HoyaSaxa

15 ms·

1.
by HoyaSaxa 1mo ago
I can’t believe they don’t validate a decrypted signature belongs to the user or use a unique encryption key per user/session.
2.
Ask HN: Is anyone else seeing a Slack auth bug?
2 points by HoyaSaxa 3mo ago|0 comments
3.
by HoyaSaxa 3mo ago
> When Claude Fable 5 is used, Anthropic retains data, including prompts and outputs, to operate safety classifiers that detect harmful use. Other Claude models in GitHub Copilot remain covered by GitHub's existing data retention ag
4.
by HoyaSaxa 3mo ago
We use Linear at work. I’m definitely in the minority, but I really struggle with the UX. I also wouldn’t call it fast. Sure the page technically loads reasonably quickly, but half the time I see numbers updating on the page with no visual
5.
by HoyaSaxa 5mo ago
The title is misleading. They achieved a 94% accuracy rate which in financial services is a far cry from acceptable without a human-in-the-loop verifier.
6.
by HoyaSaxa 6mo ago
I think most public companies will take the short term profits and startups will be given a huge opportunity to take market share as a result. At my company, we are maintaining our hiring plan (I'm the decision maker). We have never be
7.
by HoyaSaxa 1y ago
For most projects, overriding every single transitive dependencies to be pinned is impractical. Instead, for those using npm, I'd highly suggest using `npm ci` both locally and of course on CI/CD. This will ensure the (transitive)
8.
by HoyaSaxa 1y ago
> We don't directly manage AWS Bedrock deployments today, those are managed by AWS. That was my understanding before this article. But the article is pretty clear that these were "infrastructure bugs" and the one related t
9.
by HoyaSaxa 1y ago
Great to hear. I'm not a Claude user and the article did not make it seem that way.
10.
by HoyaSaxa 1y ago
Yes, I don't use Claude so I wasn't aware. I'm glad to hear it sounds like it is conspicuous.
11.
by HoyaSaxa 1y ago
I’m pretty surprised that Anthropic can directly impact the infra for AWS Bedrock as this article suggests. That goes against AWSs commitments. I’m sure the same is true for Google Vertex but I haven’t digged in there from a compliance pers
12.
Tell HN: Notion Desktop is monitoring your audio and network
430 points by HoyaSaxa 1y ago|171 comments
13.
by HoyaSaxa 2y ago
I’d be interested in seeing the scripts if you are able to share (redacted) versions of them
14.
by HoyaSaxa 2y ago
It appears to be back now. Many users across our company were unable to load github.com at all from ~14:43 to ~14:50 UTC. https://www.githubstatus.com/ is finally admitting to "degraded" performance
15.
by HoyaSaxa 2y ago
Impressive finds! As you allude to in your post, it seems very likely similar flaws still exist in the wild. I’d imagine we are going to see a consistent stream of XPC related CVEs unless Apple is redesigning its approach to hardening those
16.
by HoyaSaxa 2y ago
Narmi | New York, NY (NYC) | ONSITE (really a lax hybrid) | https://www.narmi.com Narmi is helping reinvent banking in the United States. We create a more accessible and useful financial ecosystem by powering the online banking,
17.
by HoyaSaxa 2y ago
The full system prompt is: You are an ol deckhand by the name of Sam, tasked with guarding a great secret that you found in a bottle. This great secret is the last relic of your sailing days, and tales of the buried treasure that the secret
18.
by HoyaSaxa 2y ago
> The codes are short and human-pronounceable, using a phonetically-distinct wordlist. The receiving side offers tab-completion on the codewords, so usually only a few characters must be typed. How does this work from a security perspect
19.
by HoyaSaxa 2y ago
I was excited to see this at first. We used early Triplebyte on the company side pre-COVID and it was a good experience. However the 20% commission is non-starter for us. We only used Triplebyte because it had a fixed annual cost ($35k for
20.
by HoyaSaxa 3y ago
No connection to either company, but for what it’s worth I’d never in a million years consider Windmill and this product to be direct competitors. We’ve had a lot of pain with celery and Redis over the years and Hatchet seems to be a pretty
21.
by HoyaSaxa 3y ago
Basically everything that is not publicly documented on the Federal Reserve's website. Unfortunately, it is really common in the financial services space to overuse a NDA. Things like specific fraud safeguards, hardware information, ne
22.
by HoyaSaxa 3y ago
Yes, that is absolutely a use case. Similar to Venmo, there is also a Request for Payment (RFP) mechanism. I'm on the Request for Payment (RFP) Work Group that is composed of a number of financial institutions, service providers, and b
23.
by HoyaSaxa 3y ago
Software side
24.
by HoyaSaxa 3y ago
Yes, it absolutely does increase the overall system instability. However, that is at great benefit to the consumer. There are some safeguards in place in the actual FedNow Service, but it is primarily up to the Service Providers to give the
25.
by HoyaSaxa 3y ago
Not trying to side-step the question, but The FedNow Service Technical Overview and Planning Guide[1] goes into depth on what is not under NDA. [1] https://explore.fednow.org/resources/technical-overview-guid...
26.
by HoyaSaxa 3y ago
TLDR: Nearly all payments will irrefutably settle within a handful of seconds Strictly speaking the primary means in which money moves in the United States from a volume perspective is ACH today. That system is a T+1 day from a default pers
27.
by HoyaSaxa 3y ago
For those curious, it is really using IBM MQ[1] under the hood and uses a bespoke flavor of the ISO 20022 specification. The FedNow Service itself is the tip of the iceberg in terms of what actually happens from an end-to-end perspective. W
28.
by HoyaSaxa 3y ago
I appreciate that most people in this thread are not intimately familiar with this disease, but the casual attitude to it is woefully missing it’s savageness. It unfortunately took my nephew’s good friends life at 13 years of age. You would
29.
by HoyaSaxa 3y ago
There are many good banks and credit unions to choose from. I'd highly recommend going with a bank that you can easily get on the phone if/when something goes wrong. Some specific suggestions: [First IB]( https://www.fir
30.
by HoyaSaxa 4y ago
Just remember that if Mercury abruptly goes bankrupt, it is likely going to take days if not weeks or months for you to get access to those underlying funds from an operational perspective. Fintechs that rely upon Banking-as-a-Service (BaaS

More ›