HNHacker News
TopNewBestAskShowJobs

rowls66

297 karma · joined October 16, 2020

submissionscomments
rowls66··on Inflation rose 9.1% in June, even more than expected
If it were a single job, it would be easy, but: The Federal Reserve System has been given a dual mandate—pursuing the economic goals of maximum employment and price stability.
rowls66··on Volt, Australia's first online-only bank, shuts down due to fund-raising woes
Bank's make money on loans. In order to make loans, a bank needs money to lend which it needs to borrow. A bank's customer deposits are often an inexpensive source of borrowing for the bank. It sounds like Volt was trying to grow in the mortgage loan business, but with a limited customer base, needed to borrow wholesale money. When interest rates rise, rates in the wholesale market tend to rise faster than the rate for customer deposits. As a result Volt was unable to compete for loan origination.
rowls66··on Why Rust is a great choice for startups
Maybe you should retitle your article "Why Rust is one of many great choices for startups"
rowls66··on Major crypto lender Celsius freezes withdrawals as markets tumble
BTC price still over 24,000. Far from the bottom.
rowls66··on Tether Required Recapitalization in May 2022
I assume that the USDT holding of the big exchanges are on behalf of their customers. I those customer begin asking to convert their USDT to USD, that could be a massive run.
rowls66··on Learning Rust – Day 4 – Understanding Modules
Java does not require a relation between filesystem folders and modules (aka packages). Some IDE's enforce such a relationship which is unfortunate.
rowls66··on UML Diagrams Designer via Code
Looks like a web UI for PlantUML. Does anyone see anything more than that?

https://plantuml.com/

rowls66··on JavaScript Containers
> Scripting languages allow business logic to be written faster and cheaper. The scripting languages (Python, Ruby, Lua, Shell, Perl, Smalltalk, JavaScript) are pretty similar.

That is a pretty bold statement to that scripting languages allow business logic to be written faster and cheaper. I think that it depends completely on the size and complexity of your business logic, and on whether you factor in the cost of maintaining that software over time.

rowls66··on I'm a security engineer and I still almost got scammed
I don't know for sure, but I suspect, that the reason that ApplePay is being targeted is because other means of credit card fraud at point of sale have become much more difficult with chip cards. ApplePay itself is also quite secure, but the process of enrolling a card in ApplePay is probably the weakest link. The card chip does not provide any added security in the process. I think that most banks use PAN and card security code combined with one time password by email or mobile to verify the cardholder. If a fraudster can crack this nut, and get a card fraudulently enrolled into ApplePay on a phone, they can use the card at point of sale, and point of sale is the ideal fraud target since the fraudster can remain mostly anonymous, and walk out of the shop with the stollen goods.
rowls66··on Utilities Want to Convert Coal Plants to Nuclear; Skeptics Abound
I don't believe that is the case. I have been reading the WSJ since the 1980's, before it was acquired by Murdoch, and the Op-Ed section back then was already way to the right of most mainstream media, and the WSJ news gathering organization. I don't think that Murdoch has improved the quality of the WSJ, but he has not changed Op-Ed editing.
rowls66··on Hexagonal Architecture and Domain Driven Design
I disagree partially. I do agree that modeling your domain in programming language objects and then transforming those objects into data stored relational tables (OR Mapping) is not a great design. However, DDD can also be done where the relational database is the model of the domain, and the application is merely a set of functions that execute SQL and transform the results. So based on the application two approaches for persistence are possible:

1) Model the domain in the programming language, and store data as opaque blobs. 2) Model the domain in relational tables, and use the application logic to extract and transform the data.

rowls66··on Microservices: Why Are We Doing This?
I don't get this idea that modularity and composition can only be achieved with separate processes communicating over a network. There are features within modern programming languages for achieving the same.
rowls66··on Moving money internationally
Thats right. USD never leave US banks, the dollars just change owners. Same for any other currency.
rowls66··on The decline and fall of Java on the desktop
My understanding is that most of security defects in the JRE were related to the browser integration. The core Java sandbox was secure.
rowls66··on The decline and fall of Java on the desktop
As I see it, Java succeeded where it was needed, and in the mid-late 90's, that was on the server. When the web emerged, there was no well established development environment for server based applications. The tools for doing much beyond static web pages were pretty limited. Java and a whole bunch of Java based tools emerged to fill this need, and satisfy the needs of corporate customer for intranet solutions.

