HNHacker News
TopNewBestAskShowJobs

ontoillogical

1,295 karma · joined April 12, 2011

Currently: https://bikebrigade.ca/ Previously: Github, Appcanary, security consulting

Find me at @mveytsman / https://max.computer

submissionscomments
ontoillogical··on Ask HN: My domain registrar rug-pulled me for $3000 [fixed]
I believe this is extremely unexpected behavior for an "auto-renew" feature. If I'm told that I will be autorenwing something in 7 days and am told about a price, that price changing within those 7 days feels like something the consumer should be protected against!
ontoillogical··on Show HN: Ricotta – Language Learning to Replace Anki
I believe you’re incorrect.

When I google that phrase it’s from an “Affinity Ventures” which is unrelated.

Affineur Ventures seems to just be a cheese themed container (hence ricotta). The website just redirects to a login screen for something called “holey triangle” https://affineur.io/

I don’t think this is a private equity side project…

ontoillogical··on Barclays Puts in Sensors to See Which Bankers Are at Their Desks (2017)
article is from 2017, can the title be edited to reflect that?
ontoillogical··on Free Postgres databases for small projects
> When we show this to investors we'll explain that the improvement was a big win for our "go to market efforts". But you should know it was really just a bug fix for something we disappointed you with.

That made me chuckle :)

I encountered some of those same postgres issues and so far have been only running a staging database on Fly. This comment is motivation for me to finish moving my real DB over from google.

P.S. I was running my own fork of your postgres container so I could include postgis, and this probably made management even more brittle -- I'm really happy to see https://github.com/fly-apps/postgres-ha/pull/44#issuecomment... landed!

ontoillogical··on Base salaries offered to software engineers in SF, NYC, and Seattle
What you’re saying about the motivations of candidate sourcing is not reflected in my experience as a startup ceo or an engineer at a large tech company.
ontoillogical··on Base salaries offered to software engineers in SF, NYC, and Seattle
I don’t think the value prop of TripleByte to busy CEOs is “you get employees cheaper”, if anything it’s going to cost more than other sources of talent that don’t take a cut of salaries.

I don’t see how customers of TripleByte are looking to pay less any more than any other ceo that’s trying to maximize profits while minimizing costs.

ontoillogical··on Base salaries offered to software engineers in SF, NYC, and Seattle
> For me, for example, the fact that those positions can be matched up to me on TripleByte would literally make me reject those jobs.

That seems shortsighted.

If I was running a startup again and looking to grow my team after exhausting my personal network, triplebyte would be a good value proposition: reduce the time it takes me to hire by pre screening candidates and presenting me with a curated set of people to interview.

So it follows that if I wanted to join a startup I’d consider triplebyte for the same reason —- I can see busy ceos of small companies using it.

You seem to be focused on compensation not finding interesting offers though. To that I’d say two things:

1) If you want to purely optimize for compensation, work at FAANG. I don’t think they source via triplebyte so the point is moot.

2) In my experience, offer size is not related to where the candidate was sourced.

ontoillogical··on How Discord Handles Two and Half Million Concurrent Voice Users Using WebRTC
WhatsApp was bringing in 10M in revenues[1] a year with the .99cent fee. Not selling it wouldn’t have made them billionaires, but it’s certainly fuck you money for a team of 8.

[1] https://techcrunch.com/2016/02/01/whatsapp-hits-one-billion-...

ontoillogical··on GitHub acquires AppCanary
I remember meeting you that day, it was a very surreal start to our summer in Silicon Valley.

I'm really happy to hear you're doing well in the space!

Building a profitable company is really hard, I should know :)

ontoillogical··on GitHub acquires AppCanary
Alas, it’s in the future tense.

We can’t take credit for the current security offerings - it was the work of our soon-to-be coworkers at GitHub.

ontoillogical··on New Remote-First Formula and Updated Salary Calculator
If you're applying to non-public companies where the stock isn't liquid, it's very hard to compare different packages across companies.

Benefits are another story, and I'd love to see triplebyte release some data about those.

ontoillogical··on New Remote-First Formula and Updated Salary Calculator
If you're talking about the triplebyte data (https://triplebyte.com/software-engineer-salary), Buffer's SF salaries seem comparable.
ontoillogical··on Show HN: The Million Dollar Homepage as an Ethereum Smart Contract and DApp
Thanks for also submitting a ticket https://github.com/thousandetherhomepage/ketherhomepage/issu... !

We've added a blacklist of url schemes and CSP. I'd like to have a whitelist if I can find one with all known-good schemes we'd like to be able to support. Know of one?

ontoillogical··on Show HN: The Million Dollar Homepage as an Ethereum Smart Contract and DApp
If you own an ad, you can "publish" to change the link or image url any time you want. All it costs is the transaction fees.
ontoillogical··on Show HN: The Million Dollar Homepage as an Ethereum Smart Contract and DApp
The images are actually hosted over http (or ipfs or swarm). The former requires you to find a host, and the later two have ways of compensating for traffic :)
ontoillogical··on Show HN: The Million Dollar Homepage as an Ethereum Smart Contract and DApp
Not exactly.

