Hacker News: mozman

New comment by mozman in "Scientific American's departing editor and the politicization of science"

mozman — Wed, 20 Nov 2024 09:34:17 +0000

Divorce lawyers are generally the most profitable. $750/hr if you’re good.

New comment by mozman in "Google reacts angrily to report it will have to sell Chrome"

mozman — Wed, 20 Nov 2024 08:50:09 +0000

I haven’t seen an ad in years through careful ad blocking

Extensions API needs more granular controls and to remain functional

New comment by mozman in "Ask HN: How do you communicate in a remote startup?"

mozman — Wed, 20 Nov 2024 08:42:53 +0000

Slack is meant to be addictive. I only use the web client and modify it with tampermonkey

All notifications disabled and I only read when pinged. davison updates are the only mechanism allowed.

New comment by mozman in "Interview gone wrong"

mozman — Mon, 04 Nov 2024 02:56:15 +0000

In the real world you iterate, profile, and optimize

New comment by mozman in "M4 MacBook Pro"

mozman — Thu, 31 Oct 2024 12:49:39 +0000

It’s a hygroscopic sticker made by 3m.

New comment by mozman in "Cuba's power grid fails, plunging country into darkness"

mozman — Sat, 19 Oct 2024 04:28:27 +0000

Communism will never work due to human ambition. There will be corruption, nobody will ever be equal. I have no opinion on who determines what other than corruption.

Cuba is full of rich and futile soil ripe for crops but the government owns the land and forbids it.

No system with humans will ever be perfect but communism doesn’t seem to be the answer.

Has it ever worked?

New comment by mozman in "Should We Chat, Too? Security Analysis of WeChat's Mmtls Encryption Protocol"

mozman — Thu, 17 Oct 2024 01:02:42 +0000

> nondeterministic IVs

Can you explain what this means?

New comment by mozman in "Two never-before-seen tools, from same group, infect air-gapped devices"

mozman — Sun, 13 Oct 2024 05:29:31 +0000

Someone who gets it. I work in security and everyone hates me because I add friction and cost. On the flip side, I have a lot of PII to protect.

New comment by mozman in "1 bug, $50k in bounties, a Zendesk backdoor"

mozman — Sat, 12 Oct 2024 21:33:29 +0000

Sure, that’s why I am not naming a competitor. Security leadership is the biggest wildcard. I always want to do the right thing. Not everyone does.

New comment by mozman in "1 bug, $50k in bounties, a Zendesk backdoor"

mozman — Sat, 12 Oct 2024 20:32:01 +0000

I use a competitor to HackerOne. I view all submissions pre-triage and would have taken it seriously, even if I made a mistake in program scope. I have paid researchers for bugs out of scope before because they were right.

New comment by mozman in "Cognizant found guilty of discriminating against non-Indian employees"

mozman — Thu, 10 Oct 2024 00:58:53 +0000

I went to interview at a fortune 50 company that is primarily based in India.

It was very clear my communication style and values is drastically different.

It was a good opportunity, but one of the most frustrating encounters I’ve ever had. I’m glad the offer didn’t go anywhere.

New comment by mozman in "Dito – an advanced Layer 7 reverse proxy server written in Go"

mozman — Wed, 09 Oct 2024 23:31:39 +0000

think about two product people with opposing goals. that’s how you get a mess. nothing technical

New comment by mozman in "Who died and left the US $7B?"

mozman — Wed, 09 Oct 2024 01:31:54 +0000

No thanks, I’d rather keep more of my paycheck.

New comment by mozman in "AIHawk: AI bot to automatically apply for jobs"

mozman — Sun, 06 Oct 2024 21:21:14 +0000

I’m a hiring manager and I don’t care about cover letters. It really comes down to luck. I’ll have HR/recruiter spend %15 of their time to funnel applicants in competition with other hiring managers.

I try to sit down with recruiting and review linkedin and give examples of who I’m looking for.

We don’t use tooling to filter applicants. Maybe we are behind.

New comment by mozman in "Gorhill pulls uBlock Origin Lite from Firefox store"

mozman — Wed, 02 Oct 2024 10:39:22 +0000

It could be $0, volunteer labor. I doubt it’s a paid position.

New comment by mozman in "COBOL has been “dead” for so long, my grandpa wrote about it"

mozman — Wed, 02 Oct 2024 03:29:01 +0000

As a fellow vendor for one of those names you dropped - I recommend you not to name any companies.

New comment by mozman in "COBOL has been “dead” for so long, my grandpa wrote about it"

mozman — Wed, 02 Oct 2024 03:22:28 +0000

Apple is BSD based - not Linux.

New comment by mozman in "SolarWinds security chief calls for tighter cyber laws"

mozman — Tue, 01 Oct 2024 01:29:40 +0000

I’m in the same position as this guy, at least in title not legacy. I work my ass off to do everything I can as safely as possible. If you have perfect security you have a budget problem. Nobody wants to make these mistakes, you just need to negotiate with product for resourcing and the ICs with manager buy in on process changes. Sometimes you can’t get that culture. I document every suggestion the business says no to and get a risk exception. Budget is a thing.

It’s not like we don’t care. A lot do. I am responsible. I bet my future on it.

The inability of the company to have good cyber is that they have product profit problems. Especially in public companies. Someone should come in to get more income from the business and then they can afford to do the right thing.

New comment by mozman in "Legalizing sports gambling was a mistake"

mozman — Fri, 27 Sep 2024 18:09:12 +0000

I believe it’s drinking age and breath limit thresholds thanks to MADD.

New comment by mozman in "Hacking Kia: Remotely controlling cars with just a license plate"

mozman — Thu, 26 Sep 2024 23:02:43 +0000

you can just reprogram a new seed via canbus, don’t need to brute force it