> On the other hand, I've not seen a rigorous set of axioms for category theory that didn't presuppose a notion of set or category or "collection".

I never worked through the details, and I'm not a category theory partisan, but I think that's what this is: https://ncatlab.org/nlab/show/fully%20formal%20ETCS

ghancock··on A Geometrically Natural Uncomputable Function (2008)
knaekhoved your comment is dead which I think is unfortunate because it seems better to inform you than bury your comment so I'll reply here: the page did mean N -> N, given the context of the previous paragraph. You may have thought what you did if you did not know that Card(N)^Card(N) is equal to 2^Card(N) by the laws of arithmetic for cardinal numbers. If you have not encountered those before there are enough on Wikipedia to show that equality https://en.wikipedia.org/wiki/Cardinal_number#Cardinal_arith....
ghancock··on Quadratic voting: A mathematical method that could offer a fairer way to vote
It incentivizes the welfare-maximizing result. I don’t have a short “intuitive” explanation of why handy but the math is covered in section 8.3 of Public Choice III (should be easy to get in college libraries, pdf copies can be found online if needed).
ghancock··on Why is IRC distributed across multiple servers?
I wasn’t there but I have seen multiple histories say that there were servers that accepted connections from anyone (most famously eris.berkeley.edu but not only that one). For example, https://about.psyc.eu/IRC
ghancock··on An Implementation of J – Incunabulum (2008)
It doesn’t have *. What it has is listed in the declaration starting with “C vt[]”. Those are the names of verbs and the following lines give the function pointers for their monadic and dyadic uses.

It worked fine for me when I was careful to stay within what it actually supported, bearing in mind it’s a fast and rough implementation not something for production use.

ghancock··on White House Launches US Digital Corps
That number does not include locality adjustment.
ghancock··on Calculus Made Easy (1910)
I remember those too. Fun and I learned a lot from them. I also recommend them.
ghancock··on Low-carbohydrate diets and all-cause and cause-specific mortality
In the US, federally funded research institutions have to follow certain rules when doing human subjects research. When I was a researcher the training I took said prisoners generally could not be used as subjects just because they were convenient, and that the two situations where they could typically be studied were cases where prisons, crime, or something else that was inherently specific to prisoners was being studied and cases where some condition very highly over represented among prisoners was what was being studied (the example given was HIV).
ghancock··on Fintech in Chains
Cochrane seriously misconstrues what the WSJ op-ed is about, which I think is understandable since it adopts a pro-regulatory tone while in the underlying Second Circuit appeal that the op-ed is about the OCC is adopting a (sort of) deregulatory position.

I think this article gives a better understanding of what’s actually happening: https://www.kilpatricktownsend.com/Blog/fintech/2020/8/Banki...

In brief, if you want to set up a fintech company now, you may need to comply with 50 states laws. That isn’t just being basically law-abiding, but involves serious compliance work. I started looking up licenses for Square as an example and got bored after the first few as state web sites are all different and inconvenient:

https://dbo.ca.gov/2018/04/02/square-inc/

https://www.dob.texas.gov/entity-search/entity-detail?bid=10...

http://www.dora.state.co.us/pls/real/BIDS_Search.Individual_...

Each of those, and also for all the other states, involved satisfying a state agency that Square was adequately solvent and would comply with a host of laws. You may notice that the first two have license numbers and the numbers are small. That says something about how easy it is to get the licenses. This is a meaningful part of these companies’ moats.

The OCC action that New York is challenging is to provide a federal alternative structure in which companies would get one federal license and receive nationwide permission to engage in a host of banking-like activities. They would still be able to get state licenses instead, if they wanted. This system (of picking between a state and federal regulator) is called dual chartering and has existed in the banking industry for a long time; it establishes a check on both state and federal regulators by allowing the regulated entity to switch to an alternative regulator.

ghancock··on How to form a California LLC without a lawyer
It might be that the LLC is liable for the taxes and not you personally. Do you really want to pay $1600 for something you aren’t really using or do you want to abandon it and walk away?
ghancock··on Try Linux
Nothing related to screen resolution. Wifi worked via the command-line tools mentioned in the manual, or the KDE interface. Similar for other things. I didn't stick with KDE--I switched to sway--so there were a number of things to deal with because of that, but that won't matter if you do use one.

If you do encounter an issue it will be more work to deal with, because you both have to figure out the underlying issue and then figure out how to fit that into the Nix way of doing things.

The biggest factor is handling downloaded pre-built binaries that assume various libraries will be in typical locations. Those generally require patchelf and then they work fine. I would only recommend NixOS for now for people who are willing to tinker a bit and learn how it works.

ghancock··on Try Linux
I do. When I installed it the default configuration had no desktop enabled but had commented-out lines to enable KDE. I think it's best to think of it as not having a default or preferred one, and you are instead required to pick one.

(I haven't tried everything, so I don't have firsthand knowledge that they all work equally smoothly.)

ghancock··on Snap CFO Tim Stone Is Resigning
I've used Cluster and it worked pretty well.
ghancock··on Review: Purism Librem13 laptop
This https://puri.sm/posts/tpm-by-default-and-free-international-... says they are moving to including the TPM in all systems, but there are some UK models left in stock without it.

The TPM is a security feature--you don't have to use it. I have not used it on my laptop but I see from the documentation that it is different from some other trusted computing systems in that the end user controls the keys and what is loadable, not the vendor.

ghancock··on Review: Purism Librem13 laptop
I have a Librem 15 v3 and it would not charge with an Apple USB-C charger.
ghancock··on SoundCloud cuts jobs, closes SF and London offices
ClassPass is hiring engineers in both New York and San Francisco.

We're a marketplace that connects people with studios and gyms so they can take yoga, martial arts, or other classes near them. We have a solid working business model and are growing. We're hiring for backend, frontend, full-stack, and infrastructure roles.

I'm a technical lead in SF and happy to talk to anyone on either coast. Contact me at (my HN username)@classpass.com or apply directly at https://classpass.com/jobs/openings.

ghancock··on Tesla shares dive after Consumer Reports yanks recommendation for Model S
A CR writer would absolutely have duties to CR. See https://www.law.cornell.edu/supremecourt/text/484/19 for an example of a journalist who was convicted in such a situation.
ghancock··on Univalent Foundations: “No Comment.”
I recommend that you read the comments.
ghancock··on The Samsung Galaxy S III: The First Smartphone Designed Entirely By Lawyers
The article talks about both trade dress and design patents. That said a court's decision about design patents can involve whether a consumer would be confused. There's a short article that talks about the legal rules for design patent infringement at http://www.designpatentschool.com/assets/Oake_SEPT11%20V2.pd....
ghancock··on The Plan for Code
Although under US copyright law all federal works are in the public domain, that does not prevent the government from having valid foreign copyrights in its works that are enforceable abroad.

Some more information is available at http://www.cendi.gov/publications/04-8copyright.html#317.