There's an NSFW flag that causes our DApp to not display the ads by default. We (Andrey and I) are able to force the flag true to ads at our discretion.

ontoillogical··on Show HN: The Million Dollar Homepage as an Ethereum Smart Contract and DApp
You pay for gas when you send a transaction (i.e. buy an ad or publish an ad).

For displaying, if you browse with Mist or MetaMask, you're pulling the data from the blockchain. When you don't, we show you the ads statically by using a Ethereum gateway.

Either way, reading doesn't cost gas, just bandwidth to keep the blockchain in sync.

ontoillogical··on Show HN: The Million Dollar Homepage as an Ethereum Smart Contract and DApp
We actually support IPFS (and Swarm) for hosting images!
ontoillogical··on Show HN: The Million Dollar Homepage as an Ethereum Smart Contract and DApp
You don't need a plugin to view the DApp. If you log in without one you'll see a version pulled from a gateway.

In order to interact with the DApp (buy or publish an ad), you can use a plugin or a wallet app like Mist in order to be able to send transactions to the smart contract. You potentially do it manually by interacting with the contract through a ethereum console and sending the right transaction to the right address, but the browser plugin / app makes the process seamless.

ontoillogical··on Show HN: The Million Dollar Homepage as an Ethereum Smart Contract and DApp
Getting to work with shazow has been the best part of this project.

A+ would pair program again.

ontoillogical··on Show HN: The Million Dollar Homepage as an Ethereum Smart Contract and DApp
Author here. My friend and I have been doing some smart contract audits, and we wanted to build a fun contract ourselves. We remembered the Million Dollar Homepage from 12 years ago, and decided to reimagine what it would look like today _on the blockchain_.

Not an ICO, more of an experiment / art project.

We present, the Thousand Ether Homepage: https://thousandetherhomepage.com/

The smart contract itself: https://etherscan.io/address/0xb5fe93ccfec708145d6278b0c71ce...

What’s cool about it:

- It’s immortalized on the Ethereum blockchain. As long Ethereum is around, your ad slot will be yours to do with it what you please. No need to rely on us to run the service indefinitely.

- There’s no email signups, no passwords, no credit cards.

- You buy ads by calling a method on the smart contract with the correct Ether value, and tada. All done from an Ethereum-enabled browser (like the MetaMask extension or Mist/Parity.

- Once you buy an ad, the DApp _knows_ who you are from the wallet integration and you can edit it without logging in explicitly.

---

All the code is open source, so check out the nitty gritties: https://github.com/thousandetherhomepage/

ontoillogical··on Imzy is shutting down
SLC?
ontoillogical··on The Uber Bombshell About to Drop
>As someone who several years ago "managed" to take over a publicly traded company ...

That sounds like an interesting story!

Have you told it elsewhere?

ontoillogical··on [dead]
on that note, can the mods add a [2008] to the title please?
ontoillogical··on Instacart is playing games with its workers’ pay
One of the reasons I prefer to use Lyft is that they let you tip drivers.
ontoillogical··on The Bipolar Lisp Programmer (2007)
I've used this essay as a justification to myself for why I got bad marks so many times.

Dropping this self-assessment was a big part of what "growing up" felt like to me.

ontoillogical··on Doodles, stickers, and censorship circumvention for Signal Android
Do they need google/fastlys cooperation for this, or is it possible to do by running a server in the google cloud, or via some redirect that fastly hosts?
ontoillogical··on Careers in security, ethical hacking and advice on where to get started
That's salary above the average for IT workers.

The average IT worker makes $72000, while cybersecurity workers are making $78500, a 9% premium

ontoillogical··on Ask HN: What cloud security practices should you do, but don't?
<self promotion>

I'm not surprised to see that the first thing you listed was patching known vulnerabilities. Staying up to date with known vulnerabilities is the baseline of a security policy, but patch management is needlessly hard, especially if you don't have dedicated staff to scour security mailinglists.

We built a product to make this easier: https://appcanary.com . Maybe it would have helped your old employer.

</self promotion>

ontoillogical··on Show HN: Code2flow – easy flowcharts with no mouse, no dragging and no hassle
Don't listen to the feedback you're getting here about pricing.

It looks like you're used by people in healthcare, and they pay primarily for self-hosting.

My suggestion: replace "Data not confidential" with "HIPPA compliant" and double your prices. The free version works for 99% of people who just want to draw a flow-chart, and you charge reasonable prices to healthcare orgs that have to be extra careful because of regulations.

Page 1 of 5Next →