HNHacker News
TopNewBestAskShowJobs

cbr

3,404 karma · joined July 1, 2009

http://www.jefftk.com
submissionscomments
cbr··on Using Google without a Google+ profile
G+ actively enforced this policy in a way that made people angry. When FB does similar things [1][2] people are similarly upset, but when they were going through early adoption they didn't force this.

[1] http://thinkprogress.org/economy/2015/07/04/3676529/truth-be...

[2] https://www.facebook.com/chris.cox/posts/10101301777354543

cbr··on Some analysis of the 1M most popular sites on the web
thanks!
cbr··on Some analysis of the 1M most popular sites on the web
Subresource Integrity hashes [1] should let sites get the caching and CDN benefit of using shared resources like jquery without letting 3rd parties have the ability to XSS them. Basically, you can specify a hash of what the url should point to, and if it doesn't match then the load is blocked.

This isn't quite out yet: it's in Chrome trunk [2] and still under review in Firefox [3].

[1] https://w3c.github.io/webappsec/specs/subresourceintegrity/

[2] https://code.google.com/p/chromium/issues/detail?id=355467

[3] https://bugzilla.mozilla.org/show_bug.cgi?id=992096

cbr··on Some analysis of the 1M most popular sites on the web
It seems like you're marking sites down for using a cookiless domain for resources, even though that's faster and no less secure? For example, you'd mark google down for referencing gstatic.com or facebook down for referencing fbcdn.com.

I realize there's no publicly available way to tell that yahoo.com and yimg.com are the same entity, but it would be good to at least note this as an issue with the analysis.

cbr··on Why I am pro-GPL
I work in industry too, mostly with open source software. While our go-to license is a permissive one, we use GPL software extensively and contribute changes back.

(Now if you had said AGPL...)

cbr··on What happens when you talk about salaries at Google
"blogger porn" and "real names" refer to two cases where Google made an unpopular decision internally and then later reversed itself: https://plus.google.com/+googleplus/posts/V5XkYQYYJqy https://productforums.google.com/forum/m/#%21category-topic/...

I take "fighting for justice & fairness" to indicate that she approved of the reversals.

cbr··on Ex-Googler says she exposed company-wide pay inequality with spreadsheet

    However, now with the reverse split you now only have
    1000 shares. The stock still opens at $20 and still
    closes at $60.
That's off. Why are you assuming people would pay the same amount for 8 times as much of the company, instead of 8x more? A better guess would be that if before it would have gone $20 -> $60, then after a 8 -> 1 reverse split it would have gone $160 -> $480.

The only reason splits exist is that people have an irrational attachment to the value of a "share" and expect to see it in a certain range, even though the total number of shares available is a number chosen more or less arbitrarily by the company.

cbr··on What happens when you talk about salaries at Google
Do you have an example? A crawler ignoring robots.txt sounds like a bug, and if you have details I can file a bug with the appropriate team.
cbr··on A Man Who Flies Around the World for Free
Chest X-ray << Chest CT scan (350x)

Which makes sense, since a CT scan is basically enough X-rays that you can make a 3D picture.

cbr··on Google’s Ad System Has Become Too Big to Control
The main thing is the level of plausible deniability. There are lots and lots of reasons why someone might see an ad for a rehab center on your screen. Perhaps a friend or relative has a drug problem and you're reading about it. Or the rehab center is advertising widely.
cbr··on Where Electric Vehicles Cause More Pollution Than Gas Cars

    it's really good to own internal combustion cars where no one lives
Isn't that right though? Tailpipe emissions are much worse in urban than rural areas because there are more people to breathe them in.
cbr··on Google’s Ad System Has Become Too Big to Control
They've switched from coloring the background to adding a yellow "Ad" marker on each ad: https://www.google.com/search?q=credit+cards
cbr··on Google’s Ad System Has Become Too Big to Control

    Google allowed the advertiser to easily discriminate
This is definitely the case:

    With demographic targeting in AdWords, you can
    reach customers who are likely to be within the
    demographic groups that you choose. Demographic
    groups that you can choose from include:

