idkyall

At a high level it's possible to alarm on data egress, but at the same time it depends on the type and degree of compromise we're discussing and how the attacker exfiltrates the data. If an intruder isn't detected, they could slowly egress the data to borrowed residential IPs, rather than a giant multi TB transfer that might set off more obvious alarms. For a large enough organization with substantial outbound traffic to start, it can become incredibly hard to distinguish from legitimate activity.

Usually, at large enough corporations, it's one of two things. Some random project gets open sourced, and it ends up on Github(see, for example, Salesforce) - or, more commonly, some subsidiary or acquisition had github and has either refused to migrate to the internal source system or the hassle of migration isn't worth it.

Radar improvements have also propagated to consumer fields. You can buy a mmWave presence sensor for smart home purposes for ~$40 on Amazon, and the raw sensors for $2-4 in bulk from Aliexpress. I remember seeing tech demos of mmWave in college used for imaging humans through tent fabric and dust storms, and now they're cheap enough you could put one in every room of your house.

Check out signoz: https://github.com/SigNoz/signoz

OSS o11y platform built on clickhouse & otel.

Someone can likely give you a more technical explanation - but to give an anecdotal example, my parents have German Shepherds which are grazers. They put a few cups of food in their bowl in the morning, and the dogs will eat throughout the day as they're hungry. They like treats, sure, but I wouldn't call them food motivated. My dogs are lab mixes, and if food is out they'll sniff it out and immediately scarf it down. When one was younger, if we left food on the counter or table while he was home alone, he would jump onto the counter and eat it. I would call my dog very food motivated.

Supposedly IQ test have a slight positive correlation with workplace performance. I could see leetcode skills(or, put more broadly, algorithms knowledge) having a slight positive correlation with job performance, but as everyone knows it doesn't guarantee someone is a good or productive developer.

The flaw with the metaphor is that you can study for leetcode, whereas supposedly(can't find a good source on this) you can't really study for an IQ test. I had a weak comp sci background when I started doing leetcode interviews and would struggle with questions. I spent several months studying CLRS, cracking the coding interview, etc., and now I would say I am fine at most problems up to medium complexity.

I believe there were rumors they are developing a commercial model: e.g. https://www.ft.com/content/01fd640e-0c6b-4542-b82b-20afb203f...

Plus customer facing employees aren't just the people in the branches, there's a massive volume of phone/email/etc support any large credit card issuer receives on a daily basis.

After 5 years of this law being in effect, will the numbers balance back out to pre section 174? That is, does that deduction from year Y carry over into year Y+1, Y+2, etc.?

I mean, this probably still matters a lot for startups given their shorter lifetimes, but it seems any large company(I'm thinking of, e.g. Apple, who has plenty of cash on hand) that's been around for a while could just wait it out? I am not familiar with corporate tax law and how deals are structured, but could you also defer revenue in the same way to offset(e.g. customers with a 5 year contract paying progressively more but keeping the same total $ amount to sync with your deductions)?

It'd be neat if the software was opensource and you could point this device at your own LLM, then at least you'd have some assurance it won't be e-waste if the company shuts down.

But I don't see a world where you can feasibly support the required infra of providing LLMs for your users with only hardware sales as a revenue stream. Their website specifically calls out that there is no subscription fee, so either they'll introduce one later or something else will need to be the other source of revenue.

Honestly in my experience every company I've worked at has had some kind of explicit cybersecurity policy or training telling us not to use USB drives, so from a CYA perspective I think I'd be very hesitant to plug one in to a work laptop at all. But I have only worked at massive corporations, so my experience is limited

Yeah, you'd think if he had a legitimate need for USB storage then work would issue it to him right? And then in that case, if he was using a work USB storage device with his personal computer for personal data storage, then that's an issue in its own right, regardless of what the data is, but it seems it would be more straightforward to just say that.

Philadelphia metro area has very weak wages compared to most other east coast cities for tech. We don't have much of a FAANG or tech company presence here to bid up market salaries(outside of a couple of satellite offices in the suburbs). I can tell you from my network that with ~6-7+ YoE you can earn about ~180-210k counting base & bonus at most of the banks or financial firms as a new hire at the VP or tech lead level.

I believe teamspeak is also pretty popular in the milsim community due to its support for mods in games like Arma 3

Probably from the RPI perspective it's just due to product segmentation. The Pi Zero 2 W is ~$15, has 512mb ram, and runs full linux with wireless compatibility, video output, etc. Easier to up-sell you on that rather than try to bridge the gap with a $10 product between the two.

