mdb333

I could never quite get too into the game because of such viciousness -- you really had to grind!

Hackaday is still pretty cool if you're into technogadgets and the like

so true, re: patience

I was just thinking back the other day about BBS days and how frustrating a busy signal could be, or connection time limits, etc.

is grad school an option?

not a solution to the problem as you presented it... but a solution none the less: You'll spend your time learning more, developing more skills, more opportunities for internships, networking, growth, etc. and hopefully when your done in a year or two the job market is better and you're entering at a high compensation level.

yes!!!

Looks like you submitted opposition to their new registration (Deepki) and then they retaliated by applying for cancellation to your existing mark (Deepkit)?

are they actually pursuing use of "Deepkit" or possibly did you just piss them off? Either way, I wouldn't expect to win anything going up these majors. Also, isn't clear there's any tangible benefit even if you were to win appeal.

surprised no mention of Craigslist? or is it not an "Internet artifact" because it remains in essentially its original form...?

"Alarmingly, a Department of Energy server allowed anonymous login with write access, raising the risk of hackers uploading malicious code or installing backdoors for persistent network access."

I sincerely hope that's a honeypot

I found it really hard to read this as I kept envisioning Alex P. Keaton interrupting, "but Mallory..." and then taking over the whole conversation after she stormed off upstairs.

sorta related: I remember first day of CS101 class circa 1998... professor starts off with question, "why are you here? why are you all here?"

After going around and replying "no" to a half dozen or so different individuals with increasingly philosophical responses he broke it down for us with, "you're all here because 60k! You're going to graduate with a computer science degree and make 60k a year!"

to even imagine that was supposed to be an inspiring number back then is pretty laughable. I was already making as much doing chinsy web dev stuff.

It was a different time for sure. There were no (or very few) laptops, you took notes on paper, you went to the computer labs to do work (with old sparcstations and such) or you remoted in to your shell and used emacs and gdb. Pretty simple times.

huh... never knew they were the same shop responsible for Lemmings. what an awesome bunch!

Basically the same article that ran ~6 months back...

Anyhow, I happened to interview with these folks a year or two ago:

   20% interesting concept 
   80% red flags

Unlimited PTO is fundamentally use it or lose it... which is illegal (at least here in Cali). I don't know why the Division of Labor hasn't come out and said as much yet.

I filed a claim against previous employer (several years back before everybody was on the unlimited bandwagon) with an 'unlimited' PTO and ended up with ~20k awarded. Process took forever, and of course the devil is in the details with employment docs, agreements, etc... but worth pursuing if you're still salty over the situation.

Prior to that I found myself in a similar situation... basically getting the boot for availing myself of sick leave when my family needed me. Fortunately, I got a big chunk of cash upon leaving and it gave me a much needed boost for moving on. So best advice I can give is to not let the situation keep you down or hold you back. And in general, a good reminder: HR has one job and its not to protect you the employee.

NM... presume it's due to the news re: ExpressVPN --> Kape

Curious what was the impetus for this statement? Rumors about selling out or something else?

ON24 (NYSE: ONTF) | Engineering, Operations, and Security roles | SF/Charlotte/Remote | Full-time

Variety of roles open at ON24 as we continue to scale up post-IPO: http://jobs.jobvite.com/on24/jobs

Security Engineer-- https://jobs.jobvite.com/on24/job/o3uYffwu

Compliance Analyst-- https://jobs.jobvite.com/on24/job/o5uYffww

Linux/Ansible System Administrator-- https://jobs.jobvite.com/on24/job/oHsCffwK

Network Engineer-- https://jobs.jobvite.com/on24/job/oT4ydfws

Sr. Director Program Management-- https://jobs.jobvite.com/on24/job/oDoAgfwB

SRE Manager-- https://jobs.jobvite.com/on24/job/obsAgfwd

ON24 (NYSE: ONTF) | Engineering, Operations, and Security roles | SF/Charlotte/Remote | Full-time

Variety of roles open at ON24 as we continue to scale up post IPO: http://jobs.jobvite.com/on24/jobs

Also hiring Security Engineer and Compliance Specialist role which aren't posted yet but em me @ matt dot bateman at on24 dot com and I'll send specifics.

Senior Product Manager - http://jobs.jobvite.com/on24/job/oygCffwp

Senior QA Engineer - http://jobs.jobvite.com/on24/job/o9vJefwl

Software Engineer (Analytics) - http://jobs.jobvite.com/on24/job/omBuefwp

Sr. Cloud Engineer - http://jobs.jobvite.com/on24/job/obSwefwx

UX Designer - http://jobs.jobvite.com/on24/job/oQb3dfw1

Linux/Ansible System Administrator - http://jobs.jobvite.com/on24/job/oHsCffwK

Network Engineer - http://jobs.jobvite.com/on24/job/oT4ydfws

LOL not that long ago (late 90s early 00s in my case), student ID number WAS your SSN... [facepalm]

pretty straightforward, but does it scale? and can the answers be captured objectively in order to inform consistent decision making?

i.e. this is fine for a one shot review, but would be tough to operationalize...

Plus, keep in mind diagrams can be critical. If you're going to be sharing sensitive data with this vendor you're going to need to know and have documented how that data will flow, where it will persist, etc. Can be a lot easier to capture in a diagram than narrative format.

There is variety of other FOSS type stuff out there that is useful for anyone that needs more:

Vendor Security Alliance -- https://www.vendorsecurityalliance.org/downloadQuestionaire (disclaimer: I'm an advisor @VSA)

CSA CAIQ -- https://cloudsecurityalliance.org/artifacts/consensus-assess...

SIG --NM, looks like this is closed/member only now, but if you can track it down (SIG Lite/Full, Standard Information Gathering) its ridiculously comprehensive.

Google VSAQ -- https://github.com/google/vsaq

As someone who deals with both sides (asking the questions to vendors, and answering them for prospect customers) I can say they mostly all suck pretty hard... and that's probably why there's a whole ecosystem of vendors in this space nowadays.

and to be fair, Information Security is generally accepted to cover Confidentiality, Integrity, and Availability (see: CIA Triad)... so DR/BC are definitely within scope.

is it at all usable in Dark mode? that's what I really want to know...

sure... but I'd trust Cloudflare over Comcast anyday.

Plus, (1) you can turn on/off WARP at your leisure and (2) they've explicitly committed to limited logging and not selling data which is pretty huge.

I use a small local provider where possible... but the reality is that they have to lease their lines from AT&T anyway. In general, there are very few providers out there that have capability to offer competitive services.

There's quite a big difference in having a website "shut down" compared to deciding not to provide a given site/company/organization with services.

It's the digital equivalent to a No Shirt, No Shoes... No service sign.

I get what you're saying... but what's the available context of "No means No"?

It's specifically a slogan about sexual assault.

So when you modify that statement to "No doesn't necessarily mean No" you're making a play on words associated specifically with a PSA slogan about rape.

It could be a casual coincidence I suppose, or you could add further context like in the examples you supplied, but on it's own there's really no other way to see it. Sure, while the underlying principle may hold true; be persistent, don't give up too easily, etc., there are plenty of different ways to convey that and specifically choosing this wording seems deliberate.

I suppose it would come down to whether the statement was delivered as a joke in an attempt to get laughs or simply some folks found it funny. Based on the story seems more like the former.

Either way seems like they eventually developed an approach to dealing with culture fit (or lack thereof):

https://www.businessinsider.com/riot-games-pays-employees-25...

For the macro-perspective: https://www.ctbto.org/specials/1945-1998-by-isao-hashimoto/

Everyone should see this if you haven't already!

Its still a short/long term liability on their balance sheet... until they have substantial enough assets (eg 5-18B worth of future revenue) they are working out of a massive negative equity hole.

Usually a currency arbitrage opportunity provides a fraction of a percent in gains, like .1% max. So, you need massive amount of capital to actually make a reasonable profit. You would think why risk huge amount of money for small profit, but because the markets are established the risk is nil. As traders act on the open opportunities markets become more efficient, eg the spread shrinks, and the opportunity quickly dissapears.

A variable transaction cost works against you.

well to be fair arbitrage in traditional markets only really works at massive scale.

Its also part of the invisible hand that brings equilibrium to markets. Unfortunately its not really accessible to the average investor.

great article but it kind of petered off at the end... why not highlight what folks have gone on to do post @stake?

they got acquired by Symantec. Mudge went on to work with the DoD to development a cyber fasttrack program, Weld started and recently sold Veracode, Katie started the bug bounty at Microsoft, Joe Grand is still doing his thing w/ HW etc...

these folks really are self-made titans of the industry and a true testament to meritocracy and the hacker ethos. They legitamized security research as we know it.

I've visited around summer solstice few years back and didn't find it too bad really. Of course, we rented our own car and did the ring road so we were only around Reykjavik a day or two. Certainly, outside of the golden circle you won't see many any other tourists at all. Hard part is finding places to stay though as there isn't much out there!