HNHacker News
TopNewBestAskShowJobs

scott00

1,241 karma · joined November 30, 2012

Run the code below in python to find my email address

import base64 base64.b64decode('c3RlcGhlbnMuanNAZ21haWwuY29t')

submissionscomments
scott00··on The Property Industry Is Falling Out of Love with WeWork
The way the brand and scale turns into a moat and/or pricing power is through lower customer acquisition costs than less notable competitors. If everybody who wants shared office space googles WeWork to find it, it's going to be an uphill battle for other operators to get noticed.
scott00··on Blue Apron becomes a penny stock, trading under $1 for the first time
Meez Meals works on an opt-in basis. Their food's pretty good I think. Only available in the midwest at the moment.
scott00··on Cook My Meat: heat diffusion through meat over time
Sous vide with no sear maximizes that: 24 hours at 57C on both sides. It yields 100% medium rare.
scott00··on California Based P2P Trader Convicted of Illegal Money Transmission
To do this type of business legally, you have to comply with both federal laws and state laws. The federal laws basically say you have to register with FinCEN and comply with anti-money laundering laws, which mostly means you have a duty to know who your customers are and why they're transacting with you, to refuse to do business with people who are obviously laundering money, and to report suspicious activity to FinCEN. It's reasonably doable to comply with federal law as an small operator. However, this person didn't just fail to register, she also knowingly facilitated money laundering, which is illegal even if you're registered.

What exactly you have to do to comply with state law varies dramatically. In some states buying and selling bitcoin is basically unregulated, and in others there are onerous registration/licensing and financial requirements that are basically impossible to fulfill as an individual. Off the top of my head I'm not sure where California falls on the spectrum.

scott00··on He won Powerball’s $314M jackpot. It ruined his life
> Getting a surprise $100M is different from managing your portfolio.

It's really not that different. All of the advice out there concerning how to prudently manage a portfolio of $100K applies pretty well to $100M. Going up to the $100M opens up some additional options (private equity, hedge funds, venture capital, real estate) and involves some additional taxes (estate/gift taxes), but you could do a lot worse with your $100M than sticking 60% in low cost equity index funds and 40% in low cost bond index funds and ignoring alternatives and tax optimization.

> Aggressive means easy to lose it all due to ignorance or fraud.

More aggressive than ultra-conservative does not mean aggressive in an absolute sense.

scott00··on He won Powerball’s $314M jackpot. It ruined his life
Taking the lump sum is not at all indicative of a lack of good investment advice. Going with the installment payments is equivalent to taking the lump sum and then investing it all in US treasury bonds. That's an extraordinarily conservative investment strategy and most investment advisors would recommend something more aggressive.
scott00··on Helm: Personal Email Server
What provider? That behavior deserves a name-and-shame.

As far as what happens with a full sync: it's not really doable outside of the LAN for several reasons. One is I have a data cap from Comcast of 1 TB/month. Another is the upload speed is only 10 Mbps. That's actually one of the reasons I went to self hosting.

scott00··on Helm: Personal Email Server
You are correct. However I think in practice you can get away with it if you keep bandwidth low. I've been running a OwnCloud/NextCloud server from my residential Comcast account for years with no issues.
scott00··on Kubernetes Is a Surprisingly Affordable Platform for Personal Projects
Bare metal in this context typically means your servers are actual physical servers, not virtual machines.
scott00··on Verizon throttled fire department’s “unlimited” data during wildfire
They frequently pair the word "Unlimited" with a bandwidth related word. For instance: "Unlimited 4G LTE Data"[0].

