Hacker News Reader

Comment by fjorde | Hacker News Reader

I appreciate the sentiments.

i think the cert for https://cieloconnects.com/ is expired.

Ah look at that! Nice catch. Yes, I can see that something is done to fix that, though I'm not on that team (I'm backend).

And to address the debate below, I do in fact appreciate risk-averse and focused engineers. The 'don't say no' thing I think has merit when interfacing with business. But within the team, as long as you're in your own lane I appreciate it very, very much when my coworkers help me find flaws.

Most of this comes up in planning anyway, when we're spit-balling best approaches. If the problem is difficult enough, someone will get a research spike to discover best practices and form a set of initial proposals and alternatives.

ETA: and yes this is my public profile. I don't mind. I'm proud of my work at CIELO.

It isn’t expired, look more closely at it. (And, cough, see thread topic)

Maybe saying something like hey we’re you aware the browser throws this error NSURLErrorServerCertificateUntrusted

To point out the issue but maybe not say exactly what was wrong?

take your own advice. i noticed a cert was invalid or broken and mentioned it to a person who might care or know how to deal with it appropriately. In the meantime the site is less secure than it could presumably be. i'm not a paid consultant for the site so i didn't bother digging in and finding out which policy violation triggered a browser warning, but since you did, you can share it here or you can continue to add zero-value comments.

How did you even find that site in the first place? It's not in their profile, it's not in the top duckduckgo results for "CIELO Enterprise Solutions". How long were you digging around to find something, anything, to try and pwn them about their high engineering standards comment?

Perhaps there is a language or nuance barrier. I "thanked" the parent commenter for sharing their view, did an "internet search" for their publicly listed company to see what kind of jobs they might have available, and then was warned about certs visiting their site... Now I'm having a terrible conversation with you for some reason, but I hope this helps dispel your confusion. Please feel free not to reply at all with anything.

Reply on news.ycombinator.com