homakov

Yes, regards water level it won't do much (I missed parent's point), but it doesn't hurt to have less children and give them better education vs the way it is now.

It is up to their alley. Giving birth to less children, raising them better, solving poverty. Knowing Bangladesh, unlikely

If old pw is considered leaked, new seed must be generated as well. Leaked password is the main reason why users would change passwords.

In a custom blockchain it can be configured to have admin method to transfer without a signature. But the question is why.. Why assets cannot be bearer?

An account is controlled by a key AND the validators who choose to record their transaction. One cannot just share the key with others. First, they need to record it with ledger keepers. How is it not like transfer agent?

An even better solution is to transform exchanges into channel hubs, and settle trades instantly without ever touching blockchain. I.e. trade dynamic remains the same, but now each party holds a balance proof and redeemable onchain collateral.

It's $0.10 until it isn't. Average crypto exchange has hundreds of automated tx per second, once it is attempted onchain the fees go up. Atomic swaps onchain are good for large amounts and rare trades, but not for retail traders.

I support this bet. Take any other tech from top of HN, in 10 years it will change the society more than crypto.

Are orders settled onchain? If so, this is too expensive/not scalable. I'm looking forward channel/HTLC based exchanges.

There is no answer to this. Blockchain has no market fit, it does not appeal to masses, unfortunately.

Isn't onchain here a transfer agent? Bearer is more appliable to cash, because it's physical. A token movement is still recorded onchain, i.e. there is a set of transfer agents and consensus among them. It can be tuned to support some regulation.

Correct. “ACIDrain” is literally a race condition and made up name.

This is for anomaly detection based on reading logs. It may miss a vulnerability so you still need to test yourself.

I have a Chrome extension which is perfect for race attacks. https://github.com/sakurity/racer

Then it comes to definition of fluent. To me 90% of Swedes are fluent. What you're talking about is "native", in my book.

I consider myself fluent, but I rarely talk outside of what happened on the weekend. For some reason it's harder to think outside the box when using a foreign language. I however understand 99% of what would be said on a meeting. Understanding is much easier than explaining.

I've run a security consultancy for 5 years and stopped few years ago. The goal was lifestyle business, not something operating at scale or doing snake oil. The focus was on high quality audits (for specific platforms such as Rails) that others wouldn't be able to perform.

I did many things wrong but still pretty happy with the results. Not a recommendation: I did zero marketing.

Monthly some cool bugs I did writeups about, which brought new clients, which brought new ideas, which I wrote up about again.

I quickly realized that (cringe) "rock star" name allows you to bill $500/hr, which I did. No one ever said "that's too expensive for us".

I think what tptacek and McKenzie are always saying is best advice indeed : increase your rates. Believe that you are worth that much, don't feel like an imposter.

The reports I've delivered contained great bugs but were poorly presented (no design, basic formatting). It could be done much nicer, so invest in your "receivable items".

Next, imagine a bad library hijacks all other libraries on dev machine and compromises them too. A true pandemic warm begins. Will happen eventually to gems or npm.

Just trying to say there are people who prefer K to many other popular drugs. Not for everyone though.

I agree, I've seen it on a couple of forums and just go with it. I don't know if this is out of fashion sorry!

Swim is genuinely loving K yet finds pop drugs like cocaine or mdma boring and experiences nowhere as inspiring. Dissaciative state can be scary at first, but can be learnt to control.

Flaws in Bitcoin make a lasting revival unlikely. Layer2 is better deployed on new chains, while discussing poor bitcoin life choices leads us nowhere.

I was citing eth's ones. Bitcoin is a poor platform for doing layer2 due to unfixable restrictions. What matters is it's about 600k~1000k (not 100m) and even with these it supports quite a lot of users. Supporting more than 1% is desirable but not mission critical.

With 1m tx per day you need 3 weeks to close 21m channels. Reasonable for a protocol bug. If just one hub goes down however, it will sort out in a few days. Like I said it only should cater to economic majority aka 1% so 70m wealthy users need 2 months.

Btc’s current limits are far from optimal but layer2 itself is working great especially on other chains.

You just need to support economic majority, not everyone who lives on $2 a day. The channels can be closed in a reasonable time.

Big blockers are new flat earthers.

Bridge downgrades your security to sidechain validator set, when a payment channel keeps it on the level of your root chain. If a sidechain is compromised their validators can double spend, and some users lose assets. Cant happen to channels by design.

This "synthetic" balance does closely remind me of "uninsured" balance I proposed for XLN (Lightning, extended with credit lines to solve capacity problem) https://github.com/fairlayer/wiki/blob/master/04_four_balanc...

The difference is synthetic balance is offered to be enforced from the collateral from the escrow. In XLN I proposed to try to enforce it by taking it from the other party's onchain balance.

Both options would work together even better ("synergy" haha)! From the first example:

1. blockchain dispute resolution code tries to take USDC from Alice's onchain balance (since Alice owes 750 to Bob).

2. if Alice still owes something, try to convert any other Alice's onchain balance into USDC using oracles, then return to Bob.

PS. will finish reading the paper sometime soon, so not sure if got it wrong.

Overall, happy to see new solutions coming to payment channels that do not imply full collateralization (via cross-asset synthetic collateralization as in here). Full prepaid collateral is stupid and limiting the growth.

+++ that, stayed in airbnb 70+ times, a light sleeper myself... how many times I hated apartments for being noisy and reviewers for hiding this fact.

Why use anything that's not end to end encrypted this day? Why share you data with a server that has no actual reason to have your data in plain?

They are calling it bonds because they are literally bonds https://en.wikipedia.org/wiki/United_States_Treasury_securit...

Well if one or two investors died due to a heart attack from the bear market... that's net win anyway.