I think the Pico/RP2040 works great for most basic electronics projects, and honestly you can get surprisingly far with its processor, up to even basic 3d graphics.[1]

[1] https://sites.google.com/site/tedrossin/home/electronics/ras...

Very excited for access to more RAM in a consumer form factor - by comparison, the most RAM you can get on a DDR5 motherboard is 128GB(actually, there may be 48 GB modules as well, so maybe 192), but at that capacity you're not getting anywhere near the rated speeds. The listed 1TB of capacity sounds super roomy by comparison

Well - since it's open source, theoretically you can build it yourself and "trust but verify" the audit, although there we're also assuming you trust your own judgement or that of your security team.

This is somewhat similar to the model we do at my current employer: ~4-5 days in office every 4 months. I would say it's definitely way preferable for me vs having been fully remote without yearly gatherings.

Anonymity can be both a good and bad thing. I think people are more willing to share their real thoughts in an anonymous Blind discussion than on somewhere like Glassdoor. The downside is the relentless trolling and focus on TC.

From what I've heard, I believe they are paying market rate for the new role, so for people who have been at the company for a while and stagnated in the pay bands it can be a raise

That's true, it's misleading to say this is a mistake only junior engineers make. Perhaps the real lesson is in having the maturity to put your ego aside and reflect clearly on whether you are solving the right problem in a sustainable way before jumping into the how.

I think one of the biggest growth areas for junior engineers to reach mid-level and senior is recognizing when you're re-inventing the wheel. E.g. If you are given a programming task to do anything related to Excel or the Microsoft Office suite, it's worth googling it first, because some engineer somewhere was probably tasked with doing the same thing a decade ago and has written a blog post or made a GitHub repo for it.

I'm really curious where the 0-day is in the code of the project honestly

Well - since he did say they were mostly people with the title 'scrum master' or 'agile coach' defending it, perhaps a better phrasing is "people whose livelihoods depend on it" :)

I think there's a bit of selection bias here in that only people who are either very enamored or very unhappy with scrum are going to respond to a hot take on twitter.

But, that's besides the point. Scrum doesn't exist to make developer's lives easier. In my experience as a SWE in a scrum team, devs have basically always felt like our time is being wasted in meetings.

Scrum, imo, exists so that management and business stakeholders can have an understanding of how efforts are being allocated and give feedback on it. There's still plenty of ways this can go wrong, and I agree with others that the short sprint cycles of 1-2 weeks lead to the extra overhead of too many ceremonies, but I think for the average business stakeholder it probably gives a better result than waterfall.

I am not sure on all of the details as it seems most of the reporting on this is based on rumors leaked from Blind, but from what I understand, there is both RTO and ReturnToTeam at Amazon. RTT means you need to be in the same hub as the rest of your team[1].

So people may be within range of an Amazon office, but being asked to re-locate to another hub entirely if they joined or transferred to an org or team without a presence nearby.

I think for those who were in person prior to the pandemic there is little recourse, but as I understand it, there are also people were hired as fully remote during the pandemic who are being asked to relocate[2]. I believe exceptions are not allowed unless you are L6 level or above.

[1]https://www.pymnts.com/news/payment-methods/2023/rising-use-... [2]https://www.reddit.com/r/ExperiencedDevs/comments/15ttywo/am...

One quote I took issue with, when discussing the Axios article,[1]:

>I could first point out that it is not often 69% of businesses adopt any technology simultaneously.

AI has been a buzzword talked about by executives for at least ten years now. The same issues with data organization and labelling were being explained to executives 5 years back [2] and are still relevant today. LLMs are a jump forward in NLP which enables more use cases in business, but AI and its adoption challenges are not new.

[1]https://www.axios.com/2023/08/19/ai-corporate-barriers-cost-... [2]https://www.mckinsey.com/capabilities/quantumblack/our-insig...

Yeah, I've reported a few ads for drugs that have shown up on marketplace. I usually don't hear back, and actually in one case they responded saying the content was fine. Facebook ads seem to really be fairly lawless, I'm not convinced there's actually a human in the loop even after reporting.

Here's an ad for a Bitcoin doubling scam, complete with "Tesler" instead of "Tesla", and including a pic of Elon Musk: https://www.facebook.com/ads/library/?id=308770845058112

Plenty of other scams are freely advertised as well: https://www.theguardian.com/technology/2023/jun/16/crypto-sc...

I believe you're thinking of jet.com? they used to give a % discount if you waived the right to free returns[1]

[1] https://www.enzasbargains.com/jet-com-return-policy/