HNHacker News
TopNewBestAskShowJobs

methodover

1,743 karma · joined October 19, 2012

submissionscomments
methodover··on Facebook was warned about app permissions in 2011
Also, sorry for the double response, but I had one other thought.

I'm not sure that most people understand even now, after the CA story broke, what the specific issue was with CA, FB, and app permissions. CBS news characterized it just like any other data breach. Slate's Political gabfest did the same. Most news articles near the tip of Reddit's front page were also light on details. Channel Four's original report didn't even focus that heavily on the FB/App problem. Friends in my FB news feed similiarly sound confused about what specifically happened. Everyone is outraged, but few seem to understand, even now.

methodover··on Facebook was warned about app permissions in 2011
Someone elsewhere made a great point that I'm wrestling with. There are totally legitimate uses of friend-data for an API client, such as a custom news feed.

Apps on Windows have access to pretty much everything. There are legitimate reasons for that. It could be abused.

When a Windows app misbehaves, abuses the trust the users have placed in it, we don't blame Windows. We blame the app.

Why then, in FB, in the same situation, have we mostly blamed FB?

methodover··on Facebook was warned about app permissions in 2011
Never said that there wasn't. I was responding to someone who couldn't fathom a legitimate use of the friend data.
methodover··on Facebook was warned about app permissions in 2011
It's astounding. And much of the reporting is really, really terrible. Like just not describing things with any degree of accuracy at all.
methodover··on Facebook was warned about app permissions in 2011
There are non-evil uses of that data, of course. A custom-built news feed for example. That would actually be pretty nice...
methodover··on Facebook was warned about app permissions in 2011
People didn't seem to care back then, though. If you asked a random FB user about app permissions in 2011, I suspect that person wouldn't think it was a big deal.

Social mores are changing, becoming better developed.

The Internet, social networking, OAuth -- these are not exactly well-trodden subjects in humanity's past. It's not like we have decades or centuries of precedence to look back on.

The important thing is what FB does now.

methodover··on What to do when tech jobs go bad
What knowledge, specifically?
methodover··on What to do when tech jobs go bad
Loved this. And I agree with most of it.

One thing I disagree with (and I know this puts me in the minority) is code review.

Code review for trusted engineers is a waste of time. You're only going to find those bugs that are very hard to see. And the odds of you catching them in code review are very low. Also, if you're a kind of fast moving startup (like my company is) there's so much new code coming through that it is a serious slowdown to review it all. At least at the level where you'd need to if you're going to catch the things that the original author missed.

I only make juniors and new hires do code reviews. I'll also ask for code reviews if an engineer is taking on a task that's totally new for them. But otherwise we've totally cut them out and been fine.

methodover··on Who Killed the Junior Developer?
I've had the opposite problem with juniors in the past -- rush to solve tickets and get them committed, but the work done is awful. I honestly preferred the lazy juniors on the team. At least they were doing poor work but there was less of it to code review and fix.

I used to be on the pro junior side of things... but when you're on the earlier side of a startup (series a/b), juniors are a huge liability.

Best "junior" hire I made was recruiting someone in support who I thought was smart and conscientious. Turned him on to programming, mentored him, and now he's great.

I have no idea what the lesson from this has been. hiring is hard.

methodover··on Ask HN: Can I ask for more severance pay?
You may have more leverage than you think. The documents that they want you to sign are really important to them.

We had an employee refuse to sign them after we fired them, for cause. A few weeks later he asked for a larger severence than we initially offered. We offered a month's worth of pay, and he wanted way more than that if I recall correctly. We said no. He then lied, said he was fired for racial discrimination. Threatened a lawsuit. We caved and gave him an extra month of severence. He signed the papers and took his two months of free pay.

Aside: I personally hired this person. I noticed big performance problems early, and personally mentored him for six months before coming to the conclusion that we needed to let him go. I was the one accused of racism. It hurt. I lobbied for more time to turn this hire around, I gave him so much attention and extra time to turn things around. Only to be lied about in the end. Worst moment in my career so far. I wanted to fight any lawsuit-- we had tons of documentation and evidence that the fire was 100% performance related including commits demonstrating clearly these problems (and extensive notes documenting the improvement plan). But our employement lawyer and the CEO figured it would just be easier to give the severence.

Anyway. You may have more leverage than you think. Though, just be ethical about how you handle it. They really need you to sign those papers just to tie up the legal loose ends.

methodover··on So You Want to Compete with Steam
Twitch/Curse hasn't really taken off with the community as much as Discord has. It's hard for me to pin down exactly what has put people off of it...
methodover··on So You Want to Compete with Steam
I haven't experienced those issues with the client (on iOS or Windows). What's wrong with their privacy policy as compared to other chat services? Same question for monetization. And I don't understand the memes comment.
methodover··on So You Want to Compete with Steam
Discord could do it. Discord SHOULD do it.

