HN user

robheaton

1,388 karma

rob@stripe.com

Posts49
Comments18
View on HN
robertheaton.com 3y ago

How to date a recording using background electrical noise

robheaton
1pts0
robertheaton.com 5y ago

Don't worry son, all your friends are weirdos too

robheaton
1pts0
robertheaton.com 5y ago

Preventing impossible game levels using cryptography

robheaton
2pts1
robertheaton.com 6y ago

Remote code execution vulnerability in KensingtonWorks mouse manager

robheaton
2pts0
robertheaton.com 6y ago

How to make your code faster and why you often shouldn't bother

robheaton
1pts0
robertheaton.com 6y ago

A blogging style guide, vol. 2

robheaton
1pts0
robertheaton.com 6y ago

Don't Overwork Your Functions

robheaton
1pts0
robertheaton.com 6y ago

Parenthood: The coronavirus and happy birthday edition

robheaton
1pts0
robertheaton.com 6y ago

100s of companies assert usage rights over all ideas sent through their services

robheaton
3pts1
robertheaton.com 6y ago

Systems Design for Advanced Beginners

robheaton
3pts0
robertheaton.com 6y ago

Separating Logic and Data

robheaton
2pts0
robertheaton.com 7y ago

The Robot Reserve Army of Labor

robheaton
1pts0
robertheaton.com 7y ago

What beginner's mind is like

robheaton
2pts0
robertheaton.com 7y ago

Programming Projects for Advanced Beginners

robheaton
1pts0
robertheaton.com 7y ago

Reproducible beliefs

robheaton
1pts0
robertheaton.com 7y ago

/office-hours

robheaton
9pts0
robertheaton.com 7y ago

Lessons from my first 20 office hours

robheaton
1pts0
robertheaton.com 7y ago

How I kicked my email compulsion

robheaton
1pts0
robertheaton.com 8y ago

How Tinder keeps your exact location (a bit) private

robheaton
5pts0
robertheaton.com 8y ago

A system to help you remember more of what you read

robheaton
371pts74
robertheaton.com 8y ago

Why economists need bureaucracy

robheaton
1pts0
robertheaton.com 8y ago

Making YouTube less bad for you using CSS

robheaton
1pts0
robertheaton.com 8y ago

Re: All those regrettable posts that you thought were gone

robheaton
2pts0
robertheaton.com 8y ago

How does online tracking actually work?

robheaton
3pts0
robertheaton.com 8y ago

A zero-knowledge proof for the existence of God

robheaton
1pts0
robertheaton.com 8y ago

What is a self-hosting compiler?

robheaton
2pts0
robertheaton.com 8y ago

Introducing WeSeeYou – Democratizing De-Anonymization

robheaton
3pts1
robertheaton.com 8y ago

Tracking friends and strangers using WhatsApp

robheaton
828pts150
robertheaton.com 9y ago

Improve your recruiting using Math.rand

robheaton
1pts0
robertheaton.com 10y ago

A delightful piece of spam from Xfinity

robheaton
3pts0

I write regularly about security, programming, and several other topics at http://robertheaton.com/ . They’re detailed, offbeat, and very funny. I’ve broken several high-profile privacy abuses, most notably:

* Wacom drawing tablets track the name of every application that you open - https://robertheaton.com/2020/02/05/wacom-drawing-tablets-tr...

* “Stylish" browser extension steals all your internet history - https://robertheaton.com/2018/07/02/stylish-browser-extensio...

* HP printers try to send data back to HP about your devices and what you print - https://robertheaton.com/2019/09/15/hp-printers-send-data-on...

===

I write the Steve Steveington Chronicles, in which you and your good friend, Steve Steveington, exploit weird security and privacy edge cases in the internet:

* Fun with your friend's Facebook and Tinder sessions - https://robertheaton.com/2014/12/08/fun-with-your-friends-fa...

* How Tinder keeps your exact location (a bit) private - https://robertheaton.com/2018/07/09/how-tinder-keeps-your-lo...

===

I write a lot for “advanced beginners” - people who understand how for-loops and if-statements work, but who aren’t sure what to do next:

* Programming Projects for Advanced Beginners - https://robertheaton.com/2018/12/08/programming-projects-for...

* https://robertheaton.com/pfab

===

I write about being a parent:

* Childbirth: a father's-eye view - https://robertheaton.com/2019/06/17/childbirth-a-fathers-eye...

* Plus five more episodes (and counting), linked from the bottom of that post

===

Finally, I write detailed explanations of complex technical topics:

* HTTPS in the real world - https://robertheaton.com/2018/11/28/https-in-the-real-world/

* How does Tor work? - https://robertheaton.com/2019/04/06/how-does-tor-work/

That sounds about right! Greg's Quora answer pretty much covers everything, and I'd say that there's not much you should particularly do to prepare other than to keep getting better at what it is you do anyway and to chill out. pc specifically said to me that the primary thing he cared about was that people were able to show how good they actually are, and that everyone feels they got a good crack at the whip and didn't get screwed over by a weird question or not preparing some specific thing or anything like that.

I am actually the OP :), my email address is in my HN profile and feel free to email me with any more questions!

I was about to reply "nonono it's not a date rape joke" but then I realised that the word "violent" in "violent sexual abuse" means it actually could easily be taken as one. I only meant to joke about receiving unpleasant messages on a dating site, which is probably not fun, but I think is generally OK to joke about. On the other hand, date rape is not OK to joke about. I've changed "violent" to "aggressive", which I think keeps the same tone I was going for but removes the ambiguity.

Obviously I would say this, but the Stripe process was really enjoyable, rapid and well thought through. It was clear that everyone really cared about making sure that you were able to really show your true skills and abilities. The team is great (and obviously just got 5.8% more great when I joined) and really happy to answer any and every question you might have.

So I strongly recommend. Although I would say that.

If I was guessing, I'd say that I very consciously made my CV/cover letter/blog "intriguing". I'm an OK programmer, but at the moment my strength is probably that I have a diverse list of fairly wacky and mostly unrelated other stuff that I've done. I think this meant that a lot of companies who would otherwise have passed straightaway were at least curious enough about the guy on the other end of this application to talk.

I should point out that after a Skype or 2, most of said speculative companies did realise that whilst founding a clothing company that makes sweatshirts with pictures of fruit on them is cool, it doesn't really help you write Clojure when you don't have any functional programming experience ;)

Of course, it could just be something boring like the fact that companies really need Ruby guys at the moment.

I find that doing something related to what you're doing is probably the worst thing you can do. Let's say you run your specs and 5 of them fail. You fix #1 and then re-run the spec, then go and fix #2 whilst waiting to see if your first fix is good. You will end up juggling and trying to fix multiple bugs at once, which is a recipe for failure and sadness.

I strongly endorse just staring at the screen whilst waiting.

Agree 100% that it's fundamentally about understanding what you can/can't do and are/aren't doing. If you are jamming on what you know that that's totally fine, but it pays to realise this.

The stockbroker example was slightly poorly chosen - similar studies have been done on other professions, including physicians, in particular when inspecting scans for signs of cancer.

Absolutely - I feel it's then still important to be honest about what you are doing and whether or not it's helping you in this way if that's what you want it to do. If you want to focus on other things then that's great and healthy, but recognise that flicking through Rails blogs and noodling around with ideas is what you do for recreation, and has very little impact on your professional development.