HNHacker News
TopNewBestAskShowJobs

jwlake

449 karma · joined September 16, 2014

submissionscomments
jwlake··on When working from home is toxic
I think android overloads would improve the situation.
jwlake··on SafeDollar ‘stablecoin’ drops to $0 following DeFi exploit on Polygon
This is mostly infeasible because the VM has no idea what's worth anything. There is no reasonable price in absolute terms for a BTC or ETH or DOGE or $DUMBCOIN.

The key is that the contracts need to be minimal and analyzable, so its ~100 lines of code you can manually analyze. Documented separately all the edge cases, or ideally removed through good design so they simply don't exist. A bunch of problems I've seen in the real world of crypto are annoying edge cases that you can fix with an if statement, or ideally change the design to remove them completely. It's actually a surprisingly hard space because you're trying to make terse, complete and secure code.

In normal web/systems programming you have layers of security; internal services, external services, firewalls, access controls, vpns, security by obscurity, etc etc etc. In crypto you have none of that. Everything is 100% public, the code probably should be published, or else it is trivially decompiled. If there is a problem someone will find it if there is value in finding it.

jwlake··on SafeDollar ‘stablecoin’ drops to $0 following DeFi exploit on Polygon
Mostly it involves people making systems that are too complex to trivially analyze. You can not write arbitrarily complex secure code. You need to limit your scope and do one very simple thing extremely tersely and correctly.

You can make powerful systems with simple correct independent components. You can not make complex secure monolithic systems. It gets even worse when you look at contracts with delegation.

The problem with most "smart" contracts is they have abstractions, delegation and scope creep.

jwlake··on Face masks effectively limit the probability of SARS-CoV-2 transmission
Google cross-protection and competition in respiratory viruses. Lots of pre-2019 literature.
jwlake··on Is content moderation a dead end?
This reminds me of a line from an NPR story. It said that "false" information spread twice as fast and twice as far as "true" information on twitter.

No interrogation of why it spread was investigated. It immediately made me wonder, maybe people just thought "false" information was a whole lot funnier, and hence sharable.

The problem with misinformation is it vaguely doesn't exist. There's parody, non-orthodoxy, true things people disagree with for political reason, unproven things, urban myths, rumors, etc etc. These are all classes of information people blame all the ills of society on.

jwlake··on Opinion: We’ll Have Herd Immunity by April
2 weeks to bend the curve!
jwlake··on I Miss My Bar
My new favorite tree in hn
jwlake··on Parents of daughters are more likely to divorce than those with sons
Nuke it from orbit, its the only way to be sure.
jwlake··on The Reshaped Mac Experience
This continually drives me nuts, especially watching people from windows use macs. They want to get normal maximize behavior to not have to manually size a window, and instead get thrown into fullscreen. This causes an immediate wtf moment, asking me how to undo it, and then living with a tiny little window. sigh
jwlake··on Can you make a basic web app without Googling? I can’t
The corollary to this is can you write a simple c program without a compiler and have it do the right thing and compile without syntax errors the first time.
jwlake··on Vftool runs Linux virtual machines in macOS Big Sur
Do any of these solutions work for a thin mac on mac virtualization? Ideally opensource and not veertu. :)
jwlake··on Ask HN: Please stop writing tutorials/tech articles on Medium
Medium doesn't actually pay writers does it?
jwlake··on Ask HN: Please stop writing tutorials/tech articles on Medium
You can just block cookies from medium.com and everything keeps working.
jwlake··on Updating Herd Immunity Models for the US: Implications for the Covid-19 Response
Source? 0-4 and 5-17 are definitely that high. The 18-45 demo is different, but there's a lot more heterogeneity in that population as well.

https://www.cdc.gov/nchs/nvss/vsrr/covid_weekly/index.htm

jwlake··on Response to Google open letter
Not indexing the sites and shutting down google news is effectively the same thing.
jwlake··on Response to Google open letter
Is the goal here to just have Google shutdown Google News in Australia? Seems like that's the only logical result.
jwlake··on Thomas Sowell interview
I've read a few Sowell books and I don't always agree with his conclusions but I do always enjoy the historical context he puts behind his arguments. I find most political pundits, journalists, etc to lack a grounding in history when they take opinions on various things. Sowell's books are usually give you a historical context and then the argument. It makes his books a good read even if you don't agree with them.
jwlake··on Linux Mint drops Ubuntu Snap packages
Just seems like an unintended consequences confusing situation. I think a pretty rational policy would to _never_ have an apt package install a snap package. Moving to snap is a breaking change, effectively, so you have to bite the bullet at some point.

