Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
homakov
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
15 ms
·
121.
▲
by
homakov
8y ago
This "synthetic" balance does closely remind me of "uninsured" balance I proposed for XLN (Lightning, extended with credit lines to solve capacity problem) https://github.com/fairlayer/wiki/blob
122.
▲
by
homakov
8y ago
+++ that, stayed in airbnb 70+ times, a light sleeper myself... how many times I hated apartments for being noisy and reviewers for hiding this fact.
123.
▲
by
homakov
8y ago
Why use anything that's not end to end encrypted this day? Why share you data with a server that has no actual reason to have your data in plain?
124.
▲
by
homakov
8y ago
They are calling it bonds because they are literally bonds https://en.wikipedia.org/wiki/United_States_Treasury_securit...
125.
▲
by
homakov
8y ago
Well if one or two investors died due to a heart attack from the bear market... that's net win anyway.
126.
▲
by
homakov
8y ago
Only if you did KYC on every single customer.
127.
▲
by
homakov
8y ago
250k fine, 15m raised... https://decryptmedia.com/2018/11/29/exclusive-airfox-ceo-say...
128.
▲
by
homakov
8y ago
>They could have simply kept their assets in stable coins, like Dai, Tether, etc.. To turn into dust? >They could also sell into USD on exchanges that allow you to trade USD (e.g. Kraken). And trust Kraken then. >Another option wou
129.
▲
by
homakov
8y ago
Well, didn’t happen to me. “I might not deserve it, but thanks”
130.
▲
by
homakov
8y ago
>Should I donate it? do you seriously consider this? Sounds crazy to me. Or pretentious. Why bother with working another job? Do your own thing, fix something in the world.
131.
▲
Why Tether/Circle/Gemini are effectively USD
(medium.com)
1 points
by
homakov
8y ago
|
1 comments
132.
▲
Decentralization Is TBCS = Tolerance and Bandwidth and Computation and Space
(medium.com)
1 points
by
homakov
8y ago
|
0 comments
133.
▲
No Hair-On-Fire: Why Altcoins Are Going to Hell
(medium.com)
1 points
by
homakov
8y ago
|
0 comments
134.
▲
by
homakov
8y ago
I have proposed a solution to this: have the snippet self-hashed and verify with multiple sources. eg: A=$(curl -L https://get.rvm.io);echo "$A" | shasum -a 256 | grep -q 05b6b5f164d4df5aa593f9f925806fc1f48c4517daeeb5d
135.
▲
by
homakov
8y ago
Same can be achieved without hardware part.
136.
▲
Reinventing Banking on Blockchain: Fairlayer
(medium.com)
1 points
by
homakov
8y ago
|
0 comments
137.
▲
by
homakov
8y ago
>I do remember when OpenId+HW 2FA was supposed to have fixed this HW 2fa can never fix auth because it's hardware, and cannot scale. There are solutions out there, all what's left is to raise awareness to add it. Showing popula
138.
▲
by
homakov
8y ago
I don't recall any popular website using Basic Auth. FF must implement WebAuthN or whatever was last offered to fix auth. Have i been pwned brings nothing new to the table.
139.
▲
by
homakov
8y ago
I'd argue there is no "good" auth at the moment, only "poor". And upgrade to authenticator-based "good enough" is much needed.
140.
▲
by
homakov
8y ago
Instead of actually fixing authentication they are baking "have this password been exposed in plaintext" into the browsers. What's the deal with WebAuthN? Such a basic functionality still not completed.
141.
▲
by
homakov
8y ago
If you're desperate, just serve local sdk from http://localhost/sdk.html which will talk to your local app via postMessage proxy. You may even open this proxy with window.open under https:// app
142.
▲
by
homakov
8y ago
I've done exactly that https://github.com/fairlayer/fair Single auth_code shared between web session and local app is all you need.
143.
▲
by
homakov
8y ago
Requires special modules, you can't just take random npm module e.g. sequelize. Deal breaker for me.
144.
▲
by
homakov
8y ago
Ripple? Mobile payments? How can a bloated ledger with thousands of tps be good for running on mobile. It's more like interbank thing.
145.
▲
by
homakov
8y ago
Thanks, the blockchain part is recent and isn't relevant. Otherwise it's super simple idea: strong derivation based on something anyone can remember (username + pw) + website origin = strong non-reusable credentials w/o hardw
146.
▲
by
homakov
8y ago
You just described https://github.com/sakurity/securelogin
147.
▲
by
homakov
8y ago
Minus the worst bug of all time - password reuse and bruteforce. Sounds like fair tradeoff.
148.
▲
by
homakov
8y ago
It's significantly more secure and more convenient. Magic links rock. See rollcat comment +1
149.
▲
by
homakov
8y ago
Interestingly Ethereum has hit in a sweet spot: tech crowd that learns EVM quickly and enjoys playing with it (like a new raspbery pi) & has sizable spare cash to invest in ether/erc20. Bitcoin is nowhere as fun to learn, the VM is
150.
▲
by
homakov
9y ago
1. front running has nothing to do with TOCTOU/race conditions. the real race condition example would be reentry attack actually. 2. #9 has nothing to do with "off-chain issues". Off chain has very clear context and refers to
More ›