k4ch0w

Depends on what the sleep time is. If it’s after 1 minute, yes. After 10, I think that’s fair.

I think you don't have people teaching enough lots of low level coding in college is why. It used to be the first thing you had to learn in Linus's time. Now you use it for one class and use Python/Go/Java the rest of the time.

You pretty much have to seek out the knowledge regarding Operating systems in addition to taking on the challenge of learning something like C/C+ or Rust. You have to then break all the ways of thinking about your memory model after being given a GC language.

Understanding hardware is needed to debug specific CPU/IO issues that could be caused by assumptions or lack of knowledge.

Next comes learning the different algorithms needed by an OS in a new language and then implementing them. This takes a lot of time to get down correctly.

It's also a really small and niche community which means you don't have a lot of support from peers that understand the problems you encounter the community isn't an easy one to feel accepted into. It can be hard to get support because you need to be very detailed in your questions or you will be ignored.

LG WebOs does the same thing. I haven’t accepted the eula and stream from my Apple TV. However, a friend of mines wife did and now he has ads everywhere on it. I don’t understand how this is so normalized?

You actively have to work in order to block ads and trackers today. Its getting harder everyday. It’s so sad we have some of our worlds best engineers working on how to send ads to people. Our priorities are whack.

Great coloring I really like it :-D

I recently tried to use this library and had to go back to winapi-rs for the mean time.

The bindings to set it up gave hard to debug errors and there is no support for compiling the x86_64-pc-windows-gnu toolchain on anything else besides a windows system; Which makes sense but winapi-rs compiled on Linux so I stuck with it. I don't want to manage another build machine and I know I'm probably like the one guy.

Working with strings was a bit rough too, it'd be nice if you could just pass a CStr and call it a day instead of messing with buffers and lengths and double function calls, one to get size of the string and then another to fill the actual buffer. I know this is how Win32 works, but it doesn't feel natural coming from Linux Kernel Dev.

Regardless of my criticisms, I am excited to see the future of this crate. I think it's an awesome effort and a great addition to Rust and Windows.

That's sad man. RIP. It seemed like he was struggling with mental issues and addiction. God give me a sign is one of my favorites.

Success, money and fame don't magically fix you as a human. They help, but the human condition afflicts us all.

If I provide lunch via door dash and we just do it once a quarter does it really irk you?

I believe it's a good way to celebrate wins and everyone gets to take some time from work and just chill with each other. I offer the door dash regardless if you show up as there is no pressure either way for me, I'd just like to celebrate team wins.

Genuinely curious if this is bad because it feels forced? My team seems to enjoy it but maybe it's just bullshit.

I think we will see a shift where some companies continue paying current salaries, and others will do location-based. The companies who keep paying current salaries will see people with skill move to them.

If you're a great employee, you will still have people competing for you and I don't think this should concern you.

I agree with Davis. You spend more time managing low performers and put trust in your high ones. I'd just ping them on Slack or ask for a quick call. It's weird you, if someone is doing really well we talk about things other than work and work for about 5 minutes. Remember too, people are going through covid and it's a stressful time for everyone including your boss.

Anywhere but there. Who would seriously use them for their savings or investments after this? Who cares about their UI when they don’t have your best interests at heart.

It’s human trust. It’s a basic thing in all business dealings. Google has built this reputation themselves over the years by constantly sun setting new products. I mean there is a website showcasing it https://killedbygoogle.com. Google support is known for being notoriously bad and unhelpful. They are the first targeted tech giant going through new antitrust suits and who knows the outcome of them. Why would I trust a business I’d hope could be around for 10 to N years when AWS/Azure are around? Yes, the same could be said for them but the basic human element of trust is on their side.

Have you used Gchat for bots/search/threading? It’s awful. It is not a good chat app and hasn’t changed much in 4 years. It plays catchup with competitors. Teams is so far away from having good features and app integration; Everyone I talk to that used Slack hates it. It’s just that it’s free with o365 that it’s even used. Honestly, I want to remind people everyone said the same thing about Google buying YouTube and FB buying insta. Two large purchases that were so worth it for the companies.

Interesting, but it seems a bit behind compared to the market. I'd much use ClickUp as the UI is much more appealing. Notion/Airtable too. Feels a bit like Chat vs. Slack. I'd rather use Slack any day of the week because rather than just one Google team the entire company is working on improvements and will do better over time. Not trying to s* all over Google, but there are better options for that price point.

I'm on the side of sending the big list of vendor due diligence to a potential product. I know it's a pain to ask about GDPR, how you store/delete data, off board employees, is SSO everywhere, do you have 2FA and how you access your servers.

We try to keep a high standard of tooling to protect our customers and company data. It's really not about bogging you down, I know it sucks. It sucks hard. It's about ensuring when we upload data to your SaaS, we know it's in good hands that have been vetted.

The good news is, if you make it through it once other big companies start flooding to you as well and it becomes much easier to deal with them as you've been through the intensive process before.

I deal with a lot of deals and if you're building a startup up it's a lot easier to think about security at the start then retrofit and fix it all at the end.

Very common attack. It's called a subdomain takeover.

Based on my own experience with C/C++ projects are built with the assumption that you are on Linux. You have to do quite a bit of fangling to get it working with Windows, that it isn't worth the time. I don't want to setup mingw or cygwin to get things working for one weird library that's included.

