HNHacker News
TopNewBestAskShowJobs

qyv

975 karma · joined May 19, 2014

submissionscomments
qyv··on Eating Clean is Useless
What is the basis of the idea that organic pesticides and herbicides are safer/better than synthetic ones?
qyv··on The World Bank’s Broken Promise to the Poor (2015)
What is the alternative for the nations that engage them?
qyv··on CoinDash’s ICO Website Has Been Hacked
Oh good, so they should be able to do that now and give everyone there money back again. Thank goodness for decentralization! /s
qyv··on API Security Checklist for developers
> But there can be no reasonable argument for a standard conceived of in the last 10 years to allow users to deploy something for which the payload chooses the cryptographic interpretation of the payload. No application anyone on HN is deploying needs user-selectable cryptography. This is never a feature; it's only ever an invitation to horrible vulnerabilities.

When I read about JWT's I saw the alg fields to a simple indicator of the algorithm being used on the JWT, not that it is allowing the token to select whatever algorithm it wants for the server to run. Granted, this is a semantic difference, but if you treat the alg field as such it then becomes the servers choice of what algorithms to support. The practical solution is simple: Only support one algorithm, and if the token's alg does not match what the server is expecting, do not authorize. Sure this is a weakness in the JWT spec, but the real underlying issue is dev's not understanding the security mechanisms and libraries they are deploying. That is bad news no matter what tech they are using.

qyv··on History by lawsuit: the “inventor of e-mail” targets Techdirt
Why are glad he won against Gawker? Can you point to any evidence to support his claims?
qyv··on Escape from systemd
I don't think that is a simple use case of an init system; using pre-built init scripts is the default use case. A simple use case is writing your own simple startup scripts for your own services. For that case, systemd is very, very easy to use
qyv··on Uber CEO advised employees on rules for a company celebration in 2013 memo
Mature adults in a respectful workplace don't need to be reminded of these things.

Why do you think that Uber has this kind of reputation AND has to say these things, other companies don't write these memos. These types of things are written by companies whose culture breeds contempt of these societal rules. That is why they need to 'remind' people.

qyv··on Uber CEO advised employees on rules for a company celebration in 2013 memo
So it is appropriate for the CEO to essentially pout to him staff that he can't have sex with them?

All of these things are certainly in the employment agreements and HR guidelines at Uber, this memo is NOT the first time any of these employees have gotten this 'advice'. Further, but putting this content in the memo you are doing a couple things: First, setting an expectation that sex will occur at this company endorsed function; and two, second you are essentially saying that your employees have had problems with this historically. How do you think that makes you employees who are not interested in this type of thing feel? What about those that just want to have a good time with their coworkers without being propositioned by every horny drunkard in the room?

qyv··on Facebook's tentacles reach further than people think
I think it is more likely that the market corrects this well before the law. How much longer can the status-quo of online advertising remain intact? Do these targeted ad's really work? There is a ton of time and talent being poured into hyper-advanced targeted advertising systems, how long can this be sustained?
qyv··on Uber Plans Millions in Back Pay After Shortchanging NYC Drivers
I swear it feels like the next story we are going to hear out of Uber is how Travis had to discreetly dispose of a rhino carcass by dumping it in the bay...
qyv··on Magic Leap Could Be Looking at an $8B Valuation
Hololens may never be a commercial success, or even a very compelling product, but that was not it's purpose. Hololens at it's core is a POC and tech demo, and we are already seeing that tech trickle down into the next gen. The upcoming VR dispalys for Win10 will all incorporate the inside-out tracking developed for hololens. This is huge because it offloads a very large tech burden from display manufacturers which opens the market for more, cheaper, simpler VR displays. ML could see their market inundated with competitors before they even reach it.
qyv··on Netflix confirms it is blocking rooted/unlocked Android devices
Ya, because studios want (require) DRM. My point is that Netflix has done a lot to reduce the obnoxiousness and hassle of DRM compliance.
qyv··on Netflix confirms it is blocking rooted/unlocked Android devices
This. It is 100% about being able to license more titles. Many people forget what the early days of Netflix streaming was like. Remember when you needed silverlight to watch on a computer? Remember when you couldn't even get Netflix on Android? Netflix has come a long ways since those days, and they have done a LOT in moving forward fair-use expectations for digital subscription content.
qyv··on Apple plans to spend $1B to support advanced manufacturing jobs in the U.S
The money isn't "stuck" abroad, it is hidden there. Don't pretend that it is the big bad tax man that is stopping these companies from being altruistic, this is 100% about maximizing profit.

The idea of reinvesting money domestically is good in theory, but how do you actually ensure that the money stays here? Is Apple Et Al. going to build, staff and operate these factories with local labour? Or, are they going to sub-contract out to the lowest domestic bidder who will just end up outsourcing the work overseas where the factories and labour is already established and cheaper?

qyv··on The Gig Economy’s False Promise
The gig economy is not build upon technology ideas, it is built on disposable and expendable labor.
qyv··on Uber said to use “sophisticated” software to defraud drivers, passengers
How exactly do you apply that pressure?
qyv··on Ride-hailing apps may help to curb drunk driving
> And like you know, all the other things he listed: >> it's easy to call one from a crowded/loud place, you know how much it will cost, they don't use cash, they know where you are, and you don't have to give directions.

