HNHacker News
TopNewBestAskShowJobs

ghughes

1,585 karma · joined January 6, 2013

greg at <my username> dot com
submissionscomments
ghughes··on Why I Was Fired by Google
I don’t think he’s doing this media tour for fun.
ghughes··on iPhone Bugs Are Too Valuable to Report to Apple
Many of the phone’s security features don’t only benefit the user - they also make widespread piracy virtually impossible, and they ensure that nobody can set up a rival software ecosystem on Apple’s hardware.
ghughes··on Real estate site Redfin files for IPO
> The local agent that we ended up using instead ... also paid to stage the house--which Redfin would not have done.

You paid for that.

ghughes··on Test That Startup Idea You Have in Just 24 Hours
Interesting idea, but your own landing page is very text-heavy and doesn't have any screenshots of your landing page builder. A free trial or demo would be even better. There's no way I'd sign up for a $49/mo plan without a clear idea of what I'm buying.
ghughes··on A Slow-Motion Trainwreck Facing the Meal-Kit Industry
You might want to try Gobble. We tried Blue Apron followed by Sun Basket, and in both cases the prep time was too long for us. Gobble has consistently been much better in terms of both flavor and prep time.
ghughes··on Uber’s Complicit Board
It's possible to be OK with (or even approve of) a company defying local regulations that exist to prop up an entrenched legacy industry, and not be OK with a corporate culture where sexual harassment is condoned.
ghughes··on Tezos: a self-amending cryptographic ledger
This is the modern equivalent of a penny stock.

Could an admin please change the link to point at their technical whitepaper instead of this content-free solicitation to participate in a funding round that conveniently opens 5 days from now?

ghughes··on Snapchat acquires social map app Zenly
M&A is the new R&D.
ghughes··on Inside Apple's Global War on Leakers
It sounds like the point of this "briefing" - replete with polished videos featuring a who's who of executives hammering the point home - is to threaten corporate employees not to leak. Apple isn't hosting these meetings to satisfy anyone's curiosity; it's to make an implicit threat that if you leak, you'll eventually be caught by talented people whose full-time job is to catch you using the experience they gained at various three-letter agencies.

> “But there’s a whole slew of folks that can be tempted because what happens if I offer you, say, three months’ salary?’ In some cases we’ve seen up to a year’s worth of salary being rewarded for stealing product out of the factory.” Apple workers on the production line make approximately $350 a month, not including overtime, according to a 2016 report from China Labor Watch.

Duh. If you give valuable intelligence to workers who are paid a pittance, that info is inevitably going to find its way into the hands of people who are willing to pay a pretty penny for it. Good luck to anyone who hopes to address that without altering the economics of the situation.

ghughes··on Ask HN: Passive income ideas for solo developers?
The first two are sensible suggestions, but playing the stock market is essentially gambling. Most people would be better off investing in index funds.
ghughes··on European Parliament Draft to Enforce End-To-End Encryption for Citizens' Privacy
I think ubiquitous end-to-end encryption is the inevitable future of 1:1 and group communication. The momentum is in that direction. In your case, supporting the browser as a platform rules it out right now, but hopefully that will change when browsers provide an environment for doing serious crypto, where the server can't just quietly push down some new JS that leaks messages back to itself.

I'm in the alpha stage of building an end-to-end encrypted social network (https://sharewithsup.com, invite code: eff, currently iPhone only). Under the hood, it establishes E2E group channels between friends and uses those for everything (posts, comments, photos, events, etc). History is relayed between friends and search uses a local index, but the UX is still similar to Facebook. My point is - in addition to namedropping my app - that it's possible to find ways to implement features that at first seem hard with E2E. Just not on the web, yet.

ghughes··on An excerpt from “The One Device” – origin story of the iPhone
On one hand, I don't like the glorification of overwork and burning people out for the sake of maybe making a great product: "You're going to have to give up nights and weekends probably for a couple years as we make this product."

On the other hand, they did make the iPhone, so I guess this is a lesson to project managers and executives that death marches do occasionally pay off.

ghughes··on Telegram founder: US intelligence tried to bribe us to weaken encryption
The tweet he was replying to said: "I've heard various reports from people I trust that Signal is compromised. Any comments/thoughts/reliable rumors?"

