nessence | 8 years ago | on: Ethereum from scratch – Part 1: Ping
nessence's comments
nessence | 10 years ago | on: Ask HN: New attempt at mobile markup – keep or bail?
nessence | 11 years ago | on: Show HN: Hyperledger – Open Payments Protocol
After looking through code, a number of concerns are also raised:
- key pairs use RSA - identities are based on MD5 of RSA public key - no p2p protocol for nodes - lack of proof of work (more on that below)
As-is, the project is a rails application which references accounts by MD5 of the public key, a postgresql database, and a REST client. In other words -- basic rails ledger app plus some PKI.
I see a significant issue with hyperledger, in that the pools are, by nature, private. The only verification a client can perform is the SSL certificate. A pool owner, if they wish, could change the account balance on all of their private nodes and there would be no public record of the change or the previous history. Yes this would require collusion of some kind, but even for 10k nodes, such data can be changed in seconds. Without a blockchain, how could anyone prove otherwise?
I see the potential for companies like quickbooks, paypal, or even banks, to create public REST interfaces for their account ledgers. This seems inexpensive for a bank to do (compared to a p2p network), and, we'd have the trust of the bank. This is money after all, so, I'd trust the bank over a psuedo-private network.
Looking forward to see how hyperledger will approach the problems described above. I would be surprised if the end-result isn't similar to bitcoin.
nessence | 12 years ago | on: Robots for children to program
nessence | 13 years ago | on: Twitter granted patent on Twitter-like services
nessence | 13 years ago | on: Twitter granted patent on Twitter-like services
Such a simple difference makes all the difference. In this case, enough to file a patent.
If they didn't file a patent someone else would have.
nessence | 13 years ago | on: Twitter granted patent on Twitter-like services
nessence | 15 years ago | on: False Start: Google proposal reduces SSL handshake to single round-trip
The bigger picture is that false-start will make google's upcoming SPDY handshake faster too; then, because SPDY is a more aggressive with the initial connection (CWND, push support), the packets saved by false start are used to push content. Without false-start, an initial SPDY connection would be encumbered.
nessence | 15 years ago | on: Ask HN: Just got $200k from an angel, where do I stick it? Savings? CDs?
nessence | 15 years ago | on: Ask HN: Is PHP/MySQL Still Practical for Building Web Applications?
With regard to your future decisions, you might strongly consider another language and framework, not because one is more practical than another, but because the developers behind that framework may have more of a propensity towards the context of your startup. So, for example, Ruby has a large web application community, Python has a large scientific community, and Java enterprise.
The primary contention behind PHP has largely been it's limited OO and speed, as compared to it's brethren interpreted languages. You can, creatively, do advanced things in PHP which are done in other languages, but it's not as straight forward and often clumsy or not supported. That said, PHP is simple enough that large implementations can easily modify PHP for their own use; considering how slow PHP's codebase moves, forward compatibility is far less of an issue.
All together I wouldn't base your decision on speed. Computing power is cheap now and all of them are feasible as far as speed is concerned. If you need to build something NOW, strongly considering going with what you know. If you have more time, consider writing something cliche like a multi-user blog or twitter platform with each framework -- you'll be exposed to patterns you haven't seen before and can also figure out what you like and don't like.
nessence | 15 years ago | on: Ask HN: Found security vulnerability at work. rebuked. was I wrong?
In larger companies, one way to get around this, is to go to Human Resources instead of your chain of command. Let them anonymously handle this issue. If your company doesn't take action then you can continue discussing the matter with HR until it's resolved.
If the company isn't large enough to have an employee handbook and HR then could report to an officer of the company and note that you wish to remain anonymous and that you're genuinely concerned about company security.
You could also consider requesting a meeting with officer+manager or HR+manager and disclose to both at the same time.
I don't see any company in their right mind firing you if you do this -- and are genuinely concerned for the security of your employer and it's clientele.
nessence | 15 years ago | on: Visualization: The evolution of Python
Wonder if the post-2005 spike would be similar for all interpreted languages, or just python.
nessence | 15 years ago | on: A Conversation with Charlie Munger (Vice Chairman of Berkshire Hathaway)
"If you take out the 20 best transactions, our record is a joke," he admitted. "The 20 best transactions occurred over some 40 years — that's one every two years. And we work at it all the time. Life is not just bathing you in unlimited opportunities, even if you work at being able to find them and seize them."
nessence | 15 years ago | on: Review My One-Day Project: Shared Words
I suppose there are several possibilities to track trends this way.
Great job.
nessence | 15 years ago | on: Secret Hacker Bookshelf
I suppose, I could've phrased the post: Is a link full of SEO spam, aa links, and ad networks a legit HN post?
I guess from the upvotes and comments, it is. I was strangely curious.
nessence | 15 years ago | on: Secret Hacker Bookshelf
Which books don't matter. Half those are outdated or will be by the time they're read.
nessence | 15 years ago | on: The Social Network Bust: What I learned from my job interview with Facebook
Maybe the OP is better finding a startup or open source project where he can learn at a faster pace. I suspect facebook maybe a tad too busy to help him along.
nessence | 15 years ago | on: The Social Network Bust: What I learned from my job interview with Facebook
A better approach would be books involving POSIX standards, implementations of all (current) OSI layers, compsci algorithms, how compilers work, and how various runtimes work for various interpreted languages and how to debug them (PHP, Ruby, Python, Obj-C, Java). None of these have anything to do with unix system administration, user permissions, shell scripting, or web servers.
"What I slowly understood while I was talking with Tom Cook was that this was not a discussion on scalability on a macro scale, however it was it was discussion of scalability on a micro-scale."
You maybe misunderstanding macro and micro; scale is a function of both, not one or the other.
nessence | 15 years ago | on: I made a fake-cake generator for my 30th birthday
nessence | 15 years ago | on: Realtime Analytics with MongoDB
Have you done any benchmarks to test thousands of updates per second?
Same, but on the front-end. What is the impact of generating 10 reports per second for 2 hours? Do the writers get behind?
You won't have scaling issues in until the front-end hits some threshold of x queries per y updates, with x servers.
Good presentation on another application of mongo.