HNHacker News
TopNewBestAskShowJobs

picardo

694 karma · joined May 8, 2011

I am a full stack developer.
submissionscomments
picardo··on Third places and neighborhood entrepreneurship (2024)
I do that sometimes, but I get peer pressured into drinking alcohol if I socialize. You can't win.

Agree with you about the benefits of avoiding alcohol.

picardo··on Third places and neighborhood entrepreneurship (2024)
Oh snap.
picardo··on Third places and neighborhood entrepreneurship (2024)
Is it normal for people to be drinking coffee so late in the day?
picardo··on Third places and neighborhood entrepreneurship (2024)
Agreed on both points. In my middle age, I've even considered starting drinking again so that I may have a reason to go to the only place where people hang out in my neighborhood, which is obviously a bar.

The one and only social activity that has saved me from this road so far has been a few meetup groups that I frequent.

picardo··on Third places and neighborhood entrepreneurship (2024)
Mixed use zoning is quite common in major American cities. It's much more complicated to implement than Euclidean zoning, though, so I assume it faces some adoption challenges in smaller cities.
picardo··on Third places and neighborhood entrepreneurship (2024)
I'd be interested to see an update to this study in the coming years. Starbucks has been pivoting towards take out and mobile orders and removing tables and chairs entirely from some of its stores lately.
picardo··on Atuin – Magical Shell History
Thanks. I bound it to double up key in zsh.

> bindkey '^[[A^[[A' atuin-up-search

Works much better now!

picardo··on Atuin – Magical Shell History
Is there a way to change the key binding of the search screen? I'm too attached to using the up key to recover the last command I used, and it's a little jarring to now have to click tab from the Atuin search interface. It adds a little friction each time I have to do this.

As an aside, most of my usage of history is to use the last few commands I used, and so seeing the entire history each time seems like an overkill.

picardo··on At Amazon, some coders say their jobs have begun to resemble warehouse work
Sure, AI makes writing code easy, but code review remains a bottleneck. The individual coders are finding ways to use AI to improve their workflows, but as long as organizational culture remains stuck in the old ways of reviewing code, the overall throughput will not improve significantly. That's been my personal experience at Amazon. I get significant pushback when I submit a CR more than a few pages long. You need to have high degrees of trust within a team for this to work at scale, and that's very rarely the case in my group.
picardo··on Show HN: Browser MCP – Automate your browser using Cursor, Claude, VS Code
I like this. It would be interesting to use it for when I need to use authenticated browser sessions.
picardo··on Fauna Service Winding Down
This was about 7 years ago. Maybe things were different then? But yeah it did strike me as odd so that’s why I didn’t forget it.
picardo··on Fauna Service Winding Down
Someone told me FaunaDB the company had a strict "no one gets fired" policy. However, they also hired a few toxic people, and that created a dilemma for some folks because it was either leave or learn to tolerate toxicity.
picardo··on Advent of Code 2024 and BQN
Discovering array languages in the last year was one of the great joys of my programming career. They've made me see my work differently and made me a better programmer in general. If only I could find good reasons to use them for more general programming tasks in my every day work!
picardo··on Happy New Year and a Reflection on Mastery Through Simplicity
Sounds like you're looking for advice on problem solving. I don't consider myself truly great at solving problems by any means, but I found these books helpful to me in analyzing problems:

- Are Your Lights On?: How to Figure Out What the Problem Really Is[0]

- Problem Solving 101: A Simple Book for Smart People[1]

---------

[0] https://www.amazon.com/Are-Your-Lights-Figure-Problem/dp/093...

[1] https://www.amazon.com/Problem-Solving-101-Simple-People/dp/...

picardo··on Show HN: Wealthfolio: Private, open-source investment tracker
> what OS you use and how much of your software you use daily have you read through the source code of?

Very few. It depends on the data I need to store in the program. I don't store sensitive data in Figma or VSCode, so I don't really care if they don't encrypt my data in local storage. But if I'm in the market for something that offers to manage my sensitive financial data, then yes, I want to dig into its dependencies and security strategy first.

picardo··on Show HN: Wealthfolio: Private, open-source investment tracker
> Because as soon as those keys aren't available (either because the endpoint no longer exists, or you cannot connect to the endpoint for whatever reason (like being offline)), you can no longer access your data.

The encryption key doesn't have to be stored in the cloud. It just has to be stored somewhere else -- it could be in the file system.

> It's not a website, it doesn't run in your normal browser. It runs as a standalone application.