With his reply, Durov is implicitly claiming that Signal must be compromised because it received some funding that can be traced back to the US government. This is the same kind of FUD that has often been used to smear Tor in the past (and indeed, the piece he cites describes Tor as "a federal weapons contractor" and "a foreign policy weapon, a soft power cyber weapon").

ghughes··on Telegram founder: US intelligence tried to bribe us to weaken encryption
Bingo. The CEO of Telegram likes to spread conspiracy theories that are good for business. In a recent tweet he claimed that Signal is "funded by the US government", [1] citing a ridiculous hit piece on OWS and Moxie. [2]

[1] https://twitter.com/durov/status/872891017418113024

[2] https://surveillancevalley.com/blog/government-backed-privac...

ghughes··on Facebook’s Safety Check is a stress-inducing flip of social norms
I just don't buy this theory until I see some evidence. It wouldn't be hard for a talented individual to reverse engineer the Facebook client app to find out if it's either a) continuously recording and uploading raw audio to their servers, or b) continuously recording and locally processing audio before sending information about the content to their servers. Until I see an analysis of their code that indicates either of those things is happening, I have to believe that this is a conspiracy theory perpetuated by people posting these suspicious anecdotes all over the internet.
ghughes··on Uber's Board to Discuss Leave of Absence for Travis Kalanick
Fair enough. Good to know.
ghughes··on Amazon Drive removing unlimited storage plan
People who understand the literal meaning of the word "unlimited"?
ghughes··on Apple Announces Full WebRTC Support in Safari 11
Installing an app is a higher bar than tapping the "get out of my way" button on a modal dialog that some website just shoved in your face.
ghughes··on Apple adds a tracker blocker to desktop Safari
Here's the official blog post explaining the feature in depth: https://webkit.org/blog/7675/intelligent-tracking-prevention...
ghughes··on Oculus founder Palmer Luckey is developing border surveillance technology
> There will be engineers who have to do things to get a pay check, to feed their families. I don't begrudge that.

I do. It's not OK to do immoral things just because someone is paying you to do them.

ghughes··on Ask HN: How am I already logged into LinkedIn when I open an incognito window?
Which browser?
ghughes··on On the Unhappiness of Software Developers
> Code quality, adequate explanations, proper planning, and lenient time tables are an afterthought.

Can anyone recommend reading material for a founder who wants to get these things right from the start? Is there a definitive guide to creating an environment where engineers can thrive?

ghughes··on US quits Paris climate pact
The question is whether one can stomach living here while that crisis is ongoing.
ghughes··on Someone forged my resignation letter
The whole thing smells like fiction, and this is the very first post from a days-old Stack Exchange account.

> It could’ve been a colleague because I know there is a backdoor way to send emails using someone else’s account via some sort of a SQL database thing. We used to do it as jokes but it was never used for something like this

That in particular is setting off my troll radar.

ghughes··on What went wrong at BA?
Is this the BBC's idea of journalism? An anonymous "IT veteran" emailed some pet theories to their top technology correspondent and he literally pasted it into an article with zero critical analysis or independent commentary. How embarrassing.

The final paragraph says it all:

> BA has said little so far about what went wrong. However, it will now be under pressure from investors, staff and passengers to provide some answers.

BA should be under pressure from you to provide answers. That's your job.

ghughes··on Facebook's tentacles reach further than people think
Not necessarily: https://crypto.stanford.edu/adnostic/adnostic.pdf
ghughes··on Facebook's tentacles reach further than people think
> How are you going to recreate the main selling point of facebook, i.e. the Newsfeed ?

When you post, the content is sent as an encrypted message that can only be decrypted by people who should be able to see it (either all of your friends or just a subset of them). The client automatically takes care of key management and is responsible for keeping track of sent & received posts, comments, etc; it renders a news-feed-like UI on top of that data. The end result is a familiar UX on the surface, but the underlying mechanism for transmitting data between users is far more secure than the traditional approach of using a monolithic database that contains everyone's data in plaintext.

> If things are encrypted, how are you going to determine relevance, etc.

The client is solely responsible for that. For now the "news feed" is strictly chronological, but I plan to augment it later by prioritizing posts that might be particularly interesting to the user. There are plenty of ways to make those decisions locally.

ghughes··on Facebook's tentacles reach further than people think
Both; there will be ads and the source will be publicly available, license TBD. Please get in touch, email is in my profile.
ghughes··on Facebook's tentacles reach further than people think
You're so close to what I am currently building that I feel like I have to chime in. I left Apple's security team a few months ago to go solo and build an app that is similar to Facebook/Instagram and Snapchat in terms of functionality and UX but uses the Olm protocol (similar to Signal) to protect all content. So, fear not - something is being done, and I'm sure I'm not the only one working in this problem space. I think it's ripe for innovation, counter to popular belief; the trick is to do it in a way that doesn't require a PhD in computers to operate the damn thing, as was the issue with previous attempts.
ghughes··on Facebook's tentacles reach further than people think
Nothing will change until the law cracks down on this. The people who work on these systems are smart enough to comprehend the wider consequences, but they do it anyway because money. Without significant external pressure, there will always be a long line of engineers willing to dial their cognitive dissonance up to 11 and build software that is clearly unethical in exchange for a fat paycheck.
← PreviousPage 4 of 8Next →