HNHacker News
TopNewBestAskShowJobs

flavmartins

382 karma · joined September 5, 2012

submissionscomments
flavmartins··on Public protest against Amazon
As an org head in a tech organization experiences I try to find managers/supervisors like this and actually move them out of the organization.

I know that you direct management and peers can be one of the greatest influences for good or bad for the broader team. A person like the Manager in this situation is a clearly going to create more problems for other team members in the future.

flavmartins··on For Dell’s Billionaire CEO, Taxing the Ultra-Rich Is a Joke
The answer is likely quite simple.

Because allowing for one idea would lead into another.

70% tax is a start. Not the end. The idea is to find where the "excess" income is taking place and add additional taxes in that area to direct the income into investment and services.

70% may be a start at ordinary income. But does it apply to investments? And then what's next?

I think the key question for Dell and others is: can you show proof that the current approach of lower taxes boost the average individual income of workers? Because right now we're seeing great numbers from Wall Street, but wages are still virtually flat year over year. How does the Dow continue to climb but workers' pay stay the same?

flavmartins··on Google gets into game streaming with Project Stream
I understand the concern.

To play Devil's advocate, I would love to see real data on how much these older games get played.

The idea is that we buy a game and will continue to play it off and on for YEARS. But is that reality? Or do we finish a game or get tired of a game and then move on to a newer title and never return to those older games we thought we'd continue playing in the future?

I have MANY PS3/PS4 games I thought I would pick up again eventually. My PS3 has now been donated to goodwill after years of being disconnected and gathering dust in my media room.

And on my PS4, the disc games I can't even find. Most titles are digital buys and I've actually deleted from from the console since I'm not playing them. I find myself moving from new game to new game every 6 months or so. A few multi-player games I'll stick with periodically while it's active, but once the sequel is released I'll move on too.

flavmartins··on Google gets into game streaming with Project Stream
This is the reason MANY people don't get into PC gaming and opt instead for a console. Yes, it's a downgrade from what you can get with a PC, but having to drop $500+ every other year on the latest graphics card is not something many want to do.

And the browser-based approach seems like a great solution for the platform issue. Being a Mac user I often miss out on steam games since they are mostly focused on Windows releases.

flavmartins··on Telltale Employees Left Stunned by Company Closure, No Severance
Another article states that only 2 games were actually profitable. Minecraft Story Mode, and one of the Walking Dead games.

All others were failed financially and did not recoup costs.

flavmartins··on Ryanair strike hits 55,000 customers across Europe
PBS did a piece, Frontline IIRC, about regional airlines and airlines like Ryan were discussed.

They essentially underpay employees by A LOT compared with the major airlines. It's how they keep their prices low. Pay little, charge for everything, but discount the price of the regular ticket by a lot.

And WHY would you take that job? Because it gets your foot into the door in the industry.

As a pilot, for you to become a captain (and earn more money), you have to complete certain thousands of hours of flight. And so you want to do that as quickly as possible. Regional airlines are a much easier to be hired into and you can get your routes on a very regular basis to make up all of your hours. Then, when you've completed your hours, you then apply to work for a larger airline with better pay and benefits.

flavmartins··on Ryanair strike hits 55,000 customers across Europe
I've had neighbors who are pilots (and 1 was a backup pilot who was always on call when someone couldn't show up).

They've explained that your hours count ONLY when the plane has closed the door and backed away from the gate. Then you are officially being paid for your time.

This explains the horror stories of "stuck on the runway". It's usually issues with weather/equipment/airport, etc. and it's not in the crew's best interest to just stay at the gate until the issue is resolved. If you're at the gate, the crew is not being paid.

flavmartins··on Why We Should Listen to Flat Earth Believers (Even Though They're Totally Wrong)
A great summary.

Trauma is real. Our society doesn't place enough emphasis in recognizing mental health issues other than depression. There are many other events that cause trauma and people deal with it in many different ways.

This is why you no matter the number of facts you present in online discussions will ever dissuade these individuals from their positions.

flavmartins··on FAA Tapes from That Oregon UFO Incident
I know that many people will think UFO as extra terrestrials, but could it be that these aircrafts are actually stealth spy planes from foreign governments that are doing surveillance over US territory?

