Skip to content
HomeVideosBooksBlogs
AllTop postsTopics
Podcasts
HistoryListsWatch laterLiked videosFollowing

The videos, books, blogs and podcasts Hacker News keeps recommending, all in one place.

VideosBooksBlogsPodcastsAboutPrivacySettings

Data from Hacker News, HackerTube, HackerBooks, HackerBlogs and Open Library. Credits · Not affiliated with Y Combinator.

HomeVideosBooksBlogsPodcasts
Ctrl K
    I

    Ian Grigg

    iang.org · Personal blog · on HN since 2010

    Ian Grigg writes on financial cryptography, secure protocol design, PKI, and triple-entry accounting.

    Visit blogHN submissions
    SecurityCryptoFinance & Investing
    What HN says

    HN commenters call his writing worth reading, especially on security design, and link him for triple-entry accounting and the 'market for silver bullets' idea.

    Stats for nerds
    21HN people shared it
    9linked in comments
    70story points
    Jul 2021last shared
    2011people per year2021

    Top posts on HN

    1. 1
      Triple Entry Accounting (2005)
      7 people · 62 points · first shared 2011 · 19 comments on HN
    2. 2
      Security - a Market for Silver Bullets
      3 people · 2 points · first shared 2013 · Discussion on HN
    3. 3
      The threat model for SSL is flawed (2003)
      2 people · 2 points · first shared 2011 · Discussion on HN
    4. 4
      There is only one mode, and it is Secure
      2 people · 1 points · first shared 2013 · 1 comments on HN
    5. 5
      Hard Truths about the Hard Task of finding Good Random Numbers
      1 person · 1 points · first shared 2014 · Discussion on HN
    6. 6
      PKI considered harmful
      1 person · 1 points · first shared 2012 · Discussion on HN
    7. 7
      Financial Cryptography in 7 Layers (2000)
      1 person · 1 points · first shared 2017 · Discussion on HN
    8. 8
      David
      1 person · first shared 2010
    9. 9
      Intersection ricardian smart
      1 person · first shared 2017
    10. 10
      Hn hypotheses in secure protocol design
      1 person · first shared 2013

    What HN people wrote when they linked it

    • tokenadultJun 2012

      I guess the problem with a long article, even an interesting long article like the one submitted here, is that it is hard to read to the end. Near the end of the submitted article is this paragraph:

      "A second problem is that even when it comes to alternative energy sources, Germany doesn't reward carbon dioxide reduction. Rather, its policy establishes well-defined subsidies for specific technologies: a kilowatt-hour of solar power is rewarded more than power from offshore wind, which in turn earns more than power from onshore wind. Even though solar subsidies have been reduced to rates far lower than the ones Leurs locked in, solar power still pays the highest rates. If reducing emissions were the focus, however, more money would be directed toward reducing energy use. 'If you could choose the optimal instruments, focusing on those areas first where you can achieve your goals most inexpensively, you would focus not so much on renewables but much more on efficiency,' says Pittel, the energy economist from Munich."

      This ignores the advice of Amory Lovins

      http://www.rmi.org/Amory+B.+Lovins

      (Amory Lovins profile page at Rocky Mountain Institute website)

      http://www.ted.com/speakers/amory_lovins.html

      (TED profile)

      http://www.ted.com/talks/amory_lovins_a_50_year_plan_for_energy.html

      (TED Talk video "A 40-year plan for energy")

      and generally the advice of any thoughtful scholar on how to improve worldwide energy efficiency. The German Energiewende plan is a remarkable…

    • schoenJul 2015

      One thing you might be thinking of is "there should be one mode, and it should be secure".

      http://iang.org/ssl/h3_there_is_only_one_mode_and_it_is_secure.html

      This isn't exactly the same as what you said, but I think it's an argument in favor of your point of view.

      Another analogous thing is that academic cryptographers will regard an algorithm or protocol as broken if an adversary can gain a significant advantage (probability of distinguishing things that are supposed to be indistinguishable, reduction in work factor, etc.), even if the resulting work factor to mount the attack is still enormous. For example, if there were an attack that could break AES in 2¹⁰⁰ operations, AES would be considered broken even though we believe there is no one who can perform 2¹⁰⁰ operations, because it no longer provides the designed or advertised security margin.

    • baschJul 2021

      A blockchain is triple entry accounting, which has advantages over double.

      http://www.warrenhenke.com/writing/essays/triple-entry-accounting

      https://iang.org/papers/triple_entry.html

      I find it odd to say "thats a human problem" as if technical invention over centuries isnt specifically to abstract away human inefficiency.

      A group of somewhat trusting firms doesnt need crazy PoW/PoS. The idea of companies sharing a collaborative ledger when working together shouldnt be dismissed so flippantly. Everyone keeping their own (unreconciled automatically with each others) book may be the status quo, but it doesnt make it optimal.

    • yithumpJun 2017

      Democratic Autonomous Organizations -- which are corporations whose law is created not by human organizations; the law for ricardian contracts is instead defined by a relationship between trustless consensus and formally verifiable logic.

      See the og tao here: http://chriseth.github.io/browser-solidity/?gist=192371538cf5e43e6dab#gist=192371538cf5e43e6dab

      and read about the $50 million tao debacle on wiki:
      https://en.wikipedia.org/wiki/The_DAO_(organization)

      more about ricardian contracts on ethereum here: http://iang.org/papers/intersection_ricardian_smart.html

    • ChiraelNov 2017

      It also seems to conflate online access to land records with bitcoin.

      It's possible that the same folks that pushed MERS (trying to move land records out of county systems and into a private, mortgage industry-controlled system) may be pushing this as a second attempt at the same (just with the word "blockchain").

      The only way it makes sense to me is as a further means of authenticating exactly what was done and who the parties were. See "Triple Entry Accounting" for a similar concept (added value from blockchain use): http://iang.org/papers/triple_entry.html

    • haspokJul 2017

      Try this for a start:
      https://hackernoon.com/why-everyone-missed-the-most-important-invention-in-the-last-500-years-c90b0151c169

      Actually, this is better:
      http://iang.org/papers/triple_entry.html

      My attempt at trying to explain it in one sentence: blockchain provides the technology to connect the double entry ledgers of two (or more) parties by recording the transactions between them, in a way that makes it possible to _prove_ the existence and validity of the transaction independently, without relying on either party's ledger.

    Related

    Financial Cryptographyfinancialcryptography.com22 people

    Moles at Major US Providers May Be Granting Direct, Live Access to the NSA, FBI

    Financial Cryptography
    Personal · last shared 2018
    Nakamoto Institutenakamotoinstitute.org112 people

    Ethereum is Doomed

    Nakamoto Institute
    Publication · last shared 2026
    The Grugqgrugq.github.io55 people

    Anonymity Is Hard

    The Grugq
    Personal · last shared 2026
    Errata Securityblog.erratasec.com357 people

    Extracting the SuperFish certificate

    Errata Security
    Personal · last shared 2025
    Ben Laurielinks.org38 people

    Writing Compilers Quickly

    Ben Laurie
    Personal · last shared 2022
    Adam Backcypherspace.org49 people

    NSA's Backdoor Key from Lotus Notes (2002)

    Adam Back
    Personal · last shared 2026
    Adam Caudilladamcaudill.com29 people

    Bitcoin is a Cult

    Adam Caudill
    Personal · last shared 2026
    Little Man in My Headlittlemaninmyhead.wordpress.com28 people

    Learning to break ciphers

    Little Man in My Head
    Personal · last shared 2025