HN user

zkhalique

599 karma

Co-Founder & COO at http://qbix.com We're building a simpler and more elegant social app platform that developers will love.

[ my public key: https://keybase.io/zattack; my proof: https://keybase.io/zattack/sigs/ju1icv42KBBcbTu8e4RQoq4SvAJcs3TODCRCzfrL1Nw ]

Posts35
Comments360
View on HN
ux.stackexchange.com 9y ago

How do you handle messages across devices in your apps?

zkhalique
1pts0
yusugomori.com 9y ago

CSS Sans

zkhalique
2pts0
www.marcellobrivio.com 9y ago

Amazing tiling animated gif backgrounds

zkhalique
1pts0
www.youtube.com 9y ago

Will Smith – motivational speeches for entrepreneurs

zkhalique
3pts0
news.ycombinator.com 9y ago

Ask HN: Simple proposal to greatly reduce phishing

zkhalique
1pts0
www.independent.co.uk 9y ago

Allo by default stores all your chats indefinitely

zkhalique
3pts1
physics.ucsd.edu 9y ago

Exponential Economist meets Finite Physicist – do the math

zkhalique
2pts0
medium.com 10y ago

Hillary Clinton's search results manipulated by SourceFed not Google

zkhalique
28pts1
github.com 10y ago

You don't know JS

zkhalique
1pts0
qbix.com 10y ago

Show HN: Visualizing activity and reviews from a user base of four million users

zkhalique
1pts0
www.strangerdimensions.com 10y ago

John Titor, time traveler, internet phenomenon

zkhalique
8pts1
www.techdirt.com 10y ago

Paris attackers did not use encryption

zkhalique
2pts0
motherboard.vice.com 10y ago

You can now send messages even if you don't have cellphone service (2014)

zkhalique
4pts1
technical.ly 10y ago

Two guys who prove you're doing Tinder all wrong

zkhalique
1pts0
www.livemint.com 10y ago

Facebook replaces Google as top traffic driver to news sites, says Parse.ly data

zkhalique
2pts0
cse.google.com 10y ago

Google's Copyright-Free Image Search Engine

zkhalique
4pts1
www.wired.com 10y ago

Hyperloop makes partnerships with Oerlikon and Aecom

zkhalique
14pts0
magarshak.com 10y ago

An open letter to Lawrence Lessig – replacing voting with polling

zkhalique
2pts0
webreflection.blogspot.com 11y ago

The DOM is not slow

zkhalique
2pts0
www.mainlinetoday.com 11y ago

Can Too Much Social Media Cause Depression?

zkhalique
3pts0
www.theatlantic.com 11y ago

Snowden's NSA exposure vindicated by Federal appeals court

zkhalique
12pts0
www.forbes.com 11y ago

Latest TPP leak shows even harsher copyright rules

zkhalique
10pts2
betanews.com 11y ago

Newest Apple reviews are rotten

zkhalique
3pts0
medium.com 11y ago

I quit liking things on Facebook. See how it changed my view of humanity

zkhalique
3pts0
www.amazon.com 11y ago

Amazon Dash Button - reordering made super easy

zkhalique
2pts1
news.ycombinator.com 11y ago

Ask HN: Do you know any company with a grants.gov account?

zkhalique
4pts0
phys.org 11y ago

New algorithms locate where a video was filmed from its images and sounds

zkhalique
2pts0
thefreethoughtproject.com 11y ago

Inmates sentenced to 37 years of solitary for using Facebook

zkhalique
2pts1
qbix.com 11y ago

Our 3 millionth user

zkhalique
1pts0
www.yahoo.com 11y ago

How new hacking laws could make you a criminal

zkhalique
8pts0

It's the same reason Greece was going bankrupt ... they couldn't print their own currency and run their own fiscal policy after they joined the Eurozone.

Yeah, the word bias seems to be overloaded with many meanings. I actually wonder if there is any philosophical difference between the word "knowledge" and the word "bias".

But about machine learning... a system can learn from a set of outcomes which are the result of a "biased" system, that is to say tainted with an incorrect Bayesian prior which is not properly corrected, such as let's say courts in a racist society or whatever. It would learn the same bias. Because its goal is to maximize compatibility with the outcomes that the humans did. So it perpetuates those weights.

The problem is that we don't know whether the human decisions matched the reality. "Did the person commit the crime" for example. We might have to wait until more unbiased estimators for such activity come along, and throw away old historical data.

It's sort of like when Black-Scholes became a self-fulfilling prophecy for valuing derivatives, but only after it became widespread. The market started using Black-Scholes to value derivatives, so it became the best model to predict the value of derivatives. But until then, other models might have fit the historical data better.

Democracy isn't a failure, you just need a better voting system.

