RijilV

that last line is what my point is. Stepping stones and prerequisites are part of many career progressions - actually quite the norm.

There’s a way that academics come off which I don’t think they intend to - which is somehow their path is special and their trials are unique.

They’re not.

There’s no shortage of folks being sold “key steps” to high paying jobs. Maybe their meter stick is different from yours, but taking that job as the night attendant at the hotel to move up the ranks or getting a salaried position as an assistant manager at Burger King as a path to a regional manager.

Lots of folks trying to sell you a path to success.

Except, in the case of big tech, Internships pay six figures.

There are other perks of being a grad student than just the pay though...

: sure, the internships aren’t typically a year long, but if you do the math for what’s paid for their duration it’s an incredible amount if it did last a year.

s/talking about tesla//

Yeah.... I really wish AMD packaged these for their AM2 socket so we could use commodity boards for them. Sure at that TDP your run of the mill mainboard is a significant power draw, but the other all system is still less than the 35w CPU I ended up with.

(I just finally replaced my core2duo with a low power AMD because the price was so wildly better than the intel open and I could actually order the AMD one from retailers rather than shady eBay second hand cpus)

A certificate is a secret. The longer you have a secret the more likely it is to be learned by others. Expiry is about risk mitigation, the shorter the expiry the smaller the risk.

Here risk is exposure of the key or the certificate being compromised. If it takes X time to break a certificate then an attacker will know your secret for expiry - X. We’re being hopeful that 13 months is unattractive to attackers given the current values of X even at the nation state level, and with cryptography we always have to look into the future not what’s capable today. There’s also a “herd immunity” thing going on if we all have shorter expiry as there are no easier targets and the attacker has to become much more focused.

IMHO there’s also benefits in rotation your cert more often. If you do it once every three years it’s more likely the folks who did it last time aren’t with your company or just plane forgot what they did. I think 13 months is still too long, I’d prefer every quarter because it forces the investment is a control system to facilitate rather than half-automated manual tasks. But that’s not what this proposal from Apple ios about.

As a FYI your password requirements don’t mesh with Apple’s auto generated passwords. Funny how that’s become a barrier for me to create an account.

In fairness I don’t use social media (well, other than posting here from time to time), so it’s difficult for me to identify with folks who spend a considerable (IMHO) amount of time recording their activities and thoughts on third party systems which have dubious, at best, privacy policies. My naive understanding of these platforms is for you to make yourself discoverable.

Can someone help me understand why after spending time over years recording yourself it is now a surprise companies are using that data?

Really? I’m not that frequent an Uber user (few times a month) but I’ve certainly encountered a different driver in a different car than what the app said. Less so in These United [sic] States than elsewhere, but I would say it happens enough where I’m not longer surprised when it does.

I think we all underestimate where USA taxi companies are with their technology if we think Uber/Lyft are the only ones who know where the cars are.

That’s because Amazon knows retail is already dead. Either they get beat out by a competitor or the fed breaks up the company and retail is doomed without the integration. AWS is just quietly milking the cash out of retail and funding the science projects.

SOX is about financial compliance. It is not a computer security standard.

I’ve worked for lots of SOX companies as a third party and had root/sqlplus on most of them. There’s really to relationship between SOX and security.

Folks spend countless hours manually entering their private data into sites like Facebook and LinkedIn too. In the myopic vein of “just to sell is more stuff” they’re doing it just to look at ads.

I’m not saying I endorse either (I personally do neither), but folks to seem to get more out of these cameras and social media sites than just the return the companies providing them get.

AFRINIC has a number of available IPv4 free, across multiple /8s: https://www.afrinic.net/stats/ipv4-pool

APNIC has "0.32" of a /8 left: https://www.apnic.net/community/ipv4-exhaustion/graphical-in...

ARIN reached zero on Sept 24, 2015: https://www.arin.net/resources/guide/ipv4/

Maybe, after all wasn't the launch code for US nukes all zeros?

https://arstechnica.com/tech-policy/2013/12/launch-code-for-...

