HNHacker News
TopNewBestAskShowJobs

erichurkman

2,494 karma · joined July 2, 2013

Current: engineering @ Carta (boomerang); building the operating system for venture capital.

Former CTO at SAY in NYC (acq. Robinhood); modernizing the shareholder franchise.

Former CTO @ Carta; led 60+ engineers from $0 to Series C.

My views and opinions on Hacker News are my own and not necessarily representative of the views and opinions of my employer.

erichurkman@gmail.com

[ my public key: https://keybase.io/erichurkman; my proof: https://keybase.io/erichurkman/sigs/hIARu-swi4oxNKpDf1GM4Ng8I8P4bAf_GPFNOG6tg1o ]

1KBYXQVyxwfR3VZdU4xtoQUS2rg8PNc7Az // 0858d2

submissionscomments
erichurkman··on Government’s PACER Fees Are Too High, Federal Circuit Says
Given how much the courts rely on case law, court records should be as free and publicly indexed as statutes are.
erichurkman··on Ten modern layouts in one line of CSS
In the future, just use https://mjml.io/. Yes, the HTML it generates is god-awful-ugly, but it does generate responsive emails that render very nicely in almost every client back to Outlook 2010.
erichurkman··on How Best Buy saved itself (2019)
The same product but different names and SKUs is a game the mattress industry plays very well which keeps prices elevated and the 'price match guarantee' game impossible to win for consumers.
erichurkman··on Random Strings and Integers That Aren’t
Until someone in design or marketing changes the font on you.
erichurkman··on Google Drive – How do I stop others from sharing files with me?
It's used not just by spammers, but by sales reps, too.

Dell recently did this to about half a dozen people on my team. 'Q2 Budget Review', which sounds official, but is really a Dell rep trying to sell you junk that magically pops up on your calendar _even if you mark their message as spam_.

Dirty way to get by executive assistants, too.

erichurkman··on New ‘Meow’ attack has deleted almost 4k unsecured databases
> and then sent the key to a well-known white-hat security researcher

Would you like it if someone involved you in adjudicating potentially illegal (under CFAA & others) without your consent?

This is clearly not a white hat hacker looking to teach people lessons about security. If it were, they could have furnished a list to the major cloud providers of broken instances and given them time to notify and remediate.

erichurkman··on Twilio: Someone broke into our AWS S3 silo, added 'non-malicious' code to JS SDK
What about an alternate for these 'platform script includes' like Twilio and Stripe:

    <script src="..." report-integrity="https://cdn.stripe.com/report">
in which clients compute the integrity and asynchronously ping a lightweight payload of the integrity to the third party? You would then seed your report service with a list of known hashes and set up alerting for when new hashes were observed.
erichurkman··on Things I wish I’d known about CSS
A true CSS+HTML-powered print renderer is PrinceXML. https://www.princexml.com/samples/

Having used it for over a decade, it's a wonderful tool.

erichurkman··on Tech sector job interviews assess anxiety, not software skills: study
I have a standard preface to start a live coding or technical session with a candidate to account for this. I look up stuff all the time, and expecting candidates to not do so is cruel.

> We're going to go through a few technical exercises together. It's open book, open documentation, use whatever resources you would normally use — though please do not copy and paste complete solutions from StackOverflow and guess&check to reach our solution. It's open language, so please select whatever you're strongest in. If it is a language I am not familiar with, I will ask questions. Some of those questions may be naive. Use whatever editor and environment you're most comfortable in. Please ask questions of me. There is no specifically correct answer, though your solutions should hit a level of baseline correctness. These problems are designed to mirror some typical day-to-day problems you might face on the job; we're not looking to test rote memorization of _Hacking the Coding Interview_. We want working code, but some aspects or edge cases may remain in pseudocode as we iterate on these problems together. There are no designed 'gotcha' moments in these exercises, and if you feel there may be a 'gotcha' moment, ask clarifying questions. I would rather you ask questions than struggle through a solution.

It works well for modern development.

erichurkman··on Hackers take over prominent Twitter accounts in simultaneous attack
If they had capital to begin with. If this is some individual hacker without much for means, swiping $100k of BTC in a potentially narrow window when a security vulnerability is in place is greater than $0 while trying to line up capital and shorts.
erichurkman··on Dates and Times in JavaScript – A New API for Dates from TC39
+1 for date-fns. It's not uncommon to look at a downloads in a JavaScript bundle to find out Moment — and its timezone and localization files — are a huge percentage of a download for a single `moment.format()` call.
erichurkman··on Linear – A fast issue tracker
There are already a number of opinionated issue trackers, like Clubhouse and Pivotal Tracker.
erichurkman··on Thousands of U.S. judges who broke laws, oaths remained on the bench
> They just aren't allowed to have party affiliations

Unfortunately wrong. https://ballotpedia.org/Partisan_election_of_judges

erichurkman··on Worrying about the NPM Ecosystem
M of N signatures on new version tags, or on ranges of commits?
erichurkman··on Microsoft removes manual deferrals from Windows Update 'to prevent confusion'
Counter-Counterpoint: if Microsoft made updates painless, users would notice them less, and defer them less, and be more up to date/secure.

