alexkon

The Ars Technica article on their lawsuit against Apple [1] said they advertised a product on their website but received zero revenue from that product and seemingly didn't have any engineers working on it.

[1] https://arstechnica.com/tech-policy/2017/10/full-scale-of-ap...

Edit: Added the link.

Which of those answers are going to hold up in the post-quantum world?

Perhaps somewhere close to AMS-IX? For me, that would be network latency to non-US customers.

Can you elaborate on Fastly exposing the origin servers to DDoS? Is there a link to learn more about that?

Okay, let’s wake up and dream away. What kind of distant future would you like to be part of?

Can anyone clarify the baseball analogy about errors? (It’s at 38:00.) I’m a bit confused.

Is Google’s us-east-1 unreliable? Would you mind to share any details?

Why did they avoid any media attention?

Their scheme protects the identity of the real domain owner, not necessarily the domain itself. They imply that the law enforcement wouldn’t be able to find the real owner and bring them to court.

How do you grow your local user base in your town?

How often do messages get deleted?

What if instead of a blind auction, a company conducts an open Dutch auction? That is, everyone can see the amount of stock sold so far and the price of each transaction (the buyers may remain anonymous). The prices different buyers pay are not necessarily the same: the first buyer pays the highest price, the late buyers pay less but risk having nothing at all if they wait too long. In an open auction, bidding too high just causes the buyer to lose some money.

A noob question: Why don’t companies just bypass the underwriters and offer their stock for sale using a Dutch auction, where the price starts very high and gradually decreases until the most optimistic investors decide to buy? That way, the company always sells at the highest price the market is ready to offer.

Here’s another take on this: http://alexthunder.livejournal.com/309815.html

Does escrow really work with secrets like this? The buyer receives the exploit and claims it doesn’t work. The seller claims it does. The money is still in escrow. How do you proceed? The escrow agent is getting a commission, they should not have access to the full secret. It’s really hard to find an escrow agent who has the skills to assess an exploit and whom both the buyer and the seller would trust not to leak it or use it for their own benefit.

How do you approach a horrifying AWS bill? Can you recommend any reading? I’m going to need to optimize a tiny fleet on GCE pretty soon.

It looks like this PDF is the Orrick Legal Guide that is available to Stripe Atlas members: https://stripe.com/files/atlas/orrick-legal-guide.pdf.

Please fix the footer when you are at it. It keeps jumping away from my mouse cursor as new items at the bottom of the page are loading.

This is the fourth part of a comprehensive work by Agner Fog, which contains tons of materials on optimizing C++ and assembly code on the x86 architecture and on the inner workings of processors from Pentium to Skylake.

Has anyone read this book? What’s your experience? Would it make an approachable introduction to programming for a complete newbie?

The feature I like the most because it is usually missing from other galleries I encounter on the web is the ability to slide with your mouse to advance to the next picture.

Once accepted, you will be given a link to the documentation page. [1] The new Python 2.7 runtime will be released by December 1, 2011. [2] See also the original post in the group. [3]

[1] https://sites.google.com/site/gaepython27testing/

[2] https://plus.google.com/110401818717224273095/posts/AA3sBWG9...

[3] https://groups.google.com/group/google-appengine-python/brow...

I have collected some reports on DDoS sizes here: https://code.google.com/p/googleappengine/issues/detail?id=6...

App Engine announced they will release a Python 2.7 runtime in several months. It's currently in their trusted tester program.

The video: http://www.youtube.com/watch?v=ulBalk7Od-Q

If you are exploring and testing SSL, the SSL Labs tools come in handy. For instance, see what Gmail and Github are doing:

https://www.ssllabs.com/ssldb/analyze.html?d=mail.google.com

https://www.ssllabs.com/ssldb/analyze.html?d=github.com

I'd be happy to use two-step verification if I could. I've been regularly attempting to enable it since it was announced. Gmail refuses to accept any of my phone numbers because the country where I live (Kazakhstan) is not supported. Tried three major mobile operators to no avail.

What do you suggest instead? UTF-32?

See also previous discussion of the third article in the series: http://news.ycombinator.com/item?id=1184563

This is a final draft of the book. To be published by MIT Press around fall 2011.

Related papers: http://sunnyday.mit.edu/safer-world/index.html