Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
brandon
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
5 ms
·
1.
▲
by
brandon
1y ago
You don't believe Team Cherry's prior sales of Hollow Knight would reach the bar noted in the docs you linked? Aside, your second point is incorrect. The SteamDB folks have a public write up on analysis of the preload system: htt
2.
▲
by
brandon
3y ago
I don't mean to support or refuse the author's main points or analysis, but you might like to know that the Chrome team is currently working towards shipping the Topics API. I have strong opinions about it but I will try not to ed
3.
▲
by
brandon
4y ago
In my experience with modest specifications, you can source servers from tier 1 vendors (Dell, HPE, etc) with 5 years of support for less than a 1 year commitment for the roughly equivalent AWS or GCE instances (without prepayment). The mon
4.
▲
by
brandon
4y ago
Most of the stuff that makes the distribution different from Debian Testing is tightly coupled with Google's internal infrastructure and generally uninteresting (or unuseful) to users writ large. Just run Debian!
5.
▲
by
brandon
5y ago
There's a reasonably good FAA sponsored app to help drone owners with this problem: https://www.faa.gov/uas/recreational_fliers/where_can_i_fly/...
6.
▲
by
brandon
5y ago
Based on the pictured bezel, it looks like they've got three rows 3.5" 14TB SATA drives up front in 14th generation carriers. Best guess would be something like an R740XD2 which has 26 total drive bays per 2U.
7.
▲
by
brandon
6y ago
> Nobody at Google has a need to raise a ticket with some ops group in Bengaluru to partition a Kafka topic, renew a certificate, bridge two VPCs, or any of that type of thing. Except when your team wanted to initially onboard with GOOPS
8.
▲
by
brandon
6y ago
I'm curious about what specific thing is signaling to you that your Steam password has been cracked. (I assume you mean brute forced?) It's significantly more likely that you've been keylogged or phished if attackers are actu
9.
▲
by
brandon
6y ago
Email access is required for self-service account recovery, but there are plenty of other documented methods: https://support.steampowered.com/kb_article.php?ref=5421-QTF...
10.
▲
by
brandon
6y ago
Historically at Google the exceptions fell into one of a few buckets: * You used a modified client or client proxy (this was done for e.g. SSH) * You used a remote-desktop protocol to remote into a machine with direct network access to the
11.
▲
by
brandon
6y ago
This is likely aimed at $device_manufacturer that wants to put a cellular modem into their device for remote telemetry (uploading a tiny payload every 24 hours for the lifetime on the device). There's a lot of attention in the docs tow
12.
▲
by
brandon
7y ago
The specific rules for key sales are covered here: https://partner.steamgames.com/doc/features/keys#3
13.
▲
by
brandon
7y ago
Do you have a make/model or link for the valve? I went all-in on Z-Wave and am similarly interested in controlling drip-lines.
14.
▲
by
brandon
7y ago
Sharing without comment: https://twitter.com/GenePark/status/1196488999524802562
15.
▲
by
brandon
8y ago
Depending on how much stock you put into the Steam Hardware Survey, it's worth noting that Nvidia still controls 74% of the market relative to AMD's 15%: https://store.steampowered.com/hwsurvey/videocard/
16.
▲
by
brandon
8y ago
The cost of the Lidar hardware was down to $7,500 well over a year ago and may have come down even more in the intervening time: http://www.businessinsider.com/googles-waymo-reduces-lidar-c...
17.
▲
Speculative execution, variant 4: speculative store bypass
(bugs.chromium.org)
184 points
by
brandon
8y ago
|
21 comments
18.
▲
by
brandon
9y ago
The iPhone 5C could be attacked this way because it didn't contain the Secure Enclave that shipped as part of the A7 chip. Attacks on devices with the A7 (or newer chips) would be novel.
19.
▲
Reading privileged memory with a side-channel
(googleprojectzero.blogspot.com)
2334 points
by
brandon
9y ago
|
593 comments
20.
▲
by
brandon
9y ago
The document shows in great detail that Kalanick and Levandowski were already working together closely before work on the truck even began. 2016-01-26 - Levandowski's last day at Google 2016-02-22 - iMessage chatter directly between Le
21.
▲
by
brandon
9y ago
Cloning? Nest has been shipping their basic outdoor camera since 2016 (which itself is not exactly innovative ). The Ring device appears to have hit the market two months ago. Agreed on the point that the deployment is only going to get ea
22.
▲
by
brandon
9y ago
Also individual Googlers who want to open source their work without going through the copyright assignment paperwork. A lot of the projects bearing that disclaimer are passion projects done 100% outside of work hours.
23.
▲
by
brandon
9y ago
Google's model allows SSH to "internal machines" over a set of relays that apply the same machine authentication and trust tier logic that's laid out in the papers. So your workflow would still be supported, and it woul
24.
▲
by
brandon
9y ago
The actual framing is WebSockets over TLS once the session is established and the latency is no worse than SSH over VPN practically speaking. The protocol also supports session resumption in case your connection to the relays is briefly int
25.
▲
by
brandon
9y ago
The workaround functions by opening the privileged socket and re-executing the binary as an unprivileged user with access to the filehandle. Any background goroutines would exit with the privileged parent. Also: please don't spawn goro
26.
▲
by
brandon
9y ago
There's a simple-ish workaround for the privileged port issue if you can't just use CAP_NET_ADMIN: http://play.golang.org/p/dXBizm4xl3 The namespace issues are unfortunately a lot tougher to address.
27.
▲
by
brandon
9y ago
We're going to make sure that the Secure Shell app for Chrome, in one form or another, continues to be usable on Chrome OS. (I'm one of the current maintainers and we're already all over this transition)
28.
▲
by
brandon
10y ago
That's not a correct interpretation either; it's noted in the linked article that GCE uses a proprietary VMM instead of QEMU which itself was "ripped out" of the standard KVM+QEMU arrangement. I probably would have chose
29.
▲
by
brandon
10y ago
I've never had a LinkedIn account, and I've opted out of receiving "<Person> wants you to join their professional network on LinkedIn!" emails, and yet I somehow manage to get 2-3 messages from LinkedIn per month.
30.
▲
by
brandon
10y ago
> Driving from my friend's studio 3rd floor walk-up near AT&T Park to Mountain View convinced me that drive is crazy. That's analogous to visiting Carlsbad from your place in PB. I mean, except that Carlsbad is worth visiti
More ›