HNHacker News
TopNewBestAskShowJobs

zxt_tzx

186 karma · joined November 25, 2023

submissionscomments
zxt_tzx··on First-of-its-kind study finds autonomous vehicles are safer than human drivers
> Sponsored by the autonomous car industry?

Fair, the litmus test would be whether Swiss Re charges less for (re)insuring autonomous vehicles vs regular drivers.

> But anyway, I have a feeling that in the long run they probably will be. In the meantime they share the road with human drivers and the real benefits won’t be seen until its just autonomous vehicles all carrying out the same rules.

Agree.

zxt_tzx··on First-of-its-kind study finds autonomous vehicles are safer than human drivers
The study controls mileage (driving exposure) and zip-code (geographic region) but it does not specifically mention controlling for variables like efficiency or road use. So you're right, the vehicles could be moving more slowly or cautiously.

I do wonder whether a world of autonomous vehicles moving more slowly but safely is still a better world than ours — is there reason to the current speed/safety trade-off is optimal?

zxt_tzx··on First-of-its-kind study finds autonomous vehicles are safer than human drivers
> The results of the research are exciting both for the insurance industry and the safety community alike: in over 3.8 million miles driven without a human being behind the steering wheel in rider-only mode, the Waymo Driver (Waymo’s fully autonomous driving technology) incurred zero bodily injury claims in comparison with the human driver baseline of 1.11 claims per million miles. The Waymo Driver also significantly reduced property damage claims to 0.78 claims per million miles in comparison with the human driver baseline of 3.26 claims per million miles.

> Similarly, in a more statistically robust dataset of over 35 million miles during autonomous testing operations, the Waymo Driver, together with a human autonomous specialist behind the steering wheel monitoring the automation, also significantly reduced both bodily injury and property damage claims per million miles compared to the human driver baselines.

Link to the full research paper: https://arxiv.org/ftp/arxiv/papers/2309/2309.01206.pdf

zxt_tzx··on Rethinking serverless with FLAME
> Having said that, this WILL become a maintenance trainwreck when scaled up, telling from my devops experience. All the libraries/apis/infrastructure (especially in nodejs land) tend to have breaking updates all the time, so better have at least one FTE dedicated to maintenance of all the moving parts.

Oh man, this sounds like a dealbreaker, but thanks for sharing your approach nonetheless!

zxt_tzx··on The UX of UUIDs
I wish I had read this when I rolled by first API key management system.

Some other useful points to note:

- in general, you’d probably want to version your API keys (something that wasn’t done in the example)

- I tend to think base58 is less important for something that you expect your users to copy and paste (eg API keys) rather than enter manually (eg OTP)

- In a previous product, we have used a high entropy string in lieu of having a username and password to access authenticated resources. It’s somewhat risky in theory but in the years it’s been around, it actually works surprisingly well in practice.

zxt_tzx··on Streisand effect: Reuters takes down exposé on Indian mercenary hackers
Link to original article: https://web.archive.org/web/20231116164611/https://www.reute...

Very well-researched, seems like they are behind a surprisingly wide range of hacks (government officials, business executives, telcos and political activists), almost feels like something out of a Neal Stephenson novel

zxt_tzx··on Show HN: Recompyle – A JavaScript developer-friendly console / debugger
Haha it's almost like the Stroop effect, where you print the word "red" in blue ink instead of red ink.

I think you're solving a real pain point but to be honest I watched the video a few times and have trouble understanding how it works/differs from a regular debugger.

zxt_tzx··on Piracy Is Back: Piracy Statistics for 2023
To spell out what I think you're saying, the way to be ethical and have ownership is to pay for the content and then download a version of it so that you both supported the creator and have a copy of what you paid for.
zxt_tzx··on Piracy Is Back: Piracy Statistics for 2023
I think it's interesting to contrast this with music. Music is dominated by a few big labels, which makes it very easy for each provider (Spotify, Apple Music etc.) to provide a complete catalogue and thus convenience. (Though this does mean Spotify's unit economics are much worse, partially explaining the foray into podcasts and recent layoffs etc.)

Furthermore, whereas we hardly rewatch the same movies, we constantly re-listen to the same music we first encountered in our adolescence (nobody can convince me that the 90s is not the pinnacle of pop music). This makes things like playlists a lot more valuable and sticky.

I am not particularly ideological about copyright/piracy one way or another, but I know I probably won't be pirating music anytime soon.

zxt_tzx··on Rethinking serverless with FLAME
This advice sounds rad! Do you know of any open-source codebase that does this?

> Use dynamodb for storage.

So far I've done the opposite, i.e. use a relational database at the beginning, and, if the access pattern is clear and there are some parts of the application that would not scale well with SQL, move those parts to DynamoDB.

zxt_tzx··on Rethinking serverless with FLAME
I think the casing is not enforced by HN but rather up to the poster?

