HNHacker News
TopNewBestAskShowJobs

robbya

1,067 karma · joined September 22, 2019

submissionscomments
robbya··on Facebook Libra Is Architecturally Unsound
> The plan is to build a ledger that no single party (or coalition of parties in a single legal jurisdiction) has the capacity to edit or alter, and to make such alterations so technically challenging that it's beyond the capacity of any single court or legislature to do so.

I'm not seeing why they need a new cryptocurrency for this. If you grow Bitcoin (or any other existing cryptocurrency) to be "too big to fail", it would also have all these properties. Is starting from scratch with zero users easier?

robbya··on Facebook Libra Is Architecturally Unsound
What's the profit potential for Facebook here, especially above using an existing cryptocurrency for payments on their platforms?

Having low friction payments on Facebook makes sense, it build value into the platform and Facebook can capture some of that. But can't they do that with an existing cryptocurrency?

It doesn't seem like Facebook will maintain full control of the currency due to the consensus algorithm. There is power and control if Facebook continues to control the fork of the code base that everyone uses, but presumably nodes could choose to switch away from Facebook's fork. So I'm not seeing "control a currency" as a long term benefit.

It makes sense that anyone running a Libra node would make money, but anyone else running a node would make similar profit.

The article mentions that a long term goal could be "act as a data broker and mediate consumers access to credit", although again, doesn't the decentralized nature permit any node from taking those steps? That doesn't seem to uniquely advantage Facebook.

As others mention, once a cryptocurrency is "too big to fail", regulators are locked out. Is Libra really an easier approach to getting a cryptocurrency to that point, versus adopting and accelerating the growth of an existing coin (like Bitcoin)?

Does Facebook just think they can build a better cryptocurrency? I don't doubt that they can hire good engineers, but with all the politics and marketing focus on the code now, development is probably getting stressful and chaotic.

robbya··on Ask HN: How do you roll back production?
Specifically, I tell Jenkins to deploy the commit hash that was last known good. Jenkins just deploys, and doesn't really know that it's a "roll back."

Generally, going back to a known clean state should be easier, safer and relatively quick (DNS flip is fast, redeploy of old code is fast if your automation works well).

In some cases changes to your data may make rolling back cause even more problems. I've seen that happen and we were stuck doing a rapid hot fix for a bug, which was ugly. We did a lot more review to ensure we avoided breaking roll back. So I'd advise code review and developer education of that risk.

robbya··on Ask HN: AWS invoice completely out of touch with reality
What service(s) drove up your bill?

AWS pricing is certainly complex, and requires some research. Not user friendly.

robbya··on Jenkins DSL Job Simplified
Working with Jenkins was my first time experiencing a domain specific language (DSL) like this. Anyone who hasn't seen DSLs through Ruby, kotlin, or other languages are in for a treat. They are a clean way to build tooling.
robbya··on Linux's Marketing Problem
Is that clear from their homepage?

> Ease of use → grandpa-friendly certified™

http://puppylinux.com/

If I wasn't tech savvy and I stumbled into Puppy, I'd assume it was targeting non-tech savvy people based on that statement at the top of the homepage. Then I'd likely feel burned by "Linux" when it wasn't. There is a marketing problem there.

Although in that example, why is a mainstream user looking at puppy in the first place? So I think you're right, that's a cherry picked example.

robbya··on Zotonic: An Erlang Web Framework
Unfortunate. They have a list of sites that use zotonic, which may help. I thought this one was impressive:

https://verafin.com/

robbya··on A Guide to AWS Custom Cloudformation
This is a great example of how to get this working, I don't think I've seen a complete guide like this the last time I needed this.

I'm frustrated that CloudFormation ends up needing these customizations though, and that you need to leave the world of CloudFormation and self manage and deploy your own set of lambda functions to support your customizations. It feels like a hack.

I really strongly advise folks to look at Terraform instead of you can. While I've needed custom lambdas for CloudFormation, I haven't hit a similar limit for Terraform.

robbya··on Linux's Marketing Problem
"Instead, the front page is largely a treatise on how Puppy Linux isn’t actually a “distribution” per se, and a technical description of what does and doesn’t count as a true Linux distribution."

I think the above quote from the article is why Puppy was used.

Why is the front page for Puppy full of technical nit-picking about terminology? Why isn't it focused on getting the user to productivity faster and easier.

Or maybe to follow on to your point, why doesn't the Puppy home page clarify that install to disk isn't a goal. That info on the home page would have certainly helped the author more than the definition of a distribution.

robbya··on Toddler Password – Get a secure password generated by a toddler
Which means the password has much less entropy than it appears to have. It's a fun implementation, but not serious
robbya··on Ask HN: How often you overtime over weekends?
I spend weekends with family. The last year, never did weekend work.
robbya··on Encrypted web traffic now exceeds 90%
The 50-50 point appears to have only been June 2017, so the cutover rate is really quite rapid. I wonder how quickly we'll see 95%, 99%, and how long the long tail will be.

https://netmarketshare.com/report.aspx?options=%7B%22filter%...

robbya··on When XML Beats JSON: UI Layouts
WPF is Windows Presentation Foundation.

https://docs.microsoft.com/en-us/visualstudio/xaml-tools/des...

robbya··on Ask HN: What tech stack shall I use for a pay. processing by reading a QR code?
I'd look at payment processors and what tech they support. I'd guess that it would be fairly broad, so I don't expect that you'd be pulled in any particular direction.

