HNHacker News
TopNewBestAskShowJobs

bsuvc

2,293 karma · joined September 26, 2021

submissionscomments
bsuvc··on '123456' password exposed chats for 64M McDonald's job applicants
It sounds like there were two separate problems:

The first was that 123456 was the credentials for the admin panel.

The second was an insecure direct object reference, where the lead_id querystring parameter can be changed on an API call to retrieve another applicant's data.

bsuvc··on Why I stopped angel investing after 15 years (and what I'm doing instead)
I wasn't trying to be hyperbolic actually. I really would be happy if an exit would happen in 10 years.

Thankfully, I can be patient, but I wonder sometimes if some of these companies will ever exit.

bsuvc··on Why I stopped angel investing after 15 years (and what I'm doing instead)
6 years?

As an LP, I would be excited for liquidity in 10 years at this point.

It seems like even for successful companies, there isn't a clear path to an exit for many of them. Add to that the increase in late-stage investors, and there isn't much of an incentive to exit.

bsuvc··on First baby born in UK to woman with transplanted womb
> it will no longer be possible to say that the ability to give birth is a condition for being a woman

This "gotcha game" has become so tiresome.

bsuvc··on The Last Stand of the Corporate Peacock
> or stuff I need long periods of time without interruption.

This is every day for a developer though.

bsuvc··on Ask HN: Any jobs that don't force you to always be advancing career wise?
Many smaller companies are what you describe.

The pay will probably be less, but it is a trade-off.

bsuvc··on Breaking Up with Long Tasks or: how I learned to group loops and wield the yield
I stand corrected.

It looks like web workers is the way for JavaScript to do multi-threading.

Async has always been enough for what I need to do in the front end, as most of my long running processes are just calling a back end.

Edit to add: for context, I am a full stack developer and know what threads are... I just never have needed them in the browser.

bsuvc··on Breaking Up with Long Tasks or: how I learned to group loops and wield the yield
> many webdevs just have no clue what a thread is, because generally, they don't need it, so it isn't taught

JavaScript doesn't have threads.

bsuvc··on After 30 years, FDA overhauls guideline for the claim "healthy" on food packages
Do you mean corn?

Most American food has High Fructose Corn Syrup instead of Sugar.

bsuvc··on Ask HN: What's Your Morning Routine?
> During this time I hopefully remember to take my medication.

I have a recurring reminder on my phone and find that it helps keep me on track for this.

I'm not used to taking medicine and only started a couple months ago, so found that I can easily forget without it.

bsuvc··on Always go to the funeral (2005)
It's not about you.
bsuvc··on Ever wished you could time-travel just to say 'I told u so'?
Exactly. It's a classic magician's trick (and featured in a Columbo episode!)

Maybe if there is a way to see all predictions made by someone, it would be more compelling.

bsuvc··on Show HN: A Marble Madness-inspired WebGL game we built for Netlify
Very fun. I played all the levels. Thanks for sharing.
bsuvc··on Ask HN: How do you communicate in a remote startup?
100% agree.

The people making the decision to switch to Teams don't "get" slack.

They think the features are the same, so what's the problem?

Ironically, Microsoft Teams is terrible for teams.

It's a Frankenstein cross between instant messanger and SharePoint.

bsuvc··on The tragedy of running an old Node project
I think you're missing the point.

CI solves it because it proves that it can build in the pipeline, using a well defined environment.

No guessing at which node version you need or any other dependencies that may be required.

bsuvc··on The tragedy of running an old Node project
Having CI would have avoided this problem.
bsuvc··on Notepad++ is 21 years old
It doesn't matter. It was enough for me.
bsuvc··on Notepad++ is 21 years old
I haven't used Notepad++ since they were exposed for having a CIA backdoor, which they "fixed" after it came to light.

https://notepad-plus-plus.org/news/v733-fix-cia-hacking-npp-...

bsuvc··on Steve Ballmer was an underrated CEO
That's just why he hated it.
bsuvc··on 1 bug, $50k in bounties, a Zendesk backdoor
Another example of how weasley Zendesk can be:

They created a fake band called "Zendesk Alternative" just in an attempt to pollute the Google results if you search for an alternative to Zendesk.

http://zendeskalternative.com/

While not illegal, it shows the way they think, a sort of manipulative pettiness.

bsuvc··on 1 bug, $50k in bounties, a Zendesk backdoor
It sounds like the author got stiffed by Zendesk on this bug, $0 due to email spoofing being out of scope.

