md_

40 ms·

331.
by md_ 5y ago
Do you mean you re-interview and then stay in your current role, getting a raise from the competing offers? Or do you mean switching employers? In any case, most FAANG have fairly fixed salary ranges for each level. Now's a time of big
332.
by md_ 5y ago
I see quite a lot of recruiting for staff/senior-staff/pricipal roles, both within FAANG and without. It’s a bit harder to know what this actually means outside of FAANG, but my (very first) impression is that plenty of midsize co
333.
by md_ 5y ago
This is the least useful answer I can imagine anyone giving to the original question.
334.
by md_ 5y ago
How is it different than WebAuthn+FIDO2?
335.
by md_ 5y ago
Indeed, but I do wonder whether most users need a single global identity anyway. FIDO keys or—gasp—passwords-per-site seem to solve the real problem most users have (which is, you know, maintaining logins). I do think if there were strong u
336.
by md_ 5y ago
Thanks for sharing the examples! The obvious criticism is indeed that these use cases could be addressed—if not with Postgres—with Merkle trees, no? Like (at a quick glance) MediLedger wants auditability similar to (say) Cert Transparency,
337.
by md_ 5y ago
Good question. Without looking into it, one theory I might have is that the client does the DNS resolution and then just proxies the HTTP request through Signal's servers. In general, I find the privacy implications of either solution
338.
by md_ 5y ago
You can disable this. But just to be clear, the preview is from the sender . I think it’s reasonable to assume that someone sending a link is willing to click the link, no? (There’s also a “privacy-preserving proxy” in the middle, FWIW:
339.
by md_ 5y ago
Not surprisingly, this turns out to have a totally benign explanation. Still, I do think this demonstrates how hard it is for (apparently) well-meaning, somewhat-technical users to understand what their software does. I don’t think reading
340.
by md_ 5y ago
I wish I had realized before I clicked that this was not, as the title suggests, thoughtful industry analysis. Rather, it's an investment pitch from a startup to help them raise capital. I would suggest a barometer for whether a new te
341.
by md_ 5y ago
I think that's accurate. And historically, there's been more moral opprobrium directed at mercenaries than those who fight for a country.
342.
by md_ 5y ago
There’s every reason to be skeptical of the US government’s use of spyware, but at least it is, notionally, a democracy responsive to its citizens. A for profit company selling to the highest bidder is surely even worse, no? Like, yeah, I w
343.
by md_ 5y ago
Watch makers rarely use the term "waterproof": https://www.hodinkee.com/articles/why-no-watch-is-waterproof . For a time, the FTC banned this. The Fenix 6 is also 10ATM water resistant. ISO says a dive watch m
344.
by md_ 5y ago
That’s a significantly different statement than the one you started with.
345.
by md_ 5y ago
Indeed, but my point was that the reality is complex. It depends on what news you view; a blanket statement that "the more news you consume the less understanding" is apparently false.
346.
by md_ 5y ago
> We see it in survey after survey that the more ‘news’ media you consume the less you are in line with understanding what is actually happening. [citation needed]? https://www.frontiersin.org/articles/10.3389/f
347.
by md_ 5y ago
So, like, NPR? That already exists, of course. Or should there be more direct political influence, as you suggest—NPR, but the editor in chief is elected every four years? That seems deeply problematic, for somewhat obvious reasons.
348.
by md_ 5y ago
So what, in your mind, is a more “democratic” news media? I don’t think most journalists would accept the view you attribute to them—that they are opponents of democracy—but the logic seems like it applies to any expert specialization. Is t
349.
by md_ 5y ago
Sorry. I'm not trying to be pedantic, but how do you define this kind of thing? E.g. "deterministic?" A naive Bayes model that optimizes for inflammatory text keywords is deterministic. Is it what you want? I think you'r
350.
by md_ 5y ago
> 2. Ban communication technologies which the underlying behavior is a black-box to the user. It should always be apparent to the user why they are seeing what they are, and in what order. I don't understand elliptic curve cryptogra
351.
by md_ 5y ago
I think that's not as simple as you describe. The glib answer is, "They publish corrections." Which many do. But I don't think that addresses the (valid) criticism about the Iraq invasion: while there were some errors of
352.
by md_ 5y ago
The big question, of course, is not whether media--mainstream or social--have ever "gotten it wrong", but what steps we can take to make them better. The mainstream media very much got it wrong on Iraq. I agree with you. Yet the r
353.
by md_ 5y ago
Like I said, it's not a quantifiable statement, so I don't believe it or not believe it. If you're saying that FB promotes people faster, yes, I can believe that--younger companies generally tend to. I am quite skeptical that
354.
by md_ 5y ago
At this point I don’t understand what’s being argued about. Are you saying you have anecdotes that this happens? Yeah, probably. I have some, too. Are you saying the median total comp for a 7-year total experience Facebook engineer is $1m?
355.
by md_ 5y ago
I might not have understood it, which is different. Can you make it a little more explicit for those of us who are slow?
356.
by md_ 5y ago
That didn't answer my question. How does Signal supporting Mobilecoin or Session supporting--whatever this is--impact your usage of Signal/Session?
357.
by md_ 5y ago
Sure, I guess. I would tend to argue that with hardware access they can do a number of things, though: - They can install a wifi-enabled* keylogger that exfiltrates your OTP. Yes, they have to use the OTP before you do, but that seems solva
358.
by md_ 5y ago
Yep, Apple solves this by moving FIDO key material around via iCloud, I believe. But it requires a good syncing mechanism like that. In principle it's similar to the password manager problem, which is a bit ironic: if everyone used pas
359.
by md_ 5y ago
TPM-based like...Windows Hello? Both Windows and Mac support host-based FIDO keys. Of course, the downside here is that you...can't move them to a new computer. So they're sort of hard to use on their own, hence people still turn
360.
by md_ 5y ago
The fault with phishing _always_ lies with the victim, by this logic. Put differently: if you assume the user to be infallible, there's very little reason to use 2FA of any kind. (Don't believe me? Describe to me a threat which ap

More ›