HNHacker News
TopNewBestAskShowJobs

ahnick

1,010 karma · joined February 16, 2014

[ my public key: https://keybase.io/ahnick; my proof: https://keybase.io/ahnick/sigs/LyXcG74MK6NRQwz0n8AO2rW730NcUFyl45sd-KKjW9s ]

President & Managing Member of Plyint, LLC (https://plyint.com)

submissionscomments
ahnick··on New Economic Challenges and the Fed's Monetary Policy Review
I'm asking what the process of creating a borrowed dollar is versus the process of creating an inflationary dollar? Is there some financial instrument that the dollar is backed by that enables it to be paid back?
ahnick··on New Economic Challenges and the Fed's Monetary Policy Review
What is the difference between a borrowed dollar and an inflationary dollar?
ahnick··on New Economic Challenges and the Fed's Monetary Policy Review
I agree with your statements about the non government sector and other items; however, I still don't follow your line of argumentation.

My understanding of why the US can print money without regard for consequences is because there are always "buyers" for US dollars, b/c countries need US Dollars to carry out business (e.g. China in order to maintain their export driven economy or the fact that the USD is used as the standard unit of currency in international markets for commodities such as gold and petroleum). Yes, there are technically other currencies that are part of the foreign exchange reserves, but none as prevalent as the USD.

As I understand it, this demand for US dollars is what allows USD to remain the dominant reserve currency and why when the US prints money it does not result in catastrophic inflation. If a country like Argentina tries to do what the US does it won't work out, because there is no demand for Argentinian dollars.

The conclusion I'm left with is that the balance sheet is largely irrelevant until the demand for US Dollar decreases. The real question in my mind is exactly what would cause that to occur? Most everything I read is that the network effect of the USD causes everyone to continue to use it, but perhaps something like a war between the US and China might be a precipitating event to decreased demand?

ahnick··on New Economic Challenges and the Fed's Monetary Policy Review
I am sincerely asking here... as long as the US dollar remains the majority reserve currency won't the US be able to successfully print its way out and basically ignore the balance sheet? If you think the US could experience repercussions while being the majority reserve currency what are the plausible scenario(s) that that would manifest itself?
ahnick··on ReMarkable 2.0 – A digital notebook that feels like paper
Wouldn't you still need to be careful about the device auto-joining to open public wifi? Basically, if you were going to be away from your house you'd have to always remember to disable the wifi before you left. Alternatively, just keeping wifi off and only using the USB cable means you don't have to worry about forgetting to disable wifi before you leave home. :)
ahnick··on ReMarkable 2.0 – A digital notebook that feels like paper
Is the desktop app available on Linux or does the Windows version work under Wine?
ahnick··on Japan facing credit card number shortage
IMHO, Keybase is the best example of a friendly tool for public key cryptography. It's really a shame that Zoom acquired them. I still think their stitching together a secure identity based on the aggregation of people's social media accounts is a great approach. Maybe that idea will be incorporated into other tools eventually.
ahnick··on Investor revolt and legal dispute delay Filecoin plans
Yes, I think that is a risk in the absence of a true "Proof of Deletion". Perhaps though it would be so expensive to maintain a copy of all this data that no one is paying you for that nodes would be incentivized to just perform the actual deletion, since the rewards of keeping the data are unknown and the time horizon for maintaining that data at your own expense is unknown.
ahnick··on Investor revolt and legal dispute delay Filecoin plans
I'm not trying to fit any peg into any hole. Filecoin is the one that advertises the network is for private data. It's hard to quantify the risk from future theoretical attacks and anyone that is storing private data on Filecoin (or IPFS) needs to weigh their own risk tolerance.

Other networks have implemented mechanisms for the network nodes to delete files as detailed elsewhere in this thread and I think it is entirely reasonable to say there is more that could be done at the network level to help mitigate exposure. Dealing in absolutes is a dangerous proposition.

ahnick··on Investor revolt and legal dispute delay Filecoin plans
I assume the network doesn't broadcast a connection between real life identity and the data you're storing.

So my understanding is that in the example of a decentralized app that uses Filecoin to store an IPFS object on the network the IPFS object id could be sniffed on the localhost by something like Wireshark. This way an attacker could identify the encrypted objects that are of interest to them and then independently request them from the IPFS network.

