theicfire

I had very similar takeaways, you said it well!

yes

There's a simple zero knowledge proof to show that you actually have the data. Have a CSV of username + salt + hashed(salt + email) + hashed(salt + phone number) , etc.

Users can check their own email/phone/etc to verify that the attacker has the data, without the attacker revealing the data.

I'm surprised this doesn't happen more.

Author here, I just noticed this was on HN! There’s lots of great points raised here that I didn’t cover. I published this with very little feedback, so I’m not surprised I missed things. I’ll go through some of the additional points, though:

* Pivoting towards enterprise. Not with speed in mind, but instead security/control/compliance.

We didn’t spend too much time here, so I can’t definitively say this wouldn’t have worked. Cloudflare had (has?) just this vision when they bought S2: https://blog.cloudflare.com/cloudflare-and-remote-browser-is.... There is at least one critical roadblock that I see: wifi and networks can be spotty. If only 80% of a company’s employees have good enough internet, what do you do as an administrator? Force them to figure out notoriously difficult wifi problems? If you don’t, those that don’t like the browser will simply not use it because they’re not required to. Given this, I always thought of this as a secondary market. First, make something great, independent of being required to use the product. Then start building out other tools that make businesses more enticed. We did sell to companies in multi-seat deals, and were eager to keep pushing in this direction. Note the tag line: “A new browser to work faster”.

* CAD/Rendering/Simulation/etc instead of a Browser

The trend is that all of these are moving to the browser. However, maybe not fast enough and Mighty was too early. It’s also a more crowded market (Citrix, Teradici, now Parsec, etc) and yet smaller than the browser market (well, by users at least).

* Powering browsers inside of mobile VR/AR

We never tried this. My sense is we’d be too early (at least 2+ years?).

* Accessibility, e.g. for screen readers

This was never a big enough priority but yeah, it seems solvable. It’s more or less another API to implement.

* Loading web pages faster is not going to make you more productive

As I see it, there are two buckets of speed. The first is to make fast things faster. The second is to make slow things faster. The two can work together. The real value prop is the second, but the first is where you can bring lots of delight. But I think there is some truth to this. Of the loyal paying users that we had, they felt substantially more productive. But could this benefit offset the price + downsides? Knowing what I know now, I don’t think so. But there’s a lot of context about what’s actually possible, what a wide spectrum of people value, etc that gets me to that conclusion.

* Who really, really, has a slow browser that’s willing to pay $35/month due to it?

This was my first thought when we starting working on a Browser. One thing I learned was to hold back my gut instinct and prove the answer, instead of guessing it. The empirical answer: thousands of people that we could find through minimal marketing (just Twitter, basically). Does that mean there are a million+ people out there that also have it? Maybe.. it’s hard to tell. But my personal hope was that this quantity generalized somewhat to the 2B users of Chrome so that we could at least make a profitable business. If we got there, we could move into areas where we were solving more problems.

So to directly answer the question: I’m pretty confident this market exists. But not if Mighty also has the downsides it did (doesn’t work well in cafes, a variety of bugs, etc.)

Wow, amazing response. This was exactly what I was looking for. It's odd I have to get someone from HN to help me understand instead of, say, Intel/AMD. Their recommendations didn't seem to mention any of these important details. Maybe I missed something. Thank you!

Hmm, it feels like Intel/AMD are ducking and just hoping that the implications of this are not large.

Here's a video from Intel chatting with the researchers: https://community.intel.com/t5/Blogs/Products-and-Solutions/...

The questions are incredibly weak from the interviewers. They first state that it's not practical because the attack could take many hours, even days. But they don't describe why a day-long attack is not practical.

They then bring the researchers and ask them the same question. The researchers say that the attack is very practical because it only takes.. a few hours or days to execute the attack. Here's the specific part: https://youtu.be/BiRPr839dSU?t=1476

Instead of chatting more about this discrepancy they just ignore it and ask the researches how they feel about their new popularity.