The $50k was from other bug bounties he was awarded on hackerone.

It's too bad Zendesk basically said "thanks" but then refused to pay anything. That's a good way to get people not to bother with your big bounty program. It is often better to build goodwill than to be a stickler for rules and technicalities.

Side note: I'm not too surprised, as I had one of the worst experiences ever interviewing with Zendesk a few years back. I have never come away from an interview hating a company, except for Zendesk.

bsuvc··on Is "Rich Dad Poor Dad" a Fraud?
I haven't read the book, but does it really say this?

> He also tells of how he can back out of contracts by inserting a clause “subject to the approval of my partner”, where said partner was actually his cat. That is called “fraud”.

How can you take anyone seriously who does a thing like this?

bsuvc··on Are we living in the age of info-determinism?
> I realized that I couldn’t restrict my search for evidence to the familiar authoritative sources without ignoring a near-infinite number of new sources

This happens because the so-called "authoritative sources" have lost their trustworthiness, creating a vacuum that is filled by new sources, some good and some bad.

The problem is, people are bad at thinking for themselves, and basically outsource their beliefs to third parties. Are we worse at this than we used to be, or has it always been like this?

We need more primary sources of information, and less filters trying to persuade us, who often have unseen agendas and different motivations.

bsuvc··on Windows 11 is now enabling OneDrive folder backup without asking permission
If open source is not a requirement, Jetbrains IDEs are very good.
bsuvc··on Windows 11 is now enabling OneDrive folder backup without asking permission
It's not a fork, but there is VSCodium

https://github.com/VSCodium/vscodium

bsuvc··on Windows 11 is now enabling OneDrive folder backup without asking permission
WSL seems like a variation of the Embrace, Extend, Extinguish tactic Microsoft has used in the past. https://en.m.wikipedia.org/wiki/Embrace,_extend,_and_extingu...
bsuvc··on Ask HN: My manager is bad. Should I care?
> Don't do this. This pattern is easy to spot and you instantly lose all credibility.

The difference is, I don't go around telling you what to do. Be a nice guy if you want.

I simply stated my way of thinking, but it angers the "nice guys" and I get attacked for it.

Oh, and you're not the gatekeeper of credibility, nor do I care how "credible" my opinion is to you (what does that even mean?). Credibility of opinions is just more "nice guy speak".

bsuvc··on Ask HN: My manager is bad. Should I care?
Typical nice guy response.

I never said any of those things, that it was better to be a jerk or toxic, but you assume that I did.

bsuvc··on Ask HN: My manager is bad. Should I care?
Ah yes, someone else who has read it.

You're right, it is more in the context of romantic relationships, but I have since noticed nice guys can be a problem everywhere.

I certainly had some "nice guy" tendencies in the past, and maybe still do sometimes, bit I try to be aware and strive to be more direct in my words and behavior.

It's been a few years since I read it... I may read it again actually.

bsuvc··on Ask HN: My manager is bad. Should I care?
> nice

I'm reminded of a book I read once called "No More Mr Nice Guy" where it explains that "nice guys" are actually kind of jerks because they behave certain ways to try to manipulate people and they expect reciprocation.

They live by a sort of unspoken code that they believe exists but which other people may or may not be aware of.

When a "nice guy" doesn't get his way, he can become bitter and resentful.

(I am using the term "guy" to fit the name, but it could be a woman too)

I'm not sure if you intended to describe your manager as "nice" in this way, but niceness has become a huge red flag to me ever since reading that book. I much prefer someone who is good (in competence and/or in behavior) than someone who is nice.

← PreviousPage 2 of 11Next →