HNHacker News
TopNewBestAskShowJobs

stanleydrew

8,502 karma · joined April 22, 2009

blog: https://benton.io gmail: andrewmbenton

Co-founder and CEO at Riza, a company working on untrusted code isolation with WASM: https://riza.io / hello@riza.io

Previously COO at ngrok: https://ngrok.com.

I was the Founder and CEO of an MVNO/VoIP hybrid company called Charge (formerly known as Bolt): https://charge.co.

I worked at Twilio: https://www.twilio.com.

I wrote the original ruby library that wraps Twilio's HTTP API: https://github.com/twilio/twilio-ruby

Other projects include receive-only telephone numbers at https://oneway.tel and free HPKP report bin hosting at https://hpkp.org (now defunct).

[ my public key: https://keybase.io/andrewmbenton; my proof: https://keybase.io/andrewmbenton/sigs/m4O8mq4uxoPSm2XlB1RUT1XkH5v8KX7UR448y8T74mo ]

submissionscomments
stanleydrew··on The Most Powerful Law in Software
I don't really understand the practical value of internalizing Conway's Law. Presumably you are designing your engineering organization to be as productive and efficient as possible? If your product reflects your org structure, why does that matter?

Put bluntly, does Conway's Law give me anything actionable to consider when I'm building an engineering org?

stanleydrew··on How to Do Great Work
Thinking about boredom as a "matter of kind" is just a special case of "matter of degree." The degree is just zero or not zero.

There are lots of subjects that I have a cursory interest in, but then I'm done exploring once I've read the Wikipedia page.

stanleydrew··on Wazero: Zero dependency WebAssembly runtime written in Go
Pretty neat. Maybe I'll take a crack at replacing wasmtime with this in sqlc.
stanleydrew··on Wazero: Zero dependency WebAssembly runtime written in Go
Haven't looked at it, but I assume the use-case is opposite of your suggestion, i.e. CUE wants to offer some kind of plugin integration and embedding a WASM runtime is the safest way.
stanleydrew··on TabDB: Using browser tabs as a database like only a maniac would
In the olden days of Twilio I implemented a similarly-useless datastore on top of the Twilio webhook client's cookie jar.

It was limited to like 10kb and in order to run a query you had to make a phone call so it was incredibly expensive.

stanleydrew··on “WebAssembly runtimes will replace container-based runtimes by 2030”
At the risk of taking the bait, I'll point out that WASM doesn't just run in web browsers.
stanleydrew··on Ask HN: Refusing all cookies, still targeted by ads. How?
What do you mean exactly by "refuse all cookies?" The specific method you use will matter a lot.

If the first thing you do when you open the browser on a new machine is go immediately to Chrome's content settings and switch on "Block all cookies" then I'd be very very surprised to see successful tracking and remarketing.

If you just mean you're clicking "reject" on all of the cookie dialogs you see on various websites that's not going to do much.

stanleydrew··on Ask HN: My GPT project has become a local hit but I can't afford the bill
Grants will take a long time to lock down I suspect. Maybe fine if you can float the cost for a few months and reimburse yourself out of grant funds later, but there's a lot of uncertainty.

$50/day is pretty small relatively speaking, so just finding a local corporate sponsor and running an ad for them would probably work.

stanleydrew··on Ask HN: What are your favorite sci-fi books?
It's not exactly sci-fi but there are sci-fi elements and it's one of my favorite books so I'll just mention it anyway: Cat's Cradle by Kurt Vonnegut.
stanleydrew··on The Case for Bash (2021)
This argument isn't very compelling. Shell scripts are great at tricking you into believing you've got something 100% working when in fact you've only accounted for the happy path and maybe two or three failure cases. This is the primary reason shell scripts are so often broken. There are tons of assumptions baked in which are easily violated.

If your shell script keeps breaking, and you keep fixing it by writing more shell, then you're in an abusive relationship with your programming environment.

stanleydrew··on Add opt-in transparent telemetry to Go toolchain
I don't think they need telemetry. Go is clearly a successful language and community without it.

The whole point of the proposal is that things could be improved with some telemetry.

Now of course you could weigh the tradeoffs and say the potential for improvement doesn't outweigh the risk of misuse, but it seems clear to me that reasonable people can disagree.

stanleydrew··on Add opt-in transparent telemetry to Go toolchain
It's called "spyware" when you don't trust the collector to be acting in good faith.
stanleydrew··on Add opt-in transparent telemetry to Go toolchain
This implies some sort of malicious intent on the part of the Go maintainers, which doesn't really seem fair given the way the original proposal was written and how feedback was incorporated.
stanleydrew··on The Ugly Truth Behind “We Buy Ugly Houses”
This is a reasonable take, but I think it's also reasonable to suggest that if current system execution is too expensive then perhaps a new regulation could make it cheaper.

