HNHacker News
TopNewBestAskShowJobs

RollAHardSix

303 karma · joined February 22, 2012

trumblejoe@gmail.com

Information Security & GRC Implementation Director

Looking for my next opportunity! Seeking technical & non-technical security and operations roles.

submissionscomments
RollAHardSix··on Orchestrate teams of Claude Code sessions
Trying to make a media player, media server, all by using ffmpeg and a pre-built media streaming engine as it's core. Python and SQLite. About a week's worth of effort every time until it begins to go too far off the rails to be reliable to continue to develop with. It never did get the ffmpeg commands right, I had to go back to crafting those by hand, it never did get the streaming engine to play in the browser's video player in the supported hls and dash formats. Asked it to build a file and file metadata caching layer and then had to continue to re-prompt it to poll the caching layers before trying to get values from the database. Never even got to the library, metadata, or library image functionality. Had to ask it to create the rbac permissions model I wanted despite it being very junior-level common sense (super-admin, user-admin, metadata admin, image admin).

Not exactly world-class software.

RollAHardSix··on Derek Sivers's database and web apps
This is great stuff. I fell away from web dev for a very long time because I have always been a developer who focused on building from the database first and outwards while using very light amounts of business logic. This feels very old web and I encourage others to try this approach. The lightweightedness of the approach is the beauty of it and you will get much, much better at your database language of choice.
RollAHardSix··on Looking for Early Users
I created an account and tried it but it didn't detect any issues with, SAST/cpp/posix-buffer-overflow.cpp

I also don't see anyway to verify its reasoning for its output so I'm left skeptical of its effectiveness. Maybe that's what the downloaded report is for but thats a premium feature so that's not helpful if so. Cool idea, but monetization of this seems like it will be very difficult for you.

RollAHardSix··on Tesla's Cybertruck is outselling almost every other EV in the US
Go check out the cybertruck forums, you'll see plenty of owners have issues with their trucks and some who have pursued their state lemon laws, guess those are all made up. Guess the NHTSA investigations, or the dead families are all made up too.
RollAHardSix··on Tesla's Cybertruck is outselling almost every other EV in the US
Certainly correct. My old Prius made it like 14 years so yes. vehicles should be looking at ten years, I just threw out five years out of irritation or even a worst case scenario. I just meant our absolute minimum expectations were fove years.
RollAHardSix··on Tesla's Cybertruck is outselling almost every other EV in the US
VA so unfortunately we it requires contiguous time in the shop. Very much appreciate the input though, I know other owners in other states have pushed back with the lemon law.
RollAHardSix··on Tesla's Cybertruck is outselling almost every other EV in the US
Wrong. Check their warranty online, they- like most other warranties- very deliberately leave out tires, vandalism, and problems with the electrical system.
RollAHardSix··on Tesla's Cybertruck is outselling almost every other EV in the US
Emotionally unstable people. She was at a bloody hospital out of state and someone slashed her tires in the garage there. We can't speak to their motives but angry at musk or angry at the appearance of wealth wouldn't be too big of a hypothesis.
RollAHardSix··on Tesla's Cybertruck is outselling almost every other EV in the US
My girlfriend owns one so to share our experience, the cybertruck is an unreliable POS. She's had it three, four months now & we have had it in the shop for suspension repair, an ECU computer which fried itself at a charging station (2k), a coolant leak part replacement from the cyberbeast rear engine (1400), the passenger window falling inside the door after the wire used in the gear window retraction snapped or tangled in the gears (450). We have gone through something like 8-10 tires and rims because they can't handle a pothole, or slice themselves after some tech put the wheel cover on wrong (tried leaving it off but a tire caught debris and was punctured that way too).

She had about two or three tires slashed or had the air nozzle cut off and sentry mode didn't catch anything except the back of the persons head. The self-driving jerked itself into a barricade on the interstate when someone cut her off, she wasn't able to stop it from doing so fast enough, it was all just faster then her reaction time (thankfully the other driver admitted fault but if they had contested I wouldn't put my faith in self-driving laws to side on a drivers side in a dispute). We have put roughly 10k into this truck for service.

We bought the truck because she lives in the mountains, she drives 200 miles a day for work if not more 5 days a week (regularly up at 4am on the road at 6am and home around 7pm - 9pm depending), and its probably the biggest purchase regret of our lives.

She needed a vehicle and I just spent 15k on a used RAV, we made the decision for her to get the truck because self-driving sounded very exciting (its all 'corporate puffery' now though), and her being in the mountains left us looking at roughly 80k vehicles anyway so we figured let's take a chance on the truck and self-driving. I mean most cars you get a good five years out them anyway right? Turns out that paint it black tesla ad was even faked, and my personal opinion is Tesla used the reservations to get this news piece.

