Hacker News Reader

cxmccon U.S. economy lost 23,000 jobs in July, a sudden reversal

Bad news is good news, leading to possibly fewer rate hikes

cxmccon Statement on US government directive to suspend access to Fable 5 and Mythos 5

Too bad, I have to go back to using Opus for centering my divs.

cxmccon Ask HN: Should we bring software dev in-house?

I'm working on digital transformation for a traditional company. Challenges are from both culture (80%) and technology (20%, EDIFACT/COBOL is ok, not the worst part for us). Traditional companies can retain talent -- they definitely can compete with big tech if they want to. Especially in current tech talent market, you still have a good window to hire enough talents. A few key questions that you need to answer: - Can you get support from the top (board/CEO) to modernize HR to create competitive comp structure? - Can you identify real engineering leaders that can commit to the job? -- You can't just hire non-hands-on random middle managers. Good engineers don't want to work for politicians. - Do you have political stability to invest in the transformation long-term (3yr+ or more if you are more massive)?

cxmccon Devin: AI Software Engineer

time to start writing some cryptic code that AI won't be able to understand

cxmccon The Case for a BFF

presents several valid arguments in favor of integrating a Backend for Frontend (BFF)

cxmccon Car rental throwing away money?

You can't believe how bad car rental companies what to reduce reliance on counter. It's real. We want that to happen. But it gonna take some time. Upsell is just one of the reasons, but there's also fraud, car availability, etc. What holding the industry back isn't the profits, it's bad technology. No one is lying, it's just horrible execution.

cxmccon Car rental throwing away money?

Yeah it's basically a profile for you to log in and provide payment info etc. Just like your Uber login it's free. Maybe we can make it clearer.

cxmccon Car rental throwing away money?

Thanks for the comment.

You can use Hertz today without going to the counter. Just sign up "Gold membership". Maybe the first time you go you need to verify your ID and credit card but after that you can skip counter. We are working on making it even more applicable to other customers too. Is this the condition for you to go with "Hertz exclusively"?

I sensed that you may not be very familiar that this is possible today. It's probably also something we can improve.

cxmccon Car rental throwing away money?

Hybrid in Seattle WA and SF, CA.

cxmccon Car rental throwing away money?

We are building product and engineering capability in SF bay area, CA and Seattle, WA. Hertz is a US company with global footprint. The business has tremendous potential to be unlocked with modern software.

cxmccon Car rental throwing away money?

hertz employee here. we are working on improving car rental experience with modern product and engineering practice. if you are interested in working on such problem dm me.

cxmccon Understanding Passkeys

you can choose to use something you know with passkeys if preventing legal snooping is your priority.

cxmccon Understanding Passkeys

passkeys are often 2 factors but not necessarily something you know, examples:

- with macbook fingerprint sensor: something you have (private key on your device) and something you are (fingerprint)

- with yubikey without fingerprint: something you know (passcode, hopefully required) and something you have (private key on yubikey)

- with yubikey with fingerprint sensor: something you are (fingerprint, falling back to passcode which is something you know) and something you have (private key on yubikey)

cxmccon Understanding Passkeys

The article said Apple/Google tries to become the guardians of private key. That isn't true according to my understanding. Private key can stay on private devices owned by the user and never leaves the devices.

cxmccon Comparing measures against credential stuffing attacks

sharing my experience and opinions on cred stuffing prevention.

cxmccon Ask HN: Who is hiring? (February 2023)

Hertz | Software Engineer | Full-Time | Seattle, San Francisco, Los Angeles, Dublin(Ireland) | VISA

Hertz is a leading car-rental business. Hertz is working on a major technology culture shift. We are hiring senior/staff/principal software engineers in various locations.

