HN user

mrclark411

35 karma
Posts2
Comments40
View on HN

We got a SOC2... and still get questionnaires. It's the worst. Companies are just outsourcing their security reviews to the vendor. Rather than rely on a 3rd party audited document companies want their custom questions answered. BUT - they aren't custom questions - it's the same questions for every vendor and they are very often poorly worded. Then when we turn them in - there's no follow up questions which to me implies that no one is reading them. Security theater...

I was going to just skip over this by reading the comments. Thank you for suggesting I go look. Extremely moving.

Induction works fine. Our house is all electric. On the coldest winter days the heat pump needs some help using some resistance heat which isn't as efficient - but it does just fine. No need to have gas.

Just moved into our "forever" home and our setup is very similar to isbjorn16's (7 in the family, HPWH "80G", but I have an 8" PowerPipe from these folks: http://renewability.com/#learn-more. (It's a monster - plumber wanted to give me a clean out at the bottom - but that meant some jackhammering to set it low enough.)

So far so good - we do a bunch of baths/showers at bed time and no one runs out of hot water. Also - I'll add that we accidentally had the plumber remove all the low flow "plugs" from the showers so there's a lot of water flowing.

The pipe is pretty fun - not only is it fun to look at - but when someone is taking a shower it's fun to feel the heat at the top of the pipe and as you move down the pipe it gets colder until it reaches the temp of the cold water coming into the house.

Since it was new construction - we'll never know how much of a different the drainwater heat recovery pipe is making - but it is definitely doing work.

I can imagine these pipes becoming more popular (though rising prices will kill off any efficiencies real fast). Maybe code?

Thanks.

I also see that the security requirements are quite high. While its difficult to argue with source code security - here are some of the security requirements:

The standard annual risk assessment shall include, to the best of Developer's ability, the following:

(i) SOC 1 and/or SOC 2 audit report; (ii) 3rd party proof of PCI compliance (a certificate showing Developer's handling of credit card payments is compliant); (iii) Privacy Shield Attestation; (iv) ISO Certification or Cloud Security Alliance Self-Assessment; (v) Cloud Security Self Assessment; (vi) any information on subcontractor or vendor production datacenter(s), IaaS, PaaS, or private hosting providers, as required by GitHub based on data and services rendered; and (vii) Written responses and evidence of specific security requirements as outlined in this agreement

https://help.github.com/articles/github-marketplace-develope...

The GitHub Marketplace will be an exclusive place for a while with those requirements.

Stripe Connect 14 years ago

We've been exercising this API for a couple weeks at DigMyData. So far so good. Right now the API event history only goes back 30 days so we're having to "create history" so we can offer some metrics that need events (like cancellations). Keep up the great work Stripe.

Why didn't Google+ import from Google Contacts? I have done a fair bit of organizing there. I would communicate similarly on Google+ as I do by email.

I would agree - none of the companies in question forces a user to do this type of work. Only enhances the product if that's how you want to use it.

Or at least make it fun (game).

Or make it more valuable. If being on specific Twitter lists drove more followers or was perceived to be important then getting people to put you on specific lists would be important.

But it isn't. Now.

Data is extracted approx every 2 hours. Most services rate limit and none of the services offer "real time" data through their API (excepting Twitter).

Next video we do we'll turn down the peeping noise =)

Hi - this is Adam with DigMyData. We're eager for feedback on our small business CEO dashboard. Happy to engage here or on Twitter (@digmydata).