I truly don't see the cybertruck as being desirable for the average American, I believe it's a novelty which will die once Teslas early adopter advantage for self-driving dies up. I believe it should. We are currently looking to buy her a 8k commuter beater for local 60 - 120 mile work days and using the cybertruck just for the work out of state. We'd sell the truck but its depreciated so much and she still travels out of state once or twice a month minimum and all over the place once there so we still want something electric for those trips. We would sell it if I had about another 50k in the bank to be comfortable with taking the quick loss from doing so, we still might once the relatives house sells. Don't buy Tesla, that's my advice. We never will again.

RollAHardSix··on Why won't some people pay for news? (2022)
I guess I should post...something. Lack of relevancy. I don't watch the news, don't even watch the weather, I don't vote or care about politics, I don't listen to the radio in the car, I went years without even looking at Hacker News, don't use reddit outside of work-related subs, don't use facebook, or other social media. I don't even use youtube except when I want to see some highlight video of Iverson or Pippen or a player soccer highlight (but not match recaps), or the occasional music of an artist stuck in my head. Why would I? The news isn't going to mow my yard, politics won't change a single thing about my life which couldn't be changed through more hard work. There is just nothing in the news for me. I suspect this feeling will continue to grow sharply with the youngest generation (I'm mid thirties personally but my teenage daughter has shared her classmates feel apathetic towards current events etc).
RollAHardSix··on Ask HN: Who Went Mac –> Linux?
In this particular case dd did not accomplish what I wanted & mkisofs is for ISO's which doesn't encapsulate all cases. Dd also has a particular drawback in that running it incorrectly can wipe your entire hard drive...oops I guess... Linux is like this everywhere- rough & poorly designed from an end user standpoint. In no world should I be using, or even able, to run a command so freely which could f up my system without not only elevated permissions but also confirmation of the very bad thing I'm about to do. That conceptsfollows into package managers with a dozen random dependencies to download or setup some utility you are likely downloading to solve some other problem. Like I said, linux suffers from a poor end user experience & that is their biggest failing...next to the absurd file system standard- thankfully some distros are moving away to something more sane but that will likely be ten plus years before it sees better adoption. Linix should have focused on the desktop environment long ago & as a community stopped looking at distributions as 'a hundred ways to do the same thing' to instead focus on a more cohesive operating system. I could go on but that's enough, they just don't have a great vision & their claims of server OS dominance mostly have to do with it being free more then anything else.
RollAHardSix··on Tell HN: Legitimate voting email from city clerk marked as spam
Did you check SPF, DKIM, DMARC?

I worked for a strategic marketing consultancy & I couldn't tell you the number of times I saw the above properly misconfigured for clients or government tourism entities. Like 90‰ of what I ran into.. luckily for them configuring SPF, DKIM, & DMARC is like the one thing I'm actually good at in this computer career thing

RollAHardSix··on Ask HN: Who Went Mac –> Linux?
I now use Windows professionally & use Debian on my older home laptop (and server), & I previously used a Mac professionally--last year. My thoughts can be summed simply, Macs are toys.

Windows is the king of business productivity; I've never seen someone with a mac do what I qualify as real business work using any applications outside of the Adobe ecosystem- If you took someone who works heavily in Microsoft & gave them a Windows machine, they'll be vastly more productive then they are in Mac OS even though Microsoft works on both platforms.

I suspect this is a core design issue more then anything as in Windows the work you do is forefront, in Mac using the Mac OS is forefront, and with Linix open source is forefront. I can tweak my Debian all day long but it won't ever run Rufus; while my Mac might run some windows applications it also won't give me the same terminal power as Debian will. Debian however won't allow me to run windows apps, will have driver issues (like my completely incompatible-still audio drivers for a laptop from 2008). Package management is and likely always will be a nightmare in Debian. However if I baby Debian and focus on particular workflows, I can set up a workflow for what I want-aka a writing environment or my golang environment but it lacks the robustness of jumping between applications seemlessly like Windows has. Linux continues to fail by not providing a superior desktop environment, however I'll still take Linux over Mac OS for any real work.

My next personal desire is to move my home computing towards purposed servers- one for writing, one for programming, etc while going either super-light laptop or portable screen & usb keyboard / mouse for maximum flexibility. That way I can setup at the multi-monitor command center if I want, or move out to the porch lightly.

I'd even go so far as to say that with the exception of gaming setups, beefier laptops / desktops isn't needed at all- just build home servers.

RollAHardSix··on Cybercriminals pose as "helpful" Stack Overflow users to push malware
So much wasted effort. Just create an account on Upwork, play by Upworks rules & get complete unferreted access to any number of servers and websites run by small businesses and marketing consultancies. Sure you might have to do a bit of Wordpress dev to keep the illusion going but...there you go.
RollAHardSix··on Home Electricity Power Options?
One meter. She has a barn with putside light on a seperate meter but those charges were seperated on the bill.

