grapehut

Even if done correctly, they are just verifying that you bothered to get a photoshopped passport with the targets name in it.

> I get the feeling you only write articles like that if you have more people wanting to invest than you have capacity for.

I get the opposite feeling. I suspect such virtue signalling is an attempt to attract investors who care about ethics, and perhaps more importantly accept your investment offers.

That is ignoring the enormous externalized costs. I have known business to have spent hundreds of thousands of dollars in professional services when being investigated that have done absolutely nothing wrong.

Can you parse the owl grammar with owl?

I travel a lot and have stayed at 50+ airbnb places all around the world -- but the biggest problem is that the reviews are always so artificial you honestly have zero idea of what you're getting into.

Worst of all is the amenities, which are more often incorrect than not. I generally filter for places with washer + drier, as I'd rather not be looking for laundromats. Probably over 80% of listings that say they have a washer and drier do not. Most of the time the "drier" is a drying rack or a hair drier. Other times the host explains that I can visit his house or a laundromat, so that counts. Or the last place there was a shared washing machine between 30+ places.

And because you can't leave anonymous tips, I just add the problem by leaving positive reviews even when I'm unhappy with the place. Currently my airbnb profile shows me an an exceptional guest (I have nothing but positive reviews for me, and have given nothing but positive reviews) so have never had a problem getting any place I want. I don't really want to pollute my profile with candid feedback.

When I'm staying somewhere for 1 or 2 nights, I tend to just get a hotel. There's too much friction and problems in airbnb for it to be worth it.

Looks like the winner gets precisely 0:

    // The winner is responsible for withdrawing the funds
    // after the button expires
    function Win() public {
        require(msg.sender == winner);
        require(now > deadline);
        reward = 0;
        winner.transfer(reward);
    }

It's irrelevant[1] what the receiver is using (for fees), segwit just makes it cheaper when sending a transaction. This is because it applies a discount to the signature data.

[1] There's a few byte different depending on the output type (p2sh/p2wpkh/p2pkh) but it's pretty much negligible.

I'm not quite sure what you're getting at. It sounds like you're describing a known-plaintext attack, which modern ciphers are not vulnerable to. And what you are describing makes it seem like full disk encryption would be totally useless, but we know that's not the case.

> Go doesn't have strict single ownership, like Rust, so you can send something to another goroutine without the sender losing access. This creates a potential race condition.

Rust has very thorough ownership semantics baked into the language to avoid such race conditions. But anyway, the idea of goroutines is that they should primarily be used to transfer values, which results in both goroutine's having their own separate copy of the data, and thus no races.

That's odd indeed. I have a different 2FA seed for my retail and AWS account, but I've never tried using the wrong one but it's conceivably they allow you to use either

Fantastic, and nice to see them bringing down the Asian instance prices too.

One thing I really wish they did however, is adopt Google's "Continuous Usage" billing. There's just too much mental overhead, uncertainty and risk with buying and reselling reserved instances. I end up losing hundreds of dollars a year in potential savings on AWS because I have a bad habbit of shying away from fully reserving my usage.

And then when I do, I always seem to get bitten. Case in point: a few weeks ago I reserved 1 year of heavy usage for a m4.xlarge. Looks like I could've saved 10% had I waited a few weeks.

That said, I do prefer the AWS ecosystem a lot more than Googles, but billing is something Google does _much_ better and that is something that is something that is really tempting me to switch.

They're not arguing against free parking, just against regulations that require certain amounts of parking to be built

Which brings us to ocdtrekkie's point. FastMail a great niche product, but as paid product and one that doesn't sell itself on the privacy improvements over something like gmail, Google has absolutely nothing to worry about.

ProtonMail on the other hand, while not at the moment a threat to gmail does do a lot of brand damage to it, as it highlights the privacy problems people have with it.

Ok sure, let's play "guess the name of the competitor that tptacek is referring to" because he wants to be as vague as possible so as to not be rebutted

That wasn't what I was referring to, and although I hold very little interest in bitcoin, I do know enough that "[...] you can't count it without access to the keys that let you spend it." is fundamentally wrong. However, I'm glad you have since refined your stance to something more tenable, but anyway, let's not get too off topic.

As I know absolutely nothing about the shipping industry or Hanjin, what is your background or interest in it?

FWIW the person you're replying to represents everything that is bad about HN. If you read his post history you'd be lead to believe he's an industry insider in: Shipping, Irrigation, Crypto Currencies, Genetics, Nano Technology, Manufacturing, Microkernels and a lot more if you keep going back.