Even if it's a standalone application, it doesn't mean the code can be entirely trusted. I wouldn't take that risk.

picardo··on Show HN: Wealthfolio: Private, open-source investment tracker
> only with trusted code

That's a big assumption. Have you read all the code, and the dependencies of the dependencies of your code? If you haven't, how do you know it can be trusted? What if there is a backdoor in an obscure dependency that can inject a script into your website to steal your sensitive data? Don't laugh it off. When there is money on the line, someone is going to try it.

> Neither are there browser extensions involved here.

What about the extensions you installed in your browser? What about the user scripts (if you use them)?

> Huh? Please don't do this, especially not for "local first" applications, would defeat the entire purpose.

Why not? Why do you want a local first app in the first place? What's the purpose of a local first app, if not security?

picardo··on Show HN: Wealthfolio: Private, open-source investment tracker
> This is what we need more often from our software, especially from software that works with sensitive data.

Storing sensitive data in local storage makes you vulnerable to XSS attacks and Man-in-the-Browser attacks. You're exposing your sensitive data to an attacker that injects a script to the website and to malicious browser extensions. All sensitive data stored in local storage must be encrypted using a key stored in the server or somewhere on your hard disk. Otherwise, you're not reducing your risk, but substituting one type of information disclosure vulnerability with another.

picardo··on Ask HN: How long does it take to find a job?
It's not a long amount of time considering the rewards. Many of the second or third round "interviews" were actually mini projects that took weeks of effort, as well.
picardo··on Ask HN: How long does it take to find a job?
It took me 8 months to find a job as a frontend engineer at the top of the market in 2021 with 15 YOE. I was interviewing every day, and most of them were positive, but they didn't bite. At the end of the day, you never know why someone doesn't hire you. It worked out fine for me though. I ended up in a FAANG company. Interviewing helped me build the skills I needed to pass the interview.
picardo··on Ask HN: Career advice and what skills gave you the most leverage
This is more of a meta skill, but "learning to learn" was a game changer for me. For a long time, I had approached learning in a set and done kind of way, i.e. I'd read and immerse myself on a new topic, declare I'd learned it and move on. But I realized that was not only wrong, but it was blinding me to my shortcomings. I took a few courses, and started testing myself regularly on new topics to overcome that blindspot. YMMV!
picardo··on Modeling Git Internals in Alloy, Part 2: Commits and Tags
Agreed. Alloy IDE is pretty bad. I tried using external tools like [Sterling](https://sterling-js.github.io/), but they still rely on the IDE for some things.
picardo··on Apple avoids job cuts because it didn’t overhire like Google and Amazon
Lazy journalism. They're all tech companies and all tech companies have the same business model, of course.
picardo··on Why I am learning category theory
Same here. I drank the cool aid a few years back, and started using fp-ts in my frontend projects, hoping to use algebraic data types regularly. But today all I use is the Monad. I can't find any motivation to write abstract algebra to build UI widgets.
picardo··on Writing by hand is still the best way to retain information
I think it's more helpful for certain tasks, such as learning a new language, than others, such as creating a complex document. I've been using handwritten notes to improve my Korean recently, and I've noticed that I can recall the words and characters much more accurately and for much longer after writing them by hand.
picardo··on Patreon laid off their security team
Exactly. There are far too many people who are ready to wave their pitchforks around on claims made with the slightest evidence. I would have thought HN would have a higher burden of proof for such claims than the rest of social media landscape.
picardo··on Patreon laid off their security team
> Seems like a money printing machine to me.

Only if the creatives are making their money on their platform.

Since Patreon's entire business model is based on taking a cut of the revenue artists make on their platform, they don't make money if the artists make money elsewhere. Many creatives use Patreon only for fan outreach, and sell merchandise outside of Patreon.

If Patreon charged a fixed rate for their software, they could make more money, but they would lose the business of small creatives. That's the dilemma.

picardo··on Velox: An open-source unified execution engine
So it's like an operating system for cloud workloads?
picardo··on Automated Reasoning at Amazon: A Conversation
Dafny's verification system can be too rigorous for high performance and rapidly changing codebases. S3 team had a paper[1] last year on how they verified ShardStore using a lightweight formal verification system. Since the system was written in Rust, they wrote their verifier in Rust, as well.

[1] https://assets.amazon.science/07/6c/81bfc2c243249a8b8b65cc21...

picardo··on Automated Reasoning at Amazon: A Conversation
The hype is well-deserved. The Automated Reasoning Group is doing some remarkable things. Zelkova[1] is making policy compliance a breeze. And the institutional support for Dafny[2] -- a verification aware programming language -- is bringing program verification to the masses. Really envious of them.

--------------

[1] https://aws.amazon.com/blogs/security/protect-sensitive-data... [2] https://github.com/dafny-lang/dafny

← PreviousPage 2 of 8Next →