HNHacker News
TopNewBestAskShowJobs

ShabbyDoo

3,011 karma · joined March 13, 2008

submissionscomments
ShabbyDoo··on Google gets license to test drive autonomous cars on Nevada roads
No one is saying you can't drive, yet. Presuming that computers eventually are better than people at driving, can we as a society continue to allow humans to self-control death machines in close proximity to each other?
ShabbyDoo··on Google gets license to test drive autonomous cars on Nevada roads
"At least the packages that end up on the doorstep still require human delivery."

Imagine that you ordered something from Amazon. You could choose from a bunch of different times, perhaps a dozen in a day, when the automated delivery truck would swing by your house. Your phone would make a noise, and you would go outside to grab your packages off the truck. It would be like an Automat (http://en.wikipedia.org/wiki/Automat) on wheels. You would somehow authenticate yourself and then grab your boxes from your assigned slots.

ShabbyDoo··on The frequent fliers who flew too much
I fly Southwest weekly and pay for my own travel, so I have an incentive to think about optimal purchasing schemes. There are some strategies which I am surprised are not made less appealing through relatively small fees:

1. When paying full-fare, flights are fully refundable. Not sure when you are flying home? Just book a bunch of flights. Even with the restricted fares, you get 100% back in SWA credit which can be used for the same person for one year. I'm surprised they don't have a 24 hour cancellation policy as I'm sure they lose money when flight sell-out and last-minute, full fare passengers book on other airlines. Even a $20 fee would provide incentive to cancel redundant flights.

2. Frequent flier points can be used to book restricted fares as effectively fully refundable -- if you cancel, you get the points back. So, just book-up a bunch of segments before prices go up in case you need them. There might be a $2.50 (yes, under three dollars) fee associated, but it's immaterial.

3. If you "miss" your flight and get to the airport within two hours of its scheduled departure, you can fly standby on the next one. There's an incentive to book a mid-afternoon flight (usually less expensive than, say, a 6:00 PM one), "miss" that flight, and standby on the more expensive one.

All-in-all, I don't abuse the rules much. Mostly, the lack of any fees for missing my Monday morning flights makes me less interested in showing up at the airport too early. I'm simply surprised that SWA doesn't provide me with small incentives to change my behaviors in ways which would help them immensely. Conversely, their website seems to have a bunch of O(N) or worse algorithms w.r.t. number of trips taken -- a huge annoyance to their most valuable customers.

ShabbyDoo··on The frequent fliers who flew too much
Melt, a grilled cheese restaurant in Cleveland, offers 30% off for life in exchange for getting a grilled cheese sandwich + logo (scull and crossbones) tattooed on one's self. I met a woman at the airport who had a sleeve of food-related tattoos including a Melt one. In addition to the discount, these ambassadors (my term) are treated well -- invited to special parties, restaurant openings, etc. It's a great scheme because it's strong social proof to others that Melt is a trendy/cool/worthwhile/whatever place. Being on the Food Network all the time can't hurt either.
ShabbyDoo··on Yahoo CEO might have lied about having CS degree
Yeah. This is an uninteresting lie relative to the more grandiose ones told by other executives. He added "and Computer Science" but accurately stated the level of his degree and institution. Any evidence that he has added "and Computer Science" in the past? Perhaps this is just sloppiness on the part of whomever prepared the SEC filings? And, the CEO, busy with trying to right the ship, just signed off with only a brief review? Given that I've never heard of the college and that he actually obtained a bachelor's degree, it doesn't seem like a very interesting lie.
ShabbyDoo··on Check Out This Berkeley Freshman’s ‘Ridiculously Automated’ Dorm Room
Aha, someone selling something resembling a kit! Thanks for the link.
ShabbyDoo··on Check Out This Berkeley Freshman’s ‘Ridiculously Automated’ Dorm Room
Hmmmm....I haven't even thought about HVAC control as a first-round goal. We have the standard "divide the days into four parts + weekday/weekend" programmable controller. Probably would be some cost savings from something more intelligent. My acute pain is from having to make sure the lights are off.
ShabbyDoo··on Check Out This Berkeley Freshman’s ‘Ridiculously Automated’ Dorm Room
We have young children. We're just happy if they don't clog up the toilets too often.
ShabbyDoo··on Check Out This Berkeley Freshman’s ‘Ridiculously Automated’ Dorm Room
This is a start, but it's about two levels below the level of abstraction I want. I'm thinking along the lines of:

