HNHacker News
TopNewBestAskShowJobs

louis-paul

6,734 karma · joined September 4, 2013

hackernews@louis-paul.net
submissionscomments
louis-paul··on Open sourcing Dicer: Databricks's auto-sharder
Sounds related to Google Slicer: https://research.google/pubs/slicer-auto-sharding-for-datace...
louis-paul··on Just make it scale: An Aurora DSQL story
Marc Brooker has written and spoken about DSQL quite a bit. It’s still rather high level. I’d expect one or more papers to come out in the next few months, similarly to other Amazon databases.

https://brooker.co.za/blog/2025/04/17/decomposing.html (includes talk)

https://brooker.co.za/blog/2024/12/03/aurora-dsql.html

https://brooker.co.za/blog/2024/12/04/inside-dsql.html

https://brooker.co.za/blog/2024/12/05/inside-dsql-writes.htm...

https://brooker.co.za/blog/2024/12/06/inside-dsql-cap.html

https://brooker.co.za/blog/2024/12/17/occ-and-isolation.html

louis-paul··on A notification for you, Apple: There is no husband
It is possible on macOS with the Floating time zone: https://support.apple.com/en-gb/guide/calendar/icl1035/mac#i...

This doesn’t look possible on the iOS/iPadOS Calendar apps.

louis-paul··on The drive stats of Backblaze storage pods
Here is another post by the same author: https://www.backblaze.com/blog/the-storage-pod-story-innovat...
louis-paul··on Effective Go
Also https://github.com/golang/go/wiki/CodeReviewComments
louis-paul··on Explore the Bayeux Tapestry Online
Historic Tale Construction Kit: https://htck.github.io/bayeux
louis-paul··on Ordered Key-Value Stores
Missing a feature in your database? Just write a layer for it! Works for every requirement of the original post.
louis-paul··on How Shopify Uses WebAssembly Outside of the Browser
Do Shopify's competitors produce similarly high-quality engineering content? (if you know some, please link!)
louis-paul··on Ask HN: What's the best paper you've read in 2020?
Meaningful Availability, Hauer et al.: https://www.usenix.org/system/files/nsdi20spring_hauer_prepu...

A good incremental improvement in service level indicator measurements for large-scale cloud services.

Obligatory The Morning Paper post: https://blog.acolyer.org/2020/02/26/meaningful-availability/

louis-paul··on AWS Just Started Folding
Slightly better context: https://forums.aws.amazon.com/message.jspa?messageID=938560
louis-paul··on Apple dropped plan for encrypting backups after FBI complained
On the contrary, Apple has very decent device security. See their Platform Security guide: https://manuals.info.apple.com/MANUALS/1000/MA1902/en_US/app.... Some of their online services are end-to-end encrypted with very smart designs (see iCloud Keychain page 82, Find My page 103).

In contrast, iCloud Backup is pretty much an open door: https://www.apple.com/legal/transparency/account.html

louis-paul··on Apple dropped plan for encrypting backups after FBI complained
Easy fix: back up your iPhone locally on your computer instead of using iCloud: https://support.apple.com/en-us/HT203977#computer

The ambiguous position on true end-to-end encryption shows once again that Apple is in for the marketing (both to consumers—predatory and dangerous, and to engineering talent—dishonest). Same hypocrisy as on the China issue. Not that there is an easy solution when you are one of the biggest companies on the planet and that shareholders essentially expect you to grow forever while playing nice with everyone.

louis-paul··on Ask HN: What were your most impactful podcast episodes from 2019?
I discovered The Anthropocene Reviewed last year. My favorite review is Tetris: “Tetris is a game about time and space. Time is always speeding up, with blocks falling faster and faster, and space is always filling in. There is no winning, Tetris always ends the same way, no matter how expertly you place the blocks. You play until you die. It takes five minutes to learn Tetris. It’s not grand or ambitious. It’s merely perfect.” — https://www.wnycstudios.org/podcasts/anthropocene-reviewed/e...

