Hacker Newsnew | past | comments | ask | show | jobs | submit | more hkhanna's commentslogin

This would be a sea change in Virginia politics, which are dominated by Dominion Energy, the local regulated utility.

I've always felt it that it was wrong for a regulated utility to have so much influence in the Commonwealth. If I'm reading the article correctly, at least now their profits will reduce to the extent they are directly lobbying or donating, providing some counterpressure on their outsized influence.


None of this is legal advice, but I'm a student of negotiable instruments like checks and the history they have in our system of law and finance.

Checks are negotiable instruments governed by UCC Article 3, which has been adopted in all or nearly all states in the US. The drawer of a check, in this case Paypal, is normally liable for when an impostor presents the check or when their employees forge indorsements in the name of the payee. The thinking is that the drawer is best positioned to protect against that kind of fraud.

Depending on your state, you can probably take them to small claims court over this on the theory of a fraudulently indorsed instrument. You might also have a claim for breach of contract for failure to return the balance on the account, although you'd need to show how their failure to give you your money breaches a contract or statute, and that might be hard to do without a lawyer. The claim for fraudulent indorsement of the check is probably cleaner and less fact intensive.

Small claims is really accessible to non-lawyers, and PayPal probably won't even show up. You could get a default judgment and then, if you really wanted to, execute that judgment against their bank, which you can probably see from the copy of the cancelled check.

Again, none of this is legal advice! It's going to be time consuming and maybe not worth $270 but if you have the time and will, I'd say go for it.


I've long felt that our public institutions should roughly reflect the racial and gender makeup of the country. But sometimes I think about what it would mean if we had, say, all the members of a public institution like the Senate be black or women or another historically underrepresented community.

Looked at in a snapshot in time, it would be unrepresentative. After all, there are plenty of men and plenty of white people in this country. But are we trying to make the number of seats in an institution representative? Or are we trying to make the number of seat-years representative, i.e., integrate over the dimension of time as well as seats.

When you consider the temporal dimension, even a fully black Senate or all-woman Senate would be still fall far short of offering those demographics fair representation when optimizing for seat-years. It would take at least 50 years or so of domination by those demographics before things start to even out.

Personally, I find this framing helpful when considering what it means for public institutions to be representative, and why I am supportive of efforts to make it more so.


> I've long felt that our public institutions should roughly reflect the racial and gender makeup of the country.

How do you reconcile that with democracy? Consider gender for example. My mom has a strong preference for male elected officials. She’s no bumpkin—she has a master’s degree in chemistry. She simply embraces that aspect of traditional gender roles. This isn’t an uncommon view—women make up the majority of voters nearly everywhere, but most legislators are still men.

Is it democratic to tell these women that they’re wrong, and to impose a scheme of gender balancing that overrides their individual voting preferences?

Also, isn’t there an underlying contradiction in your position? In your view, is an Asian person fungible with a white person? If not—if you think an Asian maybe might bring an “Asian perspective” to the job, or give special attention to “Asian issues”—why isn’t it appropriate for a white majority district to prefer a white person to represent them?


> Is it democratic to tell these women that they’re wrong, and to impose a scheme of gender balancing that overrides their individual voting preferences?

No, and I would not presume to do so. I am only expressing my view that, over time, these preferences would counterbalance each other in a way that results in a distribution in our institutions that broadly reflects the demographics of society.

You mom has a preference for male elected officials. But maybe my dad has a preference for female elected officials. My comment isn't intended to reflect negatively or positively on any of that, I hope you see. It's only a theory about population-level preferences as applied to our public institutions.

I'm not suggesting anything normative, just describing what an equitable society might look like and why an all-black Senate for some period would not be unrepresentative when representation is aggregated over years and not just seats or states.

> [W]hy isn’t it appropriate for a white majority district to prefer a white person to represent them?

I am not saying anything is not appropriate. I think my main point didn't get through.

The core of what I'm saying is that when looking at representation in a public institution, it's useful to take into account the history of that institution and how it has been constituted _over time_ rather than just in the present.


