HNHacker News
TopNewBestAskShowJobs

yonz

259 karma · joined March 4, 2019

Founder Vella.ai, previously at LinkedIn and Qualcomm, Harvard MBA

[ my public key: https://keybase.io/yonz; my proof: https://keybase.io/yonz/sigs/Nz2P_8G1t8p_n8V3eTNFn6jtO3jzGLBR0UDKjQMgFUU ]

submissionscomments
yonz··on Ask HN: Does Symantic Search Work?
Would you say it works more like fuzzy text search than searching by meaning?

For example i expect that searching "a snarky blog post" or "uplifting people"... wouldn't work that great

yonz··on Ask HN: TensorFlow training on Intel-based Mac with 2 GPUs
No, I have a Mac pro with two AMD GPUs
yonz··on Ask HN: Does Symantic Search Work?
I can imagine how painful it would be to rely on keywords to search through parents so your success makes sense to me.

But I should clarify, did we get enough of a comprehension boost from transformer based Pretrained LLMs to successfully interpret query intent and find related items?

yonz··on NSA CSI IPv6 Security Guidance (2023) [pdf]
> extraordinary claim that ISPs are supplying routers with such a dangerous default configuration requires evidence

Its a legitimate expectation and potentially the norm to expect that I can ssh to my desktop with IPv6 w/o configuring my router.

The pitfall comes as a side effect of NAT inadvertently making port access rare.

I am looking for data, inbound blocked ipv6 seems unlikely but I only have anecdotal evidence.

yonz··on NSA CSI IPv6 Security Guidance (2023) [pdf]
Exactly! Duplicating my point in a thread below to drive your point home:

NAT was an added layer on top of firewall rules because inbound ports had to be mapped to a particular host and port since the router would not know which host to send to. This created a default opt out experience because for a port on your machine to get accessed, a packet must pass inbound rules and match a port map table entry.

yonz··on NSA CSI IPv6 Security Guidance (2023) [pdf]
Thanks for sharing that, good data point for drop incoming.

I had a nighthawk, I ended up setting up the ipv6 rules.

The TLDR on the debate so far is if router shipped over the last 20 years have both drop IPV4 and drop IPV6 incoming.

In my opinion, NAT was an added layer on top of firewall rules because inbound ports had to be mapped to a particular host and port since the router would not know which host to send to. This created a default opt out experience because for a port on your machine to get accessed, a packet must pass inbound rules and match a port map table entry.

yonz··on NSA CSI IPv6 Security Guidance (2023) [pdf]
Might have learned something today, I always replace the stock router from ISPs.

Easy to test, can someone on a cable box try to reach an open port on their host on IPV6 vs IPV4. My belief is that a majority of setups (maybe not HN hackers) will able to hit a host's open port on v6 and fail on v4.

NAT is definitely an added layer though.

yonz··on NSA CSI IPv6 Security Guidance (2023) [pdf]
In the context of network intrusion detection and providing secure online services, I agree with you.

However, if this guidance is trying to influence government office routers and internet gateways... It's a different story.

A transition from IPV4 to IPV6 creates a new per device tracking capability that leaks internal network structure. This in my opinion is worse than internal domains getting certs from Let's Encrypt https://crt.sh/?q=twitter.com cr: https://shkspr.mobi/blog/2022/01/should-you-use-lets-encrypt...

The dual stack, DHCP and SLAAC can go a long way in adding some anonymity.

yonz··on NSA CSI IPv6 Security Guidance (2023) [pdf]
Slightly off topic but IPV6 is a massive security hole for regular consumers. NATs sucked when you trying to connect to your favorite MMO but that is because they created a default drop rule for all special inbound ports.

I was shocked to see that as soon as your ISP switched to IPV6, your host is now directly addressed. As a by product of skipping NAT you are now relying on every machine having proper firewall settings. [UPDATE: or the router drops incoming IPV6 connections w/ it's firewall]

Just think about how many windows machines out there have Remote desktop enabled but were only safe because they were not publicly accessible or the hospital machines that are still running windows XP. God help us.

yonz··on A different approach to building C++ projects
Will check them out
yonz··on Show HN: Hacker News Without News
Privacy enabled collaborative filtering and triplet loss have been on my mind lately.
yonz··on Show HN: Columnar store for fast, lightweight logging
Got any advice for React Native applications?
yonz··on Show HN: Semantic Search for Podcasts
I have the exact same idea for Symantic embedding based content aggregation (RSS reader + assistant)

What was your stack for processing all RSS pages on the internet ?

yonz··on GNU Octave
You are right Python, R and Julia are good enough for Data Science and Ml. But the Matlab ecosystem is deeply intertwined for a variety of fields, including ones that don't require coders.