Hey, buy a bunch of switches, sensors, etc. from us which all conform to an open standard (Zigbee?). Then, buy our controller unit and install our iphone/android apps. It'll work after just a bit of monkey-see-monkey-do configuration. Yeah, you have to get a screwdriver out and figure which breaker is associated with each room, but it ain't rocket science. If we go away, you might eventually have to buy another controller, but your investment in switches, sensors, etc. and all your time spent with a screwdriver won't be for nothing -- competitors are likely to support the same stuff.

This is what I want, and I would gladly spend in excess of $1K for it. Maybe $2K? This would be a bargain compared to paying for a Control4 reseller to come to my house and sell me a turnkey solution.

ShabbyDoo··on Check Out This Berkeley Freshman’s ‘Ridiculously Automated’ Dorm Room
So, this one is the X10 standard? Which appliance controller gadget should I buy? I want someone to offer-up a bunch of stuff which is known to work together, except I don't want to pay zillions for Control4. An open standard would be nice, but I'll accept a reasonably priced suite of stuff.
ShabbyDoo··on Check Out This Berkeley Freshman’s ‘Ridiculously Automated’ Dorm Room
Home automation seems to be all-or-nothing today. I can buy a relay switch with keyfob activation for $20 at Home Depot, or I can call my local Control4 rep to come automate my mansion. The in-between seems non-existent. My finished basement has recessed lighting controlled by four or five different switches, all of which are in the basement. When it's time to go to bed, one of us has to trudge down to the basement and start flipping switches. It would make me happy to just have a nighttime kill switch -- I don't need the house to sense my presence and start turning on my favorite music. Might be nice, but I'm not willing to spend $10K on home automation to make it happen.

I started reading about Zigbee and thought, "Hey, I'll just install Zigbee-controlled switches in the same boxes where my analog ones are today. Then, I'll use some automation appliance (like OpenRemote) to implement "turn off all basement lights" via a phone app" I got confused when trying to figure out what I would need to buy, which stuff could actually talk to other stuff, etc. and gave up.

I'd love to see a start-up sell semi-DIY kits for people like me. I'm fine with replacing switches, plugging in network devices, etc., but I really don't have the time to pick out appropriate hardware and make it all work together.

ShabbyDoo··on Java.sun.com is down again - breaking bad apps across the land
So, I can understand how the OS could limit access to the network or filesystem, but it can't know that I'm accessing db schema ABC. However, network and filesystem restrictions are probably good enough for most people.
ShabbyDoo··on Java.sun.com is down again - breaking bad apps across the land
I hadn't known about Tomcat's security manager stuff. Interesting, and proof that Java's security manager stuff can be extended for practical purposes.

I had thought about using AspectJ to wrap interesting points in various APIs and then do "stuff". The obvious behavior is to restrict usage based on whitelists. However, it might also be interesting to run one's app in an access logging mode, especially when trying to wrap some controls around a previously unrestricted production application.

ShabbyDoo··on Java.sun.com is down again - breaking bad apps across the land
More generally, it ought to be easier to constrain apps running on the JVM to declared sandboxes. I once looked at the Java security model and found it to be totally inadequate for such purposes as it seemed to have been designed for ensuring that desktops could not be compromised by rogue applets running in browsers. Specifically, I was surprised by the coarse-grainedness of the security settings. Want to limit access to the network by disallowing use of the Socket class? Done. Want to only allow access to a whitelist of hosts? No dice. No filesystem access at all? Easy. Limit the app to only reading and/or writing to certain directories? Not a chance.