    * age
    * gender
    * parental status

    For example, if your business caters to a
    specific set of customers within a particular
    age range, gender, or parental status, you may
    want to target your ads to this audience because
    they’re more likely to be interested in your
    products or services.
https://support.google.com/adwords/answer/2580383?hl=en
cbr··on Google’s Ad System Has Become Too Big to Control
https://adblockplus.org/acceptable-ads

    No applicant will be favored or treated differently,
    and no one can buy their way onto the whitelist.
    Everyone has tocomply with the criteria and everyone
    has to go through the same process before the ads
    qualify as "acceptable."
https://adblockplus.org/en/acceptable-ads-agreements

    Do companies pay you for being added to the list?

    Whitelisting is free for all small- and medium
    websites and blogs. However, managing this list
    requires significant effort on our side and this
    task cannot be completely taken over by volunteers
    as it happens with common filter lists. That's why
    we are being paid by some larger properties that
    serve non-intrusive advertisements that want to
    participate in the Acceptable Ads initiative.
cbr··on Google’s Ad System Has Become Too Big to Control
The effect of this is that people who visit substance abuse websites see ads for rehab centers. This seems generally positive, though there's a risk of other people seeing the computer and asking "why are you getting ads for rehab centers?"

Or is there something else that makes this bad that I'm missing?

cbr··on Google’s Ad System Has Become Too Big to Control
The paper talks about two main findings:

1. Test accounts that visited substance abuse websites were much more likely to be shown ads for Watershed Rehab but nothing shows up on the ad settings page indicating the change.

2. Test accounts where the ad settings page has gender=male were much more likely to be shown ads for the recruiter careerchange.com, which offered "$200k+ Jobs - Execs Only".

The first case sounds very much like retargeting. The substance abuse website would drop a cookie and get a small payment from a central db for telling them that this cookie is associated with viewing substance abuse websites. Then Watershed Rehab wants to advertise to substance abuse website visitors, so they pay the central db for a list of cookies, which includes this one. Then Watershed sets up an ad campaign with Google and asks to target visitors with cookies on this list. This can't show up as an "interest" on the ads settings page as "substance abuse" because the association was made by third parties; Google doesn't have enough of the picture to see what happened. You can opt out of retargeting by turning off "interest based ads" at https://www.google.com/settings/ads

The second case sounds like careerchange.com submitted an ad campaign that looked at the gender field. Advertisers have tried to target specific genders for a long time through color and where they advertise, but the internet does make it much more explicit. Still, this is a very small sample to be drawing large conclusions about, especially as careerchange.com stopped doing it (observed in their May run but not the June one).

Disclaimer: I work at Google, on open source software, and I don't know anything about these specific cases.

cbr··on UK at risk of losing Freedom of Panorama
The analogous question is what rights you have to use a photo for which you don't have a model release, and that's where I think things are pretty fuzzy.
cbr··on UK at risk of losing Freedom of Panorama
Model releases are also a fuzzy area.

"The legal issues surrounding model releases are complex and vary by jurisdiction."

https://en.wikipedia.org/wiki/Model_release

cbr··on Introducing s2n, a New Open-Source TLS Implementation
s2n is server-only
cbr··on How to get a massive discount on college: get married
Why not get legally divorced (but not socially)? As long as you don't get married again it looks like that's not fraud by the IRS. Page 23 of http://www.jefftk.com/abrams2012.pdf has:

"Although the IRS attempted to use Boyter in several subsequent cases that dealt with divorces allegedly entered into to lessen tax liability, courts have sided with the IRS only in cases where the couple remarried after the taxincentivized divorce. In cases where the couple remains divorced, the sham transaction rationale is not available. For example, in U.S. v. Taylor, the government sought to satisfy a tax lien against a man by going after his pension plan—90 percent of which was transferred to his ex-wife in their divorce proceedings—by contending that the man had obtained a sham divorce in order to shield his assets.115 The court distinguished Boyter, noting that while the couple remarried in that case, in the present situation the couple remained divorced.116 Thus, the test that appears to operate in the tax context is a “divorce-plus” test: we know that a divorce is fraudulent if it is followed by the “plus” of remarriage."

cbr··on Same-Sex Marriage Is a Right, Supreme Court Rules
Currently marriage involves third parties treating couples differently because they're married. That requires a standardized status and seems tricky to do with contract.

