HNHacker News
TopNewBestAskShowJobs

arkem

580 karma · joined April 1, 2011

submissionscomments
arkem··on The “Only” Coke Machine on the Internet (1998)
Around the same time the University of Western Australia's computer club had an internet connected coke machine: https://www.ucc.asn.au/services/drink.ucc
arkem··on Quebec doctors can now prescribe exercise
Highways and streets without sidewalks or suitable verges.
arkem··on I took the $300k (2013)
I feel that 350k+ is an exaggeration or perhaps the top 10% of Netflix engineers. Netflix is well known for paying large salaries almost entirely in cash (though I've heard that it's at the expense of an equity package or more fully fleshed out benefits). I'd expect that a mid-level engineer at Netflix would be looking at 200-250k though I don't have a lot of data to back it up.

When I worked at Google (2013) a mid-level engineer was making about 175-200k if you considered publicly traded stock and annual bonuses to be cash equivalent. The numbers grow quickly once you start ascending the ranks to Staff Engineer and beyond but again that's only about 10% of Google's engineers.

arkem··on The Bail Trap
I don't think arrest to conviction conversion rate is very meaningful by itself since in many jurisdictions the prosecutors get to choose which arrested persons to prosecute and how vigorously.
arkem··on How Cheap Can Solar Get?
Off topic but Ramez's novels are excellent, have a look at Nexus!
arkem··on Ask HN: Any movies that changed your life?
Two movies, Sneakers and Hackers led me to my career. They're still two of my favorite movies, each for different reasons.
arkem··on How experts stay safe at the Black Hat security conference
While shenanigans do go on at Defcon and Blackhat most of these "no computers, no cell phone" precautions are overreactions.
arkem··on The easiest bug bounties I have won
In my experience with running bug bounties it will be cheaper in terms of time (and probably in terms of money) and more effective to hire an application security consultant to look at the projects first.

Bug bounties require a lot of time to keep on top of the submissions (essential in providing a good experience for researchers) and to filter out the noise of invalid and working-as-intended bugs.

Having a consultant come through will mean that your bugs will be the exception rather than the rule. Instead of every form field and parameter having a cross site scripting bug only that deprecated status page that you'd forgotten about will be vulnerable. A good consultant will also be able to help you fix the bugs and avoid them in the future.

Getting the low hanging fruit out of the way before launching This difference can easily pay for the consultant, since each XSS can be worth >$500 (or thousands in the case of the bounty programs I've worked on) so getting the low hanging fruit out of the way before launching is definitely worth it.

arkem··on Army National Guard announces data breach
This isn't what most people think of when they hear data breach. There was a breach of DoD security standards when data was transferred to an inappropriate environment but no evidence that the data has been leaked beyond that transfer.

I think it's laudable that the Army National Guard would do a breach notification when there's only the possibility of malicious data loss.

arkem··on Airbnb Raises $1.5B in One of Largest Private Placements
Turns out the JOBS Act specifically exempts employee stock plan recipients from the 500 (or 2000) shareholder count.
arkem··on Airbnb Raises $1.5B in One of Largest Private Placements
Thanks!
arkem··on Airbnb Raises $1.5B in One of Largest Private Placements
Would the average AirBNB host be an accredited investor?

Also, I hadn't heard that employee grants are not considered towards the investor limit, is it just that holding options doesn't make you an investor or is it more than that? Can you point me towards some reading material?

Edit: It looks like "Shareholder's of record" as defined in the JOBS Act might exclude employee incentive share programs (as long as those plans were exempt from registration under the Securities Act... not that I know what that means)

Edit2: See erichurkman's links.

arkem··on Ask HN: Has YC or other VCs invested in gaming startups?
Riot Games was largely funded by venture capital.

In 2008 they raised 7 million in VC funding from Benchmark Capital and FirstMark Capital.

Here's the press release: http://www.riotgames.com/sites/default/files/uploads/080710_...

arkem··on Ask HN: Has YC or other VCs invested in gaming startups?
Instant eSports is about video games even if they don't themselves make video games.
arkem··on Why is it taking longer and longer to fill open jobs?
Job postings that are aiming to satisfy visa requirements are generally easy to identify.

Here are some indicators:

* They're usually listed in a Sunday newspaper rather than online.

* They will not be posted to the company's website.

* They'll require a specific education level

* They'll require experience that is oddly specific

arkem··on Argentina's voting machine system leaked?
I'd say that they have different security problems rather than more.
arkem··on Argentina's voting machine system leaked?
As a fellow Australian I would love voting machines to encourage below the line senate voting and to allow even faster tabulation of results.

I'd argue that we're stretching the limits of paper ballots with the current senate situation. There are significant chances for it to go wrong, like when the Western Australian senate election had to be rerun after the High Court voided the previous result due to lost ballots[1].

Even if machines had the same problems as paper they it could be faster and cheaper to recover from them..

