HN user

rfzabick

35 karma
Posts3
Comments26
View on HN

Monitoring for anomalous access patterns is a good idea.

It wouldn't have helped in the face of RCE in struts. RCE in struts would let the adversary scp off all the files that make up the database, for instance. This would completely bypass any application-level checks or monitoring.

I also had been in software for over a decade and was bored with most of the problems I needed to solve. I switched to security about a year and a half ago (largely pen testing) and I'm much happier. When I code, I care about the problems I'm solving. I also get to break things which is a lot of fun. Switching to security might be something to consider for you as well. It's a change, but it doesn't require huge pay cut or lifestyle change.

Google is the exception, and as I understand it, Google stock doesn't carry with it the same voting rights that most stock does. Larry and Sergei want to retain control so that they can fund lots of research and not have activist shareholders vote to return the funds to shareholders.

FTA: "The rate is part of a tiered fee structure, which will reward drivers by lowering the commission when they complete a certain number of rides in a week"

Nokia/HERE (Formerly Navteq) — Chicago

As an organization, we have a long history with map data. Now we’re looking at interesting ways to use it to change driving. Cars of the future (and present) have onboard computers, tons of sensors, and internet connections over the cell network. If you could hook that up to our map data, you could do some really cool things.

To see what we’re up to, check out http://360.here.com/tag/connected-driving/

We’re looking for strong Java developers to make this happen. Experience with AWS, apache storm, stream processing or high volume, low-latency applications are all plusses.

We're also looking for strong SDETs.

The things I’ve enjoyed most since starting here a few months ago:

- Interesting problem space

- Interesting tech stack

- I get to wear sandals to work (I chose to not take advantage of this particular perk today)

- Team running group that goes for a run together every Wednesday morning before lunch (weather permitting)

- Company gym

- Quickly-growing team

- Good medical insurance coverage

- Starting a lunch time study group (with lunch provided by the company!)

Interested? Questions? Email me at roman.zabicki@here.com I'd love to talk to you.

Nokia/HERE (Formerly Navteq) — Chicago

As an organization, we have a long history with map data. Now we’re looking at interesting ways to use it to change driving. Cars of the future (and present) have onboard computers, tons of sensors, and internet connections over the cell network. If you could hook that up to our map data, you could do some really cool things.

To see what we’re up to, check out http://360.here.com/tag/connected-driving/

We’re looking for strong Java developers to make this happen. Experience with AWS, apache storm, stream processing or high volume, low-latency applications are all plusses.

We're also looking for strong SDETs.

The things I’ve enjoyed most since starting here a few months ago:

- Interesting problem space

- Interesting tech stack

- I get to wear sandals to work

- Team running group that goes for a run together every Wednesday morning before lunch (weather permitting)

- Company gym

- Quickly-growing team

- Good medical insurance coverage

- Starting a lunch time study group (with lunch provided by the company!)

Interested? Questions? Email me at roman.zabicki@here.com I'd love to talk to you.

I just finished Feynman's Rainbow by Mlodinow. It's an interesting look at Feynman and Gell-Man. It was a little lighter on Feynman moments than I expected, but certainly worth the read. I took a break from the 3rd Game of Thrones book to read that.

Nokia/HERE (Formerly Navteq) — Chicago

As an organization, we have a long history with map data. Now we’re looking at interesting ways to use it to change driving. Cars of the future (and present) have onboard computers, tons of sensors, and internet connections over the cell network. If you could hook that up to our map data, you could do some really cool things.

To see what we’re up to, check out http://360.here.com/tag/connected-driving/

We’re looking for strong Java developers to make this happen. Experience with AWS, apache storm, stream processing or high volume, low-latency applications are all plusses.

The things I’ve enjoyed most since starting here a few months ago:

- Interesting problem space

- Interesting tech stack

- I get to wear sandals to work

- Team running group that goes for a run together every Wednesday morning before lunch

- Company gym

- Quickly-growing team

- Good medical insurance coverage

- Starting a lunch time study group (with lunch provided by the company!)

Interested? Questions? Email me at roman.zabicki@here.com I'd love to talk to you.

Nokia/HERE (Formerly Navteq) — Chicago

As an organization, we have a long history with map data. Now we’re looking at interesting ways to use it to change driving. Cars of the future (and present) have onboard computers, tons of sensors, and internet connections over the cell network. If you could hook that up to our map data, you could do some really cool things.

To see what we’re up to, check out http://360.here.com/tag/connected-driving/

We’re looking for strong Java developers to make this happen. Experience with AWS, apache storm, stream processing or high volume, low-latency applications are all plusses.

The things I’ve enjoyed most since starting here a few months ago:

- Interesting problem space

- Interesting tech stack

- I get to wear sandals to work

- Team running group that goes for a run together every Wednesday morning before lunch

- Company gym

- Quickly-growing team

- Good medical insurance coverage

- Starting a lunch time study group (with lunch provided by the company!)

Interested? Questions? Email me at roman.zabicki@here.com I'd love to talk to you.

Nokia/HERE (Formerly Navteq) — Chicago

As an organization, we have a long history with map data. Now we’re looking at interesting ways to use it to change driving. Cars of the future (and present) have onboard computers, tons of sensors, and internet connections over the cell network. If you could hook that up to our map data, you could do some really cool things.

To see what we’re up to, check out http://360.here.com/tag/connected-driving/

We’re looking for strong Java developers to make this happen. Experience with AWS, apache storm, stream processing or high volume, low-latency applications are all plusses.