I'm sure there's a large group contractors who have fancy presentations and complex systems to protect nukes. They're very highly motivated, fiscally, to convince everyone they've done a good job. As for if that's actually the case, has there been any peer review?

If I’m reading the article correctly and following the governments line of reasoning these cases have already seen trial and are not going to trial now. Hence no statue of limitations issues.

But I agree with you - there needs to be consideration for the debtors in light of the negligence of the collector

Also same. Annoyed by the articles claims the SE is obsolete or nearly so. Does everything I need it to - email, calendar, typing this message now, maps etc. I have enough distraction apps on it to get me through domestic flight.

Wish the modem was better for international travel.

Humorously with respect to the article I do typically use Bluetooth headphones with it, except when flying as planes still have a headphone jack and I travel so light I won’t take two pairs.

It’s sorta interesting how the replies to this digressed into linguistics about systems architecture, and nobody called out the “elite engineers” statement.

I’ve worked with a couple of engineers who are now on Wikipedia’s SRE team. They’re good engineers, but not elite by any means. Not “10x” developers or wizards in castles or whatever. Good solid engineers who I would work with again and fight to hire. But they’re not savants or even the top 10% of folks I’ve worked with. Solid mid to sr level engineers I’d be happy to hand a project off to with ambiguous goals and little oversight, and I’d expect them to get a team of 4 or so other engineers to be more productive.

These are the engineers who meet the job requirements for SRE positions.

Fantastic read, but gotta say I was really hoping for an infographic

> Everyone has the same canned answers to the stupid behavioral questions.

The art of behavioral questions isn’t “ask and answer” it’s the follow up questions. As you astutely point out, the questions are ‘stupid’. They might as well be “do you want a stick of gum?”

Next time you ask those questions do a couple of things. First keep in the forefront of your thoughts what information you’re trying to get out of it and keep the candidate on track answering your data point. Do that by relentlessly asking follow up questions. When you think you have everything ask more.

As an anecdote I was being shadowed during an on-site recently. I asked some arbitrary ‘dumb’ behavioral question, went back and forth a bit, wasn’t getting much out of it. I noticed my shadow clearly moving on to the next question in their notes and decided to keep pushing on the original question - why did you do this, what were you trying to solve, what motivated you. Turns out the candidate did all of this to generate new revenue for the company and ended up bringing in $10m a year extra at the small company there currently worked for. Loads of great data, would have never gotten there if I’d settled for the canned answer the candidate had.

Behavioral questions aren’t comp-sci trivial questions, you can’t just ask the behavioral equivalent to fizbuz/Fibonacci/floodfill and copy down the answer (and you should never be asking those questions either, but that’s a separate rant).

Behavioral questions are stupid and to some degree that’s the point. When you ask your significant other or kids “how was your day?” — guess what, that’s a stupid question too. What matters is what follows from your line of interviewing.

If you want to get good at behavioral questions listen to Fresh Air and try to be like Terry Gross.

It really depends. For a business week give me a hotel, I don’t want to deal with weird checkin or and odd setup. If I’m at a remote office for two weeks or more, I want a real kitchen and laundry.

Personally I use VRBO rather than Airbnb, but the idea is the same. Don’t know I as a business traveler need special things from a rental site, but it’s a market I won’t fault them for trying to get in on.

Also SSN isn’t that distinctive of a format. nnn nn nnnn. Check bits and reserved prefixes were all removed decades ago when it became clear we’d run out unless we use the whole name space (and even then that buys us to 2100). \d{3}\s?\d{2}\s?\d{4} will match a surprising amount.

Detecting SSNs is hard without accepting a high false positive rate. Much harder than phone numbers, credit card numbers, or cloud credentials.

The article talks about “wet bulb” temperature. That takes into account humidity. When the temperature is at or above body temperature our body relies on evaporation to cool.

The problem for many areas is it’s not a dry heat. I like many other people as you point out have lived in 35c and above areas just fine, but the humidity was very low - it wasn’t really that bad if you could avoid direct sun exposure and didn’t physically exert yourself much.