Your assumption that the race and gender distribution of the legislature should reflect that of the overall population rests on a normative principle. My point is that normative principle is in tension with democratic principles.

For example, if it is your position that the race of a legislator matters--that one can expect a black or asian senator to do something differently than a white senator--then it is entirely rational for individual voters to prefer representatives of their own race. And in a white-majority society like the U.S., where minorities are geographically distributed amongst a white majority, that means that almost all legislators will be white. Any effort to rebalance that racial distribution would be in tension with the will and self interest of the voters.


Incredible. You believe that all different groups have exactly the same human capital, but that we should still have a system of racial spoils. These types of comments make me concerned about democracy.

What does "racial and gender makeup of the country" even mean? Should use the idiotic government definition of "AAPI" that bundles Samoans with Japanese? Or that considers Afghanis white but Pakistanis Asian? It's idiotic.

Hispanic immigration to the U.S. has been relatively low human capital (mostly poorer, blue collar workers). The average NAEP and SAT scores of black Americans are over a standard deviation below Asians. You're willing to significantly hurt the productivity and efficiency of government because having racial representation gives you warm and fuzzies? If people like you were in charge of government, we would be South Africa in less than a year.


Due to ideological coherence, ie people voting along party lines... why believe it would make much of a difference?


One of the tough things about a party-controlled, self-hosted e-signature is that it becomes easier to repudiate because a party to the contract has custody of the platform.

The non-custodial party can claim they never signed, and when the custodial party produces evidence of IP address and timestamp, the non-custodial party may have a credible argument that they are faked and the person asserting those authenticated details has the motive and means to fake them.

That argument is much harder to assert with something like DocuSign because it is unlikely DocuSign would put their business on the line to fake someone's signature.

I'm not saying repudiation based on custody of the e-signature platform is a winning argument, but it's something to consider before self-hosting if you are going to use the platform to sign your own contracts.


If only someone would invent a public nonrepudiatable ledger.


The problem is that it would require everyone to monitor the ledger for falsified versions of their own signature. That works a lot better in the world of Certificate Transparency where Google can scan for google.com registrations. It does not scale well to every human being doing that, or outsourcing it.

The fundamental challenge here is that there's no way to tell, based on a the signature alone, which signatures are "valid" and which are "forged"; they're not cryptographic signatures. And getting cryptographic signatures for lay people is apparently too hard to do, outside of Estonia's digital citizenship initiatives.

It might be neat if the big guys agreed on an OIDC extension that let you piggyback text to be affirmed by the user. Cryptographic proof that jane.doe@gmail.com saw text with hash H at time T and chose "Accept".


Your pointing it out like this should be be obvious, and it is. Yet Blockchain has not become a mainstream use case here.


Like a chain of blocks? Where each block is signed by adding a prefix that produces an increasingly difficult hash?


Wait... You're talking about Git, right? Brilliant idea! You could sign a pull request, and once it's signed, you can then merge the businesses. But how do you show a diff of the signature? And what if it's not for a corporate merger?


But what keeps someone from forking your git repository and insisting that their HEAD is the source of truth? How can we get a globally agreed upon source of truth?


That’s just crazy talk. Corporate mergers are the only transactions there are!


It could probably be done with a merkle based signature log that whoever is hosting the service could provide.

To cheat, the party hosting it would probably have to forge signatures for everyone after the disputed signature.


As long as we're talking about non-cryptographic-signatures, the party hosting the e-signing software can claim any signature to have happened at any time. The whole point was DocuSign would be unlikely to do this.


someone should combine a chain of blocks for identity management with one for financial transactions/tokens and one for signature attestation. We could call it the cube chain and usher in web 4.0.....


I have Zero Knowledge about this topic


Yeah, I really like this initiative, but this is not a technology problem. This is a trust problem. The EUJ actually has a not-terrible framework in place around electronic signatures, and _some_ countries are pushing hard for adoption and implementation.


> That argument is much harder to assert with something like DocuSign because it is unlikely DocuSign would put their business on the line to fake someone's signature.

This seems like the claim that the USG will be unlikely to put it's Military on the line so they won't leak any tank designs on discord.

Happy to concede that the CEO of DocuSign wouldn't do this but surely some 15$/h employee doesn't have that same opinion.


The support person should not have that kind of access without auditability and traceability. Even Sundar should not be able to log into a console and read your emails either.


Sure but that's a different argument than the one presented above.


Someone implied that counterfeiting a sig or altering one, etc. was just as easy in Docusign as it would be with on on-site one-party controlled system. It just isn't.


I think a good middle ground solution would be to prohibit “severance” clauses as a matter of public policy in Terms of Service.

Severance clauses say that if any part of the terms are struck down for any reason, the rest of the agreement stays in effect.

By banning severance clauses, companies would be forced to provide reasonable terms. Because if they put anything unconscionable anywhere in the agreement, the entire agreement will be struck down on the grounds of unconscionability.


Before severence clauses there were no severence clauses. Somewhere along the line severence clauses became necessary. It would be wise to thoroughly determine why that particular fence was erected before tearing it down -- which includes not just hand-waving it away as assuming it was erected in malice. Maybe it needs to be repaired or reinforced, or maybe gates need to be added to accommodate new usage. Maybe it indeed needs to be torn down.


I've drafted many severance clauses in my career to avoid the common law default of "the contract stands or falls together." They are put there by lawyers, usually for good reason when you have two represented parties negotiating at arms length. I am not suggesting doing away with that.

But when terms are imposed on someone who is never represented by counsel when accepting them, I cannot see even a theoretical reason to not void them, especially when another part of the contract is struck down for unconscionability.

I stand behind my proposal, but I'll re-frame it: severance clauses should be unenforceable against an unrepresented party when any part of the contract was struck down on the grounds of unconscionability.

This policy, which I promise I have considered in some detail over the last decade, would go a long way to making contracts between parties of uneven bargaining power more fair overall.


Three things!

1. Computer programming, although I was very young. I learned by checking out a book on BASIC from my public library in the '90s. Thankfully, my parents noticed and sent me to computer camp after that.

2. Parliamentary procedure. I learned through active participation in student government when I was in college. There really is no other way to learn it well without being a part of an assembly that uses (and often misuses) it.

3. More recently, accounting, bookkeeping, and basic federal income taxation to support my parents' small business. I learned through books I purchased. One was called "Bookkeeping made easy" and another was something like "Accounting in 100 pages or less". Tax I learned through this book published under the name JK Lasser that goes into detail on taxation. I used to go to Barnes & Noble and read the JK Lasser book to escape from my graduate school studies... which should tell you something about how much I enjoyed grad school.


https://www.khanna.law/blog

I haven't published anything in a couple years, but I plan for that to change!


I use htmx, and I have a good amount of experience in the JS world. The main issue with JS frameworks like React is that it's painful to integrate into things like Django-rendered templates. It can definitely be done, but the tooling just isn't there yet, although it's way ahead of where it was even 5 years ago.

You can go the SPA route and use something like Django Rest Framework with React, but then you need to build API endpoints for basic plumbing like authentication that often doesn't warrant an API. And you lose the use of a lot of the batteries-included features of frameworks like Django.

If there were an ergonomic way to integrate React components into specific areas of the DOM tree rendered by Django templates and a sensible way to pass information into props from Django, I'd love to use a mature framework like React over things like htmx.


I've been away from direct work with Python + Django (P/D) for a couple of years. One of my issues with P/D has always been that deployment on anything other than one of the specialized services is an absolute pain in the ass.

In the PHP world, you can get a simplest of servers from any host, upload the files and you are up and running. With P/D, well, it's a lot of work.

I have developed this opinion that, while useful, Django's SQLite and runserver approach for getting up and running quickly actually is detrimental. To run a real site you have to break all of that, deal with static content, etc., etc. I could also argue that the default directory structure, while simple, it is also detrimental when moving to production.