Subjective advantages which are not exclusive nor intrinsic to ride sharing services. They can be replicated by anyone in the industry if they are deemed as valuable to their business. I never denied they don't add value (for some), I'm saying that it is the hugely undercut pricing that is primarily driving this trend.

> p.s., why do people like you want to hate on ride sharing services so much? Is it just that nothing can ever be good enough in your mind?

Wow, generalize much? Who is "people like you" exactly? The answer to you question is pretty obvious if you put the snark aside: My problem is with the predatory pricing that companies like Uber are using. when I said their pricing is not sustainable that is exactly what I meant. In 5 years they will either be gone or will have raised their prices.

qyv··on Ride-hailing apps may help to curb drunk driving
It's not he accessibility of ride-sharing services that is doing this, it is the ride-sharing services policy of artificially low pricing to facilitate rapid growth that is responsible. Those $9 rides are not sustainable. When the prices go back up to sustainable levels we will see many of these benefits evaporate.
qyv··on Dolphins' elaborate octopus-hunting strategy
Dolphins, which are another highly intelligent species, don't seem to have any qualms about eating octopus.
qyv··on Norden bombsight
The Robert McNamara documentary "Fog of War" has some excellent insight into the WW2 bombing campaign (mostly in the pacific) and the sheer scale of what was done. It is startling to say the least.
qyv··on Programmers are confessing their sins to protest a broken job interview process
> If you have one candidate who has seen all of this stuff before and can use it directly from memory...

Then this candidate has likely done many tech interviews before, what does that tell you?

qyv··on Seagate to Shut Down One of Its Largest HDD Assembly Plants
Perhaps this is old information, but do SSD's from the same batch/model not tend to fail all within the same timeframe? A steady stream of failures is probably preferable to a single mass failure.
qyv··on GitHub Enterprise SQL Injection
Interesting that this is a standard use-case for ActiveRecord [0] and does not include any built-in protection against SQL injection. You can pass a hash of symbols into the method, but there is no safe way to pass string arguments with sanitizing them yourself.

[0] http://guides.rubyonrails.org/active_record_querying.html#or...

qyv··on Messaging Is the One Thing People Do More Than Anything Else on Their Phone
> This time around, people's smartphones are already the unifier. All messaging apps have notifications, so your phone will tell you what everyone is saying across networks, and you just tap to go straight into whatever app the message was in.

I think you can go even further and say that having different apps for different types of communications is actually a convenience in the context of something like a smartphone. Different apps implicitly cater to a different circle of contacts with distinct levels of privacy, discretion, formality and posterity. If you had to explicitly manage these types of preferences in a single universal app it would be both tedious and error prone. Having separate apps that work is specific ways is just so much simpler to manage, it is convention over configuration.

qyv··on Apple cuts Tim Cook's pay 15% for missing sales goals
Not according to Microsoft, VR is going to be a big push for them this year. Granted a lot can go wrong, but they are addressing all the points you just listed:

* Headset Pricing: Major OEMs will be releasing headsets starting at $300 [0]

* Lowering system specs for VR [1]

* Not just a gaming focus: Windows 10 creators update puts an emphasis on 3D and Mixed-Reality, including a 'holographic' interface [2]

[0] http://1reddrop.com/2017/01/06/microsoft-announces-299-windo... [1] http://thenextweb.com/microsoft/2016/12/08/microsoft-unveils... [2] https://www.microsoft.com/en-us/windows/upcoming-features

qyv··on Apple cuts Tim Cook's pay 15% for missing sales goals
Windows 10 Creators Update along with a slew of headsets from major PC vendors (HP, Dell, Lenovo, etc.) starting at $300.
qyv··on Apple cuts Tim Cook's pay 15% for missing sales goals
If 2017 turns out to be the year the VR starts to hit the main stream, which it could be, it will be interesting to see what Apple's response will be.
qyv··on Apple cuts Tim Cook's pay 15% for missing sales goals
Many of these same type of things were said about Microsoft during the early Ballmer era. His emphasis of the bottom line over vision and innovation inflicted a lot of damage that Microsoft is still recovering from. Yes, total disarray is an exaggeration, Apple isn't going anywhere, but there are a lot of parallels with Ballmer's Microsoft.
qyv··on Does Google execute JavaScript?
Google brings something that no amount of fancy engineering and elegant solutions can provide: New Users. Because of that it is necessary to dance to their SEO tune.
qyv··on Chrome browser for businesses
I think the point here is that there is no such thing as a stable state in software. Maintaining old infrastructure to support old applications is not a steady-state, it is a degrading state. As bugs and exploits are discovered and patched in new versions of windows/browsers/databases/frameworks/libraries/etc the old systems degrade to a vulnerable, un-maintainable, unsupported and often un-upgradeable state.
← PreviousPage 3 of 7Next →