I was just thinking back the other day about BBS days and how frustrating a busy signal could be, or connection time limits, etc.

not a solution to the problem as you presented it... but a solution none the less: You'll spend your time learning more, developing more skills, more opportunities for internships, networking, growth, etc. and hopefully when your done in a year or two the job market is better and you're entering at a high compensation level.

are they actually pursuing use of "Deepkit" or possibly did you just piss them off? Either way, I wouldn't expect to win anything going up these majors. Also, isn't clear there's any tangible benefit even if you were to win appeal.

I sincerely hope that's a honeypot

Comments URL: https://news.ycombinator.com/item?id=37919396

Points: 90

# Comments: 33

After going around and replying "no" to a half dozen or so different individuals with increasingly philosophical responses he broke it down for us with, "you're all here because 60k! You're going to graduate with a computer science degree and make 60k a year!"

to even imagine that was supposed to be an inspiring number back then is pretty laughable. I was already making as much doing chinsy web dev stuff.

It was a different time for sure. There were no (or very few) laptops, you took notes on paper, you went to the computer labs to do work (with old sparcstations and such) or you remoted in to your shell and used emacs and gdb. Pretty simple times.

Anyhow, I happened to interview with these folks a year or two ago:

   20% interesting concept 
   80% red flags

I filed a claim against previous employer (several years back before everybody was on the unlimited bandwagon) with an 'unlimited' PTO and ended up with ~20k awarded. Process took forever, and of course the devil is in the details with employment docs, agreements, etc... but worth pursuing if you're still salty over the situation.

Prior to that I found myself in a similar situation... basically getting the boot for availing myself of sick leave when my family needed me. Fortunately, I got a big chunk of cash upon leaving and it gave me a much needed boost for moving on. So best advice I can give is to not let the situation keep you down or hold you back. And in general, a good reminder: HR has one job and its not to protect you the employee.

Variety of roles open at ON24 as we continue to scale up post-IPO: http://jobs.jobvite.com/on24/jobs

Security Engineer-- https://jobs.jobvite.com/on24/job/o3uYffwu

Compliance Analyst-- https://jobs.jobvite.com/on24/job/o5uYffww

Linux/Ansible System Administrator-- https://jobs.jobvite.com/on24/job/oHsCffwK

Network Engineer-- https://jobs.jobvite.com/on24/job/oT4ydfws

Sr. Director Program Management-- https://jobs.jobvite.com/on24/job/oDoAgfwB

SRE Manager-- https://jobs.jobvite.com/on24/job/obsAgfwd

Variety of roles open at ON24 as we continue to scale up post IPO: http://jobs.jobvite.com/on24/jobs

Also hiring Security Engineer and Compliance Specialist role which aren't posted yet but em me @ matt dot bateman at on24 dot com and I'll send specifics.

Senior Product Manager - http://jobs.jobvite.com/on24/job/oygCffwp

Senior QA Engineer - http://jobs.jobvite.com/on24/job/o9vJefwl

Software Engineer (Analytics) - http://jobs.jobvite.com/on24/job/omBuefwp

Sr. Cloud Engineer - http://jobs.jobvite.com/on24/job/obSwefwx

UX Designer - http://jobs.jobvite.com/on24/job/oQb3dfw1

Linux/Ansible System Administrator - http://jobs.jobvite.com/on24/job/oHsCffwK

Network Engineer - http://jobs.jobvite.com/on24/job/oT4ydfws

i.e. this is fine for a one shot review, but would be tough to operationalize...

Plus, keep in mind diagrams can be critical. If you're going to be sharing sensitive data with this vendor you're going to need to know and have documented how that data will flow, where it will persist, etc. Can be a lot easier to capture in a diagram than narrative format.

There is variety of other FOSS type stuff out there that is useful for anyone that needs more:

Vendor Security Alliance -- https://www.vendorsecurityalliance.org/downloadQuestionaire (disclaimer: I'm an advisor @VSA)

CSA CAIQ -- https://cloudsecurityalliance.org/artifacts/consensus-assess...

SIG --NM, looks like this is closed/member only now, but if you can track it down (SIG Lite/Full, Standard Information Gathering) its ridiculously comprehensive.

Google VSAQ -- https://github.com/google/vsaq

As someone who deals with both sides (asking the questions to vendors, and answering them for prospect customers) I can say they mostly all suck pretty hard... and that's probably why there's a whole ecosystem of vendors in this space nowadays.