frankchn

17 ms·

181.
by frankchn 11y ago
From my experience, those "transfer" applications are routinely approved because they are not subject to the H-1B cap. Sure, it will take a few weeks for USCIS to process it and will cost the employer some money, but getting a den
182.
by frankchn 11y ago
The East India Company, with its own private armies fighting wars, is probably the most egregious example in history.
183.
by frankchn 11y ago
Hypothetically that is true, but do any ISPs do these sort of large-scale caching of resources any more? Also, if the site wants to track you that way, couldn't they (or anyone in the middle of your connection) just send no-cache heade
184.
by frankchn 11y ago
Ah, I see. Yes, from a cursory glance at RFC 5077, it seems that the SessionTicket is sent as part of ClientHello, which is not encrypted (page 6). This is still no worse than plain unencrypted HTTP at worst, and server admins or clients co
185.
by frankchn 11y ago
But if HTTP/2 requires TLS, then ISP can't read the traffic in any case right? I don't think parsing is a main concern here. Also, If the Google.fr deal is anything similar to the Comcast-Netflix deal here in the United State
186.
by frankchn 11y ago
Well, any website today can have some JavaScript that verifies that ads and tracking cookies are loaded and executed before actual content loads. If the advertisement is not shown successfully, then the script can refuse to load the content
187.
by frankchn 11y ago
Maybe, but currently some site today can set a cookie in your browser and track you anyway -- a lot simpler than fiddling with the TLS stack. I assume that if you browse in "Private Browsing" or "Incognito" mode, then th
188.
by frankchn 11y ago
I don't see how the stream priority feature of HTTP/2 affects "net neutrality" at all, since it only affects stream prioritization behavior within one TCP connection. If ISPs decided to slow down or speed up certain traf
189.
by frankchn 11y ago
> for now, you can only start containers from public images hosted on the Docker Hub, but that's expected to change when the service goes out of preview This is incorrect. You can run a private docker registry and point ECS to launc
190.
by frankchn 11y ago
Nice work! A Curator-like ( http://curator.apache.org/ ) framework on top of LogCabin will make it immensely more useful for everyday production systems though.
191.
by frankchn 11y ago
The recent attack on Github, where malicious JavaScript was injected into a plain unencrypted http connection, is enough to convince me that requiring https everywhere is the right move.
192.
by frankchn 11y ago
Might be the first time Haskell is mentioned in a speech by a head of state or head of government anywhere in the world.
193.
by frankchn 12y ago
I believe it is considered a significant break in a block cipher if you can distinguish messages encrypted via that cipher against random bits constructed in a similar way (i.e. constructing an adversary such that it has a non-negligible ad
194.
by frankchn 12y ago
I think you are overestimating how technically savvy most users are and how much people care about "control" over their personal data. > Maybe this is more of a European thing, but the backlash against cloud computing is very m
195.
by frankchn 12y ago
Who do they reflect the attack to though? Baidu? They might not even know this is happening (well they probably do now, but not sure what they can do). The GFW infrastructure itself certainly isn't publicly addressable.
196.
by frankchn 12y ago
I think Greatfire is evading the GFW by hiding their mirrored content behind innocent looking websites such that the GFW does not block it. Once the censors discovers a Greatfire node, they block it, but then Greatfire just moves on to anot
197.
by frankchn 12y ago
Greatfire is unique that they want the site to remain accessible to ordinary Chinese users while withstanding the DDoS attack (so they can't blackhole all traffic from China either). If they put a reCAPTCHA wall in front, the GFW can s
198.
by frankchn 12y ago
From a back of the envelope calculation - given a 10,000 write cycle budget for 16 GB of flash memory and a 512 KB block size (all worst case scenarios), you are looking at 300 million writes before the flash memory starts to fail. I probab
199.
by frankchn 12y ago
Or just write the attempt count and flush to flash even before checking whether the code is correct? The count can always be updated to zero once it is determined that the code is right.
200.
by frankchn 12y ago
Yes, but we are talking about MIT students. It shouldn't be too hard for them to get hired by one of the big 4 or 5 companies.
201.
by frankchn 12y ago
Evading capital controls, perhaps? Since the Yuan is not fully convertible, you can get USD from Yuan by using Bitcoin as an intermediary.
202.
by frankchn 12y ago
A bit of Raymond Chen trivia: he is as far as I know the only person to appear in the Linux kernel credits file with an @microsoft.com email address.
203.
by frankchn 12y ago
According to calculations, they need approximately 70k people to screen every minute of video uploaded onto Youtube. Even if ML could cut this down by 85%, that is still 10k people. Not a brilliant idea when Google only employs 50k people w
204.
by frankchn 12y ago
If you liked this, I recommend TechCrunch's excellent piece on SF housing issues by the same author: http://techcrunch.com/2014/04/14/sf-housing/
205.
by frankchn 12y ago
May I ask why not? I would personally prefer slower (if safer) crypto over fast but potentially vulnerable crypto.
206.
by frankchn 12y ago
This also does not support localStorage, which makes testing some websites impossible.
207.
by frankchn 12y ago
I suspect we will see there will be additional criteria for these sort of payment apps with the App Store soon -- which will include criteria about privacy/security at CurrentC will be unwilling or unable to meet.
208.
by frankchn 12y ago
Perhaps IBM figured that they don't need that many chips to warrant its own fab, which are expensive to maintain/upgrade to keep up with cutting edge process technologies. I can believe that it made more financial sense for someon
209.
by frankchn 12y ago
Intel has included a 128MB eDRAM chip on-package (though not on-die) with some Haswell SKUs as a L4 cache for the processor and graphics systems.
210.
by frankchn 12y ago
I believe that list is for fabs who can supply the DoD with custom/proprietary chips (i.e. with business models similar to TSMC or Samsung but for defense related products). Intel has not been in that line of business so there is no po

More ›