etjossem

23 ms·

181.
by etjossem 10y ago
> It's not malice but solving sensitive problems without taking security seriously can actually have really big consequences for your users. This is very true - but often the author does intend to take security seriously and they&#x
182.
by etjossem 10y ago
Wonderful, thanks for giving it a second (third?) look.
183.
by etjossem 10y ago
Right! I'm just pointing out that this isn't necessarily malice or negligence on the part of the author. Dead Man's Switch has some ways it could be improved, and remembering to set up a CSRF token seems to be one of them.
184.
by etjossem 10y ago
Perhaps the author should serve a long and random token each time you go to the change email page, and require the API call to answer back with that token.
185.
by etjossem 10y ago
SendGrid | Software Engineers, Test/QA, Ops | San Francisco Bay Area, Denver, Orange County | Full Time Hi, I'm Eric and I'm a frontend engineer at SendGrid. We deliver a huge portion of the world's meaningful email. Whe
186.
by etjossem 10y ago
You're being downvoted over this, but I'm curious to know what you think those obstacles are.
187.
by etjossem 10y ago
It's not a technical problem - it's a community problem. Some of us are happy to admit defeat and ignore bad behavior against marginalized groups, rather than actively responding to it, because it doesn't affect us nearly a
188.
by etjossem 10y ago
It is very easy for you and I to throw up our hands and say the online trolling problem will never be solved, because we don't generally experience it in full force. We have the ability to shrug off comments that are unconstructively
189.
by etjossem 10y ago
How about you "do the yourself a favor" and proofread your comments? I'm sorry, I just meritoriously criticized you in a way that was still rude as hell. That was completely my fault. Just like the young woman mentioned in th
190.
by etjossem 10y ago
Simply by virtue of participating in the same communities as others from our demographic group - in this case, Hacker News readers - we are part of a collective. We can enforce our guidelines and keep the discussion civil, so everyone inv
191.
by etjossem 10y ago
Have you considered that this might instead be a lesson in not contributing to the problem of harassment? Hacker News prides itself on an atmosphere of civil discourse - and that's reflected in our guidelines. We're not Reddit and
192.
by etjossem 10y ago
> Making software easy to use fully from the get-go only means making it not do much. False dichotomy. It is absolutely possible to write modern mass-market software and also offer complex functionality that wouldn't be needed by th
193.
by etjossem 10y ago
You really wanted to say "kids these days", didn't you?
194.
by etjossem 10y ago
To be fair, NYT op-ed has a long and storied history of middle-aged white dudes writing about kids these days. Easy mistake.
195.
by etjossem 10y ago
Will the New York Times survive Baby Boomer hot takes? The opinion piece is dripping with hypocrisy. If Yassmin Abdel-Magied wants to walk out of the author's speech and go blog about her discomfort, so what? That's a form of spee
196.
by etjossem 10y ago
Only once the Senate votes for this bill (and the President signs it) will the IRS be obliged to implement it. https://www.congress.gov/bill/114th-congress/house-bill/5719...
197.
by etjossem 10y ago
Nope, it still needs to get through the Senate and be signed into law by the President. https://www.congress.gov/bill/114th-congress/house-bill/5719...
198.
by etjossem 10y ago
> what about the case when founder owns only 5% and still wants to donate a part.. Seems pretty atypical.
199.
by etjossem 10y ago
For completely orthogonal reasons. It's not about what they sell, it's about what they do with the money. More US political candidate financing this year came from the Koch brothers than both major political parties combined. [1]
200.
by etjossem 10y ago
Reads like a fatherly chat with his children about personal finance, it's brilliantly written.
201.
by etjossem 10y ago
And for this reason, many SSN verifiers (banks, government agencies, etc) ask for the last 4 digits. Then they store them in a dusty database somewhere and forget about them until they have to verify identity again, or there's a major
202.
by etjossem 10y ago
> "The whole point of the federal privacy law is to prevent states from making the Social Security number into a nationally mandated identification number of the kind that’s common in Europe. The practice goes back to the immediate
203.
by etjossem 10y ago
That's not always the case. Talent doesn't exist in a vacuum. Someone with a natural talent for picking up new development skills will still learn data engineering far faster when provided with proper resources and strong internal
204.
by etjossem 10y ago
How do you do, fellow kids?
205.
by etjossem 10y ago
SendGrid | Software Engineers, Test/QA, Ops | San Francisco Bay Area, Denver, Orange County | Full Time Hi, I'm Eric and I'm a frontend engineer at SendGrid. We deliver a huge portion of the world's meaningful email. Whe
206.
by etjossem 10y ago
Conjecture: this is done via automated scripts that check for vulnerabilities and then execute the appropriate exploits on them, a la Metasploit. It's a comprehensive binary (or a few of them) that is supposed to be deleted when the
207.
by etjossem 10y ago
Snowden has a theory that Russia had these tools for a long time, the auction has nothing to do with it, and it's political signaling related to the DNC hacks. Worth a read: https://twitter.com/Snowden/status/
208.
by etjossem 10y ago
Snowden himself talks about this. His comments should be required reading for anyone in this thread: https://twitter.com/Snowden/status/765514347196084224
209.
by etjossem 10y ago
TWLO was doing $60 a share last time I checked, up from $10. :)
210.
by etjossem 10y ago
Yep! http://www.sfyimby.org/members/

More ›