timdierks

14 ms·

61.
Revisiting accounting for software development costs(pwc.com)
2 points by timdierks 10y ago|1 comments
62.
by timdierks 10y ago
It's $300/year from what I can see. Not free, but if you think it's a valuable part of your design, a small cost, unless you just don't have a viable business in the first place.
63.
by timdierks 10y ago
It does happen at sunrise roughly 18 days before and after the winter solstice. (Dec 3 and Jan 10)
64.
by timdierks 10y ago
The linked article treats revenue as value, which is obvious BS. The value of Lucas to Disney is much higher than the $4B price tag either Lucas or UFC yielded, but a lot of that stems from Disney's amazing ability to execute on it. UF
65.
by timdierks 10y ago
Doesn't really change anything. If you make it so the police won't stop you for a broken tail light, will you keep it so they can stop you for driving with an expired inspection sticker? If so, you have to accept that the conseque
66.
Pokémon Go does monetization right(linkedin.com)
1 points by timdierks 10y ago|0 comments
67.
by timdierks 10y ago
If your passwords are going to be available to user mode processes without a privileged interactive password prompt, they're going to be available. This is how it's designed and is necessary for the current user experience (that a
68.
by timdierks 10y ago
You elided the relevant sentence: > In cases where you really want to disable autofill, our suggestion at this point is to utilize the autocomplete attribute to give valid, semantic meaning to your fields. If we encounter an autocomplete
69.
by timdierks 10y ago
It's not for the developer to decide any more than the browser. It's up to the user.
70.
A new method to measure touch and audio latency(android-developers.blogspot.com)
1 points by timdierks 11y ago|0 comments
71.
by timdierks 11y ago
Direct PDF: https://research.google.com/pubs/archive/44860.pdf Usenix URL: https://www.usenix.org/publications/login/spring2016/osborn
72.
BeyondCorp: Design to Deployment at Google [pdf](docs.google.com)
2 points by timdierks 11y ago|1 comments
73.
by timdierks 11y ago
On one hand, you can justify the work as a part of making a more reliable platform without per-service shims, but presumably you could have asked the services to adopt a better open API rather than IFTTT-specific integration. But why did yo
74.
by timdierks 11y ago
What does the average user do when they forget their passphrase? (Which they will do constantly.) How do you determine the keys associated with the people you wish to communicate with? (The web of trust and going to key-signing parties are
75.
by timdierks 11y ago
You have the comparison backwards. The claim is that Google and Amazon don't care about idle power consumption, presumably because their homogeneous computing environments lead to relatively little idle time.
76.
by timdierks 11y ago
I was going to reply that the author of this article isn't the best finance writer in the world, because Matt Levine is the best finance writer in the world. Then I clicked the link.
77.
by timdierks 11y ago
I'm relying on https://d0.awsstatic.com/whitepapers/KMS-Cryptographic-Detai... . There are HSMs, I guess, but they'r only used to back up the keys when they're stored offline for durable backups. I hadn&#
78.
Homestead High School Newspaper, May 22, 1977(imgur.com)
112 points by timdierks 11y ago|11 comments
79.
by timdierks 11y ago
I said it above, but I'll reiterate here that Amazon KMS does not use HSMs; they don't provide a lot of detail to help you reason about what that implies for key security. (I agree that there's no reason to believe they'
80.
by timdierks 11y ago
Presumably, your rogue employee won't follow best practices, and there is not a quality audit trail for such abuse in most setups. I think we're in agreement: this is a hard problem and difficult to solve. In your article, that pa
81.
by timdierks 11y ago
AWS KMS does not use HSMs. Amazon says it runs on HSAs ("hardened security appliance"), but they don't provide a lot of info on what that means. I would presume that the only thing keeping a limited number of Amazon employees
82.
by timdierks 11y ago
The recommended solution is still vulnerable to employee compromise: if they can push software that runs as a trusted role, they can steal any secrets that software has access to.
83.
by timdierks 11y ago
This article confuses me. The author tears down a strawman argument about running centralized key services ("The expensive solution"), then recommends exactly such a solution in Amazon KMS. The only plausible way this can make sen
84.
by timdierks 11y ago
I found a reference that the barge was 320 km downrange in the earlier tests. The Bahamas look to be an appropriate distance from Florida, although to the southeast of Cape Canaveral. From SpaceX's planned Texas spaceport, there's
85.
by timdierks 11y ago
Here's the best explanation I've seen: http://h14s.p5r.org/2012/09/0x5f3759df.html
86.
On the “Steve Jobs” set, where 2015 was like 1984(scottknaster.blogspot.com)
1 points by timdierks 11y ago|0 comments
87.
by timdierks 11y ago
Have you ever been to NYC? Do you have any idea how much extra vehicle capacity would be necessary for Uber to supplant the subways? A subway track has capacity of roughly 25000 people/hour (112 people per car, 10 cars per train, 20 tr
88.
by timdierks 11y ago
It's just the "Post hoc ergo propter hoc" fallacy. (Possibly also overactive pattern recognition; how many spams does he get about art at times unrelated to gallery visits?) Google does not sell such personal information to s
89.
by timdierks 11y ago
There are no display ads on Google sites like Maps.
90.
Europe's Big, Big, Big Lie About Data Privacy(lauren.vortex.com)
3 points by timdierks 11y ago|0 comments

More ›