Hacker Newsnew | past | comments | ask | show | jobs | submit | smu's commentslogin

That’s really interesting. What does your routine look like?


I do weightlifting Monday, Wednesday, Friday. Full body sessions focusing on the big compound lifts. That usually takes about 1 hour + plus a little 10min HIIT finisher to get the heart rate up if I’m feeling good. Then Tuesday, Thursday I do 20-40 min run depending on how my body is feeling, generally ends up being between 2-4 miles. Saturday is a rest day and Sunday I go to the trails for a long run/hike. I try to go 60+mins for those which end up being anywhere from 5 to 8 miles depending on how many uphills I choose to tackle.

Overall I find it pretty sustainable and I really look forward to the Sunday trail run.


About the fines, there’s a second option: make them more frequent, so there’s less chance on getting away with (minor) transgressions.

This would require well staffed regulatory bodies. At least for GDPR, I don’t think we have that.


To provide some additional context to OP.

In the CRA, there’s (among others):

- reporting of actively exploited vulns or severe incidents to a national cert

- reporting obligation of vulns to the provider of that vulnerable code

- mandatory vulnerability disclosure policy (to receive vuln reports)

- obligation to provide security updates and alert customers when a vuln has become known

We’ll see how well this is all followed, but from a security perspective these are all good ideas.


As a hobby project, I started a market research/overview of the Belgian cybersecurity ecosystem [1].

This required me to write a lot more than before, although I've always enjoyed writing.

In the beginning, I wrote beginning -> end, with just a high outline in my mind. Now, I write bullets first and then expand into paragraphs. This has helped me write a lot quicker and I think the articles have become easier to read (which matters a lot online, where everyone reads diagonally).

[1] https://becyberscape.com


I hitchhiked a bit during my college days, so I feel a moral obligation to pick up others if I can. Doesn’t seem to happen as often as it used though.

Worst that happened to me was a very smelly drunk..


It’s pretty much about stretching yourself but not overstretching. The classics might be the latter for a teenager. I guess it depends on the person.


It depends strongly on the person. Blessed are those who have/had a teacher that could recommend them the right books for them at any given time. I didn't start reading for leisure again until my late twenties when The Hitchhiker's Guide to the Galaxy drew me in, despite growing up reading everything from Franco-Belgian comics to Karl May.

High school kills any interest in reading more often than not.


Not the OP, but as an avid note taker (I prefer A4 sheets), I often have trouble to keep my notes organised (spread over office, home,…).

That is the main reason I’m thinking about an electronic replacement.


Don't just go for the remarkable, it's mainly for designers with a need for sketches. For storing, searching, etc. of notes there are better alternatives without a subscription model, for example the Supernote.


Another +1 from me.

Also used Hatchbox in another project (startup w customers), it definitely was worth the money.

For fun and giggles: this is what happened when I wanted to quickly build a side project after not coding for a while (using jumpstart to go faster) https://twitter.com/ddccffvv/status/1430967157404340228


We don’t know what the second and third order effects would be. We can’t even correctly predict what the weather will be 3 days in advance. No chance that we can predict what the consequences of such a significant and never been done change would be.

Seems like a high risk play, only to use as a last resort to me.


I agree, though it seems reasonable to trial it at a small scale as soon as possible so we can gradually scale it up and understand these second and third order effects with minimal risk.


Agree, it’s the only way for us to test our assumptions.

I wonder how well the experimentation approach will work in this case though, as:

1. Effects might be subtle and outside of the expected impact area.

2. Timescale might be really important (effects over a time much longer than we anticipate. Or even a timescale that makes it impossible to run many experiments in reasonable time)


I think this is a general argument that you can make about any risky enterprise (e.g., GMOs, vaccines, etc). There's always the possibility that your testing is inadequate, you can never drive risk to 0, etc. But by starting small and scaling up very gradually (while studying carefully the whole time) you maximize the risk that you will find and mitigate problems early and "cheaply" (i.e., without committing to applying the technique to the entire world).

Anyway, the idea is to have an ace in the hole in case we run out of other options to reduce climate change--at that point, the question is "which is less risky, geo-engineering or runaway climate change?".


As these things go, it's the lowest risk play I'm aware of. You can use it in a fairly specific area, like for example over a melting ice sheet. If you stop actively using it, the droplets precipitate out after a week or two, and everything goes back to the way it was. The biggest drawback, in fact, is that it is not permanent.


Dropping salt on a melting ice sheet does not sound like a great plan.

We'd really need to invest in really detailed computer models to make sure we're not overlooking something and shooting ourselves in the foot, IMO.


Well, if civilization was destroyed by spraying a fine mist of sea water into the air from the back of a boat, I guess I would feel pretty bad. But, that seems highly unlikely, and certainly less likely than that we'll destroy ourselves by continuing to do absolutely nothing to stop the climate from collapsing.


Thanks balgan!

* Do you know if there are any follow up meetings planned? Did they discuss some kind of process?

* what were the main concerns discussed?

* interesting to find out about the coalition (I was briefly involved in a similar insurance setup in my home country). Is your ‘baseline’ derived from some standard? Can I find it online?


Hey

Yes the group will continue to meet and I believe more will come out overtime as we start to better define how we as private entities can help the gov.

Ransomware and attacks on critical infra were the big ones - Joshua our CEO wrote a bit about it here https://www.coalitioninc.com/blog/coalition-meets-with-presi...

- our baseline is internal. We are with our customers end to end. From selling the policy to scanning them, notifying them and we have our own incident response team which means that we learn a lot with every claim. So when we add a vulnerability in critical state in Control you can assume it came from learnings of losses combined with our cybersecurity expertise.


Nice feedback loop you have there! (re last point). If you can point to the actual proven ‘indicators of risk’ instead of flagging every potential issue onder the sun, everyone is going to love you!

I look forward to a summary report on incidents somewhere in the future ;)


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: