HN user

hkolk

193 karma
Posts0
Comments45
View on HN
No posts found.

In the Netherlands the law is pretty straigtforward that this is a bad idea: > The "Nature of Employment" Rule: If you are hired as a software developer, almost any software you create (even in your own time) can be claimed by your employer.

We always advise our employees to request an exception for it. We are pretty relaxed about it, but we don't give out a blanket exception

The second example given (extracting information from a web view) is also weird. The rust code has the exact same flaw as the java code, which is that they do not validate the source. I think the author didn't really understand the underlying problem here. Bounds checking was not the issue with the java (android) code

ClickHouse, Inc. 5 years ago

We are using Clickhouse combined with GDPR's Data Deletion Requests. We store the user-ids in a separate system, and run the ALTER/DELETE statements once per week. Works pretty smooth, though I would prefer some more automation within Clickhouse for them.

Data for in-active users gets deleted because our clickhouse retention policy is lower than the in-active-user timeout

Hmm.. not 100% sure but I see 2 bugs in the PHP script: 1. the src of the image in the HTML is the local path on the hosting server (it would become src="/var/www/nyt/nyt.jpg" ) 2. The v= parameter always uses current date, even if it downloaded yesterdays image. I assume it is being used to prevent caching, but thus doesnt really work. I'd use either an hash of the file or store the date used for the download in a variable and use that.

There is a nice Ted talk about the same topic. Something I often link to people saying "I can eat everything I want in this diet..." The mathematics of weight loss | Ruben Meerman | TEDxQUT: https://www.youtube.com/watch?v=vuIlsN32WaE

My personal weight-loss (and now sports) is largely based on understanding how the human body works with metabolism.. carbs, fat, protein.. nice and geeky

AGPL License 6 years ago

IANAL (ofcourse) but in my limited experience:

1a: Not allowed provided because of AGPL (though would be allowed if it is GPL)

1b: Allowed, provided it is purely internal (as described here: https://www.gnu.org/licenses/gpl-faq.html#InternalDistributi... )

1c: Not allowed (this is a distribution, and actually is also in violation of general GPL)

1d: Not allowed, linking against the library means using it, which means GPL violation.

2: If (x) is licenses as MIT and does not contain AGPL underneath (it shouldn't, they are not compatible), you can take X under that MIT license. Regardless of actual repository layout.

3: Penalty is a pretty grey area, and this is a civil suite, not a criminal suite. As a result it goes into damages etc

4: I reckon EFF etc. Look for "GPL enforcement" (AGPL is not very different)

5: You can try.. but I reckon only in the discovery etc for a lawsuit a judge can force them to give access to the source-code to verify your claim.

For all intents and purposes, AGPLv3 is GPLv3 with the addendum that distribution also covers "As a Service". Also.. at our company we completely banned AGPL because we simply don't want to deal with any potential violations. So I reckon 1b in your example would also not happen in a place like Facebook (I reckon all 4 companies have an AGPL ban in place :) )

Ehm yeah. If it was groundbreaking. But there are 5+ other contenders in this field who are dealing with the same issues, and in some cases are fairing better. We are currently evaluating multiple NewSQL vendors, and it really does come down to the details making or breaking the case. I am not sure what potential NDAs I am on so I can't share details, but there is a sharp difference in one company and another claiming "Distributed Serializability". Cockroach for instance enforces a lot of stuff to maintain consistency, and as a result can be (or is) slower. But at least it's also predictable. In the end it's all trade-offs and I actually like the Yugabyte product a lot. I just wish they are more transparent about what choices they made and the impact of that

I would be careful to attribute framework decision making to careful thought. This is more the regular organizational dysfunctionality. Either:

- The entire organization uses a single framework (and improves on it), which will lead to a bunch of teams grumbling that "We are only using X because of organizational pressure, while Y is much better"

- You leave freedom to the org to pick their technology, and hope/steer people towards certain parts. But you will have to accept some divergence from the norm

I prefer the second org, and luckily I am in such a place where we can use Go while the team next to us is on Scala, and we weigh in-house developed technology against publicly available technology on ROI.

Java 12 7 years ago

Our company (on the scale of running it's own private cloud) has switched over to OpenJDK. Oracle is a non-issue for us

For people actually working with JVM and the languages on top of it, nobody really is worried about Oracle. The way the licensing is set up, they just don't have enough power to coerce people to use their version. It would kind of be like the SCO case if they came after it. I think they went after Google for Android simply to protect their IP, and that one they even "lost" (which detracts also from their possible future lawsuit on enforcing Java licensing)

For what it's worth, ebay.co.jp is actually not running on their main platform. You can see the difference in the HTML code between ebay.com, ebay.de (both on the main platform) and ebay.co.jp (wordpress based). I actually don't even know if they are showing eBay listings on that website...

Good find though, and embarrassing failure. Especially since most eBay properties have penetration testing and automated scanners being run on them

I would expect to use the first day of a month as a default, just like when time is not specified it should use 00:00 as default. Taking the current time/day as a default sounds off.

Probably hard to fix backwards compatible though...

Yottabyte 13 years ago

So let's check the sources: [2] A journalist 'Estimates', probably based on the Wired article [3] Contains the word 'yotta', but says 'handle', not store (which makes sense, considering it's a lot easier/cheaper to process something then to store it). This actually references a DoD report. [4] Does not contain the word 'yotta'

Maybe NSA is doing something undiscovered, but this feels more like sensationalism then realism. I'm sure they have a lot of storage and can probably rival google on data storage, but I doubt they have some sort of magic god-like storage and search facility

Working for one of the biggest sites in the netherlands: 0.31% is Opera's market share at our site. It's not on our supported browsers list