jakejnichols
Re:Tell HN: Riseup.net fails to update canary; fingerprints deleted wi...
on Monday November 21, 2016 @04:41PM (#13009481)
Don't use things like RISEUP.NET. You shouldn't be running mailing lists at all. You shouldn't be using Jabber and asking all your peers to enable encryption.
So what are the types of services one should use?
Re:How to Build Muscle
on Saturday October 01, 2016 @01:26PM (#12618878)
This isn't a bad guide, but for those new and interested in the topic, the Reddit r/fitness subreddit ( https://www.reddit.com/r/Fitness ) has a wiki which is probably the best all around guide out there to getting fit, muscular, and strong: https://www.reddit.com/r/Fitness/wiki/index
It is both entirely free and substantially better than this guide. It is based on the combined experience of people who are much further along in their fitness journey than Julian. There are good answers to all common questions and there are solid programs that match various personal preferences.
Re:A response to LambdaConf's decision by someone who was consulted
on Sunday April 03, 2016 @07:41PM (#11418421)
"Let me say this unequivocally: Yarvin chose to produce this controversy. This is not an accident. He is not a pitiable figure who is persecuted for his beliefs. He is not simply an eccentric functional programmer who, like you or me, happens to hold a couple of beliefs out of the mainstream. Nope.
Yarvin’s hobby is writing hateful things, publishing them, and cultivating a movement of hateful people working toward hateful ends. This controversy serves those ends. He knew when he submitted his proposal that, if accepted, he could count on at least a brief flurry of interest in his ponderous, indulgent treatises."
This is a really twisted view. Yarvin has been working on Urbit for many years and it is his life now. He signed up for the conference to promote it. His political blog has been dead for over two years. I don't see any reason why he would want this controversy, and he claims himself he signed up for the conference to talk about Urbit -- https://medium.com/@curtis.yarvin/how-to-respond-to-hostile-...
I also think it's a major stretch to call his blog "hateful." (And what does that even mean, OP is pretty hateful toward Yarvin, should OP be banned too?) Yeah, his Moldbug character was an edgelord, writing in the style of 18th century pamphleteer. So what. The supposedly terrible quotes were taken out of context and misunderstood or distorted (again, see link above). Much of the blog is quite fascinating history and political analysis, written in ironical style. I'd hate to see the next interesting, edgy blog scared to start writing, even under a pseudonym, for fear someday people would try to ruin their careers.
Re:CacheBleed: A Timing Attack on OpenSSL Constant Time RSA
on Tuesday March 01, 2016 @09:25AM (#11202713)
FYI, for those are just worried about their own servers, the important part is section five, which I have copied below:
-------------------------------------
Q5: Should normal users or system administrators be worried?
OpenSSL has classified this vulnerability as "low severity", which we agree with. In order to mount the attack, the attacker has to be able to run the attack code on the same machine that runs the victim code. CacheBleed is a complex attack and there are much easier-to-exploit vulnerabilities in personal computers that it is unlikely that anyone would use CacheBleed in such an environment.
Cloud servers that commonly run mutually untrusting workloads concurrently are a more realistic attack scenario. A malicious client of a cloud service could use the CacheBleed attack to spy on other clients. While cloud servers employ techniques to isolate workloads of different clients from one another, these techniques only isolate the software and do not prevent hardware-based attacks, such as CacheBleed. Nevertheless, due to the complexity of the attack and its sensitivity to system noise we believe it is not currently a practical risk to cloud environments.
The attack only works between processes running on two hyper-threads of the same core. Disabling hyper-threading is an effective mitigation against the attack.
Re:S.E.C. Gives Small Investors Access to Equity Crowdfunding
on Friday October 30, 2015 @10:23PM (#10481573)
I think you are correct in predicting that retail investors will on net lose by investing in startups. In most cases, the best opportunities will go to the pros, leaving the amateurs to get the duds.
But, it does strike me that the Kickstarter model would be far superior if the backers got an equity stake in the company. As it works now, the backer takes a big risk in not getting a product, or getting a crappy product, yet enjoys no upside if the product is a smash hit.
It also strikes me that a barbell strategy to portfolios can be a good idea for some people. That is, invest 95-99% of your money in safe bets like Vanguard mutual funds, and then a few percent in high-risk, high-reward bets such as startups. It is unfortunate that worthy people who are not millionaires do not have the opportunity to do this. Even if people do not net make money from this, if people buy lottery tickets or go to casinos, why not allow them to risk money in a way that has potential to do good for society?
Re:Software Is Eating the Job Market
on Tuesday June 09, 2015 @08:32PM (#9689415)
Movie stars aren't a very good example. Ronald Reagan was not 100X times better actor than the next guy. He could command a big salary because he won a tournament market based on name recognition. If he works less, someone just as good gets a chance and there is the same output.
Where a 90% tax really hurts is entrepreneurship and risk taking. If that 90% tax includes taxes on capital gains, then I have no incentive to start a business or invest in a business. If it fails I lose my money and sweat equity. If it succeeds, I get taxed so much I barely make more money than if I had just worked.
One of the reasons the economy was good in the 50's despite the high taxes was that those high taxes only applied to salaries, not capital gains. Also, there were lots and lots of loopholes so a lot of people didn't end up paying that 90%.
That all said. Americans already pay a ton of taxes. There is plenty of money for UBI already. It just needs to be reallocated from failed programs and bureaucracies - such as 90% of the educational system.