We know that the US does regular flights over foreign countries for intelligence and normally we tend to think of foreign powers as "less capable" in their military technology. I think it's quite the opposite. There's heavy investment in military tech. Could be Russian or Chinese stealth spy planes. It would make more sense that this is the case than aliens from outer space.

Stealth planes would behave this way. Dropping in an out of radar, no transmission, etc.

If you think about aliens, if they were to make it to the US, they would need some sort of advance propulsion systems in their space craft. This would likely allow their space craft to NOT fly like normal earth aircraft. Why do they need to be traveling in linear patters as this incident shows?

I think foreign military is a more likely answer to the incident.

flavmartins··on The science of Destiny 2's 'uniquely complicated' netcode
Wait until you get to the 300 range and the endgame is really revealed. It'll disappoint big time. Weak.
flavmartins··on Donald Trump Is Elected President
Hybrid proposal is the real solution.

Yes, in the US, the taxation of the Nordic countries won't work and the socialist approach to services is also not accepted by half of the country.

Two key ideas, however, could be implemented:

--- IDEA 1 - REALLY EDUCATE people on WHY they need to get new vocational training.

Currently too many people are being given false promises of the return of working class jobs that are not coming back. It's not just globalization that has caused the loss of these jobs, but also technology advances that have made many of these jobs obsolete.

Your blue collar worker today isn't going to get a job moving metal equipment from one place to another because a machine can do it much more efficiently 24/7. Our capitalistic society means that a corporation will seek to create maximum efficiency to generate maximum profit. Corporations aren't in the business of maximizing the number of employees, but rather maximizing the return per resources invested in the organization. And that means, excuse my somewhat callous statement, that people are viewed as resources to the organizations, a means to generating profit. If a machine is able to perform a function faster, longer, for less overall money than an employee, a corporation will seek for that alternative.

So when many politicians make promises of bringing back good jobs. They AREN'T telling people WHAT JOBS are coming back. In fact, when you look at manufacturing jobs in the US, we currently CAN'T FILL THEM.

The problem is that your blue collar worker still expects a manual, low skill manufacturing job. But the job the US corporation wants is a manufacturing person who has a math or CS degree who can program or operate a high-end automation machine. Who can manage the CNC process or who can input the specifications for highly detailed technical operations. This requires specific training, math, engineering, or certifications.

This is the truth that more politicians need to hammer home to the people, then government follows up making sure that there is an incentive for educational institutions to allocate resources to teach these people.

But today, we're still stuck in: politicians claim that it's federal government's fault that they don't have a job, and that electing them instead will magically bring these low skill jobs back.

--- IDEA 2 - DECENTRALIZE FEDERAL GOVERNMENT AGENCIES (Move them out of Washington D.C.

A CNN op-ed suggested this as a way to bring the Federal government closer to the people in the country. (http://www.cnn.com/2016/09/06/opinions/government-department...)

The capital, Whitehouse, and some executive services would remain in D.C., but many of the key departments would be moved to different regions of the country.

For example:

-The Veterans Administration in Phoenix -The IRS in Dallas -Treasury Department in NYC -FBI in SLC -The EPA in Portland or Seattle -Department of Agriculture in Iowa

and so forth. Federal government jobs move to other places around the country bringing it closer to the people so they get a more personal connection with the government since it actually supplies jobs to the people they know. It also moves these departments into locations that cost less than the high prices of the D.C. beltway.

Is there some loss of more interpersonal meetings between departments and cabinets? Sure, but high speed Internet access is readily available in ALL metropolitan areas around the country. We have video conferencing technology which eliminates the need for us to have the requirement of so many in-person meetings. It's a trade-off, but one that is greatly benefiting the people of the country.

And as the Federal government this is a big win because today, much of the sentiment is that the Federal government DOESN'T DO anything for me. It's a bunch of "elites" who waste time and money and the people don't see anything direct benefit.