[0] https://www.verizonwireless.com/plans/unlimited/

scott00··on Solo – Open-source FIDO2 security key
What you're describing is a different attack vector than phishing. I would describe it as malware. The classic phishing attack is to convince a target to visit a web page with a subtly different URL than the real thing, where they enter their credentials, which could include most second factors (OTP codes or push notifications). With U2F however, the browser will pass the URL of the requesting site to the U2F token, and that will be signed by the U2F token. The resulting signature cannot be used to login to the real service. You have to own the user's device or browser in order to do a phishing attack with U2F. And if you own the device or browser, it's probably easier to steal the short lived session auth credentials than it is to man in the middle U2F. You are correct, however, that U2F is not resistant to malware. Unfortunately, nothing really is, and it's not an easy problem to solve.
scott00··on Reliable, Secure and Universal Backup for U2F Token
Wouldn't that also invalidate your backup token after first use?
scott00··on Launch HN: The Buttermilk Company (YC S18) – Homemade Indian Food in 5 Minutes
Reactions from a non-Indian (who loves Indian food):

* I really had to dig to find descriptions of the dishes.

* The emphasis on pre-built combo packs turned me off somewhat. You've only got ~10 dishes, I'd rather explicitly pick the 3 or 4 dishes that intrigued me than sift through all the combo packs to find the one that most closely matches what I want.

scott00··on Ending support for Dropbox syncing to drives with certain uncommon file systems
Dropbox may come through for you in the end. They've got a feature called "Smart Sync" that is a network file system implemented as a kernel driver. See https://www.dropbox.com/smartsync and https://www.dropbox.com/help/desktop-web/filesystem-integrat.... Not sure if it's doing block level diff or not though.
scott00··on WireGuard is submitted for Linux kernel inclusion
There are three related decisions in how software can be constructed in relation to linux, and it sounds like you might be confusing them a bit. They are: user space vs kernel space, base kernel vs kernel module, in tree vs out of tree.

User space vs kernel space is the biggest decision and has a huge impact on nearly every aspect of the software. Wireguard has both user space and kernel space implementations. I'll link you to the Wireguard author's explanation as to why he chose to do a kernel space implementation: https://news.ycombinator.com/item?id=11994544

Base kernel vs kernel module is usually an easy one: almost everything that CAN go in a kernel module SHOULD go in a kernel module. Since modules can be loaded only when needed, it avoids using everyone's computing resources on features that not everyone might want. Wireguard is a kernel module.

In tree vs out of tree means whether you commit your code into the main linux source tree, or whether you distribute it outside of the linux project. Linux software development practices make it pretty annoying to distribute kernel software out of tree, even if it's a module. Basically, linux doesn't maintain stable APIs or ABIs in kernel space, so if you distribute in binary form you'll need to distribute different versions for every kernel version, and if you distribute in source form, your users will need to recompile whenever they update their kernel, which is pretty often if they're keeping up with security updates. DKMS helps with the recompilation process, but it's still pretty annoying for users. This announcement is about the proposed transition of the wireguard kernel module from out of tree to in tree.

scott00··on New York Could Become First Major U.S. City to Cap Uber and Similar Vehicles
Your source does not support your claim.
scott00··on Google Unveils Titan Security Key, a Yubico-Like Phishing Resistant 2FA Device
Don't know anything about the Google Titan keys, but they are most likely Feitian hardware with custom firmware, and you can buy unlocked versions of Feitian security keys by contacting them. On unlocked keys you can install your own javacard applets.
scott00··on WeWork Will No Longer Let Employees Expense Any Kind of Meat
As a business decision this seems incredibly odd. Being vegetarian or supporting vegetarianism does not seem like it would have disproportionate representation among either their target clientele or their target employees. As such it seems to me it would have minor negative effect on their perception by clients, and moderately negative impact on their perception by employees. I don't see why they would risk that for a cause entirely unconnected to their business, for which there are many less controversial ways to make an impact (energy efficiency in their buildings, commitment to purchase carbon free energy, etc).
scott00··on Ask HN: How to survive as a homeless engineer?
If you haven't talked to your landlord, talk to your landlord. If they sent you a summons after three days, I don't have high hopes, but it's worth a shot. Explain your situation and see if there's anything they can do for you. Maybe they'll let you stay until they can rent the place.

