HNHacker News
TopNewBestAskShowJobs

sloppycee

253 karma · joined July 4, 2013

submissionscomments
sloppycee··on Cruise is running an autonomous ride hailing service for employees in SF
A public 'bed car' sounds gross.
sloppycee··on Cruise is running an autonomous ride hailing service for employees in SF
I'm not involved in autonomous vehicles at all but as an engineer, I'm pretty confident we are a long way away from level 4/5.

Without significantly reworking current infrastructure the challenges presented by city driving are too fuzzy to guarantee safety. For example, traffic lights can be obscured, out of order, or spoofed; unless they are modified to support av; I don't think this is solvable.

Although autonomous vehicles will require a safety driver for a while, interim benefits still exist and services like this will potentially provide the momentum needed to make those infrastructure changes.

sloppycee··on Malicious crossenv package on npm
Just consider: - China issues a bad cert for npm - Slurps up all passwords from Chinese maintainers en masse

Now we can't trust any package published from China.

This is a bigger deal than a targeted evil maid. Distributed trust is better than centralized trust.

sloppycee··on Malicious crossenv package on npm
The issue is of who to trust, the package maintainer or the package repository?

It is comparatively trivial to steal a strong password when it is transmitted over the internet vs local key material.

Nation states with bad certs (china has done this) can steal your password, npm can steal your password, npm can be hacked and leak passwords, npm can be subject to a NSL and forced to hand over passwords, etc, etc.

There is a big difference between passwords and keys.

sloppycee··on Malta – Alphabet X’s latest grid-scale energy storage technology
Or compressed air: https://www.torontohydro.com/sites/electricsystem/gridinvest...

Not sure why they use those balloons though, seems like a maintenance nightmare. A diving bell would work just as well and be much simpler.

sloppycee··on Reddit raises $200M at a $1.8B valuation
Beauty is subjective; Usability is not.

Good design must be usable; otherwise we'd call it art.

That Facebook redesign for example, while very aesthetically pleasing it looks horrible or confusing to use:

  * Search box doesn't look like an input control
  * Low contrast for top right nav (how do I change to any other page?)
  * Where did my groups and apps go?
  * Large pictures, great for mock ups, but it just means more scrolling when 80% of
    content I don't care or want to see;
    I really don't want to have a picture of a high school friend's baby take up the whole screen
  * etc.
It looks nice though.
sloppycee··on Reddit raises $200M at a $1.8B valuation
Honest question, why is it cool that they're re-writing?

To me this signals that the company has stagnated, or has grown beyond technology; it's an engineering team with no new ideas, no innovation, that's desperately trying to remain relevant in a company that is becoming less and less about the technology.

That's just my experience, but think about it. If a company has other revenue streams they can capture using new tech, how could they justify a rewrite vs. developing that new tech?

sloppycee··on Google’s new program to track shoppers sparks a federal privacy complaint
You can use geography, I assume this is meant to measure ROAS.

I've worked on a similar problem, and some very large retailers we worked with wanted to measure ROAS. They turned off all adspend in a certain large metropolitan area, while we turned on in that area. Measuring the sales lift/drop, gave an idea of the platform's effectiveness.

Any other demographic data point could also be used, not just geo. You don't necessarily need to link people directly.

sloppycee··on How a VC-funded company is undermining the open-source community
> But that's about as unlikely as the code containing trade secrets.

Unpublished code, is itself a trade secret. Even just the processes, procedures, organisation, tooling, library use, etc in the code provides a competitive advantage. i.e. The 'metadata' is also a trade secret.

The only intent you'd need to prove is that the accused is using the trade secret to the 'economic benefit of anyone other than the owner'.

It seems obvious that Kite is training a proprietary ML algorithm, with trade secrets, for their own economic benefit.

sloppycee··on The Company Behind Many Surprise Emergency Room Bills
I take it you have never experienced a true urgent health crisis?

Once you have you'll quickly realise that the 'long wait times' narrative is complete propaganda FUD.

Anecdote time: My sister is anaphylactic, when she goes to the ER she is admitted, hooked up, and given epi almost immediately. When my aunt couldn't move her arm one day, she got an MRI, diagnosed brain cancer, and had brain surgery in the same week.

I'm glad to have a system that when you are waiting it's because there are people with more urgent needs, rather than because there are people who paid more.

sloppycee··on How a VC-funded company is undermining the open-source community
No, but if that copyright material contained trade secrets then it is criminal.
sloppycee··on Show HN: A Set of Dice That Follows the Gambler's Fallacy
RNG stands for Random Number Generator. It is used colloquially, in gaming, to refer to the probability of certain random events or the underlying implementation of them.
sloppycee··on A quick guide to Stripe’s culture
> not just because we don’t have cubicles

This seems like some kind of self-selection proxy.

When I was younger I thought cubicles were the worst: the pinnacle of boring-grey office culture. Now that I'm older, I yearn for a quiet place to call my own.

'Cubicles' if done right can be pretty damn good! When I worked at IBM, everybody got a 'PWA': four 9ft tall walls, a sliding door, a corner desk, and a few shelves. It was amazing, and took up no more space than a standard cubicle.

sloppycee··on Google relaunches Glass for businesses
The cynic in me thinks they did that on purpose, the further they put the manual from the task the greater the efficiency gain of their software.
sloppycee··on Juicero Plans to Lower Prices and Cut 25% of Staff
Is that surprising though? I doubt mech engs graduate with enough (any?) experience with manufacturability [1].

Seems the lesson learned here is that unlike software, physical goods require an experienced up-front design that can't be haphazardly iterated on by new-grads to be fixed later.