Decentralizing the location of government agencies begins to eliminate this. Just like the US National Guard has a training camp just north of the city where I live, I can't say that the national guard doesn't do anything and isn't needed. They offer a great service and employ a lot of the people in my community, the surrounding communities. The national guard members, employees, and their families all buy homes in our communities raising home values (since these are stable jobs, homes aren't sold left and right, people stay, pay taxes, leading to general growth for our communities). These people also buy goods in our stores, contributing to the local economy. All because the Army put one of their national guard training camps here instead of concentrating them at West Point in New York.

flavmartins··on Chrome Requiring Certificate Transparency in 2017
The issue with mandating CT isn't the CAs. CAs are generally supportive of CT. The big push back comes from corporations and the fact that CT logging also logs any of their internally issued SSL Certificates if it was issued by a public Certificate Authority.

So any internal domain and domain hierarchy is exposed to the general public who queries for the organization's domain in the CT log.

flavmartins··on CA Comodo used broken OCR and issued certificates to the wrong people
I work for one of the big CAs out there. For those domains a human actually performs a manual WHOIS query for those TLDs and then manually enters in the email address associated with the domain contact and they are required to include a screenshot of the WHOIS details for verification of the information. A second individual then is required to perform a verification that the email address entered is correct per the attached screenshot.

All of this, plus the querying of the organization's legal registration, business address and contact is all done by trained people and due to internal efficiencies and workflows we can complete that in a matter of minutes from the time a customer places an order.

In the end, even an organizational vetted certificate is still completed just as fast as it takes customers usually to click on the approval email to authorize issuance and submit the CSR for the certificate creation.

flavmartins··on Blocklist of all Facebook domains
Did you add the Facebook Tor Onion address?

facebookcorewwwi.onion

Might as well make it a complete block. Make sure those creative types don't find that last alternate path to FB.

flavmartins··on Public Beta: December 3, 2015
If you look at Chrome's change to https indicators, they give these sites with auto issued certs the lock so users will interpret it as "secure". Seems easy to create fraud sites and give them a legitimate site look.
flavmartins··on Public Beta: December 3, 2015
Anyone concerned with the amount of fraud that will come from this? Won't bad actors utilize this to https all of their phishing sites?
flavmartins··on OpenSSL Security Advisory
We've posted an update on the DigiCert blog: https://blog.digicert.com/openssl-patches-security-vulnerabi...

No affect on any issued SSL Certificates, that's always a positive.

flavmartins··on Gradually sunsetting SHA-1
The claim that CAs have been sitting on SHA-1 and not migrating to SHA-2 is not entirely accurate, at least in my experience with DigiCert.

Consequently, people I know there have told me that 25% of all SHA-2 certs expiring in 2017 have been issued by DigiCert, well beyond their market share. DigiCert has migrated all but a couple hundred customer certificates expiring in 2017 onto SHA-2, and those should be moved soon.

As for CAs in general, much of the blame lies not with CAs but with the lack of SHA-2 compatibility in certain devices and software.

For its part, today, DigiCert released a new, free tool that makes it easy for sys admins to identify all SHA-1 certs in their networks, determine validity periods and how future Chrome releases will treat these certs, and help admins map out a path toward SHA-1 sunsetting and SHA-2 migration.

DigiCert will also replace any SHA-1 certs – for current customers and non-customers alike – for free. They will match the existing SHA-1 term for a free upgrade to SHA-2 through the end of the licensing period. Here’s a link from a Dark Reading article:

http://www.darkreading.com/endpoint/authentication/digicert-....

flavmartins··on OpenSSL Security Advisory
From a notice sent by the OpenSSL team to internal groups:

"Since these security defects are considered as moderate severity or less no further details or patches will be made available in advance of the release..."

So waiting 2 months for something that is not critical is no reason to start acting like the sky is falling.

flavmartins··on GitHub and BitBucket's SSL Provider's Cert has expired
For a full explanation on the legacy intermediate explanation and affected users see DigiCert's post:

https://blog.digicert.com/expired-intermediate-certificate/

flavmartins··on GitHub and BitBucket's SSL Provider's Cert has expired
It was noticed, but tested across a number of platforms did not show errors except for Android < v3.

The issue is with a weird Mac OS X chain issue that causes a chain to be downloaded to the login keystore in Keychain. Mac forces it to be used when validating the certificate chain. Most users have removed the cert and everything is working as it should.

