WingNews logo WingNews GitHub [2]

doomslice's comments

doomslice | 7 months ago | on: Copilot broke audit logs, but Microsoft won't tell customers

Let's say you have 100000 documents in your index that match your query but only 10 of them the user has access to:

A basic implementation will return the top, let's say 1000, documents and then do the more expensive access check on each of them. Most of the time, you've now eliminated all of your search results.

Your search must be access aware to do a reasonable job of pre-filtering the content to documents the user has access to, at which point you then can apply post-filtering with the "100% sure" access check.

doomslice | 1 year ago | on: I love programming but I hate the programming industry

Do you know that the big expensive thing is what your customers actually need? Do you actually know what your customers need?

That’s basically the only important context. If you can’t deliver that, it doesn’t matter how well thought through, extensible, or scalable it is.

doomslice | 2 years ago

Did they remove it? It says the researchers provided a notebook that they used to verify the attack.

doomslice | 3 years ago | on: Apple kills plans to scan for CSAM in iCloud

I'm not defending this at all, but one of the reasons why there are no (or few) humans that can be contacted is that they* said that it was tried before and it caused a lot more issues with mistakes/takeovers due to social engineering.

* Can't remember who said it but it was at a town hall this year

doomslice | 3 years ago | on: Ask HN: What is the thing you've built that you regret the most?

This was maybe 8 or so years ago so I'm not sure what else this unnamed ticketing company added since... but permissions were pretty lax at that point and had JUST started to tighten up.

Oh I forgot to mention that Apple rejected the iPhone version of the app at first because we didn't make it clear enough that we were tracking their locations like this. Our head of product at the time just called someone up at Apple and it got approved with no changes. It all stunk.

doomslice | 3 years ago | on: Ask HN: What is the thing you've built that you regret the most?

A ticketing company was experimenting with BLE beacons to trigger things like seat upgrades and coupons when people walked by certain things in a venue… or at least that’s what they said it would be used for.

Instead they covered LA Live and surrounding area with them and then just sold that data to… well I’m not sure who since I left shortly after they did that.

The justification was “but we put it in the TOS and Privacy Policy”.

doomslice | 3 years ago | on: Google CEO tells employees not to ‘equate fun with money’ in heated meeting

They cut non-business critical travel which many employees for some reason felt was a perk of the job. I heard second hand that some employees would do "office tours" just to try the lunches at the different offices (under the guise of doing some in person meetings that certainly could have been done online). Cutting that kind of wasteful travel is necessary in an economic slowdown (and even necessary before that).

doomslice | 4 years ago | on: Zelensky video deepfake

Whether intentional or not, the way you presented these (including the one about CGI) is how these sorts of conspiracies get wings and spread.

"Oh of course this is not true... except for maybe this little sliver here..."

That's the thing that gets latched onto and eventually the conspiracy nuts argue the whole thing must be true.

doomslice | 4 years ago | on: How Michigan grew its startup ecosystem

All the surrounding areas of Ann Arbor are reasonably priced. I live in Dexter (working remote) and love it here. Close enough to go to Ann Arbor whenever I want but far enough away to get a big house and lots of land.

doomslice | 4 years ago | on: Google takes two-to-four times as much as the fees charged by rival ad networks

They sometimes (often) have "last look" -- so a bunch of companies compete to win an auction against each other, and then Google gets a chance to win against the winner of those. This means that Google can essentially maximize the profit they receive if they have a better bid, because they know exactly how much fee they can take without losing. Everyone else on the other hand, has to compete with _lower_ fees so they can win that first round of the auction.

doomslice | 4 years ago | on: Mistakes I've Made in AWS

We use GCPs equivalent of spot instances (preemptibles) to great effect as well. It actually works better at larger scale since a smaller % of your machines get preempted at a given time.
page 1
more