ampersandy

14 ms·

91.
by ampersandy 13y ago
StartSSL's denying free cert revocation does not make them untrustworthy from a technical perspective. The onus remains on the site owner to implement their site security properly and pay any fees necessary to do that. So the only issu
92.
by ampersandy 13y ago
The most annoying thing about internships are smug comments like this about interns.
93.
by ampersandy 13y ago
Thank you so much for posting this! This was the list where I originally found the Mother Earth Mother Board article, but I only just remembered that after seeing your post.
94.
by ampersandy 13y ago
If Microsoft's entire child-security protections don't work; I'd say that's fairly major. What might have been a very compelling feature for parents has been shown to be ineffective (if your kids know about the vulnerabi
95.
by ampersandy 13y ago
I think this is a more plausible approach (and likely cheaper resource-wise to implement). Though, if the authentication requests somehow identify the Android app in question, it might be easy for Amazon to then perform a follow-up and down
96.
by ampersandy 13y ago
To be fair, revenue could have kept growing with the old design; you still don't know if you've achieved more with the new one!
97.
by ampersandy 13y ago
It seems like you said that disdainfully/sarcastically, but if you had metadata about thousands of experiments and the ability to do a meta-analysis on that data; wouldn't you? It seems like a great opportunity to identify potenti
98.
by ampersandy 13y ago
I can't believe they're still running this crap - I it's been a year and a half now? My opinion of Microsoft took a complete nosedive after seeing this campaign.
99.
by ampersandy 13y ago
Are there any unbiased comparisons of Resin and other app servers? The only source for their claims of better performance is their own benchmark of serving what seem to be static files. [0] A discussion of it pointed out that the comparison
100.
by ampersandy 13y ago
Just a heads up that the search page seems to be 404'ing.
101.
by ampersandy 13y ago
How many people do you know with adjectives in their name? If you met someone and they said their name was "Joey Red Puma", would you assume that's real or fake? You'd probably say something like "really? you'r
102.
by ampersandy 13y ago
As if Google's naming policy is a check against a list of words... More likely; Google has implemented an algorithm that uses machine learning and several other heuristics to try and determine the probability that the name is real or n
103.
by ampersandy 13y ago
There's a good write up (in Russian) here: http://habrahabr.ru/company/vkontakte/blog/214877/ As HHVM is more performant than HPHPc, it's a more relevant comparison. Even then, it's not en
104.
by ampersandy 13y ago
Mostly right. HPHPc produced the C++ code and that was compiled into a single binary executable. The deployment process involved using bittorrent to distribute the blob to all of the production servers. HPHPc wasn't abandoned per say,
105.
by ampersandy 13y ago
Why is it a horrible idea? I worked on the Site Integrity team at Facebook and I can assure you that protecting people's accounts from attackers is a fundamentally hard problem that very few companies are actually equipped to handle.
106.
by ampersandy 13y ago
Ugh, I really detest blog posts that only acknowledge in passing (at the end of the article) that someone else has done all of the work. This is literally just copy+pasted from entries in the newsletters.
107.
by ampersandy 13y ago
I'd prefer static analysis that extracts strings from calls like t("Check out our Jobs page {{url}}!") and auto-populates the appropriate locale files/databases, etc. Referencing keys all over the place seems like a poor
108.
by ampersandy 13y ago
Great insight. An analogy I've heard that echoes the same sentiment: you don't buff a diamond, you cut it.
109.
by ampersandy 13y ago
Bram's last post was 10/21/13, and a month later Bjorn confirmed in his fork that he could reliably freeze VIM and had segfaults that he had yet to fix. The final word seemed to be: "There are enough vim users out there
110.
by ampersandy 13y ago
It's perfectly acceptable to not understand the low level details of seriously used systems. Isn't that what teams are for? You can trust the engineers developing infrastructure so that you don't have to worry about it. Sure,
111.
by ampersandy 13y ago
The issue is that any service at Facebook written in PHP inherently contains a lot of artifacts that are only relevant to Facebook's tech-stack. Services written in C or another language have a greater chance of eventually being open-s
112.
by ampersandy 13y ago
I helped build the server-side component of this framework during my first internship at Facebook. The framework is server driven, in that experiments are defined in another tool and then loaded on the client framework. Essentially, an expe
113.
Glooko Lands $7M To Bring Predictive Diabetes Care Global(techcrunch.com)
1 points by ampersandy 13y ago|0 comments
114.
by ampersandy 13y ago
They'll certainly look; SV-type tech companies are going to screen your application based on technical merit. I'd simply advise not to include your age on your application, because it's irrelevant to how beneficial an interns
115.
by ampersandy 13y ago
I still don't understand all the hate for the new version of Skitch; taking a screenshot and throwing a few shapes and text on it takes less than 5 seconds. What's the problem?
116.
by ampersandy 13y ago
but at the loss of any other social network upstart that wants in on it Who do you think is footing the bill for those Facebook-only plans? Covering the costs of all internet use sounds like an unsustainable business strategy. Are 's
117.
by ampersandy 13y ago
Facebook just gave a talk at an HN London meetup recently about exactly this topic: http://vimeo.com/80460475#t=11m48s . The gist is that 2FA doesn't work because people don't enable it, but you can protect accoun
118.
by ampersandy 13y ago
A/B testing is a catch-all term for multi-variant experimentation. Multi-armed bandit is a specific approach to testing[1], and even though most frameworks provide A/B/N testing -- that is, not necessarily just two variants -
119.
by ampersandy 13y ago
Great insight! Though I'd expand on your bet and claim that at almost every major site, a majority of testing is channeled into onboarding. It's certainly the case at Twitter and Facebook that a lot of work goes into optimizing a
120.
by ampersandy 13y ago
I agree that this process might be overkill for a civilian system, but it seems to me that an ongoing failure to respond efficiently to 911 calls (over the course of weeks, months, years) is quite worthy of a development process that reflec

More ›