dkopi

> Protocol buffers are Google's language-neutral, platform-neutral, extensible mechanism for serializing structured data – think XML, but smaller, faster, and simpler. You define how you want your data to be structured once, then you can use special generated source code to easily write and read your structured data to and from a variety of data streams and using a variety of languages.

From https://developers.google.com/protocol-buffers/

Great point! Didn't realize that. Thanks for an informative answer. Definitely learned something new. This is why I'm here.

Very interesting if true. I'm tempted to build an extension just to check that.

I wonder if a DOM mutation event would be triggered if a content script adds a new link element and changes it's href.

Would I be able to catch that and quickly change the href, before the content script continues to fecth the processed properties?

Good point, but that's assuming you're running in the context of the popup and not in the context of a content script. In the popup's script, you are using a new DOM. But in a content script - you're using the same DOM as the client, which can override createElement (and any other function as well).

Great point. Exactly the type of comments I come to hacker-news for!

While that might be an "easy way" - it isn't a secure way in this case.

Since malicious attackers have complete control over the page you're seeing - they can simply replace document.createElement with their own function. And instead of returning a DOM object, they can return an object that returns whatever they want in .hostname

Seems like the fan is about to get hit again:

http://www.zdnet.com/article/lastpass-zero-day-vulnerability...

"What is the cost of annoying me with drones' noise" By that logic, you should be able to tax people for having children or buying a dog.

While drones dropping out of the sky is indeed a scary thought, delivery trucks killing people on roads is already a reality:

http://www.nj.com/middlesex/index.ssf/2016/06/5-year-old_boy...

As for "pricing in the societal costs" - that's called paying insurance.

I don't think letting a stranger enter your building / yard is less of a privacy / danger / noise concern.

As for: "non-critical stuff" - is that really up to you decide for others what's critical for them or not? If they're willing to pay extra for drone delivery, it's critical enough for them.

Also - as far privacy goes: "The company also claims it's working on ways to make the machines quieter and it says they won't have cameras on, just sensors."

Pretty cool. Waiting for the Android version.

THIS. After learning a few languages and paradigms, I find that I often have a 2 week ramp up for any given programming language.

If you already know Java and Javascript, you'll get Scala / Kotlin in no time. If you're experienced in Python and Django, RoR is a few weeks away. If you're experienced in C++ and Python, it won't take long until you're good to Go.

I get that companies want someone who's productive from Day 1, but they're missing out on a lot of great candidates that might only be productive from Day 15, but they'll be a lot more productive over time.

"The future I imagine is a world in which programming is self-explanatory, where people talk to computers to build software. To get there, programming tools should first use our language."

But is: "For every button on the page that is a "warning" button, replace the background color to red."

Necessarily better than? $("button.warning").css("background-color", "red")

Perfect. Awesome bug. Awesome Post Mortem. This was just fun to read.

While this might have been caused by mistake - these types of bugs can be (and are) abused by hackers.

https://www.owasp.org/index.php/Regular_expression_Denial_of... https://en.wikipedia.org/wiki/ReDoS

The post also links to this video: https://vimeo.com/112065252

It's interesting to judge conflicts based on this ranking as well. Check out #55 (Palestine) and #175 (Israel)

How is cyber-deception different from regular honeypots?

In that case - kudos for being able to clearly explain what your company is about and who the founders are. It usually takes me at least a meeting with the founders to get excited about a company.

When trading salary for equity, it's not just about being excited about the idea, it's also about being excited about the founders ability to turn that idea in to a product, business and eventually an IPO or M&A.

Fairly acceptable if you're at StackOverflow. A company that has truly changed the way people program, and hard to find a programmer that hasn't used their products.

But most companies aren't so, and candidates expect recruiters to tell you what it is they're looking for.

It only stops the pasting, not the copying.

Binwalk is a great tool for finding potential files within a given binary stream: https://github.com/devttys0/binwalk It has an incredible list of supported file types.