The things I’ve enjoyed most since starting here a few months ago:

- Interesting problem space

- Interesting tech stack

- I get to wear sandals to work

- Team running group that goes for a run together every Wednesday morning before lunch

- Company gym

- Quickly-growing team

- Good medical insurance coverage

- Starting a lunch time study group (with lunch provided by the company!)

Interested? Questions? Email me at roman.zabicki@here.com I'd love to talk to you.

Nokia/HERE (Formerly Navteq) — Chicago

As an organization, we have a long history with map data. Now we’re looking at interesting ways to use it to change driving. Cars of the future (and present) have onboard computers, tons of sensors, and internet connections over the cell network. If you could hook that up to our map data, you could do some really cool things.

To see what we’re up to, check out http://360.here.com/tag/connected-driving/

We’re looking for strong Java developers and strong testers to make this happen. We’re building on AWS, so experience there is a plus.

The things I’ve enjoyed most since starting here a few months ago:

- Interesting problem space

- Interesting tech stack

- I get to wear sandals to work

- Team running group that goes for a run together every Wednesday morning before lunch

- Company gym

- Quickly-growing team

- Good medical insurance coverage

Interested? Questions? Email me at roman.zabicki@here.com I'd love to talk to you.

My advice? Learn to partner dance. I always say it's the most fun you can have with modular arithmetic.

I'm pretty introverted, but I've been an enthusiastic swing dancer for 17 years now. Start by taking classes. You'll meet a bunch of people. Also, there's a structure to the interactions there. You're all there to learn, you're all just starting out in the dance, you're all meeting each other for the first time, etc. After a few months, you'll start making friends from classes. Somewhere in your first 1-3 months of classes, you'll go out dancing socially, like to a bar, or a club, or a concert, etc. You'll meet more people there, too. Also, it's super fun!

Another thing that has been great for me about dancing is that it's social, but it's not very verbal unless I want it to be. There have been many times I've felt drained and didn't want to spend a lot of energy holding up a conversation. On those nights, I'd go out for an evening of dancing and dance with 1 or 2 dozen different women and barely said more than "Would you like to dance?" and "Thank you for the dance." I'm a native English speaker, but I still find conversation draining sometimes. Dance gives me a way to get out of the house and interact with people and avoid staying in the house and compounding anxiety. Also, it's super fun!

Pick a dance where people go out and dance socially at places other than dance studios (swing/lindy hop or salsa are your best bets. IMHO, lindy hop is far and away the best. Also, there are tons of guys in IT in lindy hop, so you'll fit right in.) Technically, people can ballroom dance anywhere, but in practice, at least in Chicago, there are no weekly ballroom events that I know of outside of ballroom dance schools. The reason I advise this is that classes are great for learning the dance and for having a social structure to rely on, but you also want to have unstructured social time with people you've been meeting in classes. Also, you'll meet more people this way and dancing socially is a ton of fun. If you have a weekly dance or two to go see friends at, it's easier to stick with classes than if you're taking classes so that you can get better for... taking more classes.

> 3) The tryout project There are differences between this and the crypto challenge (I can do the crypto challenge in my free time while holding on to my current job, I'm learning cool stuff from the crypto challenge, no $ involved, etc.)

There are also enough similarities that I'm surprised that you're so opposed, especially since you kind of dangle an interview offer at the end of solving the whole crypto challenge. From your side of the table, what are you looking at from people who finish the crypto challenge?

I'm starting to read more about the (s)low carb/paleo/primal diets. I'm genuinely interested in reading more critiques of this class of diets. Charlatan is pretty harsh. I'd say this article paints Taubes as a person who hit on something that works, but who also explains that success with a flawed theory. What else do you have on Taubes' charlatanery/debunkedness?

The opening paragraph of the article: "I'd like to begin by emphasizing that carbohydrate restriction has helped many people lose body fat and improve their metabolic health. Although it doesn't work for everyone, there is no doubt that carbohydrate restriction causes fat loss in many, perhaps even most obese people. For a subset of people, the results can be very impressive. I consider that to be a fact at this point, but that's not what I'll be discussing here."

And later on in the article: "I think it's likely that refined carbohydrate and sugar can contribute to obesity, but by what mechanism? Insulin is not a compelling explanation."

I don't see a charlatan exposed here.

Guyenet's critique reminds me of a saying I heard a while back: Sure it works in practice, but does it work in theory?

Feynman Algorithm 15 years ago

I think I remember reading Feynman saying that you should always have 15 or 20 problems that you have percolating in the back of your mind at any given time. Then, any time you learn a new trick or technique, apply it to all of those problems. Sometimes the new technique will work really well on one of those problems and you'll look really smart, but all you did was apply a technique from one person to one of your old problems.

I can't find the reference now...

> I read a great interview (maybe a co-founder of tripod...?) who went through the evolution of search engines over a decade, each time saying that it was too late to enter the field, and playfully finishing with "[of course, now with google, it really is too late]". I've searched and searched for this but can't find it - anyone recognize it?

Well, I guess it's not too late to enter the search field, then.

I'm not sure that the bulk of Bon Jovi's money comes from record sales. His tours have brought in something like $500,000,000 in the last 6 years. (http://en.wikipedia.org/wiki/Bon_Jovi)

Everything I've heard on the subject is that bands make more money touring than recording. I believe this is because even though the costs of touring are much greater, the record companies take the majority of the money from album sales.