On the desktop, Microsoft and C++ were already well established. In the browser, Sun did not offer a browser of their own, so Java depended on support from Netscape, Microsoft and eventually Google. Those companies all had their own technologies for browser development tools, and never tried very hard to support Java. Also Java was a little too much for many 90's era PC's connecting to the internet over dial-up connections, so it was slow.

rowls66··on Tell HN: SWIFT is not a payments transfer system
I have worked in this business for 20 years at some of the largest banks, so know something about this. In short, yes, at the big banks, most wire processing is automated. Straight through processing rates are > 90%.

An explanation of what happens is at initiating and receiving banks is beyond the scope of anything I want to type.

At banks with high volumes, more processing is automated (see above) for low volume banks, not so much. Payments may fall out of automated processing for several reasons like poor instructions quality (unknown account number), complex correspondent/routing requirements, sanctions screening (OFAC in the US). For high volume banks, even with high STP rates, this can mean 1,000's of payments per day.

As for why wires cost so much, the answer depends on who is paying. The most frequent users of wires often pay very little for them because bank's provide wire services as a package in exchange for holding balances with the bank. Only retail customers and small businesses pay full price ($25-40) for wire payments, and bank's charge this much because they can. Retail is such a small part of the wire payments business that if you take you business elsewhere the bank does not really care.

One last note on pricing. Most wire originate from the same set of bank customers on a regular basis, so their processing is highly automated and the bank's risk and fraud systems are trained to expect these payments. Occasional payments from retail customers probably do require manual processing more often, so a higher price is probably warranted to some extent.

rowls66··on Tell HN: SWIFT is not a payments transfer system
SWIFT transitioned from X.25 to IP ~ 10 years ago, so they have made changes to keep up with technology. The SWIFT network is now a private IP network. Given the value of transactions that move across the SWIFT network daily, I think that many participants feel more comfortable with the added security that comes with a private network.
rowls66··on Tell HN: SWIFT is not a payments transfer system
I believe that SWIFT is now a private IP based network. That means it runs on dedicated comm channels, but uses the internet's IP.
rowls66··on Why the West is reluctant to deny Russian banks access to SWIFT
I disagree. US law and regulations are not tied to any particular messaging system. US banks are required to know their customers, and obey OFAC sanctions lists no matter how they send/receive payment instructions. If Russian banks are sanctioned, then US banks are not allowed to send dollars to or from them no matter how they choose to communicate.

The part of you post that I was primarily objecting to was that bit about this "UBS won't get $50 million added to their balance sheet because other banks don't recognize the Sberbank -> UBS transfer since it's not on SWIFT." That makes no sense. SWIFT is just messages sent between banks, other banks don't know what messages are sent between two other banks.

rowls66··on A quick breakdown of what SWIFT is and why it matters
> In exchange for this regulation, deposits held at Chase or other member banks are treated as equivalent to Federal reserve dollars. That's because if for some reason, Chase is unable to pay back its depositors when they demand their money back, the Federal Reserve will "create money" to meet the obligations. This is essentially why bank runs no longer exist in modern banking.

This is not exactly true. Chase, like many other US banks, is regulated by the Fed, and deposits at Chase are insured by the FDIC (Federal Deposit Insurance Corporation). If Chase becomes insolvent, the FDIC will take over, pay depositors up to the FDIC insured maximum, and liquidate any Chase assets. The Fed is not required to do anything in such a situation.

