HN user

jackcodes

389 karma
Posts1
Comments89
View on HN

Crazy amount of misinformation in this one post:

If you don't want your transactions to be public, don't use a public ledger.

That's exactly what people were attempting to do, with Tornado.

You don't get to launder your money

There is no money laundering available with Tornado, it doesn't turn an illigitimate source of funds into a legitimate one. And it also has a compliance tool to allow proof of transfer between accounts.

Tornado Cash wasn't free, there was a fee which as I understand it was sent back to various developers.

This wasn't sent to developers. It was a fee you would pay relayers to propagate transactions on the network and was optional. You could choose to fund withdrawals with a relayer or to use funds in your own wallet.

Money laundering

This isn't money laundering.

So I’ve read through the comments, and I can see that you’re adamant the seed phrase isn’t the attach vector, but I’m going to be listing things down in order of what I see as being a rough probability, please don’t see any of this as accusatory in anyway - it’s more that I keep an eye on OpSec for crypto generally despite not being an expert.

First question; was the amount stored on the ledger stolen during a transaction? If so then he may have been exposed to the same targeted Metamask attack as experienced by an NXM founder https://medium.com/@hugh_karp/nxm-hack-update-72c5c017b48. This wouldn’t explain the BTC and LTC transactions though.

My collection of possibilities:

1. The seed phrase was exposed. Maybe not from your piece of paper, but perhaps it was saved onto a text file, jotted down into notes, captured somewhere else. I realise given the other comments you are likely to disregard this one, I get it, but it still seems to be the most likely from the outside looking in.

2. The computer used to make transactions was hacked, as per the Metamask hack above.

3. Your nephew got into trouble and needed money. I’m not saying he’s lying to you, but he could be trying to save face.

4. A device on his network got hacked and he was subjected to a pretty targeted attack which could have made false transactions on his behalf if he accepted the certificates on his device, maybe. Perhaps a worm on his computer propagated to his iPhone to read the trust key.

5. Both ledger, and Trust are compromised to remote attacks. This would mean someone has found a way to read the seed phrase from ledger and trust remotely and then dump the wallet entirely. This would also make him probably the first person in the world to face these vulnerabilities on both apps. Hopefully you can see why 1 & 3 seem more likely than this.

It‘s currently in consideration and by the time we’re ready to make a call on it, Docker will be too. They almost are in fact.

But consider that we may be optimising for different things. Most new developers I hire can be thrown a MacBook and they’ll know what to do, Linux on the other hand doesn’t have that guarantee especially towards the junior and front-end market segments of where I work. It’s a (real) broad strokes opinion, but I’m of the belief that macOS and by extension MacBooks offer us fewer overheads in terms of setup, maintenance, onboarding, tooling suitability for the median developer. So that leaves us using macOS.

This is the factor we’re optimising for more than deployment portability - we optimise for vendor lock-in in less than the developer experience for the median of our developers. For many of us on this forum we may be best with Linux on a bleeding edge distro, but for our preferences we deploy MacBooks for portability. Whether it helps things overall, this is in Manila where a net monthly salary is often less than the cost of a laptop, so we deploy one device that can be transported between home and work as required for those that don’t have a personal device.

With that, I see this as Apple locking us into that ecosystem rather than a choice we’re making on our side, so I’d rather lean into this and explore it further than doing nothing. If it comes out positive then we’ll be ready to make the switch before Apple forces us into it, and if not we’ll deploy something thinkpad-esque and keep our production instances x86.

It’s slightly tangential, but I’m managing an engineering team of 28-30 and we’re currently considering a wholesale change to ARM CPUs across the board.

MacBooks are our de facto development laptop and all our services use skaffold for local development, Docker basically. If we consider the perhaps likely outcome that MacBooks will one day be ARM-only, that Docker will not offer cross-arch emulation, and that our development environment will be ARM only, it then becomes likely that we’ll migrate our UAT and PROD to ARM based instances.

If we go that route it’ll mean more money to the AWS Graviton programme and likely further development of ARM chips. I can’t see this affecting RISC-V but the M1 switch could very well benefit the wider ARM ecosystem.

I know it probably won’t be the advice you’ll expect to hear, but I’ve been there and perhaps just as badly.

What helped me was just to accept that I’ve probably got 10 good years, maybe 20, and I’m okay with that. My parents would be in old age, I don’t have kids to worry about right now either and I’ll do what I can to make it better - but I’ve accepted the worst. Even the worst case I’m at peace with. I’ll be 40 around then, which is probably better than most humans through the course of history.

Bleak but also liberating. Makes you value your time a lot more.

To answer your last question; let’s say I have some shared state that multiple micro-services rely on and all need to fetch that state synchronously. My example is that you’re a loans company and almost everything is driven from the loan book. Reporting services need to know the active loan counts this month, invoicing services need to fetch the loan book to generate transaction lines, borrower services need to know whether the current user has any active loans.

The standard wheel-and-spokes model would probably have a loan book service where all others call into it via HTTP requests, but you’ll have to build a query language on top of that REST API, or share DB access I suppose.

Or in this model you would stream the loan book updates through Kafka and every consumer that needs a copy of the loan book can keep their own, query it against their own chosen materialised store in its native query language (some might just append to Mongo, or kSQL, some might always use event sourcing per-request). “select * from loans where user.id = current_user” becomes possible here rather than stitching the HTTP responses.

