Hacker News: lvh

New comment by lvh in "SQLite as an Application File Format"

lvh — Fri, 28 Nov 2025 15:43:30 +0000

"The operating system makes it easy to mess with" doesn't seem like a particularly useful property for application file formats.

New comment by lvh in "Sguaba: Hard-to-misuse rigid body transforms for engineers"

lvh — Sat, 31 May 2025 21:41:55 +0000

That doesn't really explain why, you're just saying that the thin you claimed was desirable is desirable.

(I don't disagree! I'm just saying: you haven't advanced your argument or answered GP's question.)

New comment by lvh in "Rippling suing Deel for espionage after Slack honeypot worked"

lvh — Mon, 17 Mar 2025 16:32:37 +0000

This is a fantastic example of applying deception strategies in practice as part of a detection & response plan. The most common use case is as a canary, but it absolutely works as evidence of compromise, too.

I won't comment on the specifics of the case (the complaint comes across as very convincing), but I will remind people that it's common for investigations to ostensibly show an employee doing bad things, when in reality it's e.g. that employee's credentials/devices that are compromised.

New comment by lvh in "Datomic and Content Addressable Techniques"

lvh — Mon, 16 Sep 2024 21:01:04 +0000

Some of our customers, like Tailscale, are a helluva lot more picky than that.

New comment by lvh in "Datomic and Content Addressable Techniques"

lvh — Mon, 16 Sep 2024 19:42:00 +0000

Re: hashing: Yes, but I'll leave that one to Paul who is a lot smarter than I am :)

Re: QA: can you say a bit more about the type of coverage you're worried about? Is your concern that we'd be missing APIs, or that the storage format itself breaks, resulting in fact elision? payne (the underlying project) has a borderline obnoxious amount of tests, but that doesn't mean we didn't miss anything :)

New comment by lvh in "Datomic and Content Addressable Techniques"

lvh — Mon, 16 Sep 2024 19:36:28 +0000

FYI: we're planning a followup post for people who are less interested in the Datomic mechanics and more interested in the usefulness to investigations and other security functions. Informally, I think of it this way: your SIEM has the deltas, but often you want the contextual states in between the deltas (and a lot of investigation is about trying to reason about that state). We built this tool originally to support that, and it turned out that approach was also super useful for things like compliance, CSPM...

We already wrote a high level blog post here: https://www.latacora.com/blog/2023/11/01/our-approach-to-bui... -- but the one I'm hoping to write is more of a case study.

New comment by lvh in "Datomic and Content Addressable Techniques"

lvh — Mon, 16 Sep 2024 19:34:13 +0000

(I'm one of the founders of Latacora and reviewed the post.) If any of you are at Heart of Clojure, I'll be there both wearing my Latacora hat and my Clojurists Together hat :)

Datomic and Content Addressable Techniques

lvh — Mon, 16 Sep 2024 15:53:33 +0000

Article URL: https://www.latacora.com/blog/2024/09/13/datomic-and-content-addressable-techniques/

Comments URL: https://news.ycombinator.com/item?id=41557345

Points: 166

# Comments: 40

New comment by lvh in "NSA releases 1982 Grace Hopper lecture"

lvh — Tue, 27 Aug 2024 10:48:01 +0000

I don't know if I count as a "feline friend", but: SIDH kept the DH shape. Being able to upgrade the protocols we had relatively closely is appealing. "Structure is useful but seems precarious" wasn't exactly secret knowledge.

New comment by lvh in "NIST Announces Post-Quantum Cryptography Standards"

lvh — Sat, 17 Aug 2024 10:51:51 +0000

We did an updated version of the Cryptographic Right Answers for PQC. Given how quick the field is moving, I'm sure we're going to have to edit it a bunch :)

https://www.latacora.com/blog/2024/07/29/crypto-right-answer...

New comment by lvh in "NIST Announces Post-Quantum Cryptography Standards"

lvh — Sat, 17 Aug 2024 10:50:36 +0000

These standards are developed out in the open.

Are you suggesting a true backdoor, or just "the NSA knows something about lattice algorithms the rest of us don't"?

Cryptographic Right Answers: Post Quantum Edition

lvh — Thu, 15 Aug 2024 08:36:42 +0000

Article URL: https://www.latacora.com/blog/2024/07/29/crypto-right-answers-pq/

Comments URL: https://news.ycombinator.com/item?id=41254094

Points: 109

# Comments: 52

New comment by lvh in "Google lays off its Python team"

lvh — Sat, 27 Apr 2024 19:24:04 +0000

The additional information you need is that that's what Thomas Wouters does (and has done for as long as I've known them, which is many, many years).

New comment by lvh in "ASML dethrones Applied Materials, becomes largest fab tool maker"

lvh — Wed, 21 Feb 2024 19:37:16 +0000

You should try C-f "Chinese".

New comment by lvh in "Sam Altman seeking trillions for AI chip fabrication from UAE, others"

lvh — Fri, 09 Feb 2024 23:30:01 +0000

We're talking about chips: stuff optimized for inference and training. It may have a lot of memory, it may be able to perform a lot of operations, but it would be difficult for it to enforce high-level concepts like "woke ChatGPT".

New comment by lvh in "Handbook of Applied Cryptography"

lvh — Tue, 19 Dec 2023 23:08:29 +0000

Thanks! I'm glad you liked it. Happy to answer any questions about that talk.

New comment by lvh in "Prompt engineering"

lvh — Fri, 15 Dec 2023 19:02:13 +0000

How do you know this person (Tal Broda) made this? It doesn't seem to list an author.

Our approach to building security tooling

lvh — Tue, 05 Dec 2023 16:25:50 +0000

Article URL: https://www.latacora.com/blog/2023/11/01/our-approach-to-building-security-tooling/

Comments URL: https://news.ycombinator.com/item?id=38532966

Points: 6

# Comments: 0

New comment by lvh in "Three chips in and Google Tensor is on life support"

lvh — Mon, 27 Nov 2023 23:45:19 +0000

They may often be used with small embedded computers, but 1 Coral TPU handily beats even a top-end CPU for the stuff Frigate needs it to do -- and it does it at minuscule power draw. Sure, it's inference-focused, and that means it has limitations: it sucks for e.g. speech models, too. But it's pretty great at what it does and gets used in real applications too. My guess is you saw the USB-C model, but they do M2, big cards with multiple M2 slots, and miniPCIe (popular in industrial applications) too.

New comment by lvh in "Three chips in and Google Tensor is on life support"

lvh — Thu, 23 Nov 2023 12:12:45 +0000

They sold (and continue to sell) TPUs under the Coral brand, and they're pretty popular for edge inference (e.g. Frigate).