In terms of threat, I'm primarily thinking of larger criminal organizations that might target things like files containing SSNs, credit history, etc.

SHA-1 is an example, but my biggest concern comes from the potential of quantum computing to render what we consider secure today obsolete. (https://www.technologyreview.com/2019/05/30/65724/how-a-quan...)

ahnick··on Investor revolt and legal dispute delay Filecoin plans
Yes, I agree. It is just a mitigation. At least though it would not be actively available on the main network. The more I think about this, the more I think being able to have some sort of reputation system for node operators would be really valuable.
ahnick··on Investor revolt and legal dispute delay Filecoin plans
In terms of an incentive, I would say that the node owner would honor the deletion request if the network pays them to do that. If I'm a node operator I don't so much care about the particular data I'm hosting, just what the network is paying for me to do.

The threat model I'm thinking about is a malicious actor requests an IPFS object that he/she knows holds data that is valuable, but that they can not decrypt. They then hold this object for a period of time till at some point they are able to break into it using improved computing power or exploiting some flaw in the implementation.

Now, you raise a good point about Filecoin being an open membership network. In my particular example, the malicious actor could just decide to run an IPFS node and start holding any data that comes to it for future malicious purposes and maybe they start pulling down specific files that they want to target directly. I don't have a solution to this other than to think that having some reputation built into the IPFS node network could help mitigate that risk. You might imagine that nodes with high reputation are trusted and it is harder(requires a lot of time/money) as a node operator to become part of that group. People might decide to only trust the highly reputable nodes with their private data and utilize all nodes for public data.

ahnick··on Investor revolt and legal dispute delay Filecoin plans
Yes, I understand that. I have this same issue with using just pure IPFS to store private data. IPFS for public data makes a lot of sense to me. When using IPFS for private data there seems like there is an inherent risk (hopefully only a small risk) that the encryption or its implementation can be broken at some point in the future potentially exposing the content that is hosted on the network. Normally, in this scenario the response is just run your own network of IPFS nodes if you want to restrict access, which is totally reasonable. I'm just expressing my desire to have something like Filecoin, but at the network level have the clients enforce access permissions and honor deletes. I may be the only one though. :)
ahnick··on Investor revolt and legal dispute delay Filecoin plans
The same reason people set permissions on their encrypted S3 object blob or you have to login to download any encrypted file from a multitude of applications. As computing power increases and/or as flaws in encryption implementations are discovered, then what is encrypted today might not stay encrypted decades from now.
ahnick··on Investor revolt and legal dispute delay Filecoin plans
When I say "user" here I'm talking about me the service provider being the user of the network. Instead of "user hostile", what I should have said is it "just doesn't solve the problem of access".

The concern I have is about malicious actors being able to access the raw objects held on the Filecoin network. They won't be able to do anything with the encrypted objects immediately, but I don't know that you can claim that will always be the case decades from now.

ahnick··on Investor revolt and legal dispute delay Filecoin plans
The ciphertext is irrelevant now, today. That might not always be the case if computing power improves sufficiently to be able to breakthrough that encryption or a flaw in the encryption algorithm (or default parameters being used in a particular implementation) is discovered. At that point, it would be nice to know that even the ciphertext was not exposed.
ahnick··on Investor revolt and legal dispute delay Filecoin plans
Why is that? I think it is entirely possible that in the future, encryption techniques used today will become compromised as both computing power improves and/or flaws are discovered. If someone is holding ciphertext encrypted with a compromised algorithm, then it could be decrypted.

Basically, how do you know what we are encrypting today, won't be able to have the encryption broken 30 or 50 years from now?

ahnick··on Investor revolt and legal dispute delay Filecoin plans
I disagree. Again encryption is not the same as not having access at all to the data. If centralized services offer the concept of having access control mechanisms available and we trust them to delete the files, then why not have those same types of mechanisms in place for a decentralized network? Asking people to delete their keys is user hostile and will likely lead to people just not using the service.
ahnick··on Investor revolt and legal dispute delay Filecoin plans
I agree, at least afaik there is no way to construct a formal "Proof of Deletion". This risk though I believe exists with even centralized services, so for example if I ask Amazon to delete this blob of data I actually don't know if in fact they did delete it. We all just assume they are doing what they are purporting to do, because if they aren't then there could be significant legal repercussions.

