tkfu

8 ms·

31.
by tkfu 4y ago
I'm curious to dig into this a bit more. In general, I'm skeptical about those use cases. * If it's a governance token system where more money == more power...well, I just don't think it's a good idea in general. *
32.
by tkfu 4y ago
That's a bit misleading--you can only stake for 10% if you agree to lock up a large amount of money in CRO for a long period of time, and if you agree to a three month fixed-term deposit for the USDC you're "staking". CR
33.
by tkfu 4y ago
You're being willfully obtuse here. > What non-blockchain solution solves the double spend problem when transferring digital assets in a peer-to-peer network? Literally any trusted central authority or database. > Or, in the case
34.
by tkfu 4y ago
I just had to laugh at this one: > Maybe the shadiest form of these deals comes from the public equity markets from a no-fees online broker Robin Hood and its Payment For Order Flow (PFOF) because of the conflict of interest of a broker
35.
by tkfu 5y ago
The basic argument you seem to be making is "This exists, and there is self-evidently a market for it, therefore it must be good. (Or, if it isn't good, tweaking some parameters could make it good.)" That's a bad way to
36.
by tkfu 5y ago
That's a completely nonsensical answer to the question that was asked. It's frigging insurance--the whole damn point of buying insurance is to offload risk. Insurance where you can't be certain the company will be around (or
37.
by tkfu 5y ago
It might be a "common delusion" where you live (I'm guessing the US), but in every country I've lived in (n=6), it's an accurate understanding of basic privacy law. You can't just go and take someone's pho
38.
by tkfu 5y ago
I think this is a really nice and important project, and at a cursory glance the design looks sane from a crypto perspective. But I question the basic UX design. The attestation system seems like it's reproducing one of GPG's UX p
39.
by tkfu 5y ago
Probably "impassionate". (Which has been displaced in modern usage by "dispassionate", but if you learned your English from books you're likely to still use.)
40.
by tkfu 5y ago
I'd say that >90% of keyboard users never think about "liking" their keyboard localization at all; if you grow up in a country with a particular standardized keyboard, it's just the one you're used to, and you de
41.
by tkfu 5y ago
I think that's absolutely the most likely. And it's not hundreds, it's probably more like tens of thousands (or more). For example, when I got mine issued in Germany, I just went to a pharmacy, gave them my ID and (paper) vac
42.
by tkfu 5y ago
Have you ever heard of "The Narcissist's Prayer"? It goes like this: That didn't happen. And if it did, it wasn't that bad. And if it was, that's not a big deal. And if it is, that's not my fault. And if i
43.
by tkfu 5y ago
Are you sure about that? I certainly don't recall that, and it seems like it would be a bad UX idea anyway: you can't clone a repo via SSH without having an account (and a pubkey registered), so showing the SSH string to people wh
44.
by tkfu 5y ago
The article already mentions both of those challenges, and outlines practical solutions/mitigations to both--can you be more specific about what you didn't like?
45.
by tkfu 5y ago
This reminds me of the old xkcd [1] about how standards proliferate... Situation: Git has 137 difficult and unintuitive subcommands [2], and new users can't keep straight which ones they should use. "Oh man, that's awful, let
46.
by tkfu 5y ago
I see a lot of people saying that there aren't a lot of attacks that having a 51% enables. I'd like to understand that a little bit better. Are there markets where you can short-sell cryptocurrencies? If so, mightn't you be a
47.
by tkfu 5y ago
Money market funds arguably act like a banking business, but are subject to regulation of their marketing material that obliges them to explain that they're not, and they certainly don't operate like a payments business. Money mar
48.
by tkfu 5y ago
That's a bit of a mischaracterization. The 75% that they're describing as "Cash & Cash Equivalents" might be similar to money market funds in composition, but we can't know whether it is or not because they don&
49.
by tkfu 6y ago
> What does a time system have to with system start infrastructure? Accurate time is vital for many cryptographic operations. For example, in the embedded space you may want to have a check that your current disk image (ideally checked b
50.
by tkfu 6y ago
The biggest thing is about trust: you can tell me that you're following good security practices with my keys, but I don't have a good reason to believe you, and the signals you're giving off all point in the wrong direction.
51.
by tkfu 6y ago
I tried to email this to you privately, but hello@kloud.team bounced and you don't have any other public contact info. Your docker image (kloudi/api) has a whole bunch of credentials in plaintext inside it. I am not going to check
52.
by tkfu 6y ago
Look, I think this might just be a little bit premature. Claiming that it's secure and fast because it's locally hosted is not convincing at all. "Secure" isn't convincing because you're asking me to run three
53.
by tkfu 6y ago
Yes! I'm not shocked to see that this response is the one that gets downvoted instead of the chorus of content-free agreements, but that's HN for you.
54.
by tkfu 6y ago
Ok, but how do you do that? It was easy in classical music; they just started doing auditions behind a curtain, without any verbal Q&A, and suddenly a field that used to be dominated by men became pretty much 50/50, and all the peo
55.
by tkfu 6y ago
In most cases, it’s not so much a considered security posture and more that Yocto and other embedded builds tend to use dropbear instead of openssh because it’s smaller, and dropbear doesn’t support sftp.
56.
by tkfu 6y ago
> I'm not quite sure what you're saying here. Are you claiming that you can push a commit to userA/project and then view it under the Github web interface for userB/project (assuming one repo is forked from the other)
57.
by tkfu 6y ago
No, not even a little bit. There is a gigantic gulf between an organization with power in the situation making an official finding, and an individual with no power over the situation looking at the facts and forming a conclusion.
58.
by tkfu 6y ago
> that can run pretty much every widely available open source operating system. That's just not true, though. Here's a git repo listing what works and doesn't work in Linux for all of the macbook pro models since 13,1 (rel
59.
by tkfu 6y ago
Are you familiar with Prawn [1]? Perhaps I just haven't bumped up against its limitations yet, but in my experience it's exactly what you're asking for. Of course, it's in Ruby, which isn't to everyone's taste,
60.
by tkfu 6y ago
I have to confess, I was a solid halfway through before I realized it was satire.

More ›