In other words, sometimes I feel it would be far better if P/D initial setup was closer to a canonical installation that could be run on any server with something as close as possible to a simple FTP file transfer (just like PHP).

One can always make things more complex (multiple servers, load balancers, etc.). However, I truly believe the P/D ecosystem is seriously missing the point when not delivering a 5-minute install that actually is a basic production-ready install on any server.

Have things changed at all in this regard over the last couple of years?


That's true, and PHP certainly has ease of deployment over Django. I generally deploy Django applications on services like Heroku or Render, but it can get expensive since you can't really re-use instances for multiple applications like you could with a VPS and multiple PHP applications.

But, at least to me, ease of deployment is less of a concern once it's going. And since I stick to one hosting provider and only have a handful of applications I maintain, its not something that crosses my mind until I spin up a new Django application which happens only rarely.


I often joke that Docker wouldn't exist if it had been easier to deploy Python code, since it was DotCloud who invented Docker as part of solving that problem.

I was hoping Vercel would be their spiritual successor, back when they were known as Zeit and allowed running arbitrary containers at the edge, but alas they pivoted to focus only on the JS platform. That said, IMO Next.js is the closest thing to modern day PHP in terms of filesystem-based routing and "write code on a page, render it at the same URL."

For Python, we run our services in containers using some custom images, and build the code from a monorepo using a combination of Pants and Poetry. For smaller or more focused projects, I think Google Cloud Run is quite nice, since it supports the Buildpack Spec and is in many ways a successor to Google AppEngine.


Something many people miss is that JSX and React are two separate technologies. JSX is a fantastic templating language in its own right.

Have there been any libraries that attempt to integrate JSX more natively into Django templates? It seems like that might be an approach that could solve the ergonomics problem you describe.


I read The Messy Middle and thought like the chapter titles were phenomenal, but felt everything in the actual chapters was fluff. Maybe I'll give it another try!


Personally, I don't think there's a real problem unless everyone panics.

Banks are well-regulated and stable and have been for decades. That said, my investors & cofounder have both expressed gratitude that our startup banks with Mercury and not SVB.


> Personally, I don't think there's a real problem unless everyone panics.

And everyone is panicking.

Your words are almost the same as what the CEO of SVB said, and then immediately the VCs panicked, telling their portfolio companies to withdraw from SVB.


Technically, you are not “banking” with Mercury:

> Mercury is a financial technology company, not a bank. Banking services provided by Choice Financial Group and Evolve Bank & Trust®; Members FDIC.


On that note, what's the deal with Evolve? I've seen them being the banking service provider for quite a few fintech companies already like Transferwise and BlockFi and else?


Mercury has partner banks though, so you are still banking, just through an intermediary. The banks still hold the funds. (Depending on the product you use).


I was obviously very wrong. I've never had an HN comment age so poorly, so fast.


NB: Life lesson here is that a pretty reliable indicator of a crisis situation is when you keep mis-assessing the situation. The ground truth is either changing far faster than you can keep up with it, or conditions are well outside any of your expectations or experience. Or that the story / narrative / signals simply aren't coherent or consistent.

This is something I've noted in a number of different situations --- not just business or financial situations, though those would be among them.


Whilst banks may have lots of regulations (depending on their country of operation), banks do fail reasonably regularly. For example this list of US bank failures https://en.wikipedia.org/wiki/List_of_largest_U.S._bank_fail...


This seems to reinforce the 'don't panic' aspect though -- depositors have never lost FDIC insured funds in the ~90 years it's been operating. And none of the depositors in the list of failed US banks lost a penny either.


Almost all banks on that list failed during the aftermath of Black Monday (1987) or during the Great Financial Crisis (2007-2010).


Yep banks that took on excessive risk in times of expansion.... And as SVB has failed today as has Silvergate recently, it seems we are looking at some level of issue.


What do you mean, there isn't a real problem? It's already been shut down.


Everyone panicked yesterday.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: