HN user

bthrn

426 karma
Posts0
Comments94
View on HN
No posts found.

I once watched a Vice President at an all hands explain that the company's decision to have non-competitive wages was because "it's not that we're underpaying, it's that everybody else is overpaying. If you want to go somewhere else to get overpaid, that's not going to last." I think about that every now and again and chuckle.

It's funny how employers try to rationalize this -- take Coinbase, for example: https://www.coinbase.com/blog/how-coinbase-is-embracing-ai-i...

While some worry AI will dehumanize the hiring process, we believe the opposite. Deploying AI will enable more quality interactions, more quickly for the candidates who are the best fit for our jobs– without unnecessary administrative tasks or distractions. We fully believe in AI’s ability to build depth and breadth in our selection process, while acknowledging that the road ahead will have its challenges. Let’s face it: the candidates who want to work at Coinbase are as enthusiastic about AI as we are. They, like us, are optimistic about the future of this (and all) technology.

The goal here is to submit what appears to be a sequence of innocuous changes, none of which on their own are “obvious” vulnerabilities. The truth is, we don’t know what the strategic depths of this actor are. It may be years before we know whether an attack is successful.

For example — and this is just hypothetical - the author may have found that some consumer of this codebase uses it in a script, and consumes console output in some form. By modifying its output to behave differently, they may be able to influence the consumer’s execution in some clever way so as to create other conditions necessary for additional exploitation.

Or - the PR could have just been a test to gauge the scrutiny of the approvers.

It's usually accurate, but I've had planes changed on me a couple times. For example, there could be a delay that results in it being used for a different flight, and you end up with something else. Or if the plane you're supposed to fly has mechanical issues.

" Kagi does not log and associate searches with an account."

Am I supposed to believe that if their backend crashes after a user query, that can’t tell what has been queried?

I'm sure they'll know the query. They just won't know which user made the query.

I have a watch that would be considered expensive by most. It’s not really about telling the time - I simply appreciate the complexity and beauty of handcrafted mechanical watches.

People spend years learning how to build them. It takes a long time to assemble one. They’re precisely made with small parts made of precious metals which are themselves expensive.

With companies like A Lange & Sohne, each watchmaker can only make about 6 watches per year. At a pace like that you’re not really paying for the watch, you’re paying for their labor and expertise. You’re paying to preserve the craft. You can’t make 6 of something in a year and sell it for $100 if it’s how you make a living.

Buy well, buy once 3 years ago

Fwiw I'd (very loosely) classify the points you're bringing under "prestige".

If I'd like my clothes made and sourced ethically, or if I want to support a local business that makes leather goods rather than buying mass-produced ones from somewhere else -- I wouldn't say those scenarios are motivated by prestige, but by valuing people and the work they do. It's a bit unfortunate that some things like that are considered a luxury these days.

Buy well, buy once 3 years ago

It really depends what you mean by “optimal cost” and “better value”. For example, if you want something that’s handcrafted rather than made in a factory on the other side of the world, you have to pay for the skills and labor that go into that. Depending on what it is, it might not last longer - but could be a better value in other respects than simply cost. Not everything has to be about making widgets for the lowest amount of money possible.

The author is French. I'd be curious to see if you could write something in a second language well enough such that the only criticism a native speaker had was your use of a technically valid, but uncommon word.