News for hackers. Stuff that matters.

uh_what

Re:EU to fund bug bounty programs for open-source projects on Sunday December 30, 2018 @05:48AM (#18788507)
Follow up: This situation is similar to when England wanted Delhi to be rid of cobras so they started offering rewards for dead cobras. The citizens of Delhi responded to this incentive by farming cobras.

What's the difference? It's a systemic flaw.

If there exists an incentive for finding vulnerabilities, there exists an incentive for introducing vulnerabilities. Bug bounties work great for closed source companies because there doesn't exist a misalignment of incentives. If Johnny keeps writing buggy code, he gets fired. If anonymous234 gets his buggy pull request approved, confederate anonymous456 gets to make a few bucks.

Follow up #2: For the skeptical downvoters, I'll put my money where my mouth is and attempt to capture the bounties using the method described above.

Re:EU to fund bug bounty programs for open-source projects on Sunday December 30, 2018 @03:17AM (#18788068)
Seems like it would quite easy to game the system. Make contributions with known vulnerabilities and then submit an anonymous bug report when the contribution is approved.
Re:Ask HN: Stripe Atlas for LLC. Worth It? on Saturday December 22, 2018 @04:14AM (#18739760)
Dig some searching and found patio11's response to a similar question: https://www.indiehackers.com/forum/you-can-now-use-stripe-at...

So in case anyone else is wondering, this is what's offered for the additional $300. For myself personally, it doesn't seem worth it at the moment.

Ask HN: Stripe Atlas for LLC. Worth It?

Stripe Atlas: https://stripe.com/atlasI'm looking into forming an LLC, and while I am a big fan of Stripe, I can't really understand the value proposition of using Stripe Atlas to form an LLC. Forming a Delaware LLC costs about ~$200 online through some other services. While Stripe Atlas does provide Azlo (https://www.azlo.com/) for LLC's, Azlo is free regardless. So what am I getting for the...

( Read More... | 2 comments | on HN )
Asking for a prescription for a painkiller will make doctors label you as a drug seeker.

Asking for a referral for an x-ray/ultrasound for your back pain will often make them go "Here, why don't you try this opioid first and see if it gets better?"

Right, which is why Bloomberg published a story about China inserting backdoor hardware on its chips. A story that was refuted by the CEOs of the companies supposedly hit by the attack and by the very sources cited in Bloomberg themselves. A story that hasn't produced a single physical compromised chip as evidence despite Bloomberg claiming that there were tens of thousands of units affected.
It's a well established but little known fact that sleep deprivation is an extremely effective short term treatment for depression. [1]

Obviously I am not recommending that anyone try it without medical supervision, but people should at least know that it's an option.

1. https://www.scientificamerican.com/article/why-sleep-depriva...

Ask HN: VC's, do you actually read every cold pitch email?

We all know that the best way to get connected to a VC is through a trusted mutual acquaintance, but of course not everybody has the network. So to the VC's on here: do you actually read every cold pitch email and, if so, how much time on average would you say you dedicate to every email?

( Read More... | 2 comments | 4 points | on HN )
Re:The Dangerous Fetishization of ‘Hustle Porn’ on Tuesday November 13, 2018 @07:42AM (#18440493)
If you were really hustling, it shouldn't have taken years. A hustler like myself could have done it in months.

/s

Re:Ask HN: Is FaceID harmfull for your eyes? on Monday October 29, 2018 @10:19AM (#18327718)
I was initially skeptical, but your video made me change my mind. Why the hell is the flood illuminator going off when you're just looking at the Control Center?
This is one of the most hilariously wrong things I've ever heard of. So if I send an invoice to [email protected] and reply from (my account) [email protected] agreeing to the terms, Facebook legally owes me the amount on the invoice?
Re:Ask HN: What sucks about where you live? on Tuesday September 25, 2018 @01:51PM (#18068706)
Your response is ridiculous. As a native New Yorker, his comments are spot-on.

His post (and this thread) is a good resource for weighing the pros and cons of moving to any city. Many people move to NYC with ridiculous expectations of living their dream and become despondent when they realize the subways smell like urine and the people can be as cold as the weather.

Flux is free...?
Your post kind of rambles on and fails to address the point that OP is making: Physics is, in fact, stuck. It's been almost 100 years since the initial clash between classic mechanics and quantum theory, and how much closer are we to unification?

And you take an extremely condescending tone while addressing OP's lack of humility while making statements attacking him for "especially from one not understanding how science actually works."

How does science actually work? Are we supposed to follow Popper? Or Kuhn? Or Feyerabend? Should we go with logical positivism or empiricism?

Re:Ask HN: What has the past 12 months taught you? on Saturday June 16, 2018 @01:56PM (#17328506)
Would love to hear the story behind this lesson if you're willing to share.
Ask yourself why you're on this site.

Is it to steadfastly argue positions far outside your domain expertise or engage in discourse and learn?

> The extra energy will kickstart processes that nurture life.

Why would that be the case? If this were the case, the biological density of the highest-temperature locations in the ocean should be significantly higher than average. This has not been observed. Quite the opposite, actually.

Secondly, in thermodynamic terms, heat is the least useful form of energy. Heat is often the waste product of a chemical/mechanical process and cannot be easily be converted into other forms of energy without significant loss.

And no offense, but water and carbon are both trivial well defined concepts. Energy is also fairly well defined.

Re:Patents: how and why to get them on Saturday June 02, 2018 @10:40PM (#17217631)
You should edit your comment to remove a certain word beginning with the letter "o". It could cost you big time in court if someone decides to infringe your patent.
Just out of curiosity, is there a specific reason you don't want to use face unlock?
Seems like that would be by design.

Ask HN: My startup is a feature, not a product

My company sells a product in a space where there are 2-3 incumbents that capture 99% of the revenue. So far, our customers LOVE our product's primary feature, but I'm afraid that once we actually become popular enough to register on our competitors' radars, they will simply copy our feature and we'll be toast.Our product is not nearly as feature rich as our competitors, but we manage to...

( Read More... | 5 comments | 8 points | on HN )

Ask HN: Is it possible to monetize a chat app?

It seems like the answer should be an obvious yes, but nobody I know (myself included) has ever paid for one. I think I've got a great idea for a chat app, but I really can't see anyone paying for it when there are great alternatives that are free. It seems like even if my app were to go viral, the endgame would be to either get acquired (like WhatsApp) or become an entire platform (like...

( Read More... | 1 comment | on HN )
I bought a custom built machine and my serial # was denied as well.

Got in touch with support and they claimed that the manufacture date was outside the applicable range (doesn't make any sense since it's custom built). Will have to escalate to someone higher up since it seems that the lower level staff aren't even aware of this program yet.

Holy hell, that explains my situation perfectly. My trackpad becomes unresponsive after a few hours use, but works perfectly fine in the morning. The battery must be expanding and interfering with the trackpad/haptic engine...
Re:Tell HN: I just wanted to say: thank you, Hacker News on Thursday March 22, 2018 @02:03AM (#16646147)
>> As impressive as your achievement is, I'm equally impressed that Google finally started addressing their perceived ageism problem.

>>> Yeah one anecdote, ageism must be solved! Good job Google, we did it!

It's posters like you that turn people off HN.