Hacker News new | past | comments | ask | show | jobs | submit | lowdest's comments login

Some of the cryptocurrency casinos pioneered having cryptographically signed random sequences that are revealed after the game is over. That way you can confirm that the game was fair. It's not a very popular feature, however, as it's not a major selling point for most people.


I fail to see how that helps considering all digital casinos likely use a similar form of pseudo random number generation and the crypto "guarantees" won't prevent people from using verifiers during play.


That only prevents a small percentage of ways to cheat.


I use to play on Full Tilt with guys from work all the time.

Quite often I would be at a table with someone I know and chatting on the side.

We wanted to beat each other though for bragging rights so never colluded. Thinking about what could be done though if sharing card information is really bad. There are so many spots that knowing for certain 2 cards have been removed from the deck would be an absolutely massive advantage.

I can't even imagine the schemes real cheats have come up with.


The answer key to the first quiz says "1. a"


OKCupid was doing pretty well at this until they were acquired.


Yeah I just mentioned this in a different comment. OKC stunned me when it came out because it seemed so interesting and effective. I met my ex-wife on there! Ha.


Hundreds of thousands. My employer alone probably has 1000.


No. I don’t think so. I think if you took many engineers and sat them at a computer and asked them to stand up a whole dev staging prod system they wouldn’t be able to do it.

I certainly would not, or it would take me a significant amount of time to do properly. I have been a full stack dev for 10 years. Now take that one step further to someone whose only interaction with a development is numpy, pandas, julia, etc…

You are, in typical HN style, minimising the problem into insignificance.

This is /not/ a “stick it behind an aws load balancer and on one of their abstracted services that does 99% of the work for you” - that would be less difficult.

E: love how this is getting ratioed by egotistical self confessed x10 engineers no doubt. Some self reflection is needed on your behalf. Just because /you/ think you would be capable, does not mean that the plethora of others would be able to.

What likely happened here is an ingress rule was set up wrongly on iptables or equivalent.. something many of your fellow engineers would have no clue about. An open dev database is rather normal if you want something out of the door quickly, why would you worry about an internal accessible only tool’s security if you trust your 10 or so staff. Have a think about the startups you have worked in (everyone here is a startup pro, just like you are - remember!) and what dire situation your mvp was in behind its smoke and mirrors PowerPoint slide deck.

Yes this was disastrous for PR. No it is not a problem solved in its entirety entirely by learned engineering experts like yourself.

Oh here. A comment from ClickHouse saying there is a legitimate reason why this will have been configured this way and happened https://news.ycombinator.com/item?id=42873446


I would consider it table stakes for an intermediate level engineer at a big company (which would have well defined processes for doing this safely) or a senior at any other company (on the assumption some of that infra has to be set up from scratch). If 10 years of experience hadn’t taught me this yet, I would personally be concerned how I’m spending my energy. I am roughly at the 10y mark, and I would estimate I have been competent enough to build a public facing application without embarrassing public access issues on my own for at least 4 years. Even before that, I would have known what to be scared of / seek help on for at least 7 years. I guess I could be more unusual than I think, but the idea that at 10 years anyone would be ok not knowing how to approach such a routine task is baffling to me.


HN is a bubble. The expectation that your colleagues are /experts like you/ is unrealistic. To stand something up like this, which is entirely on bare metal - this is a task many would find challenging if they are entirely honest with themselves and put their egos to the side. Your typical swe thinks that nothing is impossible.

There was a recent comment which said along the lines of “I used to watch figure skating, seeing them race around and spin, and think no big deal. It was only when I went on ice that I realised how difficult and impressive what they were doing was” - this is exactly the trap SWEs are most guilty of. — /this/ is what you learn as a staff level.