Remember, after the MVP you may end up pivoting in a new direction or scrapping the project, so I'd say what ever stack your team is most comfortable doing rapid development in is best.

robbya··on Show HN: Gigs at Your Terms
Is this task tracking or job search tool for Product Owners/Project Teams to find each other (or both or something else)?

Nice visuals on the website, but I don't think I understand.

robbya··on Panopticlick
I found the stats for DNT interesting. 1 in 1.92 have DNT header enabled. So having it as False gives more bits of info. Presumably that's just stats for folks using panopticlick, so heavily skewed towards folks who know about privacy.

> DNT Header Enabled? | 0.94 | 1.92 | True

robbya··on U.N., Unicef, Red Cross Under Ongoing Mobile Attack
I think most of the good password fillers will check the full domain, so they would not fill any password in for these sites. That's also a good indication that your not on the expected site.
robbya··on Duck Curve
https://cryptocurrencyfacts.com/2018/04/16/the-bart-crypto-p...
robbya··on Massachusetts Sues Exxon over Climate Change, Accusing the Oil Giant of Fraud
I think allegedly is correct in that there is an expected court case, and the terminology can be switch if the case finds these statements to be true.
robbya··on A Visual Introduction to VC Financing (2015)
I believe @floatrock is the author for this.
robbya··on Misconceptions About IP Geolocation
I've seen "what's my IP address" websites that ask to get your location from your browser, that's a good trick to get fine grained IP geolocation (until the IP address is reassigned).
robbya··on Misconceptions About IP Geolocation
> If IP addresses were considered PII, then no routers database or Whois registries could legally exist, which would mean to a larger extent Internet routing could not exist as we know it.

I think this statement is misinformed. There are countries that have rules around protecting PII. WHOIS implementations have changed as a result, but I think these laws have carve outs that allow routers to function. The laws are more nuanced than this.

Examples:

ICANN adopted tiered access for gTLD registration information: https://www.icann.org/resources/pages/gtld-registration-data...

EU courts believe that IP addresses, even dynamic IP addresses, can indirectly identify a person: http://curia.europa.eu/juris/document/document.jsf?text=&doc...

GDPR, however has a carve out that I think permits use by internet routers. One legal justification is:

> Processing is necessary to satisfy a contract to which the data subject is a party.

If my ISP doesn't announce my IP address, then they can't connect me to the internet, which I pay them to do.

robbya··on Clickbait Snail Mail: How companies try to get me to open the mail they send
The discounts these companies get from the postal service for mailing in bulk, presorting, using specific labeling, etc can get pretty large. Just a couple cents a mail piece.
robbya··on Some Apple signatures expiring on October 24, 2019
I suppose it does give Apple more control. If they decide they don't want a specific update to work any longer, they can let it expire and then folks would need to use something else (like a newer/safer update that covers the same patch).

For EFI (per the screenshot) I wonder if they are looking to protect against the risk of an update that introduces an EFI vulnerability. Unless Apple is checking a certificate revocation list (or similar) then an attacker could apply that vulnerable update. Letting it expire sets a limit for how long it can be exploited. Just a guess.

robbya··on Sample Data Files
Could be a useful resource.

Some of the links appear to be dead though: https://people.sc.fsu.edu/~jburkardt/data/byu/byu.html

robbya··on Ask HN: What's a promising area to work on?
> Telemedicine will improve as more technically adept people age.

There's a little bit of user blaming in that statement (not being critical, just thinking out loud). Dealing with the elderly and folks who are less familiar with tech is an interesting design space.

Does anyone know design patterns that specifically seek to improve the experience for non-tech savy elderly?

robbya··on A form of offline payments is being developed for Bitcoin’s Lightning Network
> Sheinfeld said he would not describe the functionality as “offline Lightning payments” but as the “ability to pay someone and go offline right after you’ve sent the payment”—so the payee is offline during the payment.

So not a fully offline method.

robbya··on Latest Firefox Brings Privacy Protections Front and Center
I believe they are talking about an outdated issue:

https://github.com/mozilla/addons-frontend/issues/2785#issue...

robbya··on Ask HN: Is “claim your profile” a good strategy?
I'm not familiar with that strategy (can you define it?), but I'd expect that certain strategies work better for some products but poorly for others. What market are you thinking about?
robbya··on DuckDuckGo's traffic keeps growing
That's a good tip. Presumably fewer folks know about startpage. But even reducing the number of searches that you send to Google is a privacy improvement.
← PreviousPage 3 of 4Next →