From what I can tell from the advisory from Intel, it's simply that people should understand the attack and mitigate it in software. It's very vague. The specifics (i.e. a list of example popular programs that are vulnerable) seem entirely missing.

First time I've seen this show up on HN. I lived there too :). I still live in a co-op to this day.. actually one a few blocks away from Stanford.

https://www.reddit.com/r/Bitcoin/comments/h7nvy/bitbills_bit...

What's preventing Apple from stopping OpenHaystack from working? Is this simply a security vulnerability that will get fixed, or is there something inherent that may not be fixable? After all, Apple knows all the ids of the airtags they've created.

Woah that's a weird test case! fwiw now that you've posted this, this link shows up for that search. But similar searches like "gulp adimzip" show similar issues. Is this simply a bug? Clicking on Missing: adimzip" ‎| Must include: adimzip" now makes Google search for gulp "adimzip""

Yes, that's double quotes at the end. Weird.

I had a problem at work which required finding certain patterns in our log files. I figured that someone had built such a think (at least at a large log analysis company like Splunk), but I couldn't find anything.

I'm not sure how common of a problem this is for people, but I figured I'd try to build something to see if my solution even made sense. It turns out it works quite well.

Have you heard of problems this could solve, or projects like this? Please let me know! I put some decent effort into documenting the tool, but tell me if it's unclear.

Thanks!

Woo this is my new favorite whiteboarding tool! I love how I don't have to log in and that it works with my ipad pencil

Thomas Sowell is a critic of the climate change/environmental science initiatives, and it's one of the reasons I heavily question his other views. Here's a 3 min video of him talking about it: https://www.youtube.com/watch?v=rweblFwt-BM

The points he makes are quite fair. The science isn't perfect, yes. Often, people try to hide that the science isn't perfect, too. But the impact is roughly the product of the magnitude of the impact and the probability of the event. In this case, the magnitude is enormous and the probability is less than 100% but seemingly quite large. Dr. Sowell seems to simply argue that climate reports suggest that the probability is higher than it truly is. But if a report suggest 95%, and Dr. Sowell thinks it's more like 40%, the core issue is still enormous. I would want him to talk about why he thinks the huge effects of anthropogenic climate change are such a vanishingly small probability to the point that we shouldn't do anything about it.

Here's another article by him: https://products.kitsapsun.com/archive/2002/06-08/0002_thoma...

It's funded by Stripe. Probably the best way to support this work is by sharing it and upvoting it!

Wow, thank you for this. I admire your team's dedication and bravery. I found the details of all the assets of your company fascinating, since I myself know very little about classification or fashion. This is a bit of a business review type article, and I hope you write more about this and things go well for you all.

This is an astounding engineering achievement. I love how they were able to do all this autonomy with fisheye lenses -- the only navigation cameras are pointing up and down!

It's incredibly rare that a company is on the cutting edge of both software and hardware. There are hardly any other companies in this category. I'd say:

- SpaceX (the control software for landing is outstanding)

- Apple (although their software isn't the best, i.e. Siri, or how late to the game they were with night sight)

- Not Tesla (hardware is incredible, auto pilot is struggling)

- Not Amazon (Kindle is great, but not a remarkable engineering achievement)

I love this! I'm a big knowledge hoarder myself. My brain is mostly written down in workflowy. I hope the day I die I'll be able to give friends/family members this one bug massive doc for them to peruse.

Boosted Boards | Backend/Full Stack | Mountain View, CA | ONSITE | boostedboards.com

It's a truly beautiful world when commuters can go uphill at 20mph on a skateboard. Boosted is all about getting people where they want to be in the most fun way possible. We're looking for someone to help us on our backend systems, both internal and external. You can apply here[0] or email me directly[1]

[0] https://jobs.lever.co/boostedboards/c78b042b-ad13-4ef7-aeeb-...

[1] chase @ our company domain.com

Excellent post. Thanks! Hopefully these will become dirt cheap (or, worth hacking because they'll be cheaper than the electric imp).

Recording would be great! I feel like I only got half of the (good) information without it.