arkem

9 ms·

31.
by arkem 9y ago
Google fights against subpoenas and warrants all the time but sometimes they lose. At that point they have to comply or be held in contempt and I can't really blame Google for complying in that situation. With many thousands of enginee
32.
by arkem 9y ago
If you're asking whether I was the director of my agency or the CEO of Google then the answer is no. I have also not worked for the Government in about 6 years or Google in 4 years so maybe everything changed the moment I left. However
33.
by arkem 9y ago
As someone who has worked for a five eyes intelligence agency and at Google I can tell you that Google does not share sensitive data with the Government unless compelled to do so by law.
34.
by arkem 9y ago
I'm not particularly worried, Google and Facebook have two of the best security teams in the world and spend an amazing amount of money to protect customer data. The amount of convenience I get from Facebook and Google outweigh the ris
35.
by arkem 9y ago
I haven't lived in WA for a while now but I always thought of the RAC as kind of a default roadside assistance and insurance provider. There are plenty of other providers and with a little effort I can recall some of their names but wh
36.
by arkem 9y ago
Can you provide me with a pointer to more information about this? It seems pretty extraordinary and I'd like to see more before I believe it.
37.
by arkem 9y ago
I think calling this a ban on end-to-end encryption is an mis-characterization. According to the press conference where this comes from[1] it seems that they're talking about legislation that would expand the Telecommunications Act&#x2
38.
by arkem 9y ago
I successfully went from E3 to Green Card without getting a H1B first. It's a more annoying path (there was a ~6 month period in which I couldn't leave the US) and riskier (more ways to end up rejected). That said the H1B route wo
39.
by arkem 9y ago
The way the article is written makes it clear that it's talking about market capitalization (since the first sentence mentions the Hong Kong stock exchange). When talking about public companies it is accepted practice to shorthand mark
40.
by arkem 10y ago
Which options are more convenient? I'm always looking for something better. What do you mean about distributing passwords in plaintext? Can you be more specific for me? It's not the pareto frontier of security, it's the paret
41.
by arkem 10y ago
I have a security background and I've found (minor) security bugs in lastpass before and yet I still use it. I use lastpass because it is safer than what I was doing before using a password manager and most inconvenience I'm willi
42.
by arkem 10y ago
My guess is it's because Google's security team is top notch and happy to share their threat intel with their users and that's much more relevant to journalists than using a non-US based service or one that avoids content bas
43.
by arkem 10y ago
and two other times even more recently: https://news.ycombinator.com/item?id=13425159 https://news.ycombinator.com/item?id=10661581
44.
by arkem 10y ago
I know a few people who went TN to green card, and I myself went E-3 (a non-immigrant visa) to green card. It made the process more convoluted and risky but in my mind was way better than playing the H1-B lottery.
45.
by arkem 10y ago
It'd probably be eligible for a design patent or trade dress protection.
46.
by arkem 10y ago
Maybe things have changed in recent years but here's some information on what I considered benchmark prices when I was more involved in this kind of thing. I have some background in vulnerability selling and I used to do this for a liv
47.
by arkem 10y ago
I don't agree that this could have been easily monetized. This vulnerability only allows you to intercept future incoming emails that are delivered to sendgrid domains. Even if it did allow access to all of their customers internal ema
48.
by arkem 10y ago
I think it's hard to monetize most bug bounty bugs. There isn't really a market for most XSS, CSRF or even RCEs bugs for web properties. Getting the bounty payout for a bug from the owner is often the best deal available. I think
49.
by arkem 10y ago
I don't think it's very charitable to imply that the parent only holds their opinion due to their assumed economic status.
50.
by arkem 10y ago
Citi and Bank of America both seem to offer temporary credit card numbers for their customers. https://www.cardbenefits.citi.com/Products/Virtual-Account-N... https://www.bankofamerica.com/privacy/
51.
by arkem 10y ago
The analogy that's sometimes used is that of a safe full of documents. Current case law says that you can be compelled to turn over a key but cannot be compelled to turn over a password [1]. The Department of Justice is saying that a f
52.
by arkem 10y ago
This exists, it's not 100% effective because it's generally implemented as a UI flow change where less trusted binaries get scarier "are you sure?" popups and only the most obviously malicious files are blocked. Edge has
53.
by arkem 10y ago
Google is an advertising company, but is it also a product company? Is Apple also an advertising company? How about the local minor league hockey team? Are they an advertising company?
54.
by arkem 10y ago
Google is an advertising company. Is Apple an advertising company? Why or why not? Is Rooster Teeth (one of my favorite creator groups) an advertising company? They make a large percentage of their revenue from selling advertising but they
55.
by arkem 10y ago
Of course, I'm not saying that Google isn't an advertising company. If Apple made 50% of its revenue from adverting would it still be a product company? Is this distinction about the size of the business unit?
56.
by arkem 10y ago
What makes Google an advertising company and Apple a product company? Since both make products and sell advertising. Obviously advertising is more important to Google than it is to Apple but at what point does Apple become an advertising co
57.
by arkem 10y ago
A company I worked for did the same, they raised some money and used some of it to purchase a portion of the employees' vested equity. In other cases the company's major investors were willing to tender to purchase employee equity
58.
by arkem 10y ago
In this context the parent is probably referring to the Oculus Rift Development Kit 2 and the Oculus Rift Crystal Cove prototype (which was very similar)
59.
by arkem 10y ago
As an aside, in Australia a car's turn indicator lights are commonly referred to as "blinkers".
60.
by arkem 10y ago
Artillery is in testing at the moment and has landed a publishing deal with Tencent (along with an investment): http://blog.artillery.com/

More ›