daave
daave on Hacker News
Posted by
daave on Thursday July 09, 2026 @10:06AM
from the show-hn dept.
https://evenkeel.c6e.me/
EvenKeel is an LLM-powered chatbot that helps with budgeting, financial planning, retirement savings, tax optimization, etc.It is a harness around Gemini 3 Flash Preview that provides a library of skills for things like: evaluating a house purchase, insurance planning, portfolio asset allocation, etc. as well as tools for doing financial math and Monte-Carlo simulations.You can upload files as...
Posted by
daave on Saturday February 14, 2026 @06:19PM
from the show-hn dept.
https://github.com/dgpc/LORE
I've been using the Edison V3 robot from Microbric (https://meetedison.com/technical-v3/) to introduce my kids to programming.The provided web-based editor that uses WebUSB to flash programs to the robot, and a REST API to produce MicroPython bytecode to run on the device, works just fine (https://www.edpyapp.com/v3/) -- but I wanted to give my kids a fully offline experience with no web...
HackerNews - aka local news for residents of the Bay Area, Seattle & NYC
I wonder what percentage of the world’s software engineers live in these 3 cities?
Posted by
daave on Friday September 22, 2023 @12:45AM
from the medium.com dept.
You're certainly more of an authority on it than I, so I trust when you say most schemes don't keep long-term keypairs around; but of the two companies I've worked at that use SSH CAs: one used Teleport, and the other had long-lived keypairs, but fairly-short-lived certificates -- you had to get your public key re-signed each day. They used Yubikeys to store (or maybe just unwrap?) the private key material during the SSH handshake; much as a TPM or the Secure Enclave could be used to do this.
This is a non-sequitur, even if you use SSH certificates you still need a public/private keypair, hosts just authorize the key by checking the signature from a trusted CA on the public half of the user key. The OP is about a way to store the private key part of the user key that can't be extracted even with physical access to the machine. So, this is an equivalent/alternative to using a YubiKey, that is conveniently built in to a popular piece of hardware; not something orthogonal to using SSH certificates.
Re caching:
I had a look into it, and it seems we set the following headers when retrieving user images:
> cache-control: public, max-age=3600
So I believe your browser _should_ be caching these.
Done -
https://radiopaper.com/StavrosBeing able to change your email address is a known gap, sorry about that. For now if you want to use a different email you'll need to make a second account. We plan to make account merging possible in the future.
A short-sighted technical decision on my part: we use the Firebase Auth UIDs as our internal user IDs, but Firebase Auth does not allow you to have multiple email auth-providers on a single account. So we need to add a layer of indirection in our data model.
Yes! They will receive an email with the message, and some boilerplate explaining that it was sent from Radiopaper and that if they reply to the email the message will be published. They'll also receive a link to view the post on the site if they prefer.
https://radiopaper.com/aboutIt's helpful feedback that this isn't as discoverable as it should be. If you hover your cursor towards the bottom of the explore page, some links show up.
We don't have usernames!
You can log in with OAuth, or by Email.
You can change your _display name_ on your profile page, and that's what appears publicly on the site (your email doesn't appear publicly, even if you log in by address!).
Today to get a custom profile URL like radiopaper.com/Dave, you just need to ask and we'll create an alias for you. There isn't a self-serve alias mechanism available today, but we're thinking about how to provide one. Any profile can be linked by the URL radiopaper.com/uid, for instnace my profile can be reached at https://radiopaper.com/user/AwQLwnOgQFdyDfNoYfNCSSsVdx43, "Dave" is just an alias.
Clearly having separate concepts of login method vs display name vs profile URL is all a bit confusing, this is helpful feedback!
Adding a feature to block specific accounts is on our short-term roadmap.
We'll also endeavor to block accounts from the platform that violate our policies (https://radiopaper.com/policies).
Hacker News has definitely pushed us out of the free tier for today, but these services are still impressively cheap. We may have a $5 cloud bill this month.