Take a look at this for example https://www.mathworks.com/matlabcentral/fileexchange/49683-l...

yonz··on GNU Octave
I used Octave when my educational license for Matlab expired. We need OSS competitors to keep Matlab in check, already at $1k/year https://www.mathworks.com/pricing-licensing.html
yonz··on A different approach to building C++ projects
Same here and I am dreading starting back up again. Are there any Gradle /npm like package managers that might simplify this?

Looking for something that is still alive in 2023

yonz··on A different approach to building C++ projects
Same here and I'm dreading starting back up again. Are there any Gradle /npm like package managers that might simplify this?

Looking for something that is still alive in 2023

yonz··on I've procrastinated working on my thesis for more than a year
I see your ted link and i raise you my favorite one about creativity and procrastination https://www.ted.com/talks/tim_urban_inside_the_mind_of_a_mas...

I appreciated the post.

yonz··on I've procrastinated working on my thesis for more than a year
I see your ted link and i raise you my favorite one about creativity and procrastination https://www.ted.com/talks/tim_urban_inside_the_mind_of_a_mas...

I for one appreciated reading this post and as you can see below there are a lot of well off people who have had similar experiences.

yonz··on Ask HN: Why is on-device search terrible?
But the index update wouldn't be in the critical path (when a user searches). Unless the index size requirements are so large you can't do it on machine (doubt it)
yonz··on Ask HN: Why is on-device search terrible?
Email search using the Gmail app on mobile works for you? That's a surprise to me, what is your setup? iPhone/Android, Download all emails / 90 days?

I did rebuild my index, I have a 1TB SSD drive and even excluded external drives.

yonz··on Ask HN: Why is on-device search terrible?
So why do the stock implementations suck?
yonz··on Ask HN: Why is on-device search terrible?
Are either of you concerned about giving permissions to almost everything? I think that was why I uninstalled Albert.
yonz··on Ask HN: Why is on-device search terrible?
Did that speed up your spotlight search?

Yeah, I used to love being able to open apps with CMD+space <app name> enter. Now it doesn't work. And yes, I have apps enabled in spotlight.

yonz··on Tell HN: It is impossible to disable Google 2FA using backup codes
Completely agree! Especially in consumer. I have two situations that are still unresolved.

1. Getting un-banished from Google ads after a failed credit card charge. No one will tell you why, appeal form doesn't tell you why and eventually I figured out a there had been a failed credit card charge 2 years ago.

2. Recovering a Facebook account with an email-password reset. The profile was frozen after it was hacked and all of a sudden a 5 year old phone number is required to unlock the profile after the password reset. --> Help page to submit a petition still tries to send you to login flow.

How can there be no way to talk to someone?!?

yonz··on Crypto Exchange Bitzlato Charged by U.S. Authorities with Money Laundering
Never heard of Bitzlato and the founder may have had a direct hand in facilitating crime. What I want to know is, how does this affects best regular exchanges? Does it mean that every crypto exchange must support KYC?

The announcement video: https://www.youtube.com/watch?v=WELL8vFkl3Q&t=1s

yonz··on React-native-quick-crypto – a crypto package that works
The linked package is probably the cleanest solution for getting over the pesky crypto is undefined issue...ahem eg: twitter-api-sdk, wallet-connect*

Make sure to add babel-plugin-module-resolver and the following aliases in babel.conig.js

_>

'crypto': 'react-native-quick-crypto',

'stream': 'stream-browserify',

'buffer': '@craftzdog/react-native-buffer'

yonz··on I am done. I give up
Wish you all the best as you focus on healing over the coming days. Do you have any counter-intuitive advice on how to build a following? I assume your startup is B2C.
yonz··on Ask HN: How to get back into AI?
In the same spirit, what are the three learning algorithms to implement for learning? My to-do list has:

1) Refresher: RNNs, deep net classifier

2) LSTMS

3) Self Attention anything

Any other suggestions for getting back in the loop?

yonz··on In search of a Local first Database
Two more in the wild https://replicache.dev/

https://clientdb.dev/

← PreviousPage 4 of 5Next →