The Fed may choose to conjure up some new money and loan that new money to Chase, and as Chase is a systemically important bank, the Fed might well do that before the FDIC steps in, but they are not required to.

rowls66··on Why the West is reluctant to deny Russian banks access to SWIFT
Absolutely wrong. SWIFT is just a financial messaging system (secure email for banks). Transfers of USD anywhere in the world ultimately require messages to/from US banks. US regulations require that those messages disclose the ultimate payer and payee of every transfer, and US banks must follow US regulations and block transfers that violate US sanctions. US banks are free to use whatever communications channels they choose, but SWIFT is used for 99% of international transfers today. SWIFT has nothing to do with balance sheets and banks recognizing fund transfers.
rowls66··on Rethinking Levels, Promotions and Salaries
The OP did not say that they were basing salary on years of experience, but that they were using "years of relevant experience". That is a big difference, and relevant experience is a pretty arbitrary measure.
rowls66··on Skip: A programming language to skip the things you have already computed
Why is seeing the syntax of a programming language so interesting? I think that syntax is one of the least interesting aspects of a programming language.
rowls66··on Retrospective and technical details on the recent Firefox outage
I agree that the lessons learned section is pretty weak. I think that the root cause of the incident was poor code quality, and in particular, using a weekly typed data structure (String) to pass data between system modules that each interpreted that data differently.

The suggested learning was that more testing should have been done, but as a solution, more testing is a cop out. A real solution is to develop code in a language that supports a robust type system, and then using that type system effectively in development.

Not an easy solution, so in the short term, we'll have more testing, and more bugs.

rowls66··on ISO C became unusable for operating systems development
I think that the statement should be refined to say that it is not possible to develop a monolithic kernel based OS in ISO standard C. A monolithic kernel generally relies on passing pointers to memory between components with few restrictions. This can be problematic for some languages/compilers. However a microkernel OS that provides more structure around how data is shared between OS components can support development of many OS components in multiple languages. Even languages requiring significant runtimes like Java or C# could be used for many OS components like file systems, network stacks or device drivers.

Historically, it has been difficult to beat monolithic kernels for performance and efficiency, and through significant effort, monolithic kernel based OS's exist that are reliable enough to be useful. However, the monolithic kernel is not the only OS architecture.

rowls66··on Indian online merchants cannot store credit card information from 2022
What you are saying does not align with the text of the directive. It clearly says that card numbers cannot be stored for any purpose. Quoting from the directive:

With effect from January 1, 2022, no entity in the card transaction / payment chain, other than the card issuers and / or card networks, shall store the actual card data. Any such data stored previously shall be purged.

rowls66··on Indian online merchants cannot store credit card information from 2022
You should know that a small portion of the 2-3% transaction fees goes to the card networks. Most goes to the card issuing bank. Now in fairness, the banks also cover the cost of some fraud, and payout generous rewards to their best customers.
rowls66··on I Hacked Google App Engine: Anatomy of a Java Bytecode Exploit
Yes, it is pretty awesome. I am was sort of sad to hear that it is slated for deprecation and removal. After the Java focus shifted from running in the browser to running on the server, the security manager was seldom used.

There was a lot of interest in early days of Java and the internet in mobile code that could move between devices. It seems that interest in such systems has waned. I suppose this was more of a solution looking for a problem. However, I still think that there is potential there in some way.

rowls66··on Fintech Giant Fiserv Used Unclaimed Domain
I worked for Fiserv for a couple of years. Ended up there through an acquisition. I think experiences at Fiserv would vary considerably. Fiserv is the product of 600 acquisitions. Outside of sales and finance, there really is no company culture to speak of. Its basically very aggressive sales and finance teams trying to squeeze everything they can out the businesses they buy. Not a place for great engineering talent, and it shows.
rowls66··on Our journey from a Python monolith to a managed platform
> Every line of code they wrote was, whether they wanted or not, shared code—they didn’t get to choose what was smart to share, and what was best to keep isolated to a single endpoint.

I am know very little about Python, but does this mean that Python has no way to encapsulate code at a level larger than a class? Something like a package or a module. It does not seem like it should be necessary to break a system into separate services just to get encapsulation at a module of subsystem level.

← PreviousPage 4 of 5Next →