There was a time I believed his posts, until I read one of his mini-essays on a topic I happened to know about (cryptography) and it was painful obvious that it was someone who spent 10 minutes googling the topic and took it upon themselves to give a dangerously incorrect "authoritative" lay of the land. Since then I've tagged those people as "faux experts". I don't blame him, I did the same thing for high-school essays, albeit with a more jilted writing style. Just be careful who and what you believe

When ever I read a post like this, I can't help but reflexively think that their interview process must be a pretty good filter. Going through your post history, I see only two years ago, you were asking:

> my app will need account creation, a map, REST requests, and notifications. what's the fastest way to get from 0 to mvp? do I need to build a native app for every platform? can I get away with a web app?

and a year later was Lead Engineer at a couple of startups

I think mine got scratched with some sand on the keyboard and closing the lid

A state sponsored attacker can reasonably easy generate a valid ssl certificate to man-in-the-middle any website, and replace it with what ever they please. However, they wouldn't be able to forge a signature if checked against the right keys

Both are great for hobby projects, and offer pretty great bang for buck, but I'd never run consider running anything serious on either, let a lone a business.

Some examples:

== Not pay bills (yeah, yeah, I should check my email more often when a credit card expires) ===

* Digital Ocean: All is working, then one day they flip the switch and shut down your servers and delete the backups (that you paid for)

* AWS: Has a super reasonable policy, first by shutting down the servers so you know

* Linode: Not sure

== Get DDoSd ==

* Digital Ocean: 24 hour blackhole, zero support or human contact in this time

* AWS: Servers kept alive, got some engineering assistance

* Linode: 24 (?) hour blackhole, a bit of really bad support

== Physical Server Upgrades ==

* Digital Ocean: Not bad

* AWS: Amazing. Zero downtime, I have 4 year uptime on many servers

* Linode: Botched my servers, more times than I can count. Even had support reboot the WRONG servers of mine when I was talking with them

== Bandwidth ===

* Digital Ocean: shitty and cheap

* AWS: Amazing and stupidly expensive

* Linode: Decent and cheap

I could go on. If it was a hobby project, I'd probably just use Digital Ocean because of their cheap prices and sleek control panel. (Or actually I'd use vultr)

But for anything serious where I have a budget for servers, you'd be crazy to use anything about AWS or Google Cloud

You might want to get the "Hacker News Enhancement Suite" extension. It's incredibly useful for cases like this, for instance I have tagged Animats (the creator of this sub thread) as "faux expert" after reading some of his crypto posts (a topic I know something about) that were written as if he was an expert, but completely and dangerously wrong.

Not knowing anything about chemistry, I would've been inclined to believe his post if it wasn't for the Hacker News extension suite, and I can read from someone who actually knows the field

Umm? Maybe you misread the title: "Off-Chain Transactions" which according to the article: "An off-chain transaction is the movement of value outside of the block chain."

So yeah, an exchange like Mt Gox can not prove they own the USD they should own, but can prove they own the bitcoin they claim to own. How is this a problem or limitation of bitcoin again?

> Another big problem with Bitcoin at scale is that you can't count it without access to the keys that let you spend it.

That's not remotely true, I'm not sure what gave you that idea. Bitcoin at its core is based around asymmetric encryption, which allows only 1 party to send money but everyone to verify it. By sharing a public key (a bitcoin address) you can see the funds, but can not spend it. In fact, right from the start bitcoin client even included the ability to sign and verify messages from addresses to prove ownership. Right now I could give you the bip44 (public key) of my wallet and you could see every transaction I have received, sent (and all future ones, from that wallet). But you'll have no ability to spend my money. Although I'm not going to do that for the same reason most people won't: privacy.

Anyway, there's been proof of solvency schemes for a long times, it's just most exchanges and services (with a few notable exceptions) haven't seen a business case in implementing it.

Totally can't be law enforcement, they forked the repo "FuckNSA".

That's hardly fair. It's one thing to make an anonymous accusation like: "He touched me inappropriately", but troisx follows more of a "I think <these facts> are pretty awful", and does not rely on him or his experience to any extent.

I really don't think Dan acted out of a conflict-of-interest, and in general I agree with the substance of his reply -- but a public chastising was out of place here.

If you're big enough that the 30% makes a difference, you're not going to want to risk having your app banned by flagrantly violating the ToS. And even if you ignore that, the extra friction you're going to cause users is going to dwarf that 30% fee.

I've literally spent hundreds of dollars on apps, and generally don't mind forking out $3 or $4 for something I think might be useful. However the probability of me giving some app that's violating the app-store policies my credit-card details is pretty close to zero. I might consider paypal (which I don't even have the details of on my phone), but if there's any equivalent app, I sure as hell will just buy it through the app store.

Interestingly, the software is not very highly regarded:

https://itunes.apple.com/us/app/air-display-2/id705578162?mt...

https://play.google.com/store/apps/details?id=com.avatron.ai...

I wonder if apple decided to make a special case, and do a blanket refund?

Yikes, I can't think of a worse response from someone on the "healthy, "positive" and "safe space" Imzy team.

sounds about right

My biggest issue with npm is the lack of verifiable build. Even if I read it on github, I have absolutely no idea if that's exactly what the person uploaded to npm. I very well could have malicious code and not know it.