Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
gz5
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
15 ms
·
151.
▲
by
gz5
4y ago
The 140B you cite is mainly the Fed buying bonds from Treasury (indirectly)? Other than the other large buyers/sellers (e.g. other countries), what else materially creates up or down pressure on the rates (I know they are headed back
152.
▲
by
gz5
4y ago
ngrok free is great for smaller scale, as you describe. openziti simplifies scale: + mTLS + zero trust w/ inbound firewall rule of deny-all (rather than ACLs) + private DNS w/ wildcard domains note: mTLS, wildcard domains etc are
153.
▲
by
gz5
4y ago
Nice project. If I understand correctly, it makes an underlying WG network be closer to default-closed than default-open? If so, do you plan mTLS and identity-based least-privileged access (e.g. like other FOSS such as OpenZiti and Nebula s
154.
▲
by
gz5
4y ago
From the linked Nature article, my layman's interpretation is it seems a more severe finding (CHIP) was not found (and was possibly what they were looking for as CHIP may have indicated a potentially more material impact), and that thi
155.
▲
by
gz5
4y ago
Anyone familiar with Zynamite, EnXtra, and TeaCrine? Interesting wrt the different approaches to blocking (or not) adenosine receptors, but I haven't heard of them (although maybe they are marketed under different names).
156.
▲
Three Caffeine Alternatives and the Science Behind Them
(scitechdaily.com)
14 points
by
gz5
4y ago
|
7 comments
157.
▲
by
gz5
4y ago
>On paper, PWAs are the perfect alternative to native apps: only one code base to manage, instant updates that require no approval, and no commissions to pay on in-app purchases. What’s not to like? Most 'challengers' to any do
158.
▲
by
gz5
4y ago
Certainly good progress. Anyone seen stats like this by city? Lessons learned from cities going sharply in either direction could be very helpful.
159.
▲
by
gz5
4y ago
Automattic (Wordpress etc) is a great example, and have been doing it for years. However, they are very purposeful about it, including: + Hire for the culture + Commit to awesome, persistent written communication + Meritocracy in which tru
160.
▲
by
gz5
4y ago
Great list. Closing layer 3* access (inbound firewall rule of deny-all) helps mitigate against the common webhook attack vectors as well (should still do all the L7 mitigation and best practices alluded to above for a multi-layered approac
161.
▲
by
gz5
4y ago
i still prefer the radio as well #PIITB LFGM
162.
▲
by
gz5
4y ago
they are fantastic and in fact are carrying on a Mets tradition. i grew up listening to Mets hall of fame quality radio announcers like Bob Murphy, Gary Thorne, Gary Cohen call the Mets games (mid-80s when the Mets were still broadcast by a
163.
▲
by
gz5
4y ago
they also provide tremendous value. however, looked at from a disruptive innovation perspective, i think two questions are critical: + where can startups take the edges off the market, without taking them on front-on? certain segments, us
164.
▲
by
gz5
4y ago
yeah, agree, 'on the network' is a bad phrase. long form: completely 'eliminate' the network by closing all inbound firewall ports (not even allowing dynamic hole punching), and then opening ephemeral, session-specific
165.
▲
by
gz5
4y ago
absolutely. can even completely 'eliminate' the network by closing all inbound firewall ports (not even allowing dynamic hole punching), and then opening ephemeral, session-specific L3 outbound connects (from both sides* of the se
166.
▲
by
gz5
4y ago
Agree, not a perfect term. You certainly make a good point and in fact the strongest zero trust approaches don't even let you on the network (even at layer 3) until after you are authorized.
167.
▲
by
gz5
4y ago
If you are to provide access to an app or network, you need to trust (something) under some circumstances.
168.
▲
by
gz5
4y ago
I have previously read most of these docs, and NIST has done some excellent work in what can be tough territory, even if 'zero trust' is now* a misleading term (the question is more like who/what do you trust under which circ
169.
▲
by
gz5
4y ago
Twilio must use MFA (Authy)? If so, the "sophisticated" part of this attack may have included a breach of the MFA or a way to get around it?
170.
▲
by
gz5
4y ago
Work from home / hybrid shift may help? Anecdotally, folks seem to seek more in-person or in-community experiences when they lose some of what they used to get from the in-office experience. For some folks, there also seems to be a sl
171.
▲
by
gz5
4y ago
Strong indicator of their success in catering to builders and operators. Twilio did similar, but security and networking are more difficult domains to 'land and expand' from the 'bottom-up' due to the numbers of teams in
172.
▲
by
gz5
4y ago
Flow control and QoS was critical 20 years ago. I helped build a global VoIP network, and some of our patents included dynamic routing across multiple ASes...they were critical. Now, we (different company) have similar real-time algorithms
173.
▲
by
gz5
4y ago
very nice. you may want to check out openziti (open source) to eliminate vpn (while closing EdgeDB server and Postgres server link listeners and open IB FW ports). can be done agentless via sdk, or modified jdbc driver. basic postgres exam
174.
▲
by
gz5
4y ago
>we’re now releasing predicted structures for nearly all catalogued proteins known to science is the result that researchers will now much more quickly 'manually' validate or invalidate the predicted structures for proteins the
175.
▲
by
gz5
4y ago
And PG supports layer 3 shut-down of link listeners and inbound fw ports. So you can combine the L7 tenancy with a secure networking architecture which eliminates the problems of managing firewalls and ACLs. One of the open source exampl
176.
▲
by
gz5
4y ago
In games like Go, the problem is very well defined and bounded. Most high value software dev work is working with humans to define the problem itself, and the problem usually exists in a multi-actor, non-deterministic, dynamic, somewhat ir
177.
▲
by
gz5
4y ago
same, and i do many walking meetings as well. i would however like to tap some_number to add the last x seconds of the conversation into a note - either as audio or transcribed. of course requires pre-recording consent. i could then annot
178.
▲
by
gz5
4y ago
'Zero trust' as a term was popularized over a decade ago by John Kindervag, and has roots older than that. Kindervag focused on the fact that we shouldn't trust LAN/WAN devices just because they were (apparently) on the
179.
▲
by
gz5
4y ago
>Many proposed projects trigger infrastructure upgrades that cost more than the power plant. It hasn't been clear to developers which projects will incur these costs, so they spam the ISO with many applications. The excess applicati
180.
▲
by
gz5
4y ago
Even if the cited $1k per customer varies by density etc., and perhaps you mix in some fixed-wireless, then how about a business model in which you sell your network to providers (internet providers, telco providers, tv providers...and like
More ›