Her January bill listed 222.84 in generation services. 188.86 in fuel factor at 0.0413900 per kWh. 176.04 transmission services 101.02 distribution services

Some taxes etc and a final charge of 1359.78. I'm remembering now that they did overcharge her & we talked about that w the power company getting a credit for the next bill. My mistake on that. But for the last several months her bill has consistently been extremely high, 900 this past month, 1100 a prior month.

Her kWH usage is 4562 per month & I'm really not sure how she gets to that, she literally drives between 1 & 2 hours to work and back every day depending on location so she's only home in the evenings.

RollAHardSix··on Home Electricity Power Options?
Thanks. Yeah I was drawing up off memory & an old screenshot from January.

Her bill listed 222.84 in generation services. 188.86 in fuel factor at 0.0413900 per kWh. 176.04 transmission services 101.02 distribution services

Some taxes etc and a final charge of 1359.78. I'm remembering now that they did overcharge her & we talked about that w the power company getting a credit for the next bill. My mistake on that. But yeah for the last several months her bill has consistently been extremely high, 900 this past month, 1100 a prior month.

Her kWH usage is 4562 per month & I'm really not sure how she gets to that, she literally drives between 1 & 2 hours to work and back every day depending on location so she's only home in the evenings.

RollAHardSix··on Home Electricity Power Options?
Thats a good point, its actually not listed & I'll need to make sure they are usage. I believe they are from the amounts. We are looking at a grid tie-in solar system to avoid the upfront cost of batteries but we aren't committed either way.
RollAHardSix··on Home Electricity Power Options?
Thanks. We're going to do an energy audit, at-least cutting off breakers and observing the meter to start with.

Her bill listed 222.84 in generation services. 188.86 in fuel factor at 0.0413900 per kWh. 176.04 transmission services 101.02 distribution services

She does have a barn w a light for her horse but thats listed seperately for her bill. Her kWH usage is 4562 per month & I'm really not sure how she gets to that, she literally drives between 1 & 2 hours to work and back every day depending on location so she's only home in the evenings.

RollAHardSix··on Ask HN: Can you recommend some poetry?
Hyakunin Isshu

The University of Virginia has a webpage with some of the best english translations, even better then most published books.

RollAHardSix··on Ask HN: Those who have recently undertaken a job hunt, what was your experience?
It's brutal. I'm in a more selected field- cybersecurity & GRC governance & getting interviews has been scarce. I have deep domain expertise in GRC and am technical enough to challenge on technical roles or business operations roles & while I've sent out hundreds of applications, I've only had a handful of interviews or first round screening invites that I consider promising. I finally accepted a GRC position with a local company offering full-time remote work because most of the startup opportunities I was looking at were only hiring senior engineering (Which is fine, but indicative of the market).

Offered pay or benefits seem lower too. I've dismissed a few companies for being below my range & have seen others here say the same.

I have had two companies basically admit they have never had the outpouring of candidates they have had lately but I question the real value & experience of those candidates. When I'm looking at GRC roles, a fairly niche field, that have had 150 - 350 applicants, I can't help but feel the market is being flooded by juniors or maybe just resume-spamming tools.

I really believe companies are trying to be too picky because of the pure inflated applicant numbers. For example, one particular company refused to even consider me for the position because of a hybrid 3 day requirement imposed by their leadership. That's despite me having a shared military background with a current team member, again, deep domain expertise & project ownership, and an interest in the company so that I would have likely been on the lower of their salary range just to work with them. They are still hiring for that role so I'll be honest, I don't get it. Another company got to the interview with their internal recruiter (& of which I had been invited too by their Head of Application Security) and they then decided to list their must haves for the position in their first round, something which wasn't listed on the job post (and their must-have language requirement was a barely a familiarity note on the job post).

But all in all salaries seem lower, I saw a government Information Security Assurance role for 50k - 75k the other day, for 3 - 5 years experience-- I was making that at entry level with 0 years of experience. Heck, at that point I would take a junior SWE position which would probably pay more & then just go do either software engineering again or look outside of tech for management roles.

I don't know, all I can say is I'm not personally lowering my own standards just because companies are. I think my next position will see me entrenched awhile, until this job market changes or until I find my next unicorn role that meets my demands. Like someone else said here, it just isn't worth tailoring your resume anymore- the time commitment is too great & its all about beating the ATS system. Internal recruiters & HR barely understand our resume anyway, a fact which has made the first rounds a real pain. Case in point, the eventual position I accepted I interviewed with the CTO first-round & it was a much more productive interview for both sides then any of my other HR first rounds have been.

RollAHardSix··on Ask HN: YouTube/Podcast Recommendations
I've been on a prison binge lately, so I recommend Ear Hustle. A podcast from prisoners of San Quentin prison about life behind the iron bars.
RollAHardSix··on Ask HN: Who is hiring? (March 2024)
Emailed hiring@.

