bobmagoo

Fun tool! I'd love for the "Edit List" menu to allow me to add company holidays to factor those into the maximization

Source?

I was actually looking at building a script like this. Have you found anything that does it already? If not, I was just going to make a small python script with readonly access to my Youtube account that pulls down my Watch Later video IDs and feeds them to youtube-dl on my NAS. Sounds like a fun Christmas vacation project.

Direct link: https://enterprise.verizon.com/resources/reports/2019-data-b...

This was great, thanks for sharing. I'm currently pointing my career towards principal (security) engineer and would love any similar articles on what it's like and what makes a good one if anyone had recommendations.

It's a great time to be in security, definitely a job seeker's market. I've been in security for ~8 years now and don't have any certs and don't see a whole lot of value in them unless your employer/clients require them (some consultant or government shops do). I place a much higher value on knowing your stuff and being able to earn the respect of other engineering teams when helping them understand more secure ways to build what they're trying to build.

Some of the best security engineers I've known came from a network engineer or sysadmin background. So don't worry if you don't have a "masters in security". I'd spend some time thinking about the last large system you built. How would someone attack it? How would you detect those attacks? What would you do if they were successful? How could you have architected around those weaknesses? If doing that seems like fun, my team is hiring in Seattle, feel free to drop us a message at prodsec-recruiting@tableau.com

Tableau Software | Security Engineer | Seattle, WA | ONSITE

Tableau's Product Security team is scaling up! We're looking for two operationally-focused security engineers. If you're specifically interested in security work, please shoot me a message.

* Security Engineer - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...

Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!

#Note#: Please only contact me if you're an individual (no recruiters/staff aug companies) that wants to do security engineering full time at Tableau. One of us will be at DerbyCon if you want to catch up as well.

If you want to apply, please base64 decode our poor man's HN spam filter "cHJvZHNlYy1yZWNydWl0aW5nQHRhYmxlYXUuY29t" and email us your resume. Cheers!

Tableau Software | Security Engineer | Seattle, WA | ONSITE

Tableau's Product Security team is scaling up! We're looking for two operationally-focused security engineers. If you're specifically interested in security work, please shoot me a message.

* Security Engineer - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...

Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!

#Note#: Please only contact me if you're an individual (no recruiters/staff aug companies) that wants to do security engineering full time at Tableau. One of us will be at DerbyCon if you want to catch up as well.

If you want to apply, please email us at prodsec-recruiting@tableau.com so we can put you into the system. Cheers!

Tableau Software | Security Engineer | Seattle, WA or Kirkland, WA| ONSITE Tableau's Product Security team is scaling up! We're looking for an operationally-focused security engineer, an application security engineer, and a Senior SDE. If you're specifically interested in security work, please shoot me a message.

* Security Engineer - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...

* Senior Application Security Engineer - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...

* Senior Software Security Engineer, Security Features Team - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...

Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!

#Note#: Please only contact me if you're an individual (no recruiters/staff aug companies) that wants to do security engineering full time at Tableau.

If you want to apply, please email me at behle@tableau.com so I can put you into the system. Cheers!

Tableau Software | Security Engineer | Seattle, WA | ONSITE

Tableau's Product Security team is scaling up! We're looking for an operationally-focused security engineer. If you're specifically interested in security work, please shoot me a message.

* Security Engineer - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...

Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!

Note: Please only contact me if you're an individual (no recruiters/staff aug companies) that wants to do production systems security engineering.

If you want to apply, please email me at behle@tableau.com so I can put you into the system. Cheers!

That's really interesting data! I threw up a quick viz of the data: https://public.tableau.com/profile/braxtone7168#!/vizhome/Ea...

Bah, the security engineer link got mangled. Here's the updated link: https://tableau.rolepoint.com/?shorturl=2LQ0e#job/ahBzfnJvbG...

Tableau Software | Product Security Engineers | Seattle, WA | ONSITE Tableau's Product Security team is scaling up! We're looking for two application security engineers, and a more operationally-focused security engineer. If you're specifically interested in security work, please shoot me a message.

* Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...

* Senior Application Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...

* Application Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...

Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!

If you want to apply, please email me at behle@tableau.com so I can put you into the system. Cheers!

Tableau Software | Product Security Manager and Engineers | Seattle, WA | ONSITE

Tableau's Product Security team is scaling up! We're looking for a manager, two application security engineers, and a more operationally-focused security engineer.

* Engineering Manager - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...

* Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...

* Senior Application Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...

* Application Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...

Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!

If you want to apply, please email me at behle@tableau.com so I can put you into the system. Cheers!

Tableau Software | Senior Product Manager - Security | Seattle, WA | ONSITE

I'm a little late to the party, but posting this here in case other folks are looking.

What you will be doing: You will be leading the effort to coordinate and prioritize security work across Tableau products. You will drive efforts to implement secure development practices and security enhancements throughout Tableau products and services. You will be a security advocate and will guide development teams through the process of working with the Product Security team to identify and prioritize security risks. You are experienced in making tradeoffs and evangelizing for the best path forward, balancing security fixes with other priorities.

Even though you will be working around security-related enhancements, technologies, and processes; a prior background in security is not required as long as you are a voracious learner, good at listening, and able to help guide discussions to reach a decision. ___ About Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world! ___

The full position is up on https://tableaurefer.rolepoint.com/?shorturl=beXWc#job/ahBzf... If you want to apply, please email me at behle@tableau.com so I can put you into the system. Cheers!

Tableau | Seattle, WA | Information Security Engineer | Full-Time ONSITE - Occasional remote work fine

About the company: We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!

About the position: The security team is chartered with managing and enhancing the company’s Information Security program. This role will be responsible for operational aspects of security at Tableau including system hardening, incident response, consulting with projects to identify risks, and expanding our awareness program. This role will be an integral part of the Tableau security team and the successful candidate must have a strong background in a broad range of information security areas.

Applying: Apply directly here: http://rolp.co/MttHc If you want more information about the position, email me at behle@tableau.com

Not sure what the long term play for Amazon is with a WebEx competitor, something likely to do with getting enterprise business, hope it works out.

In case you hadn't seen it, this is basically the anti-marketing video for how conference calls actually work: https://www.youtube.com/watch?v=DYu_bGbZiiQ

Just waiting for the hilarious/terrible moment when someone hooks this up to a script scanning the internet for weak SSH passwords and singlehandedly skyrockets the install base for Arch.

Ugh, not these guys. Hopefully the WSJ article had a better source. ThreatConnect will take any random connection and a big brand name / country and crap out a report.

I think there's a whole industry being ignored here - "Are you sure you want to post this to Facebook? Your typing is all over the place." or "Maybe we'll just delay sending that text message for a few hours to make sure future you really thinks it's a good idea."

Tableau Software | Seattle, WA | ONSITE

Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Tens of thousands of companies and organizations have chosen Tableau. From the executive suites of Fortune 500 companies to the jungles of Central America, from immunology research labs to high school robotics club meetings, our software can be found anywhere people have data and questions. Check out all of our products at: www.tableau.com/product-tour.

Highlighted positions (full list at https://careers.tableau.com/):

* Information Security Analyst - https://bitly.com/1cXgwem Looking for a seasoned security incident handler who can help build out our internal and external IR processes, as well as help teams architect systems in a secure way. * Systems Engineer - http://bit.ly/1Ks7xPF

Apply by PM'ing me on Reddit (same username) or by clicking the apply button on the post. Feel free to reply with any questions. Cheers!

Yeah it is, Robert Graham gave a great talk about it over at https://www.youtube.com/watch?v=D09jdbS6oSI with a writeup at http://c10m.robertgraham.com/2013/02/c10m-in-1990s.html

Yeah, you'd have to, but gMail/gDocs is pretty prevalent. I know a bunch of schools already use it for their email/office suite so it wouldn't be too hard to make that requirement. I really like it because it's grabbing metadata out of something people already use rather than having them use some horrible web app from the 90's that was contracted out by a now defunct company.

That would make for a hell of an anti-plagiarism tool. If you were a teacher and took 30 essays written in gDocs, threw them into the change timeline that he built, the copy/pasted ones would hugely stick out. It would even catch the folks that put a paid/plagiarized essay up on one screen and type it out again given all the natural backspacing and editing.

Man powerpoint presentations after the fact are all but useless for conveying the original point.

Being a parent I have tons of empathy for how hard life is for single parents.

That said, I really lost a lot of sympathy for the woman in the garage though, kids are hugely expensive (about a quarter million dollars to raise them to 18) and I just can't understand how she thought having a second kid would improve her situation. Obviously it could have been an accident or similar, but damn, maybe now isn't the right time for a second kid!

I'm probably just a first world asshole with no sense of what it must be like in her position.

That's exactly what my previous company tried to do with their development team.

It caused the dev team to implode (everybody but one person on the 8-man team left within a year). The systems' stability and overall architecture was utterly terrible, servers would fall over because they would log so many things that they'd run out of disk space ("what's logrotate?" "What's a slave database?"), no metrics, no definition of success for a service, etc.

I suppose you could pull this "DevOps" thing off if you really wanted to, but you have to hire folks who can program and actually like sysadmin work. Otherwise you end up hiring developers to do everything, who are terrible at sysadmin work, and who get burnt out because they never get to actually program.

Ha, that sounds about right. I've answered pages from the backseat of my car at a rest stop in the middle of nowhere while my infant looked over my shoulder. Makes for good stories at least.

I maintain that the pages answered from team happy hours are the most dangerous.

Good timing, I just left a company after being on their security incident response oncall rotation for 2 years, partly due to the oncall. akg_67 has some great points (https://news.ycombinator.com/item?id=9011293), but I'll add a few of my own:

1) When you're oncall, your time and priorities are no longer your own.

At your kid's soccer game? A date night? Planning on doing any of those things? Be prepared to get pulled out at any moment to deal with something that could take hours to resolve. This was the part that really got to me. As much as I'd like to do any one of those example things, I had made a prior commitment to be available and had to honor that.

2) Know the response time and physical location requirements for responding to a page

Is this something you can just fire up your laptop and an aircard and jam on, or do you have to be able to drive to the office within an hour. Don't forget about driving through places with less than great cell phone coverage.

3) It can be fun

There was a part of me that really liked the adrenaline rush of getting paged in on a legitimate security issue and having to run the call and pull the right people in to get the situation handled. It's a great test of how well you know the environment and where all the pertinent information lives.

4) Know the team size and oncall frequency akg_67's estimate was spot on. Anything shorter than a month is crazy and you never quite feel like you normalize. Since it's based on team size, know what the optimal size of the team is and that there's funding for it? My team imploded and at the end there were only a few of us on the oncall rotation. Bear in mind that oncall duty doesn't go away because you no longer have the staff to make it manageable.

5) Vacations and sick time are now more complicated

Who has to be oncall during Christmas/4th of July/etc? What used to be some loose coordination with your manager is now a give/take discussion with your team about who covered the last holiday and who's turn it is. It's all completely fair and reasonable and if you have a good team dynamic you can make it work, but it's definitely more complicated than telling Aunt Edna that of course you'll be home for Christmas.

6) Get paid for it

Whether in flexing the hours for the time spend working a page off hours or by getting paid directly for off hours work. No reason to kill yourself for no additional compensation (and there will be those hellish pages or that automated alarm that goes off hourly starting at 3am).

7) Put the operational burden for supporting a thing in the hands of the people who have the ability to fix it

There should be a cycle of: Get paged Root cause Fix Post mortem Deploy fix so that thing never happens again

If you don't have ownership over the thing that's paging you, you're at risk of getting paged all night every night for something you have to go convince other people to take time out of their schedules to fix to solve a problem that they don't feel. Not a great situation.

I had that thought as well. From poking around various IP law sites, DMCA is purely for copyright infringement, and can possibly open you up to more liability if you try to use it for trademark claims (what this would be), see http://www.lexology.com/library/detail.aspx?g=13f9814f-b56e-... for an example.

If Comcast wanted to take this down, it would be through a trademark infringement claim.

(IANAL, etc, etc)