jgunsch

Cloudflare is not MITM-ing, Archive is deliberately misleading Cloudflare.

See previous discussion at https://news.ycombinator.com/item?id=19828317 .

I believe like this is due to Archive rejecting Cloudflare, not the other way around.

https://news.ycombinator.com/item?id=19828317

I'm a little shocked to hear this, but I've had a similar fish story with Microsoft!

I interned at Microsoft my junior year of college. Toward the end, I interviewed with Google and got a competing offer.

But during the negotiation process, the recruiters had Chris Jones (Windows Live VP at the time) call me to try talking me into joining Microsoft. He told me his story about how at the start of his career, when he was comparing offers from a few companies, Microsoft (relatively unknown at the time) sent him a salmon from Pike Place Market --- and that gesture convinced him to accept Microsoft's offer.

Two days later, a package of smoked salmon on ice from Pike Place Market showed up at my door in Tucson, AZ.

(I went to Google for non-salmon-related reasons, but sending me food mostly became a reminder that Google was offering free food as a perk!)

Other browsers support DRM too, but with different tradeoffs.

Chrome uses Widevine, but one of Chrome's philosophies is that you should be able to wipe a Chrome install, reinstall Chrome, and have no trace that before/after are the same person. That means no leveraging machine-specific hardware details that would persist across installs. "Software-only DRM", essentially.

Edge on Windows (and Safari on OSX) are able to leverage more hardware-specific functionality --- which from a DRM perspective are considered "more secure", but the tradeoff is a reduction of end-user anonymity (i.e. if private keys baked into a hardware TPM are involved).

Last I checked, Chrome/Firefox were capped at 720p content, Safari/Edge at 1080p, though it looks like Edge is now able to stream 4k.

I worked there for a similar length of time, but more recent (2012 - early 2019). The internal political discourse over that time definitely mirrored the rest of the world: becoming increasingly heated and divisive during 2016 and largely escalating since.

On the whole, it felt like it pushed the company in a positive direction --- internal discussions mirroring #metoo led to more visibility of sexual harassment and accountability for leadership. The discourse around the James Damore memo, as divisive as it was, felt like it still led to a broader understanding of the negative perspectives women in tech had to deal with constantly.

Most importantly (IMO), Google's product choices and politics are not inseparable --- Google is far too large and influential to pretend otherwise, and discussing these topics acted as a watchdog of sorts. Internal discussions about a potential censored search engine product in China resulted in pressure on leadership to change course, and pressure on Cloud bidding on the JEDI contract led to Google withdrawing from that bid.

Shutting off that political discourse feels like it'd be a huge blow to "oversight" from concerned Googlers --- particularly the ones who felt it was worth staying and using their influence internally to push Google toward creating a more just world.

NBA League Pass doesn't actually let you stream the playoffs (if you're in the USA), nor do you get to watch your local team. It's meant to be a supplement to a cable subscription, or a full subscription for international viewers.

https://www.quora.com/Does-the-NBA-League-Pass-offer-a-playo...

I experienced the same, but have had little luck finding more data about it. Got any details on where they've indicated that firmware update is coming?

In my case, I set up dual-boot on my 13" Spectre. The Macbook USB-C charger has never once locked up the machine when I'm running Linux, but 100% when I'm in Windows, which makes me suspect a Windows driver issue.

There are also a couple contractors that came out of the healthcare.gov rescue (notably: Nava [1] and Ad Hoc [2]) trying to do the same kind of work. I recently left a long career at Google to work for Ad Hoc, and we get to work alongside the great folks at USDS trying to make things better.

Hit me up if you're interested in getting into this space!

[1] https://www.navapbc.com/ [2] https://adhocteam.us/

The linked Twitter thread mentions that BoringSSL (maintained by Google, used in Chromium) has an implementation already.

Is Cloud Endpoints an option for you? It supports gRPC with JSON/REST transcoding.

[1] https://cloud.google.com/endpoints/docs/grpc/about-grpc

(Disclaimer: I work on Google Cloud.)

Does anyone know what the disclosure story is here?

Have WhatsApp and Signal had a chance to respond?

Hey, eng lead here for the APIs Explorer. Despite the site's ancient appearance, we're not killing it, and have some plans in the works. (You can see some of the work we've been doing on developers.google.com, with "Try this API" on the right [1]).

Feedback I'm interested in: What do you use the APIs Explorer for? What features would you like to see?

[1] https://developers.google.com/google-apps/calendar/v3/refere...

Bing.

http://blogs.bing.com/search/September-2016/bing-app-joins-t...

One of the advertisers, identified only as 15-year-old "E.S.," ''was forced into prostitution at the age of 13 by her pimp," according to an affidavit filed with the complaint. She used other online advertising services until they were shut down, the court filing says, when she turned to Backpage.

This reads horribly: the feds took down multiple sites and knew about this 15-year-old, but didn't manage to reach her in the process?

The algorithm seems similar to the Graham scan [1], but in either case it doesn't calculate a _regular_ polygon, which makes the problem trickier.

[1] http://en.wikipedia.org/wiki/Graham_scan

Sorry, last night HN didn't show me a "reply" button on the thread, so I thought maybe it tapped out at a depth of four? I'm not dodging :) [edit: does HN have account score thresholds at which different features get enabled?]

I don't have security-bugs access, but I explained offline to the OP that "Won't Fix" covers a lot of cases, including "already fixed" / "duplicate", not simply "your bug report is being ignored".

OP also sent me some more information about the BrowserStack setup, and it looks like both the M42 and M43 builds that OP was testing against are nearly a month old and before the fix (merged to M42 late in beta phase, M43's still in dev/canary stage).

It's not just a guess, I broke it and I fixed it :)

Can I ask why you took the approach of making a Github repo to post this rather than filing a Chromium bug?

I'm pretty sure this is https://code.google.com/p/chromium/issues/detail?id=464270, which was fixed by https://codereview.chromium.org/1007323003.

I can absolutely accept that distinction. Do you think "American coders" would have been the title if that were the case?

Aside: Why "Indian coders" and not just "Three coders"? Would this have ever been titled "white coders found cheating"? I know this isn't the point of the article, but I wonder if, on HN, we should consider clipping "gratuitous adjectives" in titles that contribute to perpetuating dominant systems.