I want to define whitelists for each environment in which my app will run -- development, QA, production, etc. To which hosts may it connect? Where may it access files? What else might I wish to constrain as way of avoiding inadvertent dependencies? Particular queues/topics on messaging buses? Database schemas within a particular server (network restrictions are too coarse for this)? When asking this question, I'm not trying to protect myself from rogue developers with malevolent intentions -- I just want to avoid a scenario like the one described by the OP.

Recently, I started-up the Java app upon which I am currently working and watched its network behavior via Microsoft's Wireshark-esque network monitoring tool. It turns out that EHCache now asks one of Terracotta's servers for the most recent EHCache version number so that it can spit an out-of-date warning in the logs. Benign and useful, but I still had to spend a few minutes in the EHCache source to make sure that, if Terracotta's servers were down, our app would still start-up.

Should one do this at the OS level (jails, perhaps)? I'm not limiting this idea to just Java apps, but I'm really only an expert in the Java space.

I also argue that the whitelist would help codify inter-app dependencies in large IT environments. A few years ago, the large IT shop for which I worked did a disaster recovery drill where they literally deployed 10's of apps in an IBM-provided datacenter as a dry run. One thing they learned was that a particular production app was erroneously configured to log certain audit events to a server in a QA environment (which was not part of the disaster recovery plan for obvious reasons). Whitelists would have prevented this issue.

ShabbyDoo··on Java.sun.com is down again - breaking bad apps across the land
Around 2005, I was semi-forced to use Xalan/Xerces (the Apache reference implementation of SAX, DOM, XPath, XSLT, etc.) for a project. These libraries were included in the JDK [edited from orig post]

To make sure that these libraries did not attempt to talk servers outside my company's control, I had to dig through the code and implement "neutered" forms of schema look-up interfaces, etc. I can't recall exact details. The default behavior was promiscuity and presumption, and making sure that these libraries didn't strike-up conversations with random servers was not trivial or terribly well documented. So, I'm not surprised by the current state of affairs.

ShabbyDoo··on An employee, whose last name is Null, kills our employee lookup app
Good question. I recall having done a Google search and noting that there were not an insignificant number of people with the last name Null in the US, so I wasn't too concerned about posting this. Probably a HIPAA violation, but not a major one.
ShabbyDoo··on An employee, whose last name is Null, kills our employee lookup app
I wasn't that clever.
ShabbyDoo··on An employee, whose last name is Null, kills our employee lookup app
I once worked for a medical records software company. We received a bug report that a particular patient's record could not be viewed. Our support engineer remoted into the client's site and asked the secretary for the patient's name. It was Bobby Null. You can imagine what sort of underlying assumption about String serialization led to this issue. [A preemptive aside: We had proper confidentiality agreements in place. No HIPAA rules were violated.]
ShabbyDoo··on Software Engineers Will Work One Day For English Majors
So, I'm confused. What percentage of English majors are still in the "English" field by age 40? What is the English field? Outside of academia, it barely exists. Publishing? So, it's laudable to receive a general education which provides one with many opportunities in life? Great, I agree. Now, why shouldn't the same logic apply to a computer science degree? Aren't the ways CS majors learn to think easily transferred to other endeavors? Why is it not celebrated that CS degrees are so flexible that a high percentage of graduates ostensibly find ways to do what interests them, pays well etc.?
ShabbyDoo··on University of Florida Eliminates Computer Science Department
What I don't understand about U of F's decision is that computing is like mathematics in that it's a basic competency necessary for competence in many other disciplines. Shouldn't the graduates of the school's "Design, Construction, and Planning" school know something about programming so that they are not entirely intimidated by the idea of customizing the behavior of AutoCAD? The Education school -- how will it produce graduates capable of teaching high school computer science courses? One can easily come up with other examples.

Perhaps it is sufficient to hire a cadre of instructors to teach basic courses? Such a decision historically has been vilified by faculty unions intent on ensuring that research professors with PhD's are not replaced by "lesser" means of instruction. Never mind that many faculty despise teaching introductory courses where much of the workload is administrative and their specialized knowledge is barely put to use.