[1] https://en.wikipedia.org/wiki/Australian_Senate_special_elec...

arkem··on Mapping the Hourly Wage Needed to Rent a 2-Bedroom Apartment in Every U.S. State
They're looking at how many hours worked at minimum wage that it would take to afford an average priced 2 bedroom apartment, if you only spend 30% of your income of housing.
arkem··on Los Angeles Plays Itself
As a Perthian living in LA I think it's interesting to note that Perth has about the same area as Greater LA (minus San Bernardino and Riverside counties) yet Perth has 1/9th of the population (2 million vs 18 million).

Commuting in LA is rougher than Perth due to the traffic but Perth's low density means that people often travel further to find the same variety of amenities.

arkem··on How Eve Online went to the edge of apocalypse and back
If this article interested you, keep an eye out for an upcoming book "A History of the Great Empires of Eve Online"

http://evehistory.com/

arkem··on Say Good-Bye to Picasso’s Women of Algiers, Disappearing for $140M
Jackson Pollock's Alchemy has been subjected to a variety of 3D scans and xrays to try and capture its texture and height. The Guggenheim museum in Venice has a 3d printed monochrome reproduction of it that's pretty impressive.

Here's a link to the visualization project: http://vcg.isti.cnr.it/alchemy/

arkem··on How World of Warcraft led to Glassdoor
My first level 60 (in classic) took me about 20 days played (call it 500 hours). Other people were reporting that 16-17 days was typical and 12 days was about how long a concerted leveling effort would take.

If he really took a year off to play WoW I'd expect that he'd hit max level in the first 3 months (at 6 hours/day). So I assume that they're talking about raid progression or perhaps the original PVP battleground ranks.

My inclination is to believe that the story got somewhat mangled by the journalist who wasn't very familiar with gaming or at least not Blizzard's games.

arkem··on Ask HN: Who is hiring? (May 2015)
Software/Security/Systems/Network Engineering

* Los Angeles, CA

* Saint Louis, MO

* Dublin, Ireland

On-site only, visas available

Riot Games - http://www.riotgames.com/careers

---

We make League of Legends (a popular online game with a thriving e-sports scene), we're hoping to make more things too!

We have a variety of software engineering, systems, network and security roles available.

Example software engineering roles:

* game development (C++)

* game infrastructure (Java/Python/Go)

* web apps (PHP/Javascript/Python)

* corporate internal apps (PHP/Go/Python/C#)

On the security side we're looking for application security people as well as incident responders and infrastructure security types (network/system).

We have many other roles as well! Check the careers link above.

Let me know if you're interested or have questions, my email is arkem@riotgames.com.

arkem··on French Senate Backs Bid To Force Google To Disclose Search Algorithm Workings
When Google measures itself against other search engines it is primarily interested in measuring search quality and not market share.

Google has put a lot of effort into creating test query suites and other systems that can be used to evaluate search results and works to make sure that in each region and language it can out perform competitors. I don't know how effective the measurement is but I can tell you that Google takes providing the best search results seriously.

arkem··on Security flaw in New South Wales puts thousands of online votes at risk
The security flaws found by that independent review aren't particularly worrying.

Clearly there are improvements that could be made but almost all of the problems that they found were procedural and the ones that were technical amounted to "if I can control the server I can control all the votes" or "if I can control a user's computer I can control their vote", which is not a surprising outcome.

If I control the vote counting depot I also control all the votes, if I coerce a person I also control their votes. We have dealt with these problems for more than a century, we can deal with them in an online context.

arkem··on Security flaw in New South Wales puts thousands of online votes at risk
The same way we make sure that non-online votes aren't tampered with.

Audits (of the procedures, devices and people involved in the votes as well as the results) as well as impartial (or mutually hostile) observers as well as a legal framework for declaring the legitimacy of the result with provision for partial or full reruns on the election in cases of doubt.

arkem··on Security flaw in New South Wales puts thousands of online votes at risk
It's been working ok in Estonia for a decade: http://en.wikipedia.org/wiki/Electronic_voting_in_Estonia

Sure there are risks to online voting but it's significantly less risky than many of the other pieces of critical infrastructure that rely on the Internet. The risks of online voting can generally be controlled through policy and oversight, in a similar way to non-online elections.

arkem··on Any stories of employees with equity successfully taking home over $1m? $500k?
I don't know if they're offering equity at the moment but they were offering it to engineers 18 months ago.
arkem··on Further ties of NSA to Equation Group hackers
It's not about whether there is any astroturfing going on, it's preemptively calling it out, implying that everyone who disagrees is astroturfing.

It's similar to people who say things like "I know I'm going to get downvoted, but". Instead of making assumptions about the nature of a discussion in a comment people should wait for the discussion to develop before judging.

If you know someone is astroturfing call it out. If a post isn't appropriate or isn't contributing to the discussion call that out. Just don't assume that people are participating in bad faith, especially before that participation has even occurred.

arkem··on Further ties of NSA to Equation Group hackers
Your comment would be stronger if you omitted the final sentence.

Fortifying your opinion by preemptively calling other people contributing to the discussion "astroturfers and apologists" is poor form.

← PreviousPage 4 of 7Next →