etjossem

13 ms·

61.
by etjossem 9y ago
Work for a company that has several offices that are geographically spread out. This is a good indicator that the company has already developed the necessary prereqs (good code collaboration tools, everything is a videoconference by default
62.
by etjossem 9y ago
Famous != ethical
63.
by etjossem 9y ago
Probably factored into the final price, heavily discounted given Amazon's own plans for last-mile.
64.
by etjossem 9y ago
I loved that article, but the difference in quality/relevance between it and the newsletter is night and day.
65.
by etjossem 9y ago
I expect to read technology articles here, not the unfocused thoughts of a finance columnist on 5+ different topics.
66.
by etjossem 9y ago
I hope fans will forgive me for saying this, but Matt Levine's newsletter is kind of incoherent and not relevant to the HN audience. It never has much of a focus, and it's only rarely about tech. If you like this kind of newslette
67.
by etjossem 9y ago
That's awesome! I'm glad it's working out for them.
68.
by etjossem 9y ago
You had me at "almost nobody leaves Yahoo"...
69.
by etjossem 9y ago
Absolutely, but widespread disclosure does nothing to stop that from happening, and may actually enable less-sophisticated attackers to do things they weren't capable of before.
70.
by etjossem 9y ago
Malicious actors and users will be alerted in equal measure, but the typical Android phone owner will tend to do nothing in response to a new security paper, while malicious actors will tend to write exploit scripts. That's the main co
71.
by etjossem 9y ago
This is insightful, thanks. In this specific case, you're absolutely right that users themselves can take steps to mitigate the risk. If users come to understand the real meaning of granting permissions as a result of this disclosure,
72.
by etjossem 9y ago
And I don't really care what you call this stuff! "Coordinated disclosure" is a good value-neutral term and I appreciate the reasons why you prefer it. I'm just trying to get a discussion going on which approach, if any,
73.
by etjossem 9y ago
That's true, but it glibly ignores the reality of vendor lock-in. The average non-infosec human is not going to switch devices because of a vulnerability whitepaper. This "vuln-insensitive user" is better served by giving the
74.
by etjossem 9y ago
Like it or not, the average smartphone user's security is at the mercy of their vendor. The pace and priority of updates is not up to the typical device owner, nor do security researchers have any say - it's up to Apple and Google
75.
by etjossem 9y ago
From the section marked "Responsible Disclosure": > Current — All the attacks discussed by this work are still practical, even with latest version of Android (Android 7.1.2, with security patches of May 5th installed). Honest q
76.
by etjossem 9y ago
I agree, and I think a group setting is generally the more responsible way to go with any drug. But I don't see the same level of pressure around it (i.e. to take more or push limits) that I do with alcohol. Taking care of each other
77.
by etjossem 9y ago
> I've definitely felt pressured into taking mushrooms. It's a very social thing to do. You need a "sitter" who stays sober Your mileage may vary! But this is exactly my point: when a group of you get together to take
78.
by etjossem 9y ago
"Golf Squad's pulling up outside."
79.
by etjossem 9y ago
That's the joke.
80.
by etjossem 9y ago
Anecdotal: people who do hallucinogenic mushrooms are way more likely to know what they're getting into. The decision to ingest mushrooms isn't a matter of psychological need (as it sometimes is with alcohol or amphetamines), and
81.
Salary Negotiation (2012)(kalzumeus.com)
4 points by etjossem 9y ago|0 comments
82.
by etjossem 9y ago
Conversely, though - if you're completely unwilling to accept a clause that limits your employment after leaving the company, your starting point should be an agreement that doesn't have such a clause in it. Don't give them t
83.
by etjossem 9y ago
Exactly. It feels even easier and more reasonable if you do the work for them; copy the document, make the changes, export as PDF and send it back. Everyone worth their salt understands employment agreements to be negotiable.
84.
by etjossem 9y ago
Restricting the noncompete to cover only a very narrow domain can work too. Depending on how specialized you are, that might not be enough, which is why I recommend conceding only term-of-employment. Your example sounds perfectly fine! But
85.
by etjossem 9y ago
Mhm! This is something any professional should learn to do early on. You can literally print a new document and show them the changes you've made, but you still have to interact with the person hiring you.
86.
by etjossem 9y ago
I agree. This is aimed at people who: - Are fairly new to the industry or are otherwise trying to act in a buyer's market for labor, - Are being offered market-rate or lower with no extra incentives, and - Have a potential employer try
87.
by etjossem 9y ago
Agreed. Be aware of your BATNA (that's your "best alternative to negotiated agreement") as well as the potential employer's. As in any negotiation, you should stack the deck in your favor beforehand - be late-stage in th
88.
by etjossem 9y ago
Sure, they can turn off editing in DocuSign, but that doesn't change what this is: a negotiation. Download it as a PDF and then copy/paste it into a Google Doc. Edit the document as you feel is necessary, print both the redlined c
89.
by etjossem 9y ago
This advice is not meant for people who are being paid millions of dollars to respect a non-compete they fully understand and consent to.
90.
by etjossem 9y ago
> But the problem is that they could just do that anyway, illegal contract or not. The difference is that with an illegal contract, your future employer might actually believe it's more headache than it's worth to fight. I woul

More ›