Are you someplace you can drive for Uber or Lyft? It's not great money, but you can probably earn enough in the month you have left to buy a cheap laptop and pay for food, a cell phone, and a gym membership after you get evicted, which should improve your ability to keep applying for jobs.

scott00··on Where Boys Outperform Girls in Math: Rich, White and Suburban Districts
The fact that girls outperform boys academically is relatively well known. The article is about the (lesser known) fact that the math gender gap is correlated to the socio-economic status of the district, while the English gender gap is not. Which isn't to say the overall gender gap isn't important or interesting, it's just not what the article's about.
scott00··on AMA with Substack and Matt Taibbi about a new business model for journalism
I'm guessing substack is a high volume email sender, do you guys use an API or in-house tech for that? Any interesting stories about keeping your mail out of spam filters/your IPs off blacklists/Nigerian princes from starting newsletters?
scott00··on AMA with Substack and Matt Taibbi about a new business model for journalism
What's the best way to discover substack content? substack.com doesn't have search or browse functionality as far as I can tell.
scott00··on Announcing .NET Core 2.1
One benefit caught my eye, but was not explained:

"Much easier to manage platform dependencies in project files and with self-contained application publishing."

Anybody know anything about this? I frequently deal with applications that have platform specific components, and it's a real pain. Sometimes the platform specific code is a platform-specific native dll that gets called from the same P/Invoke wrapper, sometimes it's two different managed implementations of the same interface, sometimes it's both. It'd be great if this sort of thing got easier to do.

scott00··on IPv6 excuse bingo
The right description for most networks in finance isn't really private, but rather semi-public. NYSE's matching engines aren't routable over the public internet, but they'll give access to anybody willing to pay the price. Same goes for any of the hundreds of other exchanges out there. And lots of broker/dealers need to talk to multiple different exchanges, as well as to each other. It would be nice to do all of that communication using one globally unique IP address, rather than with a rats nest of NAT for each gateway.
scott00··on Completely Silent Computer
I thought LTE worked on a timeslice schedule as well. I remember hearing that was one of the problems with carrier plans to start running LTE on unlicensed spectrum, because it doesn't play nice with listen-before-talk wifi.
scott00··on E-waste recycler loses appeal on computer restore disks, must serve prison term
I think this is the price Microsoft offers to its largest partners. The defendant wasn't selling direct to consumers, he was selling to used computer dealers, so I think the OEM comparison is decent.

To be clear, I think the overall result here is an despicable perversion of justice, and I think US copyright law desperately needs to be reformed to include a more expansive version of fair use. I'm just explaining the way it works under current law.

scott00··on E-waste recycler loses appeal on computer restore disks, must serve prison term
There's two stages of the legal process that are important to understand here: what was the illegal act, and what is the sentence for that illegal act.

The illegal act was a copyright violation: he made and distributed copies of copyrighted material without the consent of the copyright owner. I would be inclined to argue that his use was fair use, but based on what I know about copyright law, that argument is probably a stretch, and he didn't raise it in his defense. He plead guilty to the charges.

As to sentencing, the sentencing guidelines make the value of the illegally distributed goods the primary factor in determining the sentence. There is no objectively correct answer to this question, because no one sells license-less restore disks for any price. The three closest comparisons are

(1) The free restore disk image download offered by Microsoft. This is the same intellectual property, but doesn't come with a physical disk.

(2) OEM Windows disks that Microsoft sells for $25. These come with a license (unlike the defendant's disks) but do come with a physical disk.

(3) The original restore disks that come with a new computer. These match perfectly the intellectual property and the physical form, but they only come bundled as a small part of an expensive package, so it's hard to get a fair price from looking at this.

The defendant argued the free download was the better comparison, the prosecution argued the OEM disks were better. The judge sided with the prosecution, and assigned a value of $25/disk, which resulted in a stiff sentence.

scott00··on Rich Formula: Quant Trading (2015)
Their category "alpha capture" probably incorporates this sort of thing. I think the article gave the example of proprietary survey data being in that category. I think that's probably what they call anything that doesn't come from publicly available data.
scott00··on The dots do matter: how to scam a Gmail user
Netflix offers SMS password resets.
scott00··on The dots do matter: how to scam a Gmail user
They do. The author reset the password to gain access.
← PreviousPage 7 of 14Next →