Now I’m not saying one is right or wrong outright as you’re only trading a more native query interface with data consistency concerns, but this for me still feels like a valid architectural pattern and one I’d consider.

Uploan | Senior Software Engineer / Tech Lead | MANILA, Philippines | ONSITE

We're building an ethical financial services company in the Philippines, working hard to transform the lives of working people without stable access to financial services. We'll be advancing our suite of products to allow people to save for their first home, or understand the key elements of a financially healthy situation.

We, of course, need good people. For what it's worth I truly do think we're trying to do the right thing here and it takes honest, kind, patient people to do it. Having technical skills at the Senior/Lead level is important but we want mature and deliberate thinkers. In return we'll do everything to give you space to think, design, and develop your best work with a laser focus on transparency and honesty. Developer happiness is a topic close to my heart and this isn't just lip service.

For what it's worth we work on React, are keen on introducing Typescript for the front-end. We use Java microservices on the back-end and are keen to experiment a little bit on that side. Come and help us make the right choices.

I'm the new Head of Engineering so we'll be working closely together, please do get in touch: jack.turnbull@uploan.ph

I wouldn't have an issue committing to those benefits you've listed. Agreed, app is a gimmick although I'm not too sure the other two are quite as far into the gimmick category.

It seems like you've taken it as either/or rather than 'and'. I want to offer all of the above things AND offer any specific benefits that also offer sleep enhancement.

Point taken - this is as valuable an opinion as any other. I'd love for an empoloyer to care about it enough to 'put their money where their mouth' is when it comes to making sure I'm looking out for myself sleep wise, but I wholeheartedly accept this stance.

ref:

[0] Sleep deprivation: Impact on cognitive performance https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2656292/

[1] Need for Sleep: the Impact of a Night of SleepDeprivation on Novice Developers’Performance https://arxiv.org/pdf/1805.02544.pdf

[2] Personal anecdata

I know that taxes ultimately don’t result in lost schools and hospitals, as it’s never that 1:1, but do you ever think you could have cost your country a hospital, a new road, or a new warhead or whatever?

This is what I was trying to convey. From the taxi drivers perspective, the ‘algorithm’ is seen as being more equal than the dispatcher. The ‘algorithm’ in this instance doesn’t discriminate on skin colour, handsomeness, or the side of the bed it woke up on.

They still find plenty of unfairness in Uber from the individual to Uber relationship, such as the fees for one, but there seems to be less injustice between fellow drivers compared to traditional firms.

Having spoken to enough Uber drivers in West Yorkshire (you don’t have a choice, they will talk to you) you start to get a feeling for the reasons.

Flexibility of working hours is a big thing. People like to be able to drop shifts and pick them up as and when they need. If they need more money in the run up to Christmas they can put more time in.

The other is that the firms aren’t exactly bastions of fairness either. I hear time and again that the operators give the jobs to their favourite staff, or as described; whoever is fucking the operator. The concept of working for a boss and having to deal with some fundamental injustice seems to ring true. For better or worse Uber is seen as ‘fair’ to the drivers, at least on the whole. The rules are at least laid out, keep your rating clean and we’ll give you jobs just like anyone else.

Thinking of my own experience with family, my guess is that a bone breaking is a symptom and not a cause here for this statistic. People lose their balance and get confused with Alzheimer’s and the like and my uninformed guess is that the breaking bone highlights that someone is on the way out anyway, and isn’t the reason for it.

Take a look at the London contracting rates, you can fetch £600/day at the high(ish) end. Even Leeds I’ve seen people on £500+.

Permanent lead developer roles can also fetch £100k and above for the right company.

I’m remote right now, and the job was taken on initially out of the necessity of being in a different part of the world where the local salary wasn’t something I would commit to. For the most part when abroad, it worked well. I didn’t have too many connections anyway and I was able to get a workspace and do a 15 minute walk there and back in the warmth.

I’m now back to my homeland and I’m crashing at my parents for a few weeks until after Christmas, and the remote side of it is affecting me quite badly. I can’t handle certain aspects of it at all.

For starters, I’m working with an almost violent intensity and rate that I really struggle to turn down. In an office I’d not usually hit a level of flow state like I do at home and it’s almost like I don’t have enough forced distractions. The little coffee break, lunch with team mates, interruptions and meetings. Nothing can get in the way of me writing code, but it’s starting to come at my detriment. I have more optional distractions, sure, but I’m at work so I’m not gonna watch TV for 10 minutes. It breaks my focus too much and to a greater extent; what’s the point?

I’ve lost a great deal of balance in my life. I don’t cook. I overtime a lot more. I have no reason to leave the house (even more so that it’s 0c here vs 32c where I’ve just arrived from). I stay in bed until the last minute.

These are all my fault and my problem to fix, but it seems to incentivise unhealthy ways of living for me. I should have more time and freedom but everything has ended up being more intense and busy. There’s something to be said for that walk though the city or allowing yourself to work at the pace of your office neighbours. I miss that side of it.

Firefox Replay 7 years ago

You’ve got to accept the fact they want to collect feedback from other users first and not you.