HackerTrans
TopNewTrendsCommentsPastAskShowJobs

standapart

no profile record

Submissions

The xz attack may be bad, but trusting Microsoft certs is worse

twitter.com
59 points·by standapart·2년 전·19 comments

[untitled]

1 points·by standapart·3년 전·0 comments

Irving on Helen, Ilya, and Sam

twitter.com
26 points·by standapart·3년 전·29 comments

The FDIC's Bait and Switch

ft.com
1 points·by standapart·3년 전·1 comments

comments

standapart
·2년 전·discuss
Perhaps Plume will be the next company to be sued by Texas...
standapart
·2년 전·discuss
tl;dr

The author discovers the wild world of financial engineering and "float".

Instead of settling usage changes for it's image service with a single charge, Cloudflare settles it with two charges in such a way that the customer "floats" Cloudflare money for some portion of their billing cycle.

This is the bullshit that you start to do when you become publicly traded. It adds zero value for the customer.
standapart
·2년 전·discuss
Your investors need liquidity and private markets won't give you the valuation that you need.

So get Google to buy Wiz for their nascent services play and plow the cash into this.

Smells like July of 2000.
standapart
·2년 전·discuss
A master class in enterprise software sales fit into a single comment. Bravo!
standapart
·2년 전·discuss
However, scaling will get you your next round led by Nvidia... I mean Microsoft... I mean AWS...
standapart
·2년 전·discuss
If Figma continues along this path I worry that they are doomed.

Generally, there are three paths to profitability: 1) increase pricing, 2) decrease expenses, or 3) offer new products and services with superior margin.

It seems like Figma has chosen to implement 1) but sell it to customers as 3). However, in contractionary periods like we are in now, 1) does not work -- no matter how much lock-in you have and how you sell it.
standapart
·2년 전·discuss
Weirdly, they don't preference contracts for shell corps owned by, say, poor white trash from Middletown, Ohio -- despite these people meeting your definition of "someone who historically hasn't been paid well".

But I digress. In the biz, if the contract has to be trafficked through a shell corp where the owner takes a 20% cut, everyone simply bids a 20% higher rate.

It's the taxpayer's prerogative if they would rather their government pay an inflated contracting rate -- as opposed to using that money for education, infrastructure, social services, etc.
standapart
·2년 전·discuss
From subpoenaed communications we even know that certain figures who publicly denounced the lab-leak theory, privately believed the theory was plausible or even likely.

https://www.wsj.com/articles/the-covid-lab-leak-deception-an...

This article is part of what I like to call the narrative media. You decide what the facts are and don't give a damn about reality -- because that's what keeps your readers coming back for more.
standapart
·2년 전·discuss
I forgot that we're playing the demo games now.

Well I'll see your demo, and raise you another demo

https://x.com/sean_moriarity/status/1760435005119934862

Except that demo was done by a single person, with a day job and no cap table.
standapart
·3년 전·discuss
Weird... Things are starting to smell a lot like 2020, again...
standapart
·3년 전·discuss
Exactly -- and CZ was always the fall guy. Yi is the mastermind.
standapart
·3년 전·discuss
Some stories don't have a hero.
standapart
·3년 전·discuss
What a wonderful way to cut headcount/expense and lock-in profitable margins on healthy annual revenue.

Can only work when you have the advantage of being the dominant product in the marketplace -- but I gotta hand it to the board, I couldn't have done it better myself.
standapart
·3년 전·discuss
Not really. There were things like Purdue, but that wasn't fentanyl.

The fentanyl epidemic is the result of market developments in the illegal drug trade.
standapart
·3년 전·discuss
So here's a little brain teaser about what you have to do when dealing with potential nation-state actors. This scenario is for the folks who are calling "hyperbole" when the actor is clearly, potentially a nation-state. This scenario is based upon an event that actually occurred.

1. You have a $200 million piece of defense-critical equipment. 2. You know that there was a 5-minute period where a potential member of a foreign intelligence service was alone and unattended in the same room as this piece of equipment.

What do you do with the equipment? You can:

a) Put the equipment into service b) Disassemble the equipment on both a hardware and software level and try to detect if anything was altered c) Destroy the equipment

If you choose anything other than c) you have probably never been, nor should you ever be, in charge of securing critical assets that can be targeted by a nation-state. This incident seems to indicate that the leadership at Microsoft would choose a).

Also, bear in mind that these are the people that you just sent all your ChatGPT data to.
standapart
·3년 전·discuss
Nice post! Couple things that might be useful:

1. While JCH will usually be the most performant hashing method, naively, removing a node will affect all nodes of higher order. This makes the logic of node deletions somewhat more complex than (say) Discord's hash ring. This is why JCH is more common for long-term, distributed, redundant storage -- where the topology changes far less frequently.

2. For sharding, what makes distribution hard is not so much the hashing but consensus on the cluster state -- this is the hidden problem. Bryan Hunter's talk on Waterpark (https://youtu.be/9qUfX3XFi_4) is a excellent example of what you can do when you can set things up so that the topology is fixed. In fact, this approach makes things so straight forward that it is shared by Riak, where the number of vnodes is fixed.

However, if you have a rapidly changing topology (like several Kubernetes clusters that are frequently scaling up and down), you can often need some sort of consensus mechanism to make sure every node has a consistent view of the cluster. In my experience, this usually ends up being the most complex part of distribution problem to solve.
standapart
·3년 전·discuss
Losses have to be paid by someone.

Whether they're paid by "you, the taxpayer" or "you, the bank customer", they will be paid.

Just remember that some losses matter more than others. Losses by community banks in Oklahoma matter (on a dollar for dollar basis) less than losses in Silicon Valley.

https://twitter.com/SeidlerCorp/status/1636518949872451584?s...
standapart
·3년 전·discuss
For some additional context, here is an excerpt from the hearing:

https://twitter.com/SeidlerCorp/status/1636518949872451584?s...

Here is my question:

Certain individuals have argued on HN that depositors of SVB should be made whole. For the most part, their arguments have not been based on systemic banking risk. Rather, their arguments have been based on the negative impact of employers suffering losses on uninsured deposits.

Would these same people argue that deposits of, say, community banks in Oklahoma be fully insured? Do they disagree with Yellen?
standapart
·3년 전·discuss
This is a significant simplification of the matter. I doubt it works in reality.

Replace the words "VC firm" with "Sequoia" in the previous statement and see if it rings true that Sequoia's reputation would be destroyed forever.
standapart
·3년 전·discuss
When the smoke has cleared, it would be interesting to quantify whether this event affected a (statically significant) higher percentage of YC offspring than other incubator offspring.

Could be a selling point for alternative incubators in the future.

Perhaps being a part of YC puts you at greater risk from these events. Draw your own conclusion about the reason why.