Hacker News: pgraf

New comment by pgraf in "The founder's playbook: Building an AI-native startup"

pgraf — Wed, 17 Jun 2026 22:44:29 +0000

This problem really bothers me as well. I think that ultimately this problem boils down to reducing search cost[0], which the internet has already partially done. I think AI will reduce them further if it is not captured by the advertisement industry for the average user. However, we cannot assume a fully rational customer in the real world. Especially in software, the customer does not know what they are looking for most of the time. Further they cannot evaluate how good your offering is vs competitors without investing a significant amount of time, which in turn increases search cost.

[0] https://en.wikipedia.org/wiki/Search_cost

New comment by pgraf in "Google employee charged with $1M Polymarket insider trading bet on search term"

pgraf — Thu, 28 May 2026 13:07:12 +0000

Pretty ironic find: Extracting knowledge from cryptocurrencies - Michele Spagnuolo https://www.youtube.com/watch?v=9P04hm7tmgs

New comment by pgraf in "Goodbye Visa and Mastercard: 130M Europeans switching to sovereign payment"

pgraf — Wed, 20 May 2026 15:53:49 +0000

Wero uses AWS for their infrastructure... So much about their sovereignty focus.

Source(German): https://netzpolitik.org/2026/uneingeloestes-versprechen-auf-...

New comment by pgraf in "Slowness is a virtue"

pgraf — Thu, 18 Dec 2025 14:36:49 +0000

The quip about IQ tests might be true for common range IQ tests, but IQ tests that test for very high IQ like the Ultra test [0] are untimed and unsupervised.

[0] https://megasociety.org/admission/ultra/

New comment by pgraf in "Amazon to invest another $4B in Anthropic"

pgraf — Fri, 22 Nov 2024 23:13:45 +0000

Could you maybe post it here? I think many of us would find it useful to try.

New comment by pgraf in "Homemade AI drone software finds people when search and rescue teams can't"

pgraf — Mon, 07 Oct 2024 15:28:19 +0000

I don‘t see any hint of AI being used here, but rather a handcrafted computer vision algorithm. Can anyone more involved in the matter elaborate if there was an actual AI model used?

New comment by pgraf in "CUNY paid Oracle $600M for its HR software (2013)"

pgraf — Wed, 18 Sep 2024 20:57:06 +0000

Sorry if that came around as rude. From personal experience I have not met any professor in my life who could lead such a project, let alone with students that don’t have any work experience… And you imply there should be multiple of them for the project to succeed

New comment by pgraf in "CUNY paid Oracle $600M for its HR software (2013)"

pgraf — Wed, 18 Sep 2024 18:27:15 +0000

> I get that there would be risk, but if it was under the supervision of professors (who hopefully are good at building, not just lecturing theory) […]

Good joke here! If you are actually serious, please tell us which university you encountered where the majority of professors actually did something productive in computer science

New comment by pgraf in "Kim Dotcom's extradition to the U.S. given green light by New Zealand"

pgraf — Thu, 15 Aug 2024 18:40:41 +0000

> The US government is so powerful, they are the only country that enforces a draconian global taxation scheme on any citizen or person who has ever held a US green card […]

While it may be true that they are the only ones able to do it effectively, there are some other countries with citizenship-based taxation. According to Wikipedia[0] these currently are: Hungary, Eritrea, Myanmar and Tajikistan

Some other countries have similar policies for tax heavens.

[0]: https://en.wikipedia.org/wiki/International_taxation#Citizen...

New comment by pgraf in "Is "Rich Dad Poor Dad" a Fraud?"

pgraf — Wed, 14 Aug 2024 13:49:06 +0000

On another note the author of the book, Robert Kiyosaki, has also been a rampant promoter of Bitcoin. Just recently he predicted the price of one Bitcoin to be 10 million USD soon: https://www.nasdaq.com/articles/robert-kiyosaki-predicts-10-...

I don't think you should take someone who says that seriously for your financial planning.

New comment by pgraf in "Comparing HTTP/3 vs. HTTP/2 Performance (2020)"

pgraf — Tue, 13 Aug 2024 14:54:59 +0000

Care to elaborate?

New comment by pgraf in "Linux Network Performance Ultimate Guide"

pgraf — Sat, 27 Jul 2024 11:57:08 +0000

If I may ask, what is your use case so that a L3 tunnel does not suffice?

New comment by pgraf in "On Building Systems That Will Fail (1991)"

pgraf — Sun, 14 Jul 2024 17:47:27 +0000

One quote that I find funny from today’s point of view:

As we approach the present, corresponding to a personal computer, the graph really should become more complicated since one consequence of computers becoming super-cheap is that increasingly, they are being embedded in other equipment. The modern automobile is but one example. And it remains to be seen how general-purpose the current wave of palm-sized computers will be with their stylus inputs.

New comment by pgraf in ""Out of Band" network management is not trivial"

pgraf — Sun, 07 Jul 2024 09:46:58 +0000

Sounds like a problem that should be (rather easily) fixable in the Operating System, no?

If the emergency call doesn’t go through, try the call over a different network. This would also mitigate problems we see from time to time where emergency calls don’t work because the uplink to the emergency call center was impacted either physically or by a bad software update.

New comment by pgraf in "RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems"

pgraf — Mon, 01 Jul 2024 13:36:30 +0000

Genuinely curious, how would you block an attacker from getting to your SSH port without knowing the path you will connect from (which is the case for remote access) at configuration time? I don‘t see how Path-Aware Networking would replace a VPN solution

New comment by pgraf in "Chat Control Must Be Stopped – Now"

pgraf — Tue, 18 Jun 2024 12:10:56 +0000

FYI, 84% of ID has voted pro chat-control in 2021.

https://mepwatch.eu/9/vote.html?v=134463&eugroup=ID

New comment by pgraf in "What You Get After Running an SSH Honeypot for 30 Days"

pgraf — Sun, 16 Jun 2024 07:30:47 +0000

Just be aware that with your strategy “blocking 50% of unwanted traffic” means blocking non-attack traffic, as these Internet security companies are mostly legitimate. The automated attack traffic that you actually want to block is in the other half and will frequently change IPs.

New comment by pgraf in "Microsoft Chose Profit over Security, Whistleblower Says"

pgraf — Thu, 13 Jun 2024 15:10:57 +0000

Imagine a major bridge that was built by a contractor. A internal safety inspector repeatedly warned his supervisors of structural deficiencies that could lead to the collapse of the bridge. Furthermore, in the pass of time two external sources publicly warned about the issue, but the company downplayed the importance. Finally, the bridge collapses. It becomes evident that the company did nothing about the issue because it didn‘t want to loose contracts selling more flawed bridges. The public would justifiably go nuts, and there would be legal consequences for everyone involved.

What is different in our industry that companies (and managers) get away with such malice?

New comment by pgraf in "Microsoft Chose Profit over Security, Whistleblower Says"

pgraf — Thu, 13 Jun 2024 15:00:51 +0000

It is true that nothing is 100% secure. Sitting on a major security vulnerability internally with a motivated employee pushing to fix it and doing nothing for business reasons is not negligence, but malice. People in the chain of command need to be held accountable for this.

New comment by pgraf in "A Single Vulnerability Can Bring Down the JavaScript Ecosystem"

pgraf — Sat, 08 Jun 2024 19:34:36 +0000

TLDR: A Denial-of-Service vulnerability triggered via cache poisoning on registry.npmjs.org which can render individual packages inaccessible

I don't see the big security impact that the headline suggests, as active big-scale exploitation would likely be quickly noticed and fixed. The most interesting attack vector IMHO would be to block individual security fixes to packages on a small scale.