True, but: A. A good job today might not be A good job in another 3 years. Companies aren't quick to dump their existing code just so they can see "we now use <modern language> and <modern framework">.

B. very often <good job> expects you to already be experienced with <modern language> and <modern frameworks>. By learning at home at your own spare time, you reduce the risk and ramp up time for them, making yourself a more desirable candidate.

Try working on make files for a while. You'll miss grunt :D

The main reason I see for "working after work" is actually for "learning after work". While companies might try their best to invest in your professional development - in the end your career is your own responsibility.

While you might have to work hard to convince your employers to let you move from part of the stack to another, no one can dictate what your side projects are except yourself.

Working after work is what "saves" a programmer's resume from listing "20 years in <obsolete language> using <obsolete API> until the company I worked at for 20 years shut down".

I suspect a lot of the debate here might end up divided along gender lines. Men and women tend to communicate differently (of course this is a generalization, and doesn't apply for all men or all women) - with men often valuing short, efficient and informative replies.

I think smart replies are a great advance towards communicating quickly and efficiently - which is the use case for most text conversations. But it is important to realize when we expect communication to be more descriptive and personal.

That's a reasonable interpretation. In that case - it just goes to show how much work and effort is required to remove pirated copies.

Also - I'm pretty sure a lot of these so called pirated versions don't really include the original, unaltered audio track, or just include a few snippets from the video.

"The song “Drag Me Down” by One Direction appeared on YouTube 2,700 times after the service was asked to take down unlicensed copies. These 2,700 pirated uploads allowed Google to continue profiting from advertising while the artists got nothing."

When an average music video has hundreds millions of views, 2700 views is actually an incredible proof of how quick google is to take down pirated music. For comparison, the original "Drag Me Down" video has over 459,286,538 views.

Prnfre pvcure vf nyfb xabja nf EBG13

Most of the power special interest groups have doesn't come from their general voting patterns power in general elections.

I use ReactOS when I'm curious about how certain windows functions work internally.

Instead of reverse engineering the windows code, you can simply rely on the amazing work by ReactOS which is much more readable and understandable.

Good thing malware doesn't have administrative privileges.

> Which works out great for the top few percent of workers It works out for any worker.

It's not just about quitting Microsoft to Join google, It's also about quitting Mcdonald's to join Subway, or quitting Amazon to work for Walmart. The only workers who aren't able to quit a job are public sector workers, where the government has a monopsony on hiring.

> I've yet to work anywhere with mandatory vacation days in the sense that I can not give them up In some countries you can give up your paid vacation days. At a cost to your employer who would have to PAY YOU additionally. These all add up as additional costs of employment, and simply reduce the salary you earn in the first place. (As compared to what you could earn if there weren't paid leave laws in place).

Do some workers and employers prefer a lower salary for more vacation days? sure. Just agree on that as part of a contract. Don't force a one size fits all solution on everyone.

> Women leave employment in droves to have children whether or not they get paid maternity leave I wasn't addressing that. I was explaining that in countries that have paid maternity leave, women might not even get employed (or only get employed for certain roles) in the first place.

> Mandatory insurances and pensions are not about workers protections per se most places I'm aware of. Take Israel as an example. Mandatory pensions are considered a "triumph" of the unions, who are able to strongarm employers in to paying more into worker's pensions: http://www.globes.co.il/en/article-histadrut-employers-agree...

> Not being able to fire a worker is not a common feature of workers protections anywhere. It's never about "not being able to fire". It's about firing flexibility. Can an employer simply send you home, or do they have to go through lots of legal beuracracy first?

It's easy in Denmark: http://www.nytimes.com/2004/12/15/business/worldbusiness/the... But difficult in France or Germany: https://www.quora.com/Is-it-true-that-its-impossible-to-fire... https://www.wbs-law.de/eng/doing-business-germany/employment...

The bottom line is that if it's difficult to fire someone, you'll be a lot more picky and careful before hiring them.