Updates are highly disruptive. An update happening at the wrong time forever taints a user's view of updates: an unexpected reboot and hour long install the night before a term paper is due, a reboot to fix a crashing program unexpectedly installs some lengthy update, update progress bars are bigger liars than politicians, an update fails so Windows has to un-apply the update which takes $ages for some reason the user doesn't care about. The way updates happen on Windows is anti-user so it's not surprising so many users go out of their way to avoid them.

erichurkman··on Show HN: Sidequest – A personal ticket system that lives inside Slack
Feedback: the screen shots showing how it works advance much too quickly. It's impossible to spot the helper text, look at the screen, and get any context before it flips. Image carrousels with important information are a poor UX.
erichurkman··on GitHub Super Linter: one linter to rule them all
And in those large reformat commits, add a file like `.git-ignore-revs-file` that is checked in, so you can configure git to ignore that revision and pretend it never existed:

    [blame]
      ignoreRevsFile = ".git-ignore-revs-file"
      markIgnoredLines
      markUnblamableLines
erichurkman··on Remembering Windows 2000
Windows XP even before SP2 was a _delight_ compared to the true train wreck that shipped on consumer PCs before it: Windows "Mistake Edition" Me.
erichurkman··on GE Fridge DRM Workaround
Don't forget to account for planned obsolescence. If a fridge lasts 10 years, what happens when GE stops producing those filters? You start looking at new fridges. The GE fridge pissed you off, so you upgrade to Fisher & Paykel… turns out they are produced by the same company, so they don't care that GE 'lost' a customer.

( https://en.wikipedia.org/wiki/Haier )

erichurkman··on Ask HN: Which tools have made you a much better programmer?
Your preferred language's debugger. It really does show in coding interviews who has control over their environment and can debug rapidly. It doesn't matter if it's rudimentary pdb (basic python debugger) or LLdb, understanding how to structure code such that it's easily testable -and- debuggable is a hallmark of a senior developer.
erichurkman··on How Google Meet's noise cancellation works
We rolled out https://chrome.google.com/webstore/detail/nod-reactions-for-... to all of our devices. The quick 'raise hand' button is great for what you're looking for.
erichurkman··on Lemonade files S1
Does anyone know what an insurance agent makes? If I go to my local State Farm office to get a home owners policy, what is the cut that goes to the local office/agent?
erichurkman··on 'Dord': A Ghost Word
I wonder why they didn't just adopt it as a fictitious entry?

https://en.wikipedia.org/wiki/Fictitious_entry

erichurkman··on Ask HN: Who is hiring? (June 2020)
Maven Clinic | Infrastructure, Engineering, React Native | New York, NY | REMOTE | https://www.mavenclinic.com

What we do: provide high-quality personalized care using care advocates and telehealth / telemedicine for women and their families. Our current focus is on those who are pregnant, trying to become pregnant, or recently had a child (inclusive of adoption and surrogacy). We provide companies and their employees personalized care programs to drive better clinical outcomes (like reducing c-sections or NICU time), better paths back into the workforce through career coaching, and help navigating complex healthcare concerns. Our clients range from small groups all the way to Fortune 50 companies.

Who we are: a healthcare startup in New York (NYC), funded by top tier investors (Sequoia Capital, Oak HC/FT, Great Oaks, Female Founders Fund), Series C, growing across all functions. Roles:

* Senior Software Engineer (Python, Flask, SQLAlchemy backend, React frontend): https://boards.greenhouse.io/mavenclinic/jobs/4243383002

* Senior Site Reliability Engineer (Kubernetes/k8s, Terraform, Google Cloud Platform, Gitlab): https://boards.greenhouse.io/mavenclinic/jobs/4500865002

* Others, including non-technical & leadership roles: https://boards.greenhouse.io/mavenclinic (Growth, people, sales, product management, design, client success)

Join us to have a human impact on an underserved segment of people: women and families.

Contact: hn@mavenclinic.com

erichurkman··on Walmart says it will discontinue Jet
> The Target experience is great even if they don’t have the same selection Amazon does.

Sometimes this is nice. If I'm buying paper towels, I don't need to be overwhelmed with 800 options.

erichurkman··on Uber cuts 3000 more jobs, closes 45 offices
Maybe that's why Welch said to measure against GE's future leaders if they are destined to forever underperform the S&P. :)
erichurkman··on Uber cuts 3000 more jobs, closes 45 offices
To read that quote differently:

1981 • Jack Welch becomes CEO • $1.29 2001 • Jack Welch retires • $37.20 (down from its peak of near $60.00 in mid 2000) 2020 • Nearly 20 years post Jack Welch • $6.28.

20 years of Jack Welch - +2,800% increase 20 years after Jack Welch - -83% decrease

erichurkman··on Students think the College Board is running a Reddit sting
This is the same reason I offer candidates remote screen share-based technical assessments. Part of what makes an effective engineer is mastery over tools: by putting you into Coderpad or Hacker Rank type tools, I'm handicapping you.

Not everyone opts for that (maybe their local environment is messy, or they only have a locked down work device, etc), but I always make it an option.

I've learned many things over the years watching other experts in their local environments as an interviewer. New packages, new shortcuts, new helper apps, ...

erichurkman··on What Peak Hello World Looks Like
This was a lot more fun before Github started collapsing directories of one item!
erichurkman··on Text exceeding maxlength will no longer be truncated when pasted in Firefox 77
Now how can we reclaim `onpaste` events? If I'm in an input box and paste text, are there any legit use cases of _blocking_ paste of text in text entry fields?
← PreviousPage 3 of 25Next →