You are talking to the ice skaters. They expect you to do up your laces. Setting a password on a database is a something I would expect of any company capable of asking for a credit card.


everything you say is true, but I don't think any of it actually applies to being able to safely deploy user facing systems. I would certainly not trust myself to do all possible aspects of setting up a user facing system completely from scratch (ie nothing but a libc on linux or whatever) I would not trust myself to write correct crypto, for example. But I have a good sense of what I can trust myself to build relatively safely. And of course i'm not claiming that "knowledge of where to trust myself" is by any means flawless. But Even in college I made applications for people that were exposed to the public internet. But I was very aware of what I felt I could trust myself to do and what I needed to rely on some other system for. In my case I delegated auth to "sign in with google" and relied on several other services for data storage. There were features that I didn't ship because I didn't trust myself to build them safely, and I was working alone. Now I would not necessarily expect every CS student to be able to do this safely, but a healthy understanding of one's own current limitations and being willing to engineer around that as a constraint is pretty achievable, and can get you very far.


Depending on your perspective, that's either very concerning or a great business opportunity for this decade's Heroku to enter the fray.


This is definitely not something hosted on a P/SaaS.


Yes, I'm aware that most devs can't do it. I'd guess 1 in 10 can.

>An open dev database is rather normal

Not open to the internet it's not! Internal network, perhaps.

>someone whose only interaction with a development is numpy, pandas, julia, etc

This person should be aware of their limitations and give the task to someone who knows what they're doing.


> I think if you took many engineers and sat them at a computer and asked them to ...

There are many in the software engineering field which could not satisfy a request of this nature, for any reasonable form of "asked them to".


It sorta sounds like their AI would've done it better, yeah...


I don’t understand this comment? Is it unusual to request something like this? OP’s comment was saying that all 1000 or so (and hundreds of thousands of others) of his colleagues would be able to do this if asked?

I don’t know if you are in agreement with me or not


I am agreeing with your premise of asking a random s/w technician to deploy an app fairly securely would be problematic and then generalized it to include many tasks related to s/w engineering.

So we're good. :-)


I once used booking.com to book a block of several rooms for a wedding. Paid and confirmed. When we arrived, the hotel had no record of our reservations! The explanation was that their sync with booking.com was prone to failure and hadn't been updating for several weeks and they hadn't noticed. Luckily, they still had enough rooms available for us, but I will never use a 3rd party site again and I will always call ahead to confirm the reservation is still on the books.


Yup I used to do this with tile floors as a child.


I do this when I'm trying to really focus on what the speaker is saying. It helps keep my mind from wandering. It's completely voluntary, though.


No. US and Canada share a language and have historically intermingled their populations significantly. We're the same because we have largely similar daily lives as individuals, we have similar problems, and we're populated by people of similar origins. If, for example, conditions caused our paths to diverge, an extreme example would be the split between East and West Germany, then you would expect differing views. Even prior to modern media we were very similar peoples.


Une partie du Canada ne parle pas Anglais.


Yes ~9% of the Canadian population is unable to hold a conversation in English. We are talking about the other 90%.


I admire your dedication to preserving life in the face of discomfort! I personally use a two-tiered approach: if the spider inhabits the DMZ, they may persist unmolested. This includes most parts of the house where we aren't likely to come into physical contact. However, protected territories include my bed, my clothes, and pantry. Venturing into protected territory as an arachnid is, unfortunately, a capital crime.


Same here! Have you found a solution? I was pretty happy with 3 miles 3-4 times per week, 10 to 11 minute pace, but apparently for me that's pushing too hard according to zone training. I tried going much slower, and even then my HR raises more slowly, but eventually gets way up there. Alternating my slowest possible jog and walking has taken all the fun out of running for the time being.


When people talk about "Zone 2" they generally do not refer to a specific % of max heart rate. The simple answer is at this volume of training (3-4 times a week 30 minutes) don't even worry about it. Just run. Zone 2 is an optimization. Can you talk while running at this pace? Can you hold a conversation? I think it's unlikely you can over-train at this volume though if you've never run maybe you ease into this over a couple of months.