For example: different taxation, different financial aid, etc.

You could get rid of all these, but that is a big change.

cbr··on How to get a massive discount on college: get married
> The ROI seems near-certain, if the article is correct.

Specifically, before getting married you can (have a friend) check with the college in question to confirm that they don't require parents financials for independent students.

cbr··on How to get a massive discount on college: get married
With CSS PROFILE it sounds like it's just that some schools ask for parents information anyway:

    When can a student fill out the PROFILE as an
    independent? A student is considered independent,
    for financial aid consideration, if he or she is
    or has at least one of the following: is at least
    24 years old as of Jan. 1 of the academic year,
    is married, is a graduate or professional student,
    has a legal dependent other than a spouse, is a
    veteran of the U.S. Armed Forces, or is an orphan
    or ward of the court (or was a ward of the court
    until age 18). If not, the student is considered
    dependent. A parent refusing to provide support
    for his or her child’s education is not sufficient
    for the child to be declared independent.

    Financial aid eligibility is, in part, determined
    by a student’s dependency status. Independent
    students are treated differently from students
    who are dependent on their parents. However, some
    schools and programs require parental information
    on the PROFILE even if the student is considered
    independent based on the criteria above.
https://secure-media.collegeboard.org/CollegePlanning/media/...
cbr··on EFF, CloudFlare Asks Court Not to Force the Internet to Enforce Trademarks
Trademarks are generally restricted to a single domain [1], which would mean that these music companies would only have rights to the Grooveshark mark when used in a music context. If there's a company out there that sells a product for grooving pavement that they call "Grooveshark" and sell it on groovesharkpaving.com then there's no domain overlap, but the court's order still asks CloudFlare to block them.

[1] Business context, not domain name. So "computers", or "food".

cbr··on The 100-year-old scientist who pushed the FDA to ban artificial trans fat

    I.e., is it the goal of hydrogenation to produce
    a more solid form of oil, and the trans fats are
    a byproduct?
Yes.
cbr··on Uber Drivers Deemed Employees by California Labor Commission
A McDonald's franchisee has much more discretion in how they operate their business. They choose who to hire, how to manage them, where to run ads etc. They do have less freedom than someone running an independent restaurant, but it's very far from Uber's situation.
cbr··on U.S. Bans Trans Fat

    Partially hydrogenated oils do not exist in nature
"Partially hydrogenated" describes what we did to the oil, so of course you won't get that without human involvement. Partially saturated oils, however, even ones with trans bonds, do exist in nature. For example, raw canola oil is around 0.5% trans fat.

That aside, I'm still not sure your classification for "processed" or "natural" makes sense. The key step in partial hydrogenation is mixing hydrogen with the oil, [1] while a step in canola refining is mixing hexane with the oil. [2] How does your naturalness heuristic tell us one is ok and one not?

[1] Which makes it surprising that this would create trans double bonds, since the effect is to reduce the number of double bonds. The problem is that with all that hydrogen available some bonds flip from cis to trans.

[2] As you alluded to by saying "processed chemically".

cbr··on Ancient Roman Swiss Army Knife on Display
Modern multitools like this one are more than 20 years old, so I don't see how there could be active multitool patents this would invalidate. Unless they did something especially clever in their design that would be specially patented?
cbr··on Why Open Source Misses the Point of Free Software
Not a lawyer, but I think the standard way to do this would be to "clean room" it. You notice that the GPL'd fork made this change, and instead of changing it you write to a co-developer "Our `name` variable is too short; it should be one byte longer. Could you fix this?"

The idea that `name` is short by a byte isn't protected, just the literal code.

(It's quite likely that this particular change is too trivial to be covered by copyright, but the chilling effects reach wide enough here that it might not be worth risking it.)

cbr··on Why Open Source Misses the Point of Free Software
redhat?
← PreviousPage 15 of 34Next →