HNHacker News
TopNewBestAskShowJobs

zkhalique

599 karma · joined September 13, 2010

Co-Founder & COO at http://qbix.com We're building a simpler and more elegant social app platform that developers will love.

[ my public key: https://keybase.io/zattack; my proof: https://keybase.io/zattack/sigs/ju1icv42KBBcbTu8e4RQoq4SvAJcs3TODCRCzfrL1Nw ]

submissionscomments
zkhalique··on Amazon Kinesis Firehose – Simple and Scalable Data Ingestion
How is that different than just saving database records?
zkhalique··on React v0.14
I have a question, why is dirty-checking so great?

Whether it's Angular doing dirty-checking in the $digest cycle or React walking the virtual DOM and doing dirty-checking?

Why not just subscribe to events and update things when the model changes? That would seem to be far more efficient, and also make clear the mapping of dependencies of views on data.

zkhalique··on Amazon Kinesis Firehose – Simple and Scalable Data Ingestion
What are some typical use cases for Amazon Kinesis streams, on the web?
zkhalique··on Scientists to nudge asteroid off course as practice for protecting Earth
Yeah! Has anyone actually investigated this or written about it??
zkhalique··on Scientists to nudge asteroid off course as practice for protecting Earth
What's the whole thing about drilling a hole and dropping a nuke to split the asteroid up? I mean, I liked the Aerosmith song from that movie (Armageddon) but doesn't that actually seem like a sensible idea for a bigger rock?

Looks like some experts agree w me: http://www.space.com/21333-asteroid-nuke-spacecraft-mission....

zkhalique··on Ask HN: What will self driving cars do to real estate?
I think what's going to change is parking lots. There will be less demand for parked cars. Also, eventually entire streets will have less parked cars, leading to nice-looking streets like there were before the 20th century. I consider all the cars akin to "garbage" since they are not being used.

What will really change real estate patterns is increased support for telecommuting, both with tools and cultural acceptance.

zkhalique··on The primacy of the US dollar looks unsustainable
At least US bonds being priced in USD does reflect the risk and demand associated with them.

What I wonder is, how is inflation being calculated in terms of the CPI, which is essentially prices in dollars? After all, what exactly is being measured by this? If dollars the very currency which is being printed, how does measuring prices account for how much M0 money there is?

zkhalique··on The primacy of the US dollar looks unsustainable
Well, it's regular mean reversion. China's treasuries and others will eventually grow as reserve instruments. Also, the primacy of high US salaries / income relative to the rest of the world also looks unsustainable.
zkhalique··on Why Fogbugz lost to Jira
I have a question about raising VC money earlier. If you want to grow fast and push some free platform out to change the world, what is main danger in raising VC? I'm talking about the VCs these days who invest in companies that make open source like NGiNX, MySQL etc. And you need resources to grow, if you want to beat competitor platforms.

I mean logically, if they've already given you the money and there isn't any way they can take over governance of the company, then the only leverage I can think of is signaling in future rounds. And if you weren't even going to raise one VC round, then at that point you may as well raise exactly one and then signaling is irrelevant. Yes you've diluted yourself 20% and now you've got a board member that wants you to grow fast, but so do you. Of course, I'm assuming here that you failed to raise on Kickstarter, and you aren't making enough $ to hire people to do development/testing/security/evangelism/PR/marketing/operations/etc. anytime soon. Why waste years of your life when you can hand the project off eventually to a community you've built, and move on? If you want to retain control over the project forever, can always be BDFL of the community, at least until some better-funded company forks it. I just really want to understand, what is the reason that guys like DHH say VC can control you after you take their money?

zkhalique··on Google introduces 'Customer Match' – target web ads to email addresses
I am curious, why do they always say the word "weird" in these ads? It's too tacky for most people to think they are "dispassionately" describing the product. One weird trick. It's almost a shibboleth now of hucksters.
zkhalique··on Data first, not code first
I used to think I can communicate the architecture (including code) of an entire website using just the tables. And a good enough developer+designer could turn the schema into a website.
zkhalique··on Is curl|bash insecure?
The answer is Yes. Moving on!
zkhalique··on Enough with the Salts: Updates on Secure Password Schemes
Yes, there are reasons to think about it. For example if I want to understand the principles that make the usual algorithm strong.

There is a reason why Apple makes every app implement its own receipt validation scheme. So a dedicated attacker can't crack all apps at once. Same here.

zkhalique··on Enough with the Salts: Updates on Secure Password Schemes
These days, what is wrong with rolling your own encryption of passwords using key strengthening and salting?

Like this:

hash = sha1 applied recursively 4071 times ( password . salt ) . salt

Serious question. Don't just say religiously, "just use bcrypt". Tell me what is really wrong. What attacks will succeed today? Any crypto enthusiasts in the audience?

zkhalique··on AWS US East is experiencing high error rates on several services
This is why 99.99999999% uptime is a fallacy

It is not really measuring the time you're going to be up. That interpretation is based on faulty assumptions. It's like the statement "the sun will burn out before one bit is flipped" is wrong. It is quite likely that by that time, all the bits will be gone.

https://signalvnoise.com/posts/3067-lets-get-honest-about-up...

zkhalique··on Ernst and Young drops degree classification threshold for graduate recruitment
Boom! This is big.
zkhalique··on How David Hume Helped Solve My Midlife Crisis
Isn't it interesting that she was seeking out Buddhism?

