HN user

madisp

258 karma

Socials:

- github.com/madisp

---

emu-herder @ emulator.wtf

ex: Veriff, JRebel for Android / ZeroTurnaround, Spotify, Skype for Android

Posts0
Comments80
View on HN
No posts found.

Quick suggestion: maybe contact the vendor company and offer to create a frontend for them instead as a contract thing?

---

I've gone through the exact scenarion in your question though, this is roughly the path I took (Estonia & EU, YMMV in other jurisdictions):

- start by going over your contract - is this overall even allowed? Some companies capture all IP you create 24/7, in this case you'll need to get the contract changed or get an exception

- even if your contract allows doing other work (creating separate IP) outside of company time, still ask for written permission from your manager and possibly a skip level or two. I got a written email from my VP of eng and CTO before proceeding.

- you will probably need to _completely_ separate your own work from the company work. This means using your personal laptop, never working on this during work hours, etc. Separating this sometimes can be hard, especially if you get something like a bug report from your employer - you can't work with it until you're off the clock.

- I also completely cut myself off from the purchasing decision - I let them know I was working on a project, gave them a landing page and let the purchasing team do a decision completely on their own

- if you hope to build a business out of this it's best to be upfront about it, e.g. by telling your manager that you might leave to focus on the business full-time if it takes off

All of this assumes you're on good terms with your employer overall.

I'm not an expert, but I think an enterprise NVMe will have some sort of power loss protection so it can afford to fsync to ram/caches as they will be written down in a power loss. Consumer NVMe drives afaik lack this so fsync will force the file to be written.

I think in this case it's the customers of their customers, e.g. people sending emails to support@acme-corp.com. In that light requiring all emails coming into support@acme-corp.com to have SPF and DMARC is bad for business indeed, not only for Zendesk but probably also for the fictional ACME corp.

EDIT: they absolutley should not use an autoincrementing int as a "support-chain token" though, that's a workaround they could easily do.

calculator app on latest macos (sequoia) has a bug today - if you write FF_16 AND FF_16 in the programmer mode and press =, it'll display the correct result - FF_16, but the history view displays 0_16 AND FF_16 for some reason.

afaik Spotify does none of those ways. They take the total amount of money earned per time period and divide it to artists based on the total_artist_playcount / total_playcount in that time period, after taking their own percentage cut. It's closest to Way 1, with the difference that you can listen to whatever - if Taylor Swift is the most popular artist right now and gets, say, 1% of all plays then 1% of your subscription will go to Swift.

Noise 2 years ago

when I saw them live ~18 years ago they made heavy use of gradual fade ins (swells) with an ernie ball volume pedal, it does have a similar sound to a reverse delay effect.

Are stock options "vested equity"? Afaik they're a derivative, and it's surprising to see this exact phrase both in the OpenAI's response to the vox.com article and in sama's tweet. Also, isn't OpenAI using some sort of profit-sharing units instead of options?

Isn't the universe the only computer in some sense?

All of the compute power we have is just an arrangement of matter to have the universe perform computations for us.

- Each instance has high-throughput networking of up to 12.5 Gbps, hosted in us-east-1, so interacting with artifacts, cache, container registries, or the internet at large is quick.

do you actually get the promised 12.5 Gbps? I've been doing some experiments and it's really hard to get over 2.5Gbit/s upstream from AWS EC2, even when using large 64 vCPU machines. Intra-AWS (e.g. VPC) traffic is another thing and that seems to be ok.

HTTPOnly cookies are safe from XSS attacks.

Not completely true - the attacker can not exfiltrate the token but they can still make malicious requests right there in the victim's browser via XSS.

For me it definitely was performance. 5 years ago or so I ended up using a mercurial-git bridge just to use git on a team where everyone was on hg.

IIRC git grep search took seconds compared to more than a minute with hg grep.