> (Aside: I wish someone would rethink Serverless, heh.)

Not sure if you've checked out https://sst.dev/ but I think they've done precisely that. For example, they have Live Lambda Development which makes local dev a real breeze by significantly shortening feedback loops (no need to push your code up to the cloud and wait for it to deploy)

zxt_tzx··on He blew the whistle on Amazon. He's still paying the price
I know this doesn't really solve the underlying problem, but I find that if I use Cloudflare's WARP (https://1.1.1.1/), Cloudflare is able to recognize the traffic is coming from itself and I can get past these captchas
zxt_tzx··on Building end-to-end security for Messenger
There’s probably an anti-competition angle here: with end-to-end encryption, you need a trusted central authority to distribute the public keys, which would make interoperability across different messaging services more difficult (impossible?), something that regulators have been trying to make happen.

If I owned the largest messaging networks, I would enable end-to-end encryption by default too.

zxt_tzx··on Ask HN: Where do you live? What's good or bad about it?
That makes a lot of sense. All the best, am sure you’ll go on to do great stuff!
zxt_tzx··on Ask HN: Where do you live? What's good or bad about it?
> The CEO categorized it as a “security vulnerability” during our discussion on GitHub.

Have you tried making a HN post or otherwise bring attention to this? My impression is he got a bunch of undeserved clout, especially in light of how things turned out subsequently.

> Many of my classmates in Malaysia were from Singapore and wanted to escape from the strict education system so I’ve always assumed that education is better there (in some sense, I understand it’s not for everyone).

Oh that's new to me, I didn't know that's a trend (Singaporeans going to Malaysia to escape the education system).

> I actually tried applying to some SG universities but was rejected (I have terrible grades)

Sorry to hear that. Something I have learned much later in life is that whereas schooling rewards individuals for being "all-rounded" and naturally caps the returns for being good at something (at most you can get 100 or 4.0 or wtv), in the real world, the returns for being really good at something (as you seem to be) are really uncapped.

zxt_tzx··on Ask HN: Where do you live? What's good or bad about it?
Thank you for the detailed reply!

> I tried putting a few job ads on MyCareersFuture for an average salary for Singapore, and only got a handful of responses, most of whom were entirely unqualified. Our circumstances changed, so I didn’t keep trying to hire here, but I get the impression MyCareersFuture is only really used to prove to MOM that you tried to hire a local so you can justify a visa to bring somebody into the country. I think most proper hiring is done via word of mouth or LinkedIn here. > I think a lot of people here hire developer teams in Vietnam and nearby areas. Which is certainly cheaper and opens up much bigger markets, but also introduces a language barrier.

Yes I think you're right about that. Am I right to understand that you ended up hiring elsewhere as a result? How was your experience in that regard? Yes, I know couple of founders who hire developer teams in Vietnam specifically. What they said is, for the equivalent of a fresh grad's salary (assuming you're getting the good end of that bimodal distribution), you can get a senior engineer in Vietnam. Oh, and I know someone who has dev team in India but I think he's originally from India and was able to tap into local connections to pull this off.

> If you’re keen on living in the region as a founder, then I’d say Singapore is the best place to be by far. But you probably aren’t going to build a dev team here.

So your advice would be to live in Singapore, but build a dev team somewhere else in Southeast Asia?

> It’s pretty easy to meet other founders and investors here. If you’re a founder then it’s a pretty good place to be as far as the entrepreneurial ecosystem is concerned. Antler started here and is very active in the community.

Any specific events you'd recommend?

Thanks in advance!

zxt_tzx··on Serverless SQLite free tier data leak/loss, affected users get paid tier forever
I use PlanetScale as well and have had a great experience so far! But honestly I have doubts whether it's the right technical choice to use a startup/scaleup for arguably the most mission critical part of my application.

Side note: I also had to figure out the ways in serverless/PlanetScale's MySQL is different (e.g. you can't have foreign keys, you can't create triggers). On the whole, foregoing these features for serverless makes it worthwhile though.

EDIT: oh nvm they literally just announced foreign key support: https://planetscale.com/blog/challenges-of-supporting-foreig...

zxt_tzx··on iMessage, explained
but but but BTC just hit $44k?!? /s
zxt_tzx··on Serverless SQLite free tier data leak/loss, affected users get paid tier forever
Tweet from founder saying affected users are upgraded to the paid plan in perpetuity: https://x.com/glcst/status/1732084865497976908

Personally, I am quite impressed by the new serverless database offerings (PlanetScale, Neon.tech, Turso etc.), but incidents like this give me pause and make me wonder if I am better off sticking to e.g AWS Aurora and paying fix fees.

zxt_tzx··on Ask HN: Should I use Cloudflare Turnstile to secure my public endpoints?
> Did your friend enable iCloud Private Relay by any chance?

