HN user

wayfinder

342 karma
Posts0
Comments142
View on HN
No posts found.

Expecting people to know what makes an app store safe is like expecting people to know how to change their spark plugs. It’s a niche skill. The only people who are going to know are into the hobby.

Your average person does not have “computers” as a hobby.

In the same vein, I’m not going to give you shit that you don’t know how to change your spark plugs off your head even though it’s so basic.

A good reliable system pretty much has error handling every step of the way, down to crash-first programming at the very end.

It’s more possible to recover from errors higher in the system but you can’t predict every problem so you need layers of error handling at increasingly lower levels with different recovery expectations.

Insurance is not free money. Hypothetically say I was losing a car once per month… then my premiums would reflect that. The purpose of insurance in that hypothetical would be to insure against losing 2 cars per month but I would be paying for that first lost car in full because at that point, it’s not a risk… it’s a consistent monthly cost.

I own the Aranet4 sensor (highly recommend) and I’m in the US with not particularly great sealing and my sensor will read a 600ppm jump in a matter of 30 minutes.

I basically have to keep the window in my bedroom open 24/7, even when it’s cold outside, just to keep my CO2 levels in the healthy range otherwise it will be pushing 2000ppm in the morning.

I would be more down if it wasn’t tied to the generation of phone.

Also I’d love a keyboard with more buttons personally. I know I’m in a tiny minority here but I get ~70 WPM on an iPhone keyboard but if I have to do symbols or anything it goes down to like 4.

I know you can buy a separate Bluetooth keyboard but then you need to rest your phone and stuff.

If anyone wants to build this by themselves, I recommend using an optimization solver library like OptaPlanner. It basically implements standard optimization algorithms you can read in academic papers (which are interesting to read!) so you don’t have to.

You can probably write a basic planner in under an hour with all the constraints you can think of. You can just continue to fiddle with the constraints and weights until you are happy without having to worry about duplicates or errors.

I’ve used it to solve cost optimization problems for companies I’ve worked with and it works really well.

I used to work at a medium-sized non-tech company (<200 employees) that had a fair amount of IT staff. Stripe is expensive asf and we always talked with banks and payment processors directly.

We never stored CVVs or any of that insane nonsense though. Our systems only ever saw CC info in transit but they were never stored on-site.

God I miss that company. Working with smart people is great.

Idempotency 3 years ago

Instead of idempotency you can return a 4xx error too. You use idempotency because it’s logistically less complicated for the client.

Idempotency 3 years ago

It gave me an intuitive understanding of state machines and idempotency is one solution to transitions.

If you start with State A and a call changes it to State B, what does running the call again do? A->B? But you’re already at B. Shit’s going to break. Redesign your system.

Idempotency 3 years ago

The only reason I knew about idempotency is because growing up I was a little shit and I learned that you could break a LOT of electronics by getting it to do a second thing midway before finishing doing the first thing.

If it had a screen and buttons, I would try to break it.

So I started striving for highly reliable systems not because there are professional bad actors out there or spammers or to achieve high performance… but because there’s another little shit out there.

I don’t see how anything you said contradicts anything I said, which was just a more general summary.

And there is a significant effort by a lot of people to split California into two or more two states but it’s all talk.

The Jewish relocation happened because of the British Empire.

I mean digital signatures have really only been a thing for like 20 years, and barely because people only started caring about it more in the past 10.

While the US has been around for nearly 250 years.

And truthfully, despite a highly technical crowd, how many of y’all have actually ever sent or received a digitally signed email? If you’ve tried, you know why no one ever does it.

Hmm I think you’re skipping some major parts of world history.

Jewish immigration to Palestine was not particularly great. Jewish people were not really heavily trying to move to the Middle East where people didn’t like them.

What happened is that Great Britain, following the defeat of the Ottoman Empire and the division of that region between itself and France, decided to make the Israel state, make it official through the League of Nations, and then encourage Jewish people to move there. It was the ultimate solution to the several century old “Jewish Question” that Europeans had. Of course people started moving to a territory controlled and sanctioned by none other but the British Empire.

By sending them to the Middle East, Europe could get rid of the Jews and Britian can get an ally. Win win for Europe. Jews, Palestinians, Arabs and everyone else be damned.

Of course, after hell obviously broke loose, Britain realized that their mandate was not working and they pulled out of a problem that they created.

…And nooowww we’re here.

No, if you read history, Israel had done a ton of stuff to make Europe and America happy.

They invaded the Suez Canal when Egypt tried to nationalize it. They did it for France and Britain.

During the Cold War, they provided of information to the US govt about Soviet assets. They also tell the US information about other countries from their intelligence.

The fact of the matter is Israel’s neighbors hate Israel so they need to get support from whoever they can, so they try to appease Europe and America. America goes along with it because it works out for us. Israel also also economically and technologically in a better spot than a lot of other Middle Eastern countries which are already semi-hostile to America, so they’re one of the better allies to have in that region.

America doesn’t give a damn about Israel anymore than France. It’s the working relationship that keeps it going — for both parties.

The problem right now is that both Israel and Palestine are both run by extreme right wingers. Extremist right wingers are always trying to start wars.

However, US foreign policy generally prefers having a working relationship than caring if a country is democratic or ticking the “is good” boxes. Most countries in the world make terrible allies. They’re weak, or they’re unstable, or every 30 years, their system of government will have completely changed. Despite the shit Israel does, they are consistent and stable, two traits many countries have not figured out.

I mean there have always been a market for 48V components. The problem is that the market is much smaller so as a customer, you’re paying a lot more and it’s hard to justify raising the price of your car because you decided to go 48V.

It doesn’t really matter how Apple is doing because the rules of cryptography are set in stone.

- To ensure that you message is unreadable, you must correctly encrypt the data symmetrically or asymmetrically with a key. Well we can assume Apple or Meta can do this properly.

- Second, as the sender or recipient, you MUST verify the authenticity of the key, whether you are using asymmetric or symmetric encryption.

In TLS/SSL, key verification is handled by third parties called certificate authorities.

In SSH, key verification is handled by comparing the key signature that the SSH client displays.

Most of these services right now do not do either (trusted third party or display of a key), therefore it cannot be verified overall. (That said, some people said they are doing what SSH is doing soon.)

I’m happy Apple is doing those things to exchange your own key between your own devices. This is already way better than most services. However, that problem is orthogonal to the problem of key exchange between you and a recipient.

Well these apps don’t even let you verify the keys even if you wanted to, so you can’t even tell if it’s being man-in-the-middle’d.

Some people said they are finally adding key transparency features to let you do that, but it should have been there since the start. Something a lot of people already use called SSH literally has had that since forever. It’s like basic 101 cryptography if you design an encrypted protocol that isn’t using a trusted third party for key verification (like certificate authorities in TLS/SSL).

If you implement ANY encrypted protocol, key verification is extremely important. If you aren’t verifying keys are possessed only by your recipient, you cannot verify who can read your message.

Asymmetric encryption doesn’t change anything. Apple is still the one telling your client whose key to encrypt the data for.

A BIG part of successful encryption is key exchange.

A successful SSL/TLS man-in-the-middle attack exchanges false asymmetric keys.