The other philosophy that thought about this, but on a more intellectual level, was Stoicism, which was very popular in the Roman empire.

zkhalique··on Amazon's New $50 Fire Tablet
I like how it puts ads on the lock screen to offset costs
zkhalique··on Totally Honest Software Engineering Negotiations
Totally Honest Software Engineering Negotiations

(a lie, I added $14k to the original offer)

See... it's hard to be "totally honest" in sales, even of your own time, because of the red queen effect.

This was an integral step in the process of raising your salary. If you volunteer all information honestly, I am pretty sure that most players in the system will not have an obvious path to increasing your salary. Otherwise it would represent an arbitrage opportunity for everyone.

zkhalique··on A password hash storage scheme that prevents efficient password cracking
Either way, how are you going to rate-limit failed logins while at the same time not allowing a DDOS of a user login? If I am using a botnet to keep trying passwords for Sarah Palin, how are you going to know when the real Sarah Palin logs in from a new computer? Sarah Palin will never be able to log in again from a new computer, unless she uses a key from her old one.
zkhalique··on Neocities is implementing IPFS – distributed, permanent web
It's append only until B and C get a copy and each append their own comments, then D and E get two separate forks and append their own comments. That can work for trees to which you only append, such as comments. That does NOT work for any operations that do non-append operations on trees, such as operations which rearrange the tree into a line.

So yes, for append-only tree structures, this may work. In terms, of say, a Google Doc that means you can never delete or insert any text, but only append text to the end of paragraphs etc. Certainly very limiting.

Unless there's something you haven't described, in which case I encourage you to provide a more in-depth comment describing a solution for actually inserting or modifying the tree.

zkhalique··on Neocities is implementing IPFS – distributed, permanent web
It might be possible to do some sort of self contained data structure that authenticates everybody and only allows authorized access to it, which solves the Byzantine Generals problem like BitCoin does, and which resists forking and instead uses vector clocks and Operational Transformations to consolidate actions done to the tree. But even so, how would it resolve conflicts? It could be a long time until a conflict is discovered, and then do edits get dropped, or what?
zkhalique··on Neocities is implementing IPFS – distributed, permanent web
We've been thinking about this problem for quite some time. My friends and I are passionate about re-decentralizing the web. The biggest challenge we've come across is this:

Many users want to do things with other users

That means there has to be a way to persist state and history (of a group activity, an evolving resource, etc.) across machines. Mental poker is still very hard to do for groups. Since most clients will not have amazing uptime, that means you still need a network of servers. Servers that manage security behind a firewall.

So, the conclusion is -- for group writable data, the best you can do is have servers be completely interchangeable, but you will still need servers and networks of servers.

The good news is, many of the challenges are orthogonal to each other. Someone's building a Mesh network, for instance. Someone else is building the protocol layer with IPFS. We're building the social layer for this coming web.

zkhalique··on Principles of a Decentralized Web
The next facebook should be a decentralized, open source platform. Like Wordpress was the "next LiveJournal".
zkhalique··on Principles of a Decentralized Web
This. Decentralization needs to be the foremost feature of a decentralized system. No single points of failure. Scaling up and down with demand. Resilience and choice for everybody.

Money has been decentralized.

Social networking hasn't, yet.

Security hasn't, not really. Have you installed the latest SquirrelMail patches yet? You probably use GMail so you don't have to worry about it.

zkhalique··on India’s civil servant exam
It took me 30 seconds of reading Wikipedia and now I am able to do it.

But, are the people in the exam allowed to use the internet?

This is an interesting question (and somewhat meta, given the question itself) about test taking today. What is the point of remembering all that knowledge if you can look it up and understand it quickly?

zkhalique··on Downsides of Caching
Caching is the classic memory-time tradeoff, everything from memoizing a function, to DNS caching, to storing a web resource that didn't change.

I think that, if a cache is combined with a push indicating a change, then it's basically a local "eventually consistent replica" which catches up as soon as there is a connection to the source of truth.

Seriously, many times you are READING data which changes rarely (read: every X minutes / hours / days). So, in the meantime, every code path that will need access to the data may as well look in the local snapshot first.

The question about consistency is an interesting one. The client's view of the authoritative server state may be slightly out of date, when the user issues a request. If certain events happened in the meantime that affect the user's view, then the action can just be kicked back to the user, to be resolved. But 90%+ of the time, the view depends on 10 things that "change rarely", so a cache is a great improvement.

Related issues involve batching / throttling / waiting for already-sent requests to complete.

PS: That was quick. I posted this and literally 10 seconds later it got a downvote.

zkhalique··on Microservices without the Servers
I came here expecting to read about "distributed computing in the peer to peer network" and instead found a how-to for "servers-as-a-service" from Amazon.

Check this out instead:

https://crowdprocess.com/

zkhalique··on Things We Still Don’t Know About Water
Richard Feynman said in his interviews that we don't know why water expands when it freezes. On a physics level, it's still a mystery?
zkhalique··on Google’s look, evolved
This is definitely good :)
← PreviousPage 5 of 12Next →