lvh

14 ms·

121.
by lvh 6y ago
Latacora | Security Engineers | Full-time | Remote (Chicago HQ) You could pick one startup to work for. But why choose? You can also work for a bunch of them simultaneously. We're building a security team that runs security teams for s
122.
by lvh 6y ago
Can't speak for this thing specifically, but FIDO2 keys in general: - Yes, you have everything you need on every major OS/browser - These devices are zeroconf; resetting it actually kills a security feature (key use increments) ai
123.
by lvh 6y ago
Ah, yes, you're right: I forgot about the contribution limit. Technically QNEC/QMAC can still be used to increase beyond that, because they're not computed off of compensation--but that wasn't your point.
124.
by lvh 6y ago
6% of compensation would still be a safe harbor plan, excluding the plan from ACP/ADP test requirements, so unfortunately it's quite possible that the director making ~$1MM annually in salary gets a ~$40k match (though not much mo
125.
by lvh 6y ago
Fidelity, and every index fund Fidelity has to offer, yep. The QDIA is an automatically selected target date fund-of-index-funds, but I'm manually allocated.
126.
by lvh 6y ago
I assumed that's what _you_ are doing since you proclaim to be a Boglehead :-) I'm saying that the GPs claim is only hard to believe as a Boglehead if you know they're invested in index funds in their retirement account. But
127.
by lvh 6y ago
What do you think? :-) (FWIW: I am personally the trustee on the plan for effectively the same reasons. It's pretty tricked out, and I'm very proud of it.)
128.
by lvh 6y ago
Surely we can agree that for the specific case we're discussing: TSLA TTM, you would prefer the Roth version of that at every income level if it was available.
129.
by lvh 6y ago
Only if that 401(k) is invested in a bunch of low-fee index funds. I've helped people move off 401(k)s with horrible QDIAs with 2% GERs that somehow managed to lose money in _2019_.
130.
by lvh 6y ago
If it was rapidly appreciating surely you'd _want_ the immediate income tax hit and move it to a Roth 401(k)?
131.
by lvh 6y ago
(I'm not GP.) Latacora has a 100% no-limit contribution match and non-shitty funds (access to all of Fidelity's index funds), loan provisions, and all conversions unlocked for any reason, available on day 1, with all contributions
132.
by lvh 6y ago
Generally, yes, but the thing you're looking for is called "self-directed" and is supported by most major providers. The nicest one if you really want to do this is probably Schwab. The problem with GP's scheme isn'
133.
by lvh 6y ago
Unclear how the "deposit shares in 401(k)" step works. 401(k) contributions come from salary: you can't just put random things in your 401(k) except in specific circumstances (like a rollover). You can do in-kind transfers _o
134.
by lvh 6y ago
Butterfly Network is a Latacora client. We run their security team, and you'll be working with us in this role. We'll also be running the work sample test used to gauge technical competencies. They've been a client for quite
135.
by lvh 6y ago
To be clear, we're talking about battery-backed RAM (specifically MOS RAM) there, right?
136.
by lvh 6y ago
1990 is probably a little early for something flash-based, but battery-backed DRAM- and CCD-based devices existed before that.
137.
by lvh 6y ago
Starlark is _almost_, but not quite_ Python, and Python 2 at that. You could do everything Starlark does in actual Python and get stuff like static type checking for free. I think the term DSL is overloaded here? Consider all the Lisp and R
138.
by lvh 6y ago
But Bazel is developed by Google itself right now. Presumably if you missed Google tooling you'd rather use Bazel, no? I'm not suggesting Bazel is perfect: I think e.g. Starlark's insistence on being a separate language does
139.
by lvh 6y ago
Happy to see new developments here, though FWIW, I've mostly had a good time with JavaFX, especially in Clojure, where there's a neat Reagent-style (a React wrapper) library called cljfx[0]. It's true that Oracle has mostly d
140.
by lvh 6y ago
Yep, that's not grammatical.
141.
by lvh 6y ago
It's possible that "many" firms do this, but given AWS' growth numbers that would imply they don't really spend meaningful amounts to begin with. Counterpoint: I've seen a great many false economies with people
142.
by lvh 6y ago
Right; but this turns out to be pretty tricky in practice. I've attempted to do this for even relatively straightforward code (libsodium--complex in implementation, though not in API) with libclang and it was not particularly pleasant.
143.
by lvh 6y ago
Not GP, but one the one hand semgrep has a real honest to goodness parser at its core; on the other hand I'd expect C++ to have sufficiently complicated semantics that it needs some understanding of C++ specific mechanics to be useful.
144.
by lvh 6y ago
If you use VSCode you can get that today, if you use something else it doesn't look too hard to write: https://semgrep.dev/docs/integrations/#editor I'd expect latency might be juuust in the range where
145.
by lvh 6y ago
We've been working with the r2c folks for a while, and been using semgrep since before it was called semgrep. If you can write code in a language, you can use semgrep. It also has a feature I have learned to love every time I find it i
146.
by lvh 6y ago
I've used fish in the past but went back to zsh. IIRC fish broke a bunch of times between versions and the maintainer feedback wasn't great. The maintainers of course don't owe me any of their time, so I'm not mad abou
147.
by lvh 6y ago
We are, but we also largely a bunch of software engineers working on project-based work and delivering software, so I don't think GP's completely off the mark :)
148.
by lvh 6y ago
I'm not sure if we're exactly what they're looking for, but FWIW we're about two dozen folks these days.
149.
by lvh 6y ago
Jethro moved from a custom init.el to Doom, though, not Spacemacs to Doom :)
150.
by lvh 6y ago
Surely immediately after a layoff is one of the better times to get a glowing recommendation? Some recruiters (and certainly plenty of hiring managers) read HN :)

More ›