The ability of the OP to accept or ignore replies is in addition to, not instead of, regular spam filtering techniques. Certainly we'll want to automatically block bots and other bad actors that violate our policies to reduce the burden on users.
Thanks for the feedback!
1. We're certainly looking into this, and other approaches to content discovery.
2. You can already add bios! Go to to your user page (link in the top-right), and it should be clear how to add a bio.
3. Thanks for the suggestion, we'll definitely think about this more.
Michael,
So glad that you're excited to use the platform.
Would you like a custom alias (radiopaper.com/MichaelLeonhard or similar)? At the moment we provision those manually, on-demand.
We saw your message to Socrates, I'm afraid he's not around to reply today, so it'll likely remain unpublished.
Thanks for taking a look! For now there are two ways to find an interlocutor:
1. Send a message to someone you already know, using their email address.
2. Comment on or start a conversation with someone whose post you find interesting.
We expect to add more features around discovering both users and conversations in the future.
Fellow Seattle-worker here
As a counterpoint- I take express bus 545 from Redmond to Seattle between 8 and 9am on weekdays, and there’s typically less than a half dozen people on the bus. I get from my home to the office in 30-40mins. The slowest part is the tiny stretch of I-5 with no bus lane.
I don’t think public transit has failed to keep up, it’s under-utilized, in part due to anxiety about COVID. These same routes were jam packed in 2019.
I use LastPass’s Emergency Access feature for this.
You can designate people who can access your Vault, after a certain waiting period. If they request access prematurely, I can revoke it during the waiting period.
There are written instructions for my next of kin on what to look for in the Vault.
The main difficulty is if my next of kin forget their LastPass master password.
I’ve been thinking of distributing a key via a set of USB stick using Shamir’s secret sharing, with written instructions to use them to recover a backup of the Vault kept offline… but have not gotten around to this.
You could achieve this with CSS by using “vw” units for everything, including font sizes
It's not pointless, but I do think it's reasonable to question whether this is the
best thing one can do to have an impact.
Could the time spent taking the neighbors trash away be spent doing something even more impactful?
Is the interaction with these neighbors caring and educative, or antagonistic? In the latter case they're unlikely to emulate it or pass on the idea to others.
If you're paying off every month, why does APR matter?
Agree with finding good rewards and I'd substitute low APR for low/no annual fee.
I take it the author is not a fan of w3schools.com, a web site that's been around for a very long time and is highly ranked for many html-related queries.
Personally I find most of their content to be pretty decent, so I wouldn't filter it out as a rule.
Also in Australia they're called chicken burgers.
Before moving to the US I always thought it was the style of bun that made it a 'burger', whereas if you put it between two pieces of sliced bread it would be a 'sandwich'.
Seems unlikely to be a sustainable business.
For GEDMatch, Ancestry.com, 23andMe, etc, most of the value comes from being able to aggregate many people's data. If they had to delete it after collecting, they'd have to charge a lot more, and there's just no market for that.
Perhaps they could anonymize the data (at least, purge foreign key references to account/billing info) after 6 months, but not delete it.
That page links to
https://cloud.google.com/terms/data-processing-terms, which has a lot more detail.
I believe usage for ads is highlighted on the non-legalese privacy page because it's a common question/concern, but the terms specify that data can only be processed as requested by the customer (IANAL, but that's my read and understanding as a Googler who works on Cloud infrastructure).
Google states unequivocally in its Cloud privacy documentation:
3. Know that customer data is not used for advertising.
You own your data. Google Cloud does not process your data for advertising purposes.
https://cloud.google.com/security/privacy/
Hopefully folks find this helpful for understanding their tax liability under the new Tax Cuts and Jobs Act, and how it may impact their budget in 2018. Let me know if you have any feedback!
Posted by
daave on Tuesday January 02, 2018 @12:16PM
from the show-hn dept.