sam0x17

28 ms·

481.
by sam0x17 4y ago
It's never really bothered me. I can't imagine being in a situation where it would make sense to consume reddit or HN or anything like that on my phone. The few times I have I noticed this prompt and it's annoying but easily
482.
by sam0x17 4y ago
we used Federacy. One big advantage we had though is our app is 100% serverless via Ruby on Jets. So it's a bunch of rails code that runs in lambda, makes the security footprint at lot easier to deal with. No EC2 instances for example.
483.
by sam0x17 4y ago
I find that verbal communication is often very inefficient in engineering scenarios. There is a reason RFCs are not done verbally.
484.
by sam0x17 4y ago
I didn't know there was such a thing as an executive coach. Where do you find one?
485.
by sam0x17 4y ago
It's done this for like 5 years AFAIK, at least for me
486.
by sam0x17 4y ago
I would say it's actually the opposite. Most comms in software engineering is async/textual, and the work we produce is also textual. The takeaway here for me is maybe there is something to be said for doing an all-text interview.
487.
by sam0x17 4y ago
> People who describe themselves as bisexual overwhelmingly message either one sex or the other, not both as you might expect. I don't think you can draw the conclusions from this people seem to be. Think about it. If you are genuin
488.
by sam0x17 4y ago
> the fix is probably straightforward Something I totally agree with before you've passed multiple audits. At this stage it's more a question of how the hell did this slip by 2 pen tests and 2 external audits (since they will h
489.
by sam0x17 4y ago
Right but there is a ring of accountability -- the compliance vendor (Vanta) should only refer startups to good auditors and pen testers. The auditor should verify that the pen tester is reputable, and the pen tester should check for basic
490.
by sam0x17 4y ago
* "The Wayback Machine has not archived that URL." * The google search you linked it took me 2 minutes staring at the results page before I notifed the part where the relevant information comes up. It's on a sub-link with the
491.
by sam0x17 4y ago
I'm all for this just being a disgruntled researcher as this is all really damning for the industry and for this startup if true, but the replay attacks on magic link login emails are really no small thing, especially for a SOC-2 calib
492.
by sam0x17 4y ago
It really wasn't a joke when we went through the process at Arist (YC S20) I can tell you. Pen tester found some really meaningful privilege escalation stuff we were able to fix before launching our new platform that was 100% specific
493.
by sam0x17 4y ago
Right, but Vanta is known for having a relationship with the auditors they use that is cozier than it is between SecureFrame or Drata and their auditors. This combined with the fact that they call out Vanta in their own blog post makes the
494.
by sam0x17 4y ago
Even more damning, looks like they got a SOC-2 Type II via Vanta in July of 2021. I just had to go through SOC-2 Type II at two startups in the last few years so I'm very familiar with the requirements. How the hell did they pass multi
495.
by sam0x17 4y ago
My interpretation was "at least we treat servers like living things, can't say the same for how business managers treat employees"
496.
by sam0x17 4y ago
It's moving the other way from what I've seen. It's becoming absurd / unheard of to work in the office at least in early stage startups, and those expectations are carrying through series A/B and beyond and larger c
497.
by sam0x17 4y ago
And each one they deploy seems to decrease the average bandwidth https://telecoms.com/517598/starlinks-download-speeds-have-d...
498.
by sam0x17 4y ago
As a library author a big aha moment for me was being able to write proc macros. There are so many creative (and simple to implement) ways of getting around certain limitations when you can just do some smart code-gen. I think a lot of peop
499.
by sam0x17 4y ago
global state is often necessary. Abusing it is always possible, but every startup-sized application footprint I've ever been in we eventually have to add an exception to the no-globals linting rule for some very legitimate reason in so
500.
by sam0x17 4y ago
We should give the idiots more credit though. Specifically everyone pretty much ignores ads anyway. The main way Google sells ads is convincing advertisers that ad clicks are anything other than miss-clicks and that organic traffic that you
501.
by sam0x17 4y ago
I mean specifically in the world of online advertising. For a long time it was essentially CPM with no targeting, and that was considered fine.
502.
by sam0x17 4y ago
The decision happened literally live while Hasan was talking about how terrible it is that gambling content is still allowed on Twitch in front of an enormous audience so I'm inclined to believe this exposure forced their hand on a dec
503.
by sam0x17 4y ago
> Guess I should start my 5th attempt at finally getting good at Rust. The thing that finally made Rust click for me was doing a usb HID project. Suddenly all the machinery around ownership and multi-threading made sense and I was able t
504.
by sam0x17 4y ago
I'd view it as 12 years of experience and data gathering upon which to build a really stellar rebuild with all the lessons learned ;)
505.
by sam0x17 4y ago
> I don’t think YouTube is to blame here. They are. They opened the floodgates of coddling advertisers. Before they did, no one listened to them at all.
506.
by sam0x17 4y ago
I've never understood how we got to this place where _some_ content on youtube is advertiser friendly and _some_ is not, and that is viewed as actionable information. I guess my whole mental model is you run ads on the whole network, a
507.
by sam0x17 4y ago
update: I guess I was right sooner than I thought. PoW GPU mining is unprofitable as of today!
508.
by sam0x17 4y ago
For middle-class workers who didn't lose their job it's as I said, just a little bit less than one month's rent. Definitely not enough to compensate for increased cost of living and inflation across the board, especially now.
509.
by sam0x17 4y ago
It really wasn't giant. It was less than the average cost of one month of rent in most locations
510.
by sam0x17 4y ago
It is lazy. It is lazy to just stop people on the street who look "sketchy" instead of actually investigating crimes. That is the moral equivalent of our current financial system. We used to have the right to look sketchy but we p

More ›