Special mention for the Kauaʻi ʻōʻō: https://www.wnycstudios.org/podcasts/anthropocene-reviewed/e...

louis-paul··on Ask HN: Are books worth it?
I am reading through The Righteous Mind myself at the moment and it is a GREAT book! The ideas are very well presented.
louis-paul··on BeyondProd: Google's Cloud Native Security
Are you aware of https://smallstep.com?
louis-paul··on Cloudflare S-1
They list it as a key element of their business model:

> Free customer base—Free customers are an important part of our business. These customers sign up for our service through our self-serve portal and are typically individual developers, early stage startups, hobbyists, and other users. Our free customers create scale, serve as efficient brand marketing, and help us attract developers, customers, and potential employees. These free customers expose us to diverse traffic, threats, and problems, often allowing us to see potential security, performance, and reliability issues at the earliest stage. This knowledge allows us to improve our products and deliver more effective solutions to our paid customers. In addition, the added scale and diversity of this traffic makes us valuable to a diverse set of global ISPs, improving the breadth and economic terms of our interconnections, bandwidth costs, and co-location expenses. Finally, the enthusiastic engagement of our free customer base represents a “virtual quality assurance” function that allows us to maintain a high rate of product innovation, while ensuring products are extensively tested in real world environments before they are deployed to enterprise customers.

(page 80)

louis-paul··on The PGP Problem
saltpack does not solve identity management itself, it is merely the cryptography and the physical format. Keybase, however, is all about identity: https://keybase.io.
louis-paul··on The PGP Problem
Keybase builds a lot on top of saltpack, which works like a saner PGP: https://saltpack.org

The underlying cryptography is NaCl, which is referenced in the original post.

louis-paul··on Getting 2FA Right in 2019
Try this: https://support.yubico.com/support/solutions/articles/150000...
louis-paul··on Relicensing CockroachDB
Recently discussed with somebody at a major cloud provider and IIRC their response was in essence “I think we’re doing them a favor: ask Neo4j about our release of [hosted graph database service]. We’ve taken a share of their business, but the overall market is much bigger, and they’re doing great. Our hosted products are not even the most polished in the market, and companies like Elastic can easily be compete with us.”

Thoughts?

louis-paul··on Password expiration is dead, long live passwords
These “baseline rules” come from NIST SP 800-63B, Appendix A, which is a surprisingly digestible document: https://pages.nist.gov/800-63-3/sp800-63b.html#appA
louis-paul··on Security Update
https://www.verygoodsecurity.com
louis-paul··on Notion – All-in-one workspace for notes, tasks, wikis, and databases
There is something about Notion that makes it feel very well-made and coherent. It’s one of the few apps I use with this inherent feeling of quality (off the top of my head Sublime Text/Merge, Beyond Compare, Things fall into this category of intangible greatness). Every interaction is delightful, and the app scales really well from basic note-taking to decently complex databases with grouping, filters, relations, templates and permissions. It comes with really good real-time collaboration.

On the flip side the software a bit slow to start and uses a lot of resources—it’s based on Electron, but I encourage everyone to try it (the demo on their website is cool!).

This is as close to “painting the back of the fence” as it gets.

louis-paul··on Ask HN: Tabs or Spaces?
Tabs. Spaces for indentation are an heresy.

To go further, always use a standard formatting tool (gofmt, clang-format...) before committing code.

louis-paul··on Gone in Six Characters: Short URLs Considered Harmful for Cloud Services
I completely agree with you, in general they have come a long way (bounties, culture, recognition...). They're just not there yet (by there in mean Facebook-grade responsiveness).

I was only voicing my personal experience, which has been very poor (maybe the team, or the seriousness of the bugs), but in general I have heard some good things, especially for truly critical issues.

louis-paul··on SECRET DOM DO Not USE OR YOU WILL BE FIRED
Explanation on Reddit: https://www.reddit.com/r/javascript/comments/3m6wyu/found_th...
louis-paul··on A Message to Our Customers
Publicizing the case themselves in a very good move.

However, the iPhone of the attacker is an iPhone 5C, which does not have Touch ID or a Secure Enclave. This means that the time between passcode unlock attempts is not enforced by the cryptographic coprocessor. More generally, there's no software integrity protection, and the encryption key is relatively weak (since it is only based on the user's passcode).

The amount of work needed to turn security into good user experience is phenomenal: https://www.apple.com/business/docs/iOS_Security_Guide.pdf

louis-paul··on Kindle Paperwhite
I submitted the page with the title "Kindle Paperwhite". I assumed that most HN readers would recognize a new Kindle model. I usually get my titles edited, so I am trying to help the mods.

Of course, "Amazon releases the Kindle Paperwhite" or "New Kindle Paperwhite preorders" would be a lot clearer.

louis-paul··on The $5000 Compression Challenge
It's inventive, but what if instead of doing it at the byte level, we did it at the bit level? Instead of splitting files on every "5" encountered, we split them at every 1 in binary, which gives about 50% of "compression".
louis-paul··on Tell HN: Don't ask for upvotes
I think at this point, they have a network large enough to kick off the newest page to the front page pretty quickly.