In the Filecoin case, I would still think that it should be possible to guarantee that a particular object is not being actively served by a node on the network at any particular point in time and penalizing nodes (loss of Filecoin) that do not pass this check.

ahnick··on Investor revolt and legal dispute delay Filecoin plans
So I have read this is why they didn't implement deletion support before. With that said, I would still think that 1) It should be possible to guarantee that a particular object is not being actively served by a node on the network at any particular point in time and 2) If all the node software supports deletion, then even if you couldn't provide a 100% guarantee at least it would provide some mitigation.
ahnick··on Investor revolt and legal dispute delay Filecoin plans
Just because the storage network is decentralized (i.e. I don't get to choose where the files are hosted) doesn't mean that the nodes operating on that network can't be designed to honor a deletion request. For example, Tardigrade (https://tardigrade.io) is an decentralized network that provides an S3-compatible storage layer and also provides a removal command for the client. (https://documentation.tardigrade.io/api-reference/uplink-cli...)
ahnick··on Investor revolt and legal dispute delay Filecoin plans
I think you might not be understanding what I mean. I'd like to be able to use Filecoin as a backend storage that will only serve up data to people in a particular group.

Take the example of a traditional website or web application like Facebook. When I post content I can select who will be able to access that content and there is no way for anyone NOT in the groups I select to pull down that data even in an encrypted form.

If Filecoin operated this way, then there would be no way for anyone to archive the data, because they could not access it in the first place.

ahnick··on Investor revolt and legal dispute delay Filecoin plans
What I don't understand about Filecoin is that they advertise it is for "Private data" too, but there are no access control mechanisms and no ability to delete data from the network. (You can "unpin" it, but there's no mechanism in the clients to compel nodes to actively remove content afaik) If I put private data on the Filecoin network, I would like to be able to largely prevent most people from even pulling down the encrypted files. What happens when the encryption guarding those files is found to contain a flaw and gets compromised? If someone has an old copy of the encrypted files, then that data can now be unencrypted. These issues seem to go largely ignored by Filecoin as best as I can tell.
ahnick··on Investor revolt and legal dispute delay Filecoin plans
It is unsurprising given that the raison d'etre for Filecoin was never the demand for decentralized storage, or backup, or anything else. It was started with the sole purpose of raising money, because of the overwhelming demand for hype-driven investment opportunities that tick the typical checkboxes. And that was delivered perfectly.

I don't understand the basis for this accusation. I thought the reason for Filecoin was essentially to provide an incentive layer to run IPFS nodes. The problem with IPFS was that it largely drew from volunteer efforts and therefore if you want to actually want IPFS to be a high-performing and low cost service you need to provide a market incentive structure to run a node.

ahnick··on Show HN: Archivy – Self-hosted knowledge base embedded into your filesystem
How do you like the reMarkable tablet? What does your workflow with it look like?
ahnick··on Umami: Self-hosted open-source alternative to Google Analytics
+1 for Plausible.

I've been using it for our name generator product Mashword (https://mashword.com) and it was really straightforward to implement. It's reasonably priced, has a clean interface and graphs, is privacy protecting and supports using your own domain for pulling in the js include.

ahnick··on Apple, Epic, and the App Store
Play is also an anti-competitive monopoly as well. Google was a bit smarter about avoiding potential anti-trust though, because they at least give the illusion of choice with 3rd party app stores.

There basically is not a competitive market for either app marketplace right now, so an accurate price can't be determined. Allow 3rd party marketplaces to be installed as easily as any other app and I'm certain prices will come down from where they are today.

ahnick··on Apple, Epic, and the App Store
Prices are set by what the market will bear

That's the entire issue right there. When Apple is the market, then they can make it whatever they want. If Apple has to legitimately compete with other "App Stores", then the market will find a lower price than 30%.

ahnick··on Remote work is reshaping San Francisco, as tech workers flee and rents fall
Taxes are less complicated too.
ahnick··on Show HN: Tweek – Fast to-do weekly calendar app
This is why I enjoy using Google Tasks so much. Typically I don't have or want to set a date for many items, but occasionally I do and occasionally I want them to even be recurring. For these moments they show up right alongside my other calendar entries. If you have a Gmail account and a Google Calendar and are not using Google Tasks, then you should really try it out.
← PreviousPage 9 of 18Next →