Open roles:

- Engineering Manager

- Software Engineer, Backend (Junior/Senior/Staff/TLMs)

- Software Engineer, Cloud Infra

- Site Reliability Engineer

- Data Scientist

- Data Analyst

Stack: Java/Kotlin/AWS/Various other technologies

Notable Projects:

- Partnership integrations

- Ridesharing (Uber/Lyft) integrations

- System re-architecture

- Pricing systems

Somewhat remote at the moment but will require onsite visits. Hopefully Hybrid in some locations. Some travel may be required.

Email resume/location (we-dont-hire-remote) to: xiuming.chen@hertz.com

cxmccon Avoid the Term Microservice

sharing my view on the term microservice

cxmccon The high cost of surviving rabies

You could take a non-stop flight to China and get a treatment ($50-$300). It will end up so much cheaper.

cxmccon Ask HN: Who is hiring? (August 2021)

Lime is the global leader of micro-mobility. We are hiring multiple engineering roles to revolutionize transportation.

Positions:

* Application Security Engineer

* Software Engineer (Mobile, Backend, Infrastructure)

* Security Program Manager

Please apply directly at https://jobs.lever.co/lime

Question please email x@li.me

cxmccon Ask HN: Any tips for a programmer wanting to switch into security?

Security matters much more for companies in a few business domains: fintech, medical, crypto currency, and cyber security companies. Choose the right domain if you really want to learn stuff.

cxmccon Ask HN: Who is hiring? (January 2021)

https://li.me Lime is the global micro-mobility leader.

Our stack: https://stackshare.io/lime/lime

Hiring

- Infrastructure

- Security

- Android/iOS

- Data Engineering

- Backend/ FullStack

More info: https://jobs.lever.co/lime

cxmccon Ask HN: Who is hiring? (December 2020)

Hiring

- Infrastructure

- Security

- Android/iOS

- Data Engineering

- Backend/ FullStack

More info: https://jobs.lever.co/lime

cxmccon Ask HN: Who is hiring? (November 2020)

Our stack: https://stackshare.io/lime/lime

Hiring

- Infrastructure

- Security

- Android/iOS

- Data Engineering

- Backend/ FullStack

More info: https://jobs.lever.co/lime

cxmccon Chowbus Data Breach of User and Restaurant datasets

i dont think the users would like it to be shared again. if you are interested in checking if your account is affected, go to https://haveibeenpwned.com/

cxmccon Chowbus Data Breach of User and Restaurant datasets

Hacker sent entire restaurant dataset and user dataset to (seemingly) all users's emails in an email titled “Chowbus Data”. I don't want to share user dataset link here.

The 800k-row User Dataset has first and last names, phone number, email addresses and mailing addresses. Email is sent with Chowbus’s sendgrid account.

cxmccon Ask HN: Who is hiring? (October 2020)

Lime is the global micro-mobility leader.

Our stack: https://stackshare.io/lime/lime

Hiring

- Infrastructure (DevOps/SRE)

- Security

- Android/iOS

- Data

- Backend

More info: https://jobs.lever.co/limebike

cxmccon Launch HN: Cotter (YC W20) – Secure One-Click Phone Number Login

congrats on the launch.

it would be interesting to see how far this will go. similar solutions: fast.co, firebase auth, auth0...

larger companies are still building their own, taking 1month-> ~6months depending on how sophisticated and secure you want the solution to be.

cxmccon Dynamic Route53 records for AWS auto scaling groups with Terraform

yup. but that's usually negligible to most companies. and it's probably not worth the extra complexity introduced by production hacks.

cxmccon Dynamic Route53 records for AWS auto scaling groups with Terraform

what you need is probably something like https://github.com/adhocteam/ec2ssh (I never used it, but I have built similar ones) -- and then you tag the log entries with instance id.

so you can do "ec2ssh i-0017c8b3"

imho: Hacking around debugging tools is better (mostly because more reliable) than hacking around production configurations (one problem you will see is that changing route53 records frequently will be subject to API rate-limits).

cxmccon Dynamic Route53 records for AWS auto scaling groups with Terraform

You can attach an ELB to the ASG. Then DNS name to ELB. That's how AWS expects you to use it.