What I don't understand is how U of F seemingly thinks it acceptable to imply to the public that it taking steps which eventually will make it incapable of teaching basic computer science to any of its students. Surely, U of F's PR department would be horrified to convey parallel messages regarding its math department. Maybe we are all missing some important facts?

ShabbyDoo··on The Flight From Conversation
From the article: "It is as though we have all put ourselves on cable news."

This sums up my first thought when I read the headline. Perhaps the underlying societal problem is that many hold in contempt ideas too complex for sound bite summarization? So, changes in the ways we converse are merely a symptom of this underlying change? How many times have you watched a televised interview or sat in a meeting as someone was explaining an idea and become angered when the speaker was interrupted -- not to clarify, but to change the topic? I find myself saying in my head, "Let him speak!" I have no problem with others silencing some babbling fool, but to shut someone up simply because the idea at hand requires nuanced explanation severely limits the spectrum of ideas we ever will be able to consider.

Perhaps, much like when people don't stand up and say something when another makes a bigoted joke, those of us sitting silently are partially to blame? I often say, "I'd really like to hear more about what Suzy thinks!", but only "often" in that I do so much more frequently than others. What would it take in, say, a company (or even department) to establish via social proof that those opposing complex thought simply because it is complex are the unacceptable ones?

ShabbyDoo··on Tim Berners-Lee's original WWW proposal (1989)
It amuses me how the initial proposals for what turn out to be great ideas often are so relatively narrow and small. The anecdote about the Xerox photocopier's R&D being justified by adding up the number of secretaries and the number of documents replicated via mimeograph comes to mind. [Sorry, couldn't find link]

What we don't ever see are the absurdly optimistic justifications for really bad ideas. Cuecat? Iridium satellites? The supposed future ubiquity if the Segway? We only know about the flops which because big enough (or were hyped enough) to have gotten publicity. Have you ever seen the abysmal nature of business plans in a local business plan competition?

I almost included Webvan, but I'm not sure that it was an inherently bad idea -- just one which required high adoption levels to achieve positive cash flow. And, I didn't include things like pets.com which I suspect (without justification) were known by their inventors as bad-but-flip-able ideas.

ShabbyDoo··on Facebook to Acquire Instagram for $1 Billion
I wonder what valuation of Facebook made this deal worth $1B.
ShabbyDoo··on Open Letter to XSLT Fans
Most of my work has been in Java, so I can't speak authoritatively outside of its ecosystem. When transforming XML, I've found I almost always need to write tree-walking/visitor-ish code and end-up using a tool like XMLBeans to provide a more literate interface to the source and target documents. When I say "literate", I mean that, instead of writing sourceDocument.getElement("foo").getElement("bar"), I can just say sourceDocument.getFoo().getBar(). XML schemas certainly are helpful in that they enable a bunch of tools like XMLBeans to generate language-friendly abstractions. Often, I've written my own schemas for sources or targets which only had implicitly-specified schemas (via documentation, examples, or simply observation of actual messages).

The reason I prefer to work in non-declarative code land is that I usually must inject many service references into the translators. When converting an industry standard XML format into a company's internal domain model for quoting insurance policies, I had to employ a set of heuristics to create a valid policy from a set of coverage requirements which likely were ill-specified. For example, we didn't offer a $750 auto deductible. Should this be converted (with a note attached) to $500 or $1000? This decision varied by state, policy type, etc. We had a metamodel which I injected into the transformers at the points where such decisions were made.

That the source and/or target of a transformation are XML is a red herring, though. Most of my time is not spent on XML-ness itself but on solving fundamental impedance mismatch issues when converting between two different domain models, sets of assumptions, etc. Document formats don't matter for these problems although those formats with better surrounding toolsets certainly allow one to concentrate immediately on the part of the problem which is the hardest. I even prefer talking about these problems using terms like "model conversion" instead of "document translation" -- too many marketing folks have convinced IT managers that, through the magic of their overpriced ETL tools, "document conversion" problems are a trivial drag & drop matter.