Once that humidity creeps up then it’s a problem.

I hate to nitpick, but from the man page of touch:

> touch -- change file access and modification times

If one were to argue side effects of touch, it would be that non-existent files are created. The purpose of touch is to update access and modification times.

The deal is when you’re interviewing me we’re _not_ co-workers. You hold all of the cards and decide my fate.

A big part of interviewing candidates well is breaking down that dynamic. There are many ways of doing it - I get up on the whiteboard first and write out my problem, and stay there until they’ve explained themselves and I need to get back to my notes so I don’t forget stuff. I phrase questions like “I need help implementing this function...” or “how are we going to solve this edge case”.

I don’t think either side of a tech interview is easy. The problem is only one side is evaluated.

This is a good misconception and undervaluing of what work means. Just because someone lacks a paycheck does not mean they do not work. Since my spouse retired we eat out half as much, we are both in better shape, we grow a non-negligible amount of our own food, have organic eggs from our own chickens, etc etc. our weekends are no longer packed with house work, small and medium sized home improvement projects happen at cost without paying someone else.

We have a fanancial planner and have gone through multi excersizes tracking our spending. The end result is the work my spouse does saves around $50k a year in expenditure alone, not to mention the physical and mental health improvements.

I think we often forget what work means.

Strongly disagree on "do not want children there is no point in getting married."

There's an emotional reason to get married, formalizing a life long commitment. That's a big one for a lot of folks (citation: my marriage).

But lets say you're not a feelings type of person, and those arguments fall on deaf ears. If you live in a community property state marriage makes inheriting assets ridiculously easy and avoids all sorts of taxes. (otherwise you're down the road of setting up trusts which will incur lawyer and trust management fees).

Taxes are another one - if there's an income disparity. Filing jointly with a single income does wonders for what you don't have to pay.

Your spouse can also not be compelled to testify against you, which depending on how paranoid you want to be might make you sleep better at night.

To say there's no point is missing the point though - as much as marriage is enshrined in legal rights which are unavailable to those who do not marry, the institution of marriage is centuries old and exists in many religions. There's an emotional reason to do so, and that's point enough.

I'm one of the outliers who likes open floor plans, BUT at densities much lower than what makes economical sense. 1 person per thousand square feet would be my minimum and I'd really like half again as much space.

Problem is the economics of it. Open floor plans I see on blogs are often side by side working stations with less than 200sqft per worker. That's not really open floor plan in my mind, just removing the walls to recoup a couple of inches to cram more people in.

That's actually not true... I ended up sitting next to a tech lobbyist on a 5 hour flight and we chatted about tech and politics for most of the flight. Google's lobbying strategy is to come in and dump a bunch of money to fix an immediate problem. They don't keep up the pressure - aka they aren't getting people use to the steady flow of "lobbying", it is all reactionary.

This just encourages folks on the receiving side to come up with situations for google to panic over then reap the predictable "lobbying".

Other companies across industries approach things differently- they get their targets hooked on a steady stream of "lobbying" and use the withdrawal of that as leverage.

Microsoft is actually quiet good at lobbying and has been successful on many fronts to keep their products and services the dominant solution for US government systems.

Who remembers when Target's website was hosted by Amazon.com (not AWS)? Probably 6 or 7 years ago now. IIRC Toys'R'Us was also but left earlier.

While I'm no legal expert, I believe the crux of the issue is in this case the dealership had already signed over the title, meaning the had no legal right over the car. Bad on them for demanding a $200 fee to remove it which wasn't clear upfront (though the dealership never responded to the reporters so all we have is the one sided story)

That being said, I think you're referencing the more common cases where these devices are used to disable vehicles on lease to customers. In that case the lease holder is not the owner, so yeah tampering with someone else's car is probably not legal. atleast on the surface that seems reasonable, I wouldn't want someone messing with my vehicle.

I'll agree that leasing agreements are often predatory and there is confusion over who's vehicle it is, but if you want ownership you really need to have purchased the title.