Viewing profile — sayhello

Counter-Strike was a mod of Half Life, not Halo.

When I was a Google employee, I helped a friend go through their account lockout issue. It was because they used MFA to a phone number, but later changed their phone number, which …

The three-body problem. https://en.m.wikipedia.org/wiki/The_Three-Body_Problem_(nove...

We made sure that the activation of the API is gated by: 1) User Activation checks 2) When access to the file system is requested, a File Picker is necessary 3) When the API is in …

Precisely. You'll also gain the ability to update your apps cheaply (via the web) and bonus security points by not being beholden to Electron updates.

I worked on this. The quote is true, in all honesty. Same as downloading and running applications from the web. We do our best to make sure the scenario listed doesn't happen. For …

Why does it have to be sad? When software becomes easier to develop, it enables everyone to benefit. More developers, more applications of software. At the same time, performance h…

I beg to disagree :-) I’ve worked on the Native File System API on Chrome. It’s available through Origin Trial at the moment. That said, Web apps can currently emulate reading file…

And it's nice that the web app only has a narrow set of permissions. You could imagine the same for an unzipping app. It theory, an unzipping app doesn't need anything else than sp…

About web APIs, didn’t want to imply that blink was used instead of WebKit for that reason, it was just an example that rendering engines could still evolve independently.

Disclosure: I work at Google on Chrome. Opinions are my own. Using chromium as a base, browsers will have to differentiate by offering a better product. “Better” is less likely to …

Because the scammer may be using this as a way to launder money or to extract money from stolen credit cards. They may not be scamming legitimate bookers, but rather, using the lis…

Good point. The current widely used kernels seem to make some assumptions about ‘owning’ the hardware and implicitly trust any running programs at a certain level. There is a need,…

Did the BSD jails provide enough isolation? Would memory from a process truly be isolated from another? How about FD’s? Could there be side channel attacks? At what level? Perhaps …

Did the Windows Server isolation bundle a slim kernel? One of the core elements of this for the Serverless fast boot requirement is using a kernel that has legacy modules excised.

Used to work on 2nd gen AppEngine. I helped ship the runtimes! Yes, this is due to age. GAE and Run depend on pieces of infrastructure going back a long time.

Google has an office downtown. They've got a growing engineering team too, mostly in Cloud.

As an engineer working on App Engine, I can assure you that's not true. We've been changing a lot of infrastructure, adding features, fixing bugs, all without users being affected.…

More runtimes coming out soon. Stay tuned :-)

Correct. We do not use ptrace in production.

I made a logical error, I meant to say: > the word does deny something: possibly objectivity. i.e. there is a possibility of bias. That said, I've made my peace about the "proper" …

I suppose colloquially on this forum in the context of comments, the word does deny something: usually of the possibility of bias. Disclosure would work just as well, and is in fac…

This is exciting because the second generation standard environment allows Google App Engine to provide a more "idiomatic" experience. Using gVisor, instead of NaCL, as the sandbox…

Not stopping at a stop sign is called the “Idaho Stop”. https://en.m.wikipedia.org/wiki/Idaho_stop It is legal elsewhere. Two studies argue that it seems to increase safety on the …

Exciting release of the 2nd generation of App Engine runtimes. I'm really excited to see how the community receives this product. It uses the gVisor sandbox, allowing sandboxing at…