Of course there are perhaps unintended side effects from new regulation, but "this is already a crime, we don't need anything new" isn't prima facie a sufficient argument.

If a lot of a similar type of crime is going unpunished, there may be a reason other than "enforcement agencies are lazy", and perhaps a new law can help.

stanleydrew··on A look at what’s next for AI and Google Search [video]
> If they just want to let people know that there's a new iPhone out, that does the job.

Isn't the point of this video just to let people know that there's a new AI in search? It seems to do that job.

I think the HN audience is very interested in the technical details (myself included) and so is trying to parse the video more deeply than most people will.

stanleydrew··on How and why we acquired our .com domain
You can register before commercial use in the US (filing status 1B). But there is a deadline before which you do have to start using the mark in commerce, and then update your application with the USPTO, otherwise it will expire.
stanleydrew··on State of Private Markets: Q1 2023
In my experience 409a valuations for common stock are effectively set based on a discount to preferred and some handwavy math related to "comparable" public market valuations. So I would expect them to come down, but they will lag 1-ish years behind private preferred round prices.

I do think it's somewhat likely that a company would offer to rewrite options at a new lower strike price if employees ask. Of course you'd start all the capital gains clocks again, by probably worth it if the price difference is substantial.

stanleydrew··on America will soon see a wave of bank mergers?
The loan will usually be at a fixed-rate, while the interest paid on your deposits will fluctuate. So there is still risk that your net interest margin will go negative at some point.
stanleydrew··on Firefox may soon reject Cookie prompts automatically
This is pretty "easy" in Chrome, at least for a definition of "easy" that I'm comfortable with.

For more than ten years I've had all cookies turned off by default in Chrome's site settings, and I click two buttons when visiting a site if I want to allow it to store data on my machine. That allowlist is persistent so I don't have to think about it again.

stanleydrew··on Broadband Consumer Labels
In the first couple of months after the pandemic hit, a lot of friends and family were suddenly shopping for better internet and this would've been great to have.

Even after explaining that upload bandwidth is pretty critical for good video calls, most people I was helping simply couldn't find the up bandwidth number in ISP service offers. You have to dig deep into the fine print currently unless service is symmetric.

stanleydrew··on USA Cycling champion dies after being struck by car in San Francisco’s Presidio
It is sad, but not specific to San Francisco.

See e.g. https://en.m.wikipedia.org/wiki/Murder_of_Kitty_Genovese

stanleydrew··on Reverse Engineering the Facebook Messenger API
Honestly in practice I'm not sure there's much difference. A "nationalized" utility would still be regulated by legislation to behave "correctly" when operated by the executive branch. See e.g. USPS.
stanleydrew··on WWE Agrees to Merge with UFC
Isn't that because wrestling producers have tried to maintain the illusion that it's "real?"

https://en.m.wikipedia.org/wiki/Kayfabe

stanleydrew··on Grand jury votes to indict Donald Trump
It seems like you're pretty upset about this, so maybe not the best time to discuss. But anyway my only point is that whoever is angry at Bragg about this must feel that the indictment is illegitimate, that's all.
stanleydrew··on Grand jury votes to indict Donald Trump
Agreed. We haven't seen the indictment yet, so it's not really possible to opine on its legitimacy. A lot of people are jumping to conclusions without evidence.
stanleydrew··on Grand jury votes to indict Donald Trump
To make this claim you have to argue that the indictment is illegitimate. And I suppose there are a lot of people who will make that claim.

Presumably the reason Obama, Bush and Clinton won't be charged with crimes is that there isn't enough evidence that they committed any crimes for a prosecutor to seek an indictment.

stanleydrew··on Grand jury votes to indict Donald Trump
This is just one indictment based on the evidence gathered by one local prosecutor related to one set of potential criminal acts.

Other indictments are likely coming from other ongoing investigations.

stanleydrew··on Grand jury votes to indict Donald Trump
There are other investigations ongoing in other jurisdictions, including an investigation related to inciting the insurrection. Those investigations may likely lead to indictments from grand juries as well.

The United States has many local prosecutors that operate independently within their jurisdictions and are not bound to hold their charges in deference to some other charges that may be more serious coming later.

stanleydrew··on Ask HN: Who's got domain names for sale or lease?
authomagic.com

pail.io

beanbot.com

busted.software

hubscribe.co

infill.dev

juke.tube

nested.co

pointy.club

recrate.co

roastghost.com

groundedfoods.net

Contact info is in my profile.

stanleydrew··on The fascinating world of HTTP Strict-Transport-Security
Well yes it's common to return both, but the HSTS header explicitly has a max-age parameter so the browser is bound by the spec to enforce TLS connections until the max-age is reached. So when you say browsers would "require HTTPS for all of eternity" my assumption was that you didn't like the 301 caching.
← PreviousPage 3 of 34Next →