[1] https://en.wikipedia.org/wiki/Design_for_manufacturability

sloppycee··on Juicero Plans to Lower Prices and Cut 25% of Staff
Wow, it's mind-boggling that the engineers didn't try something simpler.

My first hunch would be to use rollers, like getting that last bit of toothpaste out; I can't believe that it operated as an actual press.

It really is beautifully designed though. I figure the engineers were either forced to make a 'juice press' for marketing, or took it too literally.

sloppycee··on 'Living Drug' That Fights Cancer by Harnessing Immune System Clears Key Hurdle
That sounds horrible.

Although, I do wonder what effects there would be if a cancer cure-all were discovered.

Since nearly everyone would need the treatment at some point, it wouldn't really be insurance anymore; more like a mortgage.

sloppycee··on Turn your website into a Progressive Web App
Service workers are not needed, and manually managing the cache seems overly complex.

https://css-tricks.com/prefetching-preloading-prebrowsing/

sloppycee··on Net Neutrality Day of Action: Help Preserve the Open Internet
> unconstitutional

How? Google is a private individual/company; they can deny anyone service, so long as the reason is not discriminating against a protected class.

sloppycee··on Mastering Programming (2016)
How about Google's Closure Library: https://github.com/google/closure-library

The code, imo, is some of the highest quality js I've seen. It is also incredibly comprehensive and easily as complex.

High quality != shipping fast. They are separate quantities, it is easy to have one without the other but very rare to have both.

sloppycee··on Is it unethical for me to not tell my employer I've automated my job?
You raise a good point, i.e. "do you steal a loaf of bread to feed your family?"

> Do I value integrity? Do I value my family? If I value both, which do I value more?

To make that choice you need to quantify exactly how 'bad' something is though, otherwise you can't determine which you value more.

It's like comparing stealing a loaf of bread vs. killing a man and stealing his money for your family; you'd need to quantify how "bad" each is, to determine that for ex. killing is worse than letting my family starve.

So how 'bad' is automating your job, is it even 'bad' at all?

sloppycee··on Is it unethical for me to not tell my employer I've automated my job?
> It would be great if there was a means for people to sell technology like this to their employers.

There is, you can quit and offer to build/sell/license the solution to your previous employer. Of course this would mean incurring (potentially) substantial risk, that you might lose your salary, they might not be interested, they might sue you, etc.

sloppycee··on How Effective Is Economic Theory?
How can you be sure the models are getting better (more accurate) over time?
sloppycee··on Russia requesting to review source code of Western companies’ security products
I have no political leanings, I'm neither American or Russian. Your biases are showing, w.r.t your hatred of Trump and your unfounded claim/assumption that Russia would benefit from a Trump presidency.

The irony is that if a Chelsea Manning/Edward Snowden character leaked the DNC emails people would be praising them for exposing the shitshow that was going on behind the scenes.

It kind of takes the heat off of the Dems, it wasn't them who were tampering with the election (which they were); it was the Russians!

Why does it matter so much who leaked the emails, rather than the content of them? If the DNC has nothing to hide...

sloppycee··on Russia requesting to review source code of Western companies’ security products
Depending on how the intelligence services determined it was Russia behind the attacks, it might not be very hard for a single country to masquerade as Russia to achieve their own political goals. It doesn't need to be a multi-nation conspiracy.

Taking the tinfoil off, Russia is probably behind the attacks but espionage is all about using misinformation; so who knows. Without the methodology behind how they've determined Russia was behind those attacks, we can never know.

sloppycee··on The story behind the Connecticut deli math sign
Is that a reference to the hilariously broken PS3 RNG? For those unaware, the PS3 was jailbroken because their RNG always returned 4.
sloppycee··on The Decline of Imgur on Reddit and the Rise of Reddit's Native Image Hosting
Everyone used to have a public IP back before the days of NAT. Your modem would dial in, and your computer would be assigned a publicly accessible IP address.

In the unix world, iirc, many systems were configured to expose a folder on the user's home directory (www). Which would expose that to something like: www.mit.edu/~<username>

sloppycee··on The Stack Clash
The issue isn't that a user can run their own code that can stack smash, rather that a user can exploit the smash to run their code in a privileged context (set-guid, i.e. sudo, su, etc.).
sloppycee··on A Study That Bolsters the Lead-Crime Hypothesis
Unfortunate that you're being down-voted for being skeptical, this study does have some issues confounding the results:

"The elevated BLL intervention package includes treatments previously demonstrated to impact later-life outcomes such as: visits from health workers; increased medical care; nutritional assessments and dietary modifications; and referral to the Special Supplemental, Nutrition Program for Women, Infants, and Children (WIC). Prior research documents long-term benefits from programs similar to each of these elements ..."

sloppycee··on A Study That Bolsters the Lead-Crime Hypothesis
That does seem like an issue with the study, from the pdf:

"Two primary channels emerge through which intervention affects antisocial behavior and cognitive outcomes. First, intervention may dramatically reduce the amount of continued childhood exposure to the dangerous neurotoxin by directly reducing exposure risks within the home environment. Second, long-term benefits may occur through improvements in early-life health unrelated to any changes in lead exposure. [11] ...

[11] The elevated BLL intervention package includes treatments previously demonstrated to impact later-life outcomes such as: visits from health workers; increased medical care; nutritional assessments and dietary modifications; and referral to the Special Supplemental, Nutrition Program for Women, Infants, and Children (WIC). Prior research documents long-term benefits from programs similar to each of these elements ..."

Why didn't they control for the other intervention treatments? One where they reduce BLL + other treatments, and one where they didn't reduce BLL but still gave the other treatments?

← PreviousPage 2 of 4Next →