jjguy

12 ms·

31.
by jjguy 9y ago
You forgot the last part: “how f’ed up is that?” https://twitter.com/id_aa_carmack/status/193480622533120001
32.
by jjguy 9y ago
This will change with time. I have thought, studied, talked, and written extensively on this general theme. What comes to mind to frame it for you is my "four principles:" [a] 1. Compromise is inevitable 2. Default-allow product
33.
by jjguy 9y ago
For many years, I have used "Words of Estimative Probability" - a similar CIA "on writing" piece: https://www.cia.gov/library/center-for-the-study-of-intellig... Also written in the 60s, it reflects
34.
by jjguy 9y ago
PSA to everyone responding to the title: please RTFA, it's sarcasm.
35.
by jjguy 9y ago
You're giving "the data" too much credit. There are only a few variables: - new cost - depreciation per year - increasing maintenance costs per year The "F-150" assumption was used to estimate new cost and deprecia
36.
by jjguy 9y ago
USG employees vs. contractor is an important distinction. Your ranges imply your friends are contractors. See techjuice's post for USG ranges.
37.
by jjguy 9y ago
Assuming by "pretty good hackers" OP means the developers actually doing the work, they are typically GS-12 or GS-13 - so $80k to $120k. GS-14 slots and above are reserved for management and spend much less time doing the real wor
38.
by jjguy 9y ago
You do have a lot to learn. So do I. So do we all. The universe of things that get posted to HN are too large for one person to master - it's why I still visit. Lots of good suggestions here, but one I don't see is to simply narr
39.
Updated NIST 800-63 finalized with new identity and authorization guidelines(trustedidentities.blogs.govdelivery.com)
3 points by jjguy 9y ago|0 comments
40.
by jjguy 9y ago
> After being informed of IBM's hundreds of millions in yearly patent revenue, CEO Steve Jobs authorized a change in FireWire's licensing policy. Apple would now charge a fee of $1 per port. (So if a device has two ports, that&
41.
by jjguy 9y ago
> However implication is that you would be happy putting in 50-60 hours You're taking a too narrow a view of it. We never committed anyone to 50-60 hours, that's unsustainable. But by _allowing_ it and building a system to mana
42.
by jjguy 9y ago
No, we'd never bill two clients for the same hour. Very few (no?) T&M arrangements where that would be legally/ethically/morally acceptable. We simply let the team bill to multiple contracts. The contract & dev manag
43.
by jjguy 9y ago
In a past life, I ran a consulting team at a BigCo whose business centered on T&M contracts like OP's. BigCo had 10k employees, mostly associated 1:1 to contracts with the same "bill exactly 40 hrs, but never overhead" c
44.
by jjguy 9y ago
Einstein said it first: If you can't explain it to a six year old, you don't understand it yourself. https://www.goodreads.com/quotes/19421-if-you-can-t-explain-...
45.
by jjguy 9y ago
These are all standard security concerns. Anyone who brings you something similar and does not have a long list like this is in marketing or sales.
46.
by jjguy 9y ago
I spent twelve years as a "security guy" before becoming employee #1 at a now-wildly-successful security startup five years ago. I've spent a lot of time in the last year "professionalizing" our security program, n
47.
by jjguy 9y ago
The counterpoint is 151M records represents .0000041% of global call records in 2016. (Based on an estimate of 10B calls per day worldwide)
48.
by jjguy 10y ago
Take the time to understand the whole system you work within, not just your little stovepipe. That system may not be technical, but procedural. It will include other business functions. It may include your customers. In any system, there is
49.
by jjguy 10y ago
To me, this principles of this style are best described in the Economist's Style Guide: http://www.economist.com/styleguide/introduction "Clarity of writing usually follows clarity of thought. So think what
50.
by jjguy 10y ago
The use case is right there in the text: > enabling unmodified programs expecting a Unix-like environment to run directly in the browser The latex example is probably the best example. There are a handful of latex typesetter web pages,
51.
by jjguy 10y ago
Came to the comments looking for these links, too. Results of my research are below; everything I found is anecdotal, consistent with the other comments. The most robust is the presentation at Velocity in 2009. [4, 5] My notes: Small ecom
52.
by jjguy 10y ago
THIS This single diagram explains the market dynamic year over year in a way I've never seen anywhere else. The 1/3/5/10 yr returns figures you see don't even come close to understanding the nuances of one year ove
53.
by jjguy 10y ago
It's clear tech recruiting needs disrupting. We're still too dominated by traditional procedures that provide poor results. Folks with our background know in our guts this CTF-style thing has potential, we've just got to wo
54.
by jjguy 10y ago
tptacek, patio11 and Erin -- I'm disappointed re: Starfighter, I was rooting for you. I ran 0x41414141.com [1] for about 4 years. It was a set of CTF-style challenges of increasing difficulty with submissions via "secret" em
55.
by jjguy 10y ago
There is additional context in the Bloomberg article posted this morning. [1, 2] Based on the timestamps, kinda looks like the Otto blogpost was prompted by the Bloomberg article -- even though the "agreements were reached" in Jul
56.
by jjguy 10y ago
Please don't rewrite your network stack unless you can afford to dedicate a team to support it full time. Twice in my career I have been on teams where we decided to rewrite IP or TCP stacks. The justifications were different each tim
57.
by jjguy 12y ago
Thanks for the reply. I put cubism in the bucket of time series data, where the x-axis is time and the y-axis a single continuous scalar with definable magnitude. What makes these timeline views unique is multiple y-axis values, each with
58.
by jjguy 12y ago
I've been doing a lazy search (i.e., passively watching) for a library like this with per-second resolution vs the per-month resolution in both timesheet.js and Chee Aun's Life. Anyone have a recommendation?
59.
by jjguy 12y ago
+1 based on my own experience. I still don't grok The D3 Way, despite having used it several times in production projects. I've taken the easy way out and used a D3 library a couple times and been disappointed by precisely what c
60.
by jjguy 12y ago
Most organizations, especially government, have a remarkable inability to man up, say "we fucked up" and take responsibility for their mistakes. Reports like this emerge, in an attempt to obscure the truth with sheer volume.

More ›