Best of luck with your candidate search.

RollAHardSix··on Ask HN: Who wants to be hired? (March 2024)
Location: Roanoke, VA

Remote: Yes

Willing to relocate: No

Technologies: Security, IT infrastructure, GRC, SOC2 & ISO27001, Networking-background.

Resume : Please email.

Email : Trumblejoe@gmail.com

Security, GRC, Business Operations, Technical PM roles.

I've done web dev, application development, architecture, & right now am most interested in landing my next security role. I've built an information security program from the ground up & can handle project/client communication with ease for any sort of technical or business project.

RollAHardSix··on Fewer people are buying electric cars in the US
No, it's the fact Cash for Clunkers ruined the used car economy. I've always driven used cars. A 2007 VW Jetta. A 2008 Mazda Protege, a 2002 Oldsmobile (until 2018). From 2018 to 2023 a 2007 Toyota Prius. 2023 a 2013 RAV4.

I looked at EVERY used car in a 100 mile radius on every platform you can think of and the 2013 RAV4 with 105,000 miles at 15k hit the dealer lot the night before I purchased (they had multiple calls for that vehicle while I was filling out paperwork). Its because all the old people sold off there late 90's and 2000's cars that there STILL are no used cars anymore that aren't absolute junk (155k mileage plus junk selling for 15k - 20k). This lets dealerships sell new cars & trucks for way, way too much. If Cash for Clunkers never happened, used cars would be the competition for new cars like the Toyota Camry which are uncomfortable, basic vehicles but which set the pricing floor for the other manufacturers vehicle lines. No competition so set it at a high price point marketing it as new even though the rest of it is junk and then you can charge a premium on oyher vehicle options. (Hate the Canry but I love Toyota vehicles don't get me wrong).

All us poor people who just want a to work and back vehicle & who would buy off craigslist from private sellers don't have a market anymore and have to go dealerships. Pickups are overpriced I'll agree, and are faux status symbols, but the used market itself reaked havoc on trucks too.

RollAHardSix··on 27 years ago, Steve Jobs said the best employees focus on content, not process
Xavi, Busquets, Iniesta, and in 2014 Neymar. Messi is the GOAT, but Barca is one of the worst teams to say built to allow one player to do what he wanted. Barca built an entire system and slotted the greatest single-team field of all time players to play that system.
RollAHardSix··on 'Squid Game' Video Game by Netflix, 2024 Slate Includes Sonic Mania Plus
What a waste of money, you can already play Squid Game-like on Fortnite. It's a fun novelty but that's all it is, a novelty & not a whole game by any means.

Disclaimer: Boycotting Netflix because they cancelled Shadow & Bone.

RollAHardSix··on Ask HN: Who is hiring? (December 2023)
Applied by email for the Technical PM role, I'm looking to expand from my information security background. Cheers for the heads-up that this was a role available.
RollAHardSix··on Cybersecurity in a Growing Company
You're going to want an IT Manager well before 100 people. I handle systems integrations & cybersecurity compliance for a 15 - 20 person PR, marketing, & design firm and I am constantly busy with everything from major operations initiatives, major systems setup, and being available for end user IT issues.

That being said, get a Mobile Device Manager (expect a year to get it configured to where you want), get a company password manager, get a cell phone plan figured out (expect to spend $$$$$ on phone systems).

All of these systems will require significant time for set up & deployment, especially if you are doing it in such a way as to grow your compliance posture at the same time.

RollAHardSix··on Amazon to force 'voluntary resignation' on workers who don't relocate
Unemployment benefits. Possibly a position retained remotely if it progresses to legal arbitration. But more importantly, precedent for other workers & the hit to unemployment insurance for the company. Obviously with Amazon's size its different but that unemployment insurance cost matters to most companies.
RollAHardSix··on Amazon to force 'voluntary resignation' on workers who don't relocate
No, I live in an at-will state, you can absolutely file for constructive dismissal. And SHOULD. If you can do your job remotely, have been doing your job remotely, and the company wants to end that? Then the company absolutely needs to be challenged and burdened with showing proof as to why returning to the office is necessary when it does create an unreasonable burden on the employee.

For anyone who says this isn't an unreasonable burden, what if you live in a different state? Or in a lower cost-of-living? Or have a home/family life built around a position working remotely that you have been functioning in perfectly fine for three, four, five plus years?

In Physical Security if your position requires body armor, the company is legally admitting it's a dangerous life-threatening position & denying a request for body armor is a legal attestation that the job should not be considered dangerous in the course of day to day work.

Much the same way, the company is now admitting that onsite work for the position is somehow more necessary then working remotely. Challenge these companies.

Page 1 of 10Next →