There needs to be a serious competitor to Steam, something with significant enough market share that Steam gets scared. Steam could be so much better than it is -- I'm not saying that it's a bad product, just that it could be better.

Discord seems perfectly positioned to take on Steam. They already have incredible adoption in the gaming community. And they have quite a bit of experience at this rate too. (Maybe I should go work for them and push this line from within...)

methodover··on Call of Duty gaming community points to ‘swatting’ in Wichita police shooting
PC, I don't play console games.

And like to be clear, I think you're right that it's a bigger problem than CoD. Absolutely. The toxicity in the other games I play isn't okay either. It hasn't been as extreme or concentrated as CoD, but it's definitely a problem too.

methodover··on Call of Duty gaming community points to ‘swatting’ in Wichita police shooting
I haven't seen the same level of vitriol in most other games. I also play World of Warcraft (off an on, hop in every other year or so), Dota 2, Company of Heroes 2, and a few other games. I'm also active in a couple different gaming communities online. Yes, there are toxic players in each of those other games but nothing as extreme or as densely-packed as in Call of Duty. (Dota 2 is probably the worst, but most of the toxicity is just complaining about game-related issues. I've never seen physical threats or racism/genocidal chat.)
methodover··on Call of Duty gaming community points to ‘swatting’ in Wichita police shooting
A lot of people have been talking about the evil of this one individual kid, or the irresponsibility of the police department, but there's another aspect being glossed over here:

The first thing I thought when I read this article was, "Wow, the toxic Call of Duty community finally killed someone."

I've been playing CoD WW2 online off and on since it came out last month. I have been astounded by the behavior of many people in those games. Players with racist and genocidal names who spout horrible things on chat about minorities. Threats of real world physical and sexual violence. Homophobia and misogyny. And of course just childish spamming and yelling and cheating and complaining and other nonsense.

It is a terrible, terrible community.

It does not surprise me at all to see it escalate to actual real world violence.

Yes, the kid who made this particular call should be punished. And the police department needs to be held accountable too.

But the root of this problem is the CoD community, and to some extent the gaming community at large. I don't know how to fix it, I don't know how you get an entire community to start treating each other like human beings -- but that's what needs to happen.

methodover··on SF engineer came to money and now wants wife to sign a post-nuptial agreement
Was serious. Thanks for the response. My parents always kept separate bank accounts, always seemed to have clearly defined separations between who owned what. Separate cars, separate car payments. Separate careers, separate everything. I always got the sense that my parents were two separate individuals in a partnership. I don't think either of them would have a problem signing a postnup solidifying that.
methodover··on SF engineer came to money and now wants wife to sign a post-nuptial agreement
Could someone help explain this to me? I don't understand why the wife shouldn't sign. As far as I can tell from the post, she didn't help create any aspect of the apps that her husband made which made them rich. I don't understand why she would be entitled to half given that she did not contribute half.
methodover··on By ditching usernames, OKCupid is removing a crucial protective barrier
What do people use nowadays? Tinder?
methodover··on Apple Says Apps Must Now Disclose Odds for Loot Boxes
Wild is not a very well supported format though.

From the game director, in response to a criticism from earlier this year, says as much:

> I don't think we've done a good job historically supporting Wild enough. But I do think we've been doing better lately, and it's very important to us that Wild be a real format that is properly supported.

https://www.reddit.com/r/hearthstone/comments/6ynecq/an_open...

methodover··on Apple Says Apps Must Now Disclose Odds for Loot Boxes
> with a lot of expected longevity

This is a great thing to bring up, because Hearthstone churns out expansion packs on a two-year basis. The "standard" game mode, which is presently the most well-supported and popular, only allows cards that were created in the last two years. If you want to keep up, you need new cards, and you need a lot of them, and they are expensive, and they are getting more expensive [1].

Blizzard has a great reputation, as you said. Hearthstone's monetization model puts their reputation at risk.

1. https://www.polygon.com/2017/12/12/16763594/hearthstone-expe...

methodover··on Apple Says Apps Must Now Disclose Odds for Loot Boxes
Sort of. Shareware... except the price of the game is actually unlabeled, and turns out to be hundreds of dollars per year.
methodover··on Apple Says Apps Must Now Disclose Odds for Loot Boxes
Well, many people have a problem with the lottery too.

Also the X gold coins for $X is less of a problem. The old League of Legends style of a "free to play" game was great. They were one of the first to do it. You paid money for a currency, and then the currency purchased items. All items had an alternative cost as well for a currency you could only earn in game. It was explicit about what you were buying.

