HN user

daveman692

544 karma

I work at the intersection of technology and philanthropy at the Chan Zuckerberg Initiative.

Posts28
Comments37
View on HN
medium.com 7y ago

Open Sourcing Fogg: Opinionated Terraforming

daveman692
7pts0
www.facebook.com 14y ago

Facebook announces a London engineering office

daveman692
6pts0
www.facebook.com 15y ago

Facebook announces version 2.0 Open Compute servers at first community summit

daveman692
2pts0
spectrum.ieee.org 15y ago

Under the Hood at Google and Facebook

daveman692
4pts0
www.facebook.com 15y ago

How Facebook pushes code video

daveman692
2pts0
gigaom.com 15y ago

How Facebook Brings a New Data Center Online

daveman692
2pts0
www.facebook.com 15y ago

How Facebook changed their software to bring a new data center online

daveman692
1pts0
www.spotify.com 15y ago

Spotify says hello to the iPod

daveman692
60pts32
cgi.ebay.com 15y ago

Barack Obama birth certificate autographed by Donald Trump for charity

daveman692
3pts0
www.facebook.com 15y ago

Hackamonth: Mixing Things Up

daveman692
3pts0
7thspace.com 15y ago

DoJ requires Novell's patents be licensed for open source use

daveman692
10pts0
www.facebook.com 15y ago

Thoughts on Software Quality

daveman692
69pts20
www.facebook.com 15y ago

How Facebook Built One Mobile Site to Serve Thousands of Phones

daveman692
2pts0
www.theregister.co.uk 15y ago

Facebook HipHop serves 70% more traffic on same hardware

daveman692
77pts28
developers.facebook.com 15y ago

Facebook adds batched requests to their API

daveman692
1pts0
www.techradar.com 15y ago

Interview: Facebook and open source

daveman692
1pts0
money.cnn.com 15y ago

How Facebook Is Powering Real-Time Analytics

daveman692
1pts0
www.facebook.com 15y ago

Hybrid Incremental MySQL Backups

daveman692
8pts0
www.facebook.com 15y ago

Hackathon 22: Redesigning Facebook's internal image sharing tool

daveman692
7pts0
osuosl.org 15y ago

Introducing Supercell: test infrastructure for any open source project

daveman692
42pts10
www.facebook.com 15y ago

Tech Talk on how XHP has transformed the way PHP is written at Facebook

daveman692
1pts0
www.facebook.com 15y ago

Facebook on join optimization in Apache Hive

daveman692
3pts0
www.janrain.com 15y ago

Most Popular Networks for Social Login and Sharing on the Web

daveman692
1pts1
www.facebook.com 15y ago

The Underlying Technology of Facebook Messages

daveman692
6pts0
www.engadget.com 15y ago

Adobe Air 2.5 for TVs, tablets and phones

daveman692
6pts0
www.facebook.com 15y ago

How Facebook has optimized data center energy usage

daveman692
1pts0
www.facebook.com 15y ago

How Facebook is using HTML5 today

daveman692
23pts0
www.facebook.com 15y ago

HipHop for PHP: six months later

daveman692
4pts0

Structure wise the Digital Service is made up of a headquarters team within the White House, 18F which is an internal software development organization within the General Services Administration, and then embedded teams growing to be within each cabinet level agency. This creates a mixture of distributed execution plus centralized resources to help each team as needed.

The earlier drafts were much more like that. They were largely a collaboration between a few web companies who had deployed OAuth 1.0 with Dick Hardt who had written WRAP at Microsoft. One of the major design goals was producing a protocol simple enough that client developers would not have to use libraries.

I was pretty happy with this result since we could write a simple page like https://developers.facebook.com/docs/authentication/server-s... which conformed to the spec (http://tools.ietf.org/html/draft-ietf-oauth-v2-12#section-4....) and was an easy to implement explanation of authenticating a user.

But the OAuth 2.0 spec we were working off of is now eighteen months old and as Eran said the vast majority of those contributors have drifted away from the effort over this past year :-\

You're able to apply via email if you don't wish to be logged in to the site. Each job has a unique email address such as careers+a2KA0000000LhWnMAK@facebook.com which is for tools engineering in New York.

Sorry, but this really feels like hyperbole to me. For two reasons:

1) Before any action is shared back from the site to Facebook, the user has agreed to authorize that site (application) and add it to their timeline. Part of that dialog shows what's going to happen (https://developers.facebook.com/docs/beta/authentication/).

2) There are plenty of other examples around the web where submitting a HTTP GET request results in an action. For example, clicking an up arrow on Hacker News submits a GET request which increases the karma score on another author. What becomes more important is how you protect against XSRF and crawlers not accidentally changing state within your app.

This is my old first draft from last year. Others have been working on making it real over the past few months but the site hasn't been updated yet.

Cherry picking based on which engineers are around is much more about our daily releases. Everything checked into trunk on Sunday will go out on Tuesday. But if I've requested a diff be merged for the Wednesday release, it won't happen unless I've told request_bot that I'm around to support my changes. This also means that if there are merge conflicts, the engineers who wrote the patches will be there to help resolve them.

This would become quite a bit simpler if they also moved to OAuth 2.0 (bearer tokens over SSL) instead of sticking with 1.1 (HMAC signatures).

Think it depends on the cost. Got mine for $99 which it is certainly worth! The 15% Uber discount makes up for that by itself. Would be harder to justify at $500.

Amir Michael who worked on the hardware team said, "The utility provides us with AC voltage which we then convert to DC very close to the motherboard in the power supply. Our goal was to bring the high voltage as close as possible to the load to minimize IR losses. We could do an efficient AC –DC conversion in the rack and then distribute DC to the individual servers but that would mean several feet of low voltage conductors which would be made from large copper bars and a would have higher IR losses."

I interact with the IRS once a year having to remember a short PIN I created years ago and can't figure out how to change. My bank has a very strong knowledge of who I am partially via http://en.wikipedia.org/wiki/Know_your_customer and because I login to it on a much more frequent basis.

It isn't that my bank would change the role of the IRS, but I'd login to the IRS using a strong identity issued by my bank versus this silly PIN I use today.

This headline is actually pretty misleading. From what I've seen of the project, it is not about the government issuing online identities. Rather they've realized that people already have identities from services like Facebook and Google as well as banks.

This project is aimed at making it possible for people to interact with government agencies using identities they already have. Some interactions require very little security and knowledge of who a person is (leaving a comment here for example) while others (paying your taxes) require quite a bit.