One way I've thought of architecting these model transformations is through the invention of a few intermediate model definitions, each one becoming less source-like and more target-like. I think some stages of conversion are more compatible with declarative approaches. Perhaps attempting conversion in only a single pass has led me to throw the baby out with the bathwater w.r.t. declarative schemes?

For those of you who don't do corporate IT development, the sad reality is that a huge percentage of development effort is spent on data conversion/translation between systems. The ratio of glue:substance is highly skewed toward glue. Furthermore, the ratio gets worse as short-term benefits are prioritized over long-term ones, development is silo-ed between business groups, and data modeling takes a backseat to gettin' stuff "done".

ShabbyDoo··on Open Letter to XSLT Fans
XSLT is miserable, but isn't this old news? My issue is that most real-world transformations require look-up tables, calls to other systems for derived data, etc. The XSLT extension format is no fun at all. Sadly, I have yet to have seen a good, general-purpose framework-y library for sort-of declarative transformations. I suspect that, because most transformation code exists to achieve interoperability between systems, the problems at hand involve impedance mis-matches which are inherently yucky problems.

Anyone seen any good schemes?

ShabbyDoo··on It's official, Corporate Passwords Are Cheap
Yes. The article didn't mention whether the identity of the seller would be sold as well. Knowing that a person exists in the world whose corporate password is "FuzzieBunn1" isn't a terribly useful piece of information. Furthermore, did survey participants perceive that there might be some risk of being caught selling access to one's company? In most countries, doing so must be a crime of some sort. In general, I'm skeptical of the survey.
ShabbyDoo··on I hereby resign
"When I was interviewed at Microsoft"....Interesting given that MSFT has a long history of being a LGBT-friendly company.
ShabbyDoo··on Best Buy feels Amazon squeeze, to close 50 big-box stores
So, Best Buy still exists for some combination of two reasons:

1. You can get your stuff RIGHT NOW 2. You supposedly can get customized help/advice

What can other companies do to hasten Best Buy's death? Amazon seems to be piecing together a distribution network for same day/next day delivery in dense urban markets (at least, as a Prime member shipping to Chicago, I was offered some sort of courier delivery for $4). Perhaps Walgreens, etc. could up their game and offer an intelligently stocked selection of need-it-now things like cables? They're open 24/7 in most markets and could probably deal with "only" a 100% mark-up. Certainly, the immediacy of purchasing a TV from Best Buy is important to some, but I suspect small accessories account for the majority of purchases which, if a day's lag time had not been an issue, would have been made online instead.

The help/advice need seems like a more interesting niche for start-ups. Hunch.com seems like the right sort of idea if applied to Amazon's offerings. Let's say my friend suggests that we do a Skype video chat. While I personally can read through product specifications, know various companies' reputations for providing driver support over time, etc., my parents would be lost. A good salesperson asks questions about a customer's needs which help filter down a huge set of potential products down to just a few. Imagine paying a trusted, independent, and knowledgeable person $10 for a ten minute chat along with an interactive Amazon browsing session. People like my parents would be delighted. Heck, I'd use such a service if I was shopping for, say, a kitchen faucet.

What else can be done?

ShabbyDoo··on Best Buy feels Amazon squeeze, to close 50 big-box stores
The problem with Best Buy selling cables for absurd mark-up levels is that they're trading away brand equity for a few dollars today. How does someone feel if, after buying a cable at Best Buy, he later sees the same cable for sale elsewhere for 1/4 the price? Will he be so willing to go to Best Buy in the future? Will he trust the salesperson's recommendations if he does indeed enter the store again? Traditional accounting methods don't assess the change in value of a company's brand quarter-over-quarter, but they sure do represent the seemingly high profit margins of cables. So, what's a poor executive to do?
ShabbyDoo··on Woodcut Maps: Handcrafted wood-inlay maps, designed by you
Would it be possible to provide a data format by which one could upload custom inlay layers to produce a design of his choosing? I'm thinking specifically about a silhouette photograph I shot of my son. Is there a way to validate the manufacturability of an arbitrary layer set?
← PreviousPage 6 of 34Next →