Tracking down how and why that happens on Mac OS X is tough. Reaching Apple engineers has not been extremely successful. Not Apple's fault. Usually SSL Root Chain groups are distributed with organizations so it's not always clear who to go to.

flavmartins··on GitHub and BitBucket's SSL Provider's Cert has expired
I work with the Certificate Provider DigiCert and confirm that the expired intermediate is a deprecated certificate no longer used in installs. Some sites still have it installed on their server or users might have it installed on their local machine.

If you are on Chrome, follow @huntaub's suggestion and remove the expired certificate from keychain and restart.

We've been notifying customers of the expiration and have Technical Support in the office 24 hours to help the sites who need help updating the certificate.

We're also reaching out to the sites we see having issues online.

flavmartins··on Xkcd is wrong about "free speech"
OpenSSL could make the same argument about the original tweet that in essence was a threat against the security of the application done publicly without any thought of engaging the organization.

This is like hackers who compromise servers and then post sensitive account details publicly to harm the organization that was compromised. The original tweet did the same thing since he clearly hasn't take any steps to notify the organization about the exploit.

flavmartins··on Xkcd is wrong about "free speech"
Could you include the "attacking" tweet as an example? I couldn't find it, just a post suggesting that you open a bug report unless you clearly just wanted to post the bug to poke fun and not really make it better.

If the individual(s) who responded to your tweet did so should apologize for it. They should have just asked for a bug report and respectfully requested that security issues be reported to the organization before making it public for bad actors to use. Although you are free to post about it however you feel is best.

As far as speech goes, there's a big difference between FREEDOM TO SAY WHAT YOU WANT and FORCING OTHERS TO ALLOW THEIR MEDIUM TO BE USED. That's what XKCD is saying.

If I own a microphone and you want to use it to say something I don't agree with, I don't have to give it to you just because you are free to say what you want to say.

If you want to praise Nazis, racism, bigotry, or whatever, you are free to do so. But you can't expect people to be forced to hand over their platform of communication for you to do it, whether it's a conference presentation slot, hosting servers, social media site, etc.

The government can't make laws preventing you from saying what you want to say. But it also won't make laws forcing anyone to enable you to say it.

As for the argument about show creators who are "forced" to censor certain jokes or statements, again, they are requested to do so. They don't have to do it, but the networks don't have to continue funding the show.

flavmartins··on Zendesk S-1 filing
If I read this right, they lose money...every year.

Is this discouraging to anyone looking to start a SaaS-based startup?

You imagine that your new service will make money, but in reality sales and marketing will cause you to have to chase funding constantly just to stay alive.

Thoughts?

flavmartins··on Ask HN: What pain point did Twitter solve?
Twitter allows you to interact anyone in the world (that is on Twitter, of course).

I'm going to NYC for the first time this week. I want to eat at places where the locals eat, not what's trendy on the Web or TV. How did I get recommendations?

Twitter.

I reached out to NY food bloggers and they happily responded with tips.

I don't need to get introduced by someone else. I don't need to personally know them or "friend them". I don't need to pay for 3rd party services to hunt down a phone number or an email address.

People often miss on what I think is one of the most fantastic features of Twitter.

flavmartins··on Why are domain renewals getting so expensive?
Registrars are hit up on multiple fronts:

-ICANN charges contract fees, $100k+ to registrars to become accredited.

-TLD operators (like Verisign for .com and others for every other cool TLD your users might want to register) charge a base fee to the registrar per domain that is registered.

For example, Verisign (holder of the .com TLD) charges roughly $6 per domain to the registrar.

Registrars then have to pass on those costs to you AND add a little more for their own operating expenses and profit.

Many registrars use domains as a loss leader. They LOSE money on domains in order to upsell you on other services (hosting, SEO, ecommerce, etc.).

flavmartins··on [dead]
Command + Space on the Mac: Quick search of apps and files using spotlight. I use it probably a million times a day.
flavmartins··on I built an easier way to bulk follow/unfollow people on Twitter.
Signed up! Great tool. Will see how it goes.

Does the auto favorite keep working in the background or is it just a one time per search? It looks like it's just a one time thing.

flavmartins··on I have 500$ how to double the amount in one week?
Don't just double it. Triple it.

Post a bid for a contract on Freelancer or oDesk and then turn around and outsource the job on an hourly basis.

← PreviousPage 2 of 4Next →