Nope, he did not

> a) either setup Turnstile and don't worry until someone complains, or b) set up a 60 requests per minute global rate limit (just in case)

I guess technically a) is what I've done and my friend is the one who has complained.

But you're right, it's definitely premature optimization and I'm now doing the uncomfortable thing of trying to do marketing and get more customers instead of the more comfortable engineering work...

zxt_tzx··on Ask HN: Where do you live? What's good or bad about it?
I am in Singapore too — I saw you're doing an early stage startup here and wonder how you find the scene/ecosystem here?

My sense is: - Engineers, while cheaper than the US, are still fairly expensive and are typically quite risk-averse - The investors-to-builders ratio is very high; while it might be good for fundraising, I wonder if having a critical mass of builders is no less important

Curious to hear your thoughts!

zxt_tzx··on Ask HN: Where do you live? What's good or bad about it?
I actually first came across you on the Internet for the cool stuff you did reverse engineering the Obsidian sync engine! (On that note, I remember the CEO's response was praised for being measured/reasonable, but if I'm not wrong they subsequently broke it.)

> As a child, I was always told by everyone around me, family, friends, teachers that going to the US or UK should be my dream. Those that manage to go either via scholarship or wealth are described as geniuses and assumed to be smarter than the rest of us.

On this particular point, similar phenomenon here in Singapore and I studied overseas and came to a similar realization as you. But one irony is it's not something you can credibly say/know without actually having done it.

Now that you're there, my advice is to make the most of it and aggressively filter for people with similar interests as you and accept that you probably won't assimilate in with the mainstream and that's OK!

zxt_tzx··on Tell HN: ChatGPT is the biggest privacy disaster ever
Ah I see. You're right, the more I think about it, the more I'm convinced it's an intentional dark pattern.
zxt_tzx··on Tell HN: ChatGPT is the biggest privacy disaster ever
Related link: https://help.openai.com/en/articles/7730893-data-controls-fa...

> This setting does not sync across browsers or devices. You will have to disable chat & history on each device/browser.

I wonder whether this is a dark pattern or if there is a good reason for it.

zxt_tzx··on Sorry, but a new prompt for GPT-4 is not a paper
On a related note, there is this recent tweet purportedly showing that "offering to give a tip to ChatGPT" improves performance (or at the very least resulted in longer responses, which might not be a good proxy for performance) https://twitter.com/voooooogel/status/1730726744314069190
zxt_tzx··on Sorry, but a new prompt for GPT-4 is not a paper
I think it's a reference to the "discovery" that if you ask GPT-4 to answer your query "step by step", it'll actually offer a better response than otherwise.
zxt_tzx··on From 486 to Vue.js: Evan You's Full-Time Gamble on Open Source
I liked the SQLite one too! My favorite has got to be the Software World Tour one: https://corecursive.com/software-world-tour-with-son-luong-n...
zxt_tzx··on AI and Mass Spying
> They can do research, get paid, make payments, and contribute to private communities in such a way that no existing surveillance infrastructure can positively link that identity to their government identity.

I can't help but wonder if we live in the same universe. If anything, in my part of the world, I am seeing powerful surveillance tech going from the digital sphere and into the physical sphere, often on the legal/moral basis that one has no expectation of privacy in public spaces.

Would love for OP to elaborate and prove me wrong!

zxt_tzx··on AI and Mass Spying
I tend to think the surveillance/spying distinction is a little fragile and this more a continuation of what Bruce has previously written insightfully about, i.e. the blurring of lines between private/public surveillance and, as the Snowden leaks have revealed, it's hard to keep what has been collected by private industry out of the hands of the state.

However, a more recent trend is companies that sell technologies to the state directly. For every reputable one like Palantir or Anduril or even NSO Group, there are probably many more funded in the shadows by In-Q-Tel, not to mention the Chinese companies doing the same in a parallel geopolitcal orbit. Insofar as AI is a sustaining innovation that benefits incumbents, the state is surely the biggest incumbent of all.

Finally, an under-appreciated point is Apple's App Tracking Transparency policy, which forbids third-party data sharing, naturally makes first-party data collection more valuable. So even if Meta or Google might suffer in the short-term, their positions are ultimately entrenched on a relative basis.

zxt_tzx··on Choose the browser that best suits your privacy needs
> do you mean there's a terminal emulator out there which forces you to login?

Haha yes indeed that's what I meant, I suspect this is only going to become more common whether we like it or not

← PreviousPage 2 of 3Next →