anonymousjunior

When did you try Uber at SFO? They changed the pickup process a few months ago and it's been a nightmare ever since. I've found the trick is to make the trek through the airport to the International terminal where they're still allowed to pick up curbside.

This is what's really concerning. If FSB was able to actually implement something and shell all nginx boxes (and thusly obtain SSL certs, intercept communications, etc..) imagine how much access they'd have.

Interesting utility. I can see a few really exciting use cases for this.

If I had one wish it'd be native support for syncing generated snapshots to S3 or Google Storage for easy transfers between authenticated systems and users. Maybe I'll take a look at building out a PR for that over the weekend if that's okay

Why can't we ban ibuprofen?

Nicotine is an extremely complex molecule which has been proven to have positive effects in the treatment of autism, as well as mild cognitive impairment, such as Alzheimer disease. Blanket statements like this are harmful to the general nature of science and show a disregard for empirical evidence.

Nicotine can be utilized for positive measures at therapeutic levels and was in Phase III clinical trials with the FDA for such uses before the backing pharmaceutical firm ran out of money. I recommend you do some research on Nicotine as a compound and interactions with nicotinic receptors in the body, the pharmacology is actually fascinating.

Segment write keys are technically public. Most sites have them published in the client facing JS

Segment actually does a pretty fantastic job onboarding new personnel and funneling them through security training. Recently gave a great talk here at the Bay Area OWASP meetup about how they've gamified security awareness training with an internal leaderboard and random CTF challenges.

Does anyone actually have up to date interest data on FB these days? I can't remember the last time I "liked" an interest or artist page. All of the data in the system now is leftover from when I was like 15 using the platform (24 now and yes, actively dating).

Only thing I actively use FB for these days is messenger and fantasy football shit talking groups, which are all "private".

That was my thought, but I got syntax complaints after my first tech screen with Google. Now Asana is asking me to do the same so I'm hesitant to even move forward.

lol it's literally the initial tech screen for Google

It's not though. They expect shit to run afterwards. As someone who primarily writes Python (whitespace matters) in Vim (it's universal), having to code in Google Docs is a horrifying experience

My biggest issue is hitting spacebar 20 times in a row. I usually work in Python via Vim so Google Docs is a pure shitshow for me.

"Do you want tabs or spaces?"

> "Spaces please"

"Fuck... okay I guess..."

the internet is just falling apart these days

Am I the only one with IAM fatigue at this point, feels like we get a headline like this at a rate of one a week now

reminds me of https://github.com/blog/2019-how-to-undo-almost-anything-wit...

> One of them didn't care at all. They were transmitting usernames and passwords in plaintext and I actually showed one of their engineers this, live, in person, and he just shrugged.

Here, now that I've shown you that, let me show you the MITM I've been running during the conference! So far I've collected NNN credential sets

In the second image here [1] there's a security seal on the payment closure as a whole; I'd imagine a simple security seal along the side of the card scanner intake would thwart most would-be card skimmers, no?

At that point the employees could just make it part of the standard inspection and it'd be more obvious to customers if they were missing.

[1]: https://cdn.sparkfun.com/assets/learn_tutorials/6/9/4/Gas_Pu...

"random people" who with high probability may have undisclosed 0day exploits stockpiled on other devices.... yeah if I'm an APT author DEFCON attendees are (the hardest to exploit and most paranoid [read: likely to get caught by]) the ideal target for any nation-state. not to mention that the conference is often attended by multiple state agencies which makes the target even juicer. yes it's an extremely hard and dangerous group of people to attempt to exploit, but that doesn't detract from the potential value and payoff of a successful APT exploit on said group of people

You're alienating a huge portion of your market by not supporting Emacs and Vim

Yes, you are correct in that an inexperienced Git user can mess up, I won't deny that. My issue here is that Kite requires you to proactively place a .kiteignore, before even whitelisting a directory. It also doesn't alert you that it's about to start indexing the files in the directory tree or that you need to add a .kiteignore to protect sensitive files before you whitelist them. At a minimum they should be respecting the existing .gitignore, and realistically they just be scrubbing all strings before sending any data.

I can 'git add .' and commit my life away, but that requires much more intention and explicitness than clicking enable on a prompt and continuing your standard workflow (ie: a simple 'vi super_seceret_file.py')

Surprised no one has dropped it yet, but I like https://fin.plaid.com/

A lot of cron

No idea if this would work, but could people theoretically just ping flood the IOT devices involved to mitigate the attack?

They run some sort of web server since most devices provide some web interface, so clearly there's a port open which could be hit if the IP is know, and with the shoddy security in these devices I'd wonder if their local (likely low performance) hardware would be susceptible to something as simple as a ping flood attack.

Wake | San Francisco, CA | Full Stack | Full Time (onsite)

https://wake.com/jobs

We're looking for a software engineer who will be an integral part of improving the way companies design, communicate and build products. You will work closely with designers to invent and build new ways for people to share ideas with each other. You will also be responsible for ensuring that the service remains incredibly fast and reliable as we continue to grow.

I'm sure something of the sort is in the works; it's hard to build momentum with a ton of huge legacy systems to bring along.

Wake | Software Engineers | Full Time | San Francisco, CA | https://wake.com

We're looking for a software engineer who will be an integral part of improving the way companies design, communicate and build products. You will work closely with designers to invent and build new ways for people to share ideas with each other. You will also be responsible for ensuring that the service remains incredibly fast and reliable as we continue to grow.

Our Ideal Candidate has:

- Experience building, scaling and maintaining a large scale web service - A love for identifying and fixing problems, including issues with open-source libraries and other technologies we use - The ability to self-manage and prioritize tasks Enough flexibility to work across multiple levels in our stack - An eye for design and respect for great user experiences - *Bonus points for any sysadmin, computer vision, or image processing experience you have

Tech: - Python & Tornado - Angular - PostgreSQL - GCE

Learn more at: https://wake.com/jobs

Wake (https://wake.com/) | Full-Time | Onsite (San Francisco, CA, United States)

Positions: Senior Full Stack Developer, DevOps Engineer

You Will:

- Help change the way the world's most innovative companies share and communicate

- Make sure the service is fast, secure and reliable Conceive, build and support new features

- Design, document and support our API

- Work closely with designers in a transparent and ego-free environment

Why Wake?

Wake is a recently launched product that is already gaining widespread traction in many different industries. We are currently in our Seed round of funding, so it is still very early on. If you want to change how designers, product managers, and engineers collaborate and make that experience drastically better than it currently is, come help us out at Wake!

Apply at: https://wake.com/jobs

And people wonder why there's a 300+ line angular directive maintaining our Credit Card input box...

Your link for backend is for a Senior position, and in regards to your requirements for the Full-Stack position: I hope no one is still "Junior" after 3 years of professional experience...