If people could rank their preferences then people like Bernie and Bloomberg would actually run without fear that they might "take away votes from Hillary" and therefore help Trump. In fact, the two-party syste would give way to something better. Only the party elites would NOT want this... but after this election, even they probably do.

https://en.wikipedia.org/wiki/Instant-runoff_voting

Oh great, more Telco consolidation. First the banks are too big to fail after the Great COnsolidation of the 90s and 2000s, and now this. So we can have more arguments about Title I and Title II and more arguments about the illusion of choice when we have only two choices ... DT or HC, Title I or Title II...

I would express the same sentiment about illegal immigrants. This is to all the people who support Donald Trump's rhetoric about deporting all 11 million undocumented immigrants. These people fled the drug gangs and violence that our war on drugs helped create (think fleeing ISIS) and came to work jobs no one else would take and make a better life for their family. Yes technically they broke a law.

If you're going to argue that we as a country of laws should deport them all back, then I hope you and your family never smoked pot because you broke a law. And since we are a nation of laws - including minimum sentencing laws which the prison industrial complex loves - how would you like it if they looked for you and put you in jail for a victimless crime? Drop your double standard. The Mexican immigrant is better than the potsmoker because they fled violence, wanted to make a better life for their family AND helped do the jobs no one else would. The potsmoker chose to smoke and helped no one except the drug dealers.

Plus we did that already, and it was a disaster: https://en.wikipedia.org/wiki/Mexican_Repatriation -- an estimated 1.2 million US citizens were deported. Plus until 1965, immigration was unrestricted from Mexico and Canada so many of the 11 million broke a law by staying, but not by coming.

You have heard all these myths. The fact is, immigrants have higher labor participation, lower crime rate than the native born population. Especially the illegal immigrants who are afraid of being caught by police and deported. Illegal immigrants do NOT get money from the federal government - if your city pays them take it up with your city. But they pay taxes like everyone else, including sales tax and property taxes. So they pay into the system and get nothing back. You want to deport them all and break up their families so you will end up picking crops, and think this is the way to bring jobs to USA?

Making the change does probably keep Google on the right side of the law. By keeping track of all messages, Allo conversations will be accessible by law enforcement with warrants – something that can’t happen on apps like iMessage or WhatsApp, both of which have run into trouble over not being able to give up information to authorities.

It should be the other way. There should be a law saying that a company must meet some hurdle to store personal information for a long period of time. At least disclose it publicly. It's so ironic that the EU cares about websites disclosing that they store cookies, but not that they store conversations indefinitely.

The law would put a chilling effect on storing personal information indefinitely. But, like carbon emissions, it will only slow the progress towards a future where all the carbon is released from the ground / all the data is stored and analyzed by AI years from now.

Perhaps those who wanted more than that out of life had less genetic fitness than those who wanted exactly that out of life, so most people want that out of life.

On the other hand, I'm not sure how to explain the presence of homosexuality in a population when the theory of evolution predicts that any such trait (which leads to much lower genetic fitness) would have disappeared a long time ago. How does it stay at this level from generation to generation?

"Being taller is associated with enhanced longevity, lower risk of adverse pregnancy outcomes and cardiovascular and respiratory diseases, and higher risk of some cancers"

Didn't I read just the opposite in an article on Hacker News just a few hours ago? It claimed that researchers were mistaken in the past, yet the studies cited here are from the past 10 years.

http://www.slate.com/articles/health_and_science/science/201...

http://www.ncbi.nlm.nih.gov/pmc/articles/PMC1071721/

More balanced:

http://journals.plos.org/plosone/article?id=10.1371/journal....

I'm talking only about the httpOnly flag. It's worse than useless because it makes you think that you dodged some kind of bullet, when in fact that same class of attack can still happen: the attacker needs to craft a script to send the cookie to their server, so they might as well have that script execute the actual requests in the context of your authorized session, the same way that they'd do it if they had your cookie. They would write the script ahead of time. No real attacker would sit there at 3 AM making requests because their victim finally activated a script that sent them the cookie. Far more likely, that script is already pre-programmed to do what it needs to do. And if httpOnly cookies didn't exist, the people would care more about sanitizing their Javascript output to prevent XSS, which is the only correct way to prevent this attack.

It is security theater. Real attackers don't sit there waiting for a cookie to arrive so they can start to craft their malicious authenticated requests. If they can write a script to steal your cookie, they can also write a script to execute the actual requests right there in your session. And httpOnly cookies do not prevent that at all. Security theater is worse than nothing because you think you're secure from XSS, when you should know better.

One thing I totally disagree with: "Set secure, httpOnly cookies."

That is just security theater. It's worse than useless because it makes you think you're more secure, when you haven't prevented attacks are all.

InboxSDK looks awesome. I took a look at it several months ago, and we want to build something on GMail. We're a little concerned about the licensing and availability of the library, though. Is it possible that a month from now you decide that we're competing with something you want to do, and stop serving the library for our app? What would be our recourse then?