Mixing your distribution systems with references to each other seems like a recipe for confusion and anger. And it looks like they got the expected outcome.

jwlake··on Linux Mint drops Ubuntu Snap packages
I'm unclear why ubuntu needs the chromium package in apt. Seems like they should just stop publishing apt packages for chromium, only publish in snap, and steer users into using snap for installs and not apt. Seems less confusing and wins or loses on its merit.
jwlake··on Decision for 2020-21 Academic Year
nyc said 21.6% antibody on 6/13. 32k deaths, 8.4M ppl => 1.8% IFR. CFR is much more complicated because policy changes on testing and hospitalization will make cause CFR to bounce around. Anyone argue that's a worse case scenario?
jwlake··on Peppering (Password Storage)
I don't know if this means I'm old but normal people used to just call this a global salt. The pepper term seems a little cute and not nearly as obvious as "global salt". Though it did get me to click it, which I guess means it market tests well.
jwlake··on Peppering (Password Storage)
A "better" way would be with an hmac sha256.
jwlake··on MacOS Catalina: Slow by Design?
The funny thing is its not transitive. No slowdown if you invoke bash specifically with a new shell.

% rm /tmp/test.sh ; echo $'#!/bin/sh\necho Hello' > /tmp/test.sh && chmod a+x /tmp/test.sh

% time bash /tmp/test.sh && time bash /tmp/test.sh

Hello

bash /tmp/test.sh 0.00s user 0.00s system 83% cpu 0.004 total

Hello

bash /tmp/test.sh 0.00s user 0.00s system 77% cpu 0.003 total

vs the one from the article:

% rm /tmp/test.sh ; echo $'#!/bin/sh\necho Hello' > /tmp/test.sh && chmod a+x /tmp/test.sh

% time /tmp/test.sh && time /tmp/test.sh

Hello

/tmp/test.sh 0.00s user 0.00s system 2% cpu 0.134 total

Hello

/tmp/test.sh 0.00s user 0.00s system 73% cpu 0.004 total

(edited for formating)

jwlake··on The San Francisco Bay Area shelter-in-place order is being extended through May
The thing I'm confused by is why a costco is open that has like 1000 people per day and a flower shop that has 20 customers per day isn't open. Is the flower shop dangerous? Is it less essential on the yearly timeframe? This lockdown isn't measured in days right now, it's measured in months. What's "essential" in days is not what's "essential" in months.
jwlake··on In 4 US state prisons, 3,300 inmates test positive, 96% without symptoms
One of the super-interesting things here, is that apparently everyone was in the specific window where they test positive for the virus. This implies the population was recently infected, had not been previously infected, and it spread almost completely within a tight window.

This implies a shocking high R(effective) for that population. In 2 weeks we'll have super interesting data one way of the other on the CFR.

jwlake··on FDA grants emergency use authorization for 5-13 minute Covid-19 test
I would open a bar in a minute with this device. :) It would have 6 ft spaced lines day and night. 10 drink minimum with test.
jwlake··on We have to talk about this Python, Gunicorn, Gevent thing
It actually alot of background on why it doesn't work. The post could just be:

tl;dr: gunicorn doesn't know how to multiplex listeners and green threads will ruin your request latency.

The thing is, that post isn't very useful nor interesting. The point here is that the "simple" python architecture doesnt scale well at all so you might not want to use it if you're planning on scaling ever.

jwlake··on WHO Director: "Covid-19 does not transmit as efficiently as influenza"
"54 of those 445 people developed new or worsening symptoms"

So we're basically having people make themselves sick by watching the news, its a brand new pandemic!

jwlake··on The two party system is killing our democracy
I'm always amused when people propose what the problem is and a fix for it, and then they immediately think "congress" should do something about it. Democracy happens at the state and city level. The federal government is mostly ineffectual and not really the right place to do most things. If you beleive in rank choice voting get your city to do it, then your county, then you state. The federal government doesn't run elections.
jwlake··on A Sad Day for Rust
A huge number of npm dependancies I use are basically unmaintained, have tons of forks and multiple PRs with the same fixes. I choose the one I like and move on, the magic of github!
← PreviousPage 4 of 5Next →