Loot box systems on the other hand are not explicit. Blizzard's Hearthstone for example, as I talked about in this post https://news.ycombinator.com/item?id=15983166

methodover··on Apple Says Apps Must Now Disclose Odds for Loot Boxes
The true cost of playing is hidden. It's obfuscated behind a very complex set of systems. It's optimized to hide the true cost from the player as much as possible.

It's problematic. It makes players feel bad, in retrospect, when they realize that they've spent more than they would have wanted to spend at the outset.

I would hate for the loot box model to move beyond video games. Can you imagine going to the store and having to buy a mystery box filled with groceries, which you may or may not need or want? Gosh that would be horrible. Not that it would happen but, still. I feel like we should encourage a society with clear prices on specific, concrete products. I give you $10, you promise me specific thing X. If I don't actually get X I can ask for a refund, or I can sue you even if it turns out you're acting in bad faith, etc. Loot box systems don't seem to transact in good faith.

methodover··on Apple Says Apps Must Now Disclose Odds for Loot Boxes
> What they should really do is force apps to disclose the maximum amount a player can spend, front-and-center in the app store. And then also display other statistics - like the ARPU and ARPPU (average revenue per user, and average revenue per paying user). And then allow us to filter apps based on that criteria.

Yes, yes, yes, yes.

I recently quit Hearthstone once I realized that the game was slowly sucking me into paying more. It's a great game. But they obfuscate the true cost of playing.

In that digital card game, players want specific cards to build a specific deck. But the manner in which you acquire specific cards is expensive, and the expense is heavily obfuscated. I doubt that most players understand the real cost of playing.

To get a card, you need to buy a card pack. Card packs have 5 random cards (with a rather complex algorithm behind what cards are in a pack). These cards can be duplicates, which you could transform into "dust" (a kind of currency) to buy the card you actually want. The true cost of buying a specific card that you might want depends on a bunch of factors, such as how many duplicates you already have.

In Hearthstone and other "free to play" games, the true cost of playing is nebulous. The game acquires players partly by advertising that playing is free. However, in reality they are likely among the most expensive games you could play.

The cost of acquiring a complete set of all cards in a Hearthstone expansion is around $400 [1]. Which is insane. In order to play competitively, you probably need half that -- which is still around $200.

If the costs were clearly and honestly labeled, players wouldn't play. So they aren't.

I hope the industry self-regulates, like they did with the ESRB and censorship. I hate the direction the industry has taken here.

1. https://www.forbes.com/sites/insertcoin/2017/04/14/it-costs-...

methodover··on In 90 Days, Facebook Login Will Require Strict URI Matching
> All redirect URI's used by an app need to be listed in the Valid OAuth redirect URIs list in the app's Login Settings in order to be used in our OAuth flow. However, there have been two exceptions to this rule. The first exception is that apps with an empty list of Valid OAuth redirect URIs were grandfathered into being allowed to receive tokens on any endpoint on their domain. The second exception is that redirect URIs are allowed to "prefix match", meaning any URI that is prefixed by a URI on the list of Valid Oauth URIs would be valid.

For us, the base URI for the FB Oauth redirect flow is always the same, but the querystring params include some special information (namely, a key value pair that tells us where to redirect the user after the successful FB login).

Now I guess we'll have to change our approach.

Not sure why querystring params aren't OK.

methodover··on Consumers are frustrated by endless streaming services
Videos are consumed, though, unlike these widgets you mentioned.

There should be two choices you make as a consumer, for two separate things:

One, your streaming platform marketplace of choice. Amazon, Hulu, etc.

Two, the specific media you want to watch. You pay for that.

If you want to watch Stranger Things for example, it'll cost around $15, and you can purchase that on Hulu, Amazon, whatever.

Streaming services can get good at streaming, and compete with each other for the best platform.

Media creators can be good at media, and compete with every other media there is.

methodover··on E Pur Si Muove
All these people saying SF is less tolerant than the Deep South are almost certainly not gay.

I came out in college in a big city in TX and it was fucking brutal.

Someone who thinks SF is intolerant has no fucking clue what real intolerance looks like.

methodover··on The Big Vitamin D Mistake
> Too few dopamine-injecting experiences

That is an awesome way to phrase that.

I took a 3 week vacation for the first time since I started working 8 or 9 years ago.

Did wonders for me. Should've made the time for a long long vacation a while ago.

methodover··on Why Social Media Is Not Smart for Middle School Kids
Parental handwringing is dangerous. I can speak to it in my own life-- my parents actually kept me from using a computer for any reason other than homework for a significant portion of my high school years. I didn't discover programming until I was 24. I don't know if I would've discovered it in High School, but it seems likely that it wouldn't have taken as long as it did. I've always felt behind the curve in my career, struggling. I think part of the blame rests with my parents keeping me from technology growing up.
← PreviousPage 6 of 13Next →