Adding distance/time into your program is probably going to help, as long as you don't feel too tired/sore or that you're over-training

Consider adding interval training to your regime. That's a more time efficient way of improving your VO2MAX (which should translate to your overall performance). E.g. 1-2 minutes 90%-100%, 1-2 minutes walk/slow/jog, x3-5 (this is rough, do some reading and see what works for you).


So, I thought this might be the case. But I never got a good answer on if power zone or heart rate zone was what to pay attention to. Since I'm not competing and don't plan to, I don't really care that much. But, no reason not to try and train a bit more properly. :D

When biking, it really doesn't help that I have some silly hills surrounding the house. Even if I'm not going all out, a 10% climb takes its toll.


My ex lost 80 pounds and went from unable to run to running ultras and she found that she had to alternate between walking and running in the beginning to keep her heart rate in the lower thresholds. On the converse side, maybe integrating some strength training or speed workouts or stair climbs will help you develop a strength reservoir to make it easier to run at a low heart rate.

Now that you've recognized how gentle a low heartrate feels I'm sure a conversational pace is totally adequate for staying under your lactic threshold (but if you could sing you're going too slow!)


Kudos on that progress! I don't see myself moving to marathons anytime soon. I /think/ I could do a 5k in about 30 minutes. I would be zone 4 in heart rate for dang sure, though. :D


Supposedly this is the definition: "Zone 2 is defined as the highest metabolic output/work that you can sustain while keeping your lactate level below two millimole per liter.". Unless you can measure lactate level you just don't know what heart rate this corresponds to. The heuristic that's used is "able to have a conversation".

For a beginner a good tip is just to go a little bit easier than they think they should be going. Once you've built some sort of aerobic base your training should start including intervals and runs that push you harder.

There are two risks in pushing yourself too hard. Injury and over-training.


So fairly removed from heart rate? Can I assume I'm not going to hard if I recover rather quickly?


There should be some correlation between lactic acid levels and feeling sore. I honestly just don't worry about it. Just getting out there and doing something is better than sitting around. Listen to your body. If you're not recovering, or not sleeping properly or are too sore, dial back a little on either volume or intensity. My Garmin gives me an estimate of recovery time, you really have to work hard to stretch that recovery time into more than 48 hours (e.g. running a 10K race). You can vary your workouts between something that feels extremely easy to pushing yourself a little more.

EDIT: another thing I didn't mention is that in terms of injury you want to give your body plenty of time to build more distance. Most of your joints and other tissues take longer to adapt than cardiovascular. I think this is where people can get into potential injury situations by ramping up too fast. I personally also try to run on soft surfaces (trails etc.) since I find hard surfaces (roads) a lot more punishing.


"Zone" training is primarily a way for high mileage runners to get the physical adaptation of running with lower risk of injury on easy days. If you're running < 20 mpw there should be minimal risk of injury and you should focus on increasing mileage and not on heart rate (which is highly variable depending on the person anyway, and should be properly determined with a LT test).


You cam just ignore the Zone 2 advice as a relatively new runner. It's more useful when you're running high mileage.


Thanks to all of the peer answers here!

I pretty much settled on what all they were saying. I was taking the exact path you outlined. Since that seems to be working fine for me, and I'm also adding weights, I figured I would wait and try again later. Probably in a year or so, if I can keep up this schedule. Good luck on your exercise!


As other people say here, 9 to 12 miles a week is unlikely to put you in need of that kind of specialization. People I know that do zone training are running 30-50 miles a week, some more.


I did hiit training for a year 3 times per week and now I struggle to get my heart rate up to that same point. My muscles give up or just can't sustain the intensity necessary.

My heart rate goes down way faster, so if I stop for 1 second (literally), my heart rate drops immediately and it takes a lot of effort for it to go back up.

I suspect at this point training in zone 2 is trivial, my body gets naturally there

TL; DR; train hard first, your heart gets stronger and brings you to zone 2 naturally?

I'm no athlete or expert, so please do your research and ignore everything I said


Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: