mhluongo

Here are a couple examples of physical access leading to key extraction. You're welcome to be pedantic (those are side channel attacks, they don't defeat the boundary!) but one way or another, physical access wins.

https://www.cl.cam.ac.uk/~rnc1/descrack/ https://ninjalab.io/eucleak/

Again and again, we've seen that HSMs aren't secure against physical access of the device.

What unnecessary snark. Is a little civility too much to ask for?

It appears to have gotten better! Sharing a project soon.

CRDTs let you avoid leader election / strict consensus. The canonical example is a google doc with multiple editors.

Protected memory can be used to fix that. Working on a related project that I'm planning to share soon.

Direct counterpoint: I've been a Dell XPS 13 stan for years (owned 3), and my other laptop today is a System 76. I've run IT for labs at a major university (Georgia Tech), across Windows, RHEL, and MacOS. I've been a desktop Linux user since 2006, both personally and professionally.

Across those, I've repaired plenty of laptops. I mentioned the RAM above because it's recent, and because it's easy. And I don't just mean physically easy - I mean I can find the part with a quick search, and it's just like any other ecommerce thing. That's a big shift from figuring out how to upgrade most laptops, where your top search result is a forum post or pushing you to talk to a tech.

Not breathless, but it is a breath of fresh air.

Happy Framework 13 user here to say this.

I recently realized the 32Gb I had originally spec'd isn't enough for work lately. Easy fix, I just ordered more RAM.

Pretty straightforward value prop here. If that's not why you want, buy a different device.

Funny, I was under the impression that Apple's stuff is closed source, so no one outside their employ even could fix a similar issue?

It comes from finance - the rest of us just use "M" for million. I believe it's from Roman numerals (MM = thousand * thousand).

There's boilerplate in Rails too. We move the goal posts for what we define as boilerplate as we better explore and solve a class of problems.

Have you considered that instead, whatever LLM has the most examples of are what it's best at? Perhaps there's more well-structures Rails code in training than Go?

Most stablecoin volume isn't cleared in the Bitcoin network.

We've incubated a private, local-first menstrual tracking app!

My partner is the founder. She's a PMDD sufferer who needed a proper, science-first tracker to treat her hormonal symptoms. After Roe, she didn't feel like she had any options but to build her own app — Embody.

We're getting ready for a security audit and to take it open source. Would love any feedback!

https://embody.space

Indeed, TF2 hats and gift cards appear to do something well that this system doesn't :)

> Cryptocurrencies don't stand a chance.

Does it work internationally? Does it send USD as well, or only the real?

If it solves th same problems, why is Brazil considering banning self-custodial USD stablecoins? And why has there been an ongoing discussion about launching mBRL, and stablecoin pegged to the real?

https://www.pymnts.com/cryptocurrency/2024/brazil-considers-...

Because code had never been sanctioned before, and it's a clear freedom of speech issue?

Hm, is that perhaps how you feel about all billionaires? Can you name one you think is "good"?

I've made some money in the space, have kids and a family, and care deeply about special needs and access (partner is a former SpEd teacher, I've volunteered and donate to related causes), and have invested heavily in reproductive rights. Does that make me "good"?

In my experience, and by my values, there are plenty of good and neutral people in the space. They aren't often the ones that ham it up for the media, but it should be obvious why that is.

This is so incredibly ill-informed it's hard to respond to. Thanksfully, it's incumbent on the person making the extraordinary claim...

> currency exclusively used for doing crimes

... to provide extraordinary evidence.

On my end, my home is financed by a trust-minimized loan against my BTC, using a stablecoin. And I greatly prefer stablecoins to wires for paying international vendors.

You're right, many crypto exchanges operating on the right side of the law will freeze these funds.

For those interested in this, CT (crypto twitter) makes tracking North Korea's stolen winnings a bit of a sport.

samczsun, an excellent security auditor who's working at Paradigm these days, broke down some of the org in a post the other day.

https://x.com/samczsun/status/1906754853063565720?t=N4aqa6Vy...

Taylor Monahan at MetaMask also makes a habit of tracing funds and shares some pretty interesting finds around NK's laundering efforts.

There are certainly funds with a thesis that you might consider good for the world. Eg social impact, femtech, women and BIPOC-founded co's, etc.

LPs are often large allocators like pension funds who are making decisions for other people's money. I do think there's room here, but you have to ask yourself who the LP's are.

> The software, hardware, and battery life just aren’t there.

Writing this from a Framework 13. I've been using Linux laptops for the past 15 years, and this is the first time a Linux-friendly machine has checked all my boxes (including excellent battery life).

What you're describing here is dualism and Descartes, in response to a post that references Buddhist scholars, a philosophy famously focused on monism.

"Cognitive science" vs "neuroscience" as a concept is just how we decided to slice the problem up for academia.

Next time, maybe cut the first paragraph ;)

David Sacks*

Tell me you've never worked in fintech without telling me you've never worked in fintech :)

Decimals aren't enough. You have frequent currency conversions and all sorts of other chores. Using a fixed-decimal datatype doesn't solve those problems by itself, it's just a tactic.

North Korea is known for doing this in the crypto space to pull off heists.

Uh, shouldn't it raise the question about every developer you work with, period?

Even if you just think Mossad does this (not the case), if they want to mess with you, it's pretty poor op/sec to declare their nationality first.

Cool thing about the space — you can likely check the source yourself + find the audit reports!

For many autistic people, they prefer it this way. Eg avoiding person-first language and being out on social media and also part of this "romanticization", right?

The "smart" part is no longer interrupting your workflow with an addicting dopamine trap. Fewer interruptions → more deep work → more progress with less total time spent.

Similar idea to work "theming". It lowers context switches and let's you accomplish more.