I don't have a requirement to build for Windows, so I will always just avoid it. I think Microsoft is making strides in developer experience, but I think it also sees the signs that Linux/Containerization is the way forward thus why they built WSL. Azure itself is over 50% Linux now too.

Source: https://build5nines.com/linux-is-most-used-os-in-microsoft-a...

Yeah this one seems weird. I would think it's actually the inverse. I used to code a lot in Go two years ago, so I can't speak to it much today.

Lately, I'm all Rust. If you're on Linux, it's so easy going to get it all working right. Windows is a pain, so much so you end up installing WSL2 and just moving on with your day.

A good follow up to this post would be OpenSSL compilation on Golang vs. Rust on each platform. It's a fair test as it's widely used library with both programming languages and all the operating systems.

Yes, generally a security audit is worth it. I am bias as I am a security engineer and have pentested multiple companies during my career.

Theres a cost saving by designing things up front say for GDPR or handling credit cards safely that is worth investing in. Sometimes, a threat modeling session alone could save you time and money in the long term. It's harder to change things when you've built a product, have customers relying on it.

In terms of the actual product, you will have users, they will need to login/logout/reset passwords. Ensure proper authorization and authentication.

How are you handling logs, secrets, 3PP. Do you handle customer input, do you reflect it onto the page, store it in the database? Do you allow them to do HTTP requests? How do you prevent SSRF.

How are you protecting your code? Laptops? Do you have antivirus? Do you patch your infra?

These are the questions you don't really think about, however they can have real consequences if you don't.

In terms of who I'd recommend, you get what you pay for. Generally, I'd look for a small shop in your local area and vet them.

Yearly pentests are a +, and if you do go through an Acquisition or someone trying to whitelabel your product they will want the reports.

If you don't have any revenue yet, do check out OWASP top 10. Run scoutsuite on your AWS/Azure/GCP. Enforce MFA where you can, Github/AWS/Gdrive/O365. Setup SSO right away and just use that to login to all your infra and services. Will save you so much headache down the line. Make sure you keep your logs application and service logs. Try to aggregate them somewhere.

Ubuntu for day to day. I used to have a lot more free time and was able to sit at night and debug all the issues I might have encountered. Nowadays however, I just don't have the time like I used to and prefer things to just work.

If you have any sort of machine learning pipeline it can be especially frustrating to work with anything other than Ubuntu. Nvidia drivers :(. Arch is fine with it but upgrading again is just more time spent that I'd rather be busy researching.

I love Arch, I love the community and they have the best documentation. However, for me personally being on a rolling release is too time consuming :(.

Tableau does this

No one is thinking about you. That stupid thing you said in the meeting, the thing you did in middle school, that pimple on your face that feels huge. It's entirely in our mind and everyone else is too focused on themselves to ever see or think about the silly things you're embarassed about.

Bind your caps lock to ctrl+left/esc too. It's so much better than reaching for esc/ctrl all the time.

If you do this please make it stronger than password123, letmein, monkey12.

You know I think this is more common than you might think. I struggle with this also. I've found the best way to break out of the cycle is to just do begin. Visualize yourself looking like an idiot and realizing it's ok. Think about how many times you have been in a meeting and someone said something you thought was stupid and it went quiet. Everyone just moves on to the next topic, it's never a huge deal. Do people hold it against them? No. If it's reoccurring, that's a different story.

Read How to Win Friends and Influence People by Dale Carnegie. It's an old time classic with advice that is very much relevant today. With my own struggles I found The Road Less Traveled by Scott Peck also helped me.

You already say you're technically competent! You know you have the skills, what is it that you're really worried about when speaking? I think you need to ask yourself really what you think is going to happen. Think about times where you've spoken up and people ended up really appreciating your input. You've got this, you just got try a little bit every time you can.

Absolutely felt your pain too. So many nights trying to build the latest tensorflow package only to find out I couldn't run it on my current Cuda version, so I need to uninstall it, reinstall the new one only to find out I installed 10.0, then 10.1 but I needed 9. It was just so silly I ended up just never updating once it worked.

I had to go read the wiki to verify you comment, I couldn’t believe I saw conkers on there. It was one of my favorite games as a kid. It was brilliant and had so many reference to pop culture. They ended up remaking it on the 360 and it just wasn’t the same. The matrix fight was one of my all time favorites and same with saving private Ryan.

It's pretty much just talk about whatever is going on in the week. Some weeks are busier than others.

We usually talk about what's going on around the office, how the current project is going, what's going on with coworkers and what the plans in the future are. I will bring up blockers/promotion talks/holidays anything that I need his help with. We're pretty informal about it.

It all depends on the manager and their personality. I find it's better to be casual and not have a strict agenda though.

I just saw this on Reddit while looking at information regarding the virus. I was like no way that's a thing. I just tried it myself and it isn't there.

Hiring someone that handles my flaws. I'm really good at handling messiness and chaos, I can think big picture/long term but I really suck with details and organization.

I hired someone who is super detail focused and he's been amazing. He keeps meeting notes, tracks conversations, random suggestions and for funzies fixes my messy code.

I'd say this has had a huge impact on my own work, not necessarily for the larger team.

I had one for two years. I recently switched back to two 27' inch monitors and I won't ever go back. You'd need to tile it and even then it's not worth it. I don't recommend it, it's too clunky and big. If you're gaming or watching movies on it a lot it's cool, but for coding I'd pass.