HNHacker News
TopNewBestAskShowJobs

mitchellst

306 karma · joined March 23, 2016

submissionscomments
mitchellst··on Senior devs. Is anyone else insulted by coding exams?
Hiring manager of hiring managers here. This thread is full of managers pointing out it's hard to work without the tests and IC's who don't have much empathy for the constraints managers are under.

Basically, getting a job for a senior developer is the easiest thing ever to require so much work. You're in hot market demand, but if you spread your search out to include multiple companies, the hours of screenings, interviews, paperwork, and coding challenges start to really add up. Clearly that's frustrating.

For managers, hiring a bad fit is simply disastrous. Turning around and firing them is never easy. Yeah, it's slow, and that person drags your team while it happens. If you can make it fast, that has its own affect on your team culture. I understand this is an unsympathetic observation, but: firing people is emotionally hard on managers. So, yeah, we'd rather pick right the first time than play a "fire fast" iterated numbers game.

I'd propose that the existence of the test isn't the problem, it's all the stuff around it. As a hiring manager, my job is to ask you to do this thing you don't want to do, and to explain why it's important for the company and the team. This is the first time, but not the last time we'll have a conversation like that. You should note whether or not I'm good at it and whether you'll tolerate that kind of thing from me. Because as an employed engineer you'll end up tolerating those requests from someone.

As a candidate, you can stand out by making a deal. "Hey, I'm really excited about this opportunity. But I have several companies in my process plus I'm still employed at my current job. I understand your side—a resume doesn't always tell you if someone can code, and I definitely don't want to work with other people who can't pass something like this. Still, I need to manage my time well, and this is too much. Is there any way we could cut the size of the challenge in half? Or, I've got an open bug on an open source project I contribute to. Can I work on that, put in a PR, then discuss that in the interview? Trying to get us both what we need here. Thanks."

Personally, I'd respond really well to a discussion like that, and I think all my hiring mangers would. And the discussion itself would make me want to hire you more: you're a team player, you're transparent, you aren't dismissive of me but you'll advocate for yourself.

mitchellst··on Node.js adds support for direct registry-less HTTPS imports
The argument is less about central authority than standard process. You don't have to use the official NPM registry. The point is that having a pipeline for modules with established conventions and automated means of audits and visibility on the dependency is a net good. Yes, there is such a thing as a supply chain attack. But even when that happens, the community puts out the call to patch immediately and points a finger at the offending package. Your HTTPS import from a random URL could fail silently. While NPM is a big target for supply chain attack, they know they are, so there are a lot of eyes on it. Not so with your HTTPS import.
mitchellst··on Node.js adds support for direct registry-less HTTPS imports
Longtime node.js developer... I don't think we need this, and I don't think it's a good idea to add.

The feature is _strange._ Which we know because it's behind a flag, i.e., it will have low utilization. It defies conventions—because the convention is to use a registry for packages. And it presents significant security concerns. (Which I don't really have to explain, as they're already cited as the reason to put it behind a flag.)

Use of this feature seems like something you might see once in a career. (Indeed, I've seen a similar thing in another language employed only once... AND THERE WERE OTHER WAYS for that developer to have designed that system that would not have been so vulnerable.) When you see it, do you recognize what it is, understand and evaluate the risks it poses? Do you validate that the library sitting on the other side hasn't been taken over by a malicious actor? Do you validate that the library on the other side has up-to-date dependencies? If so, on what cadence do you do this, realistically?

All the security tooling progress we've made (npm audit, etc.) seems shot in the foot by this. And I get that these concerns aren't dispositive on their own. I just don't see the argument on the other side that clearly. Is there some class of application that people really want to write in node that can't be written for lacking this? Do we really think this is a pattern that would be employed in well-made, secure codebases? I don't see the argument. Like I said, I've seen a feature like this used in another language. But I haven't seen it needed for any real application.

I love me some good node ugly hacks. Still, the language features should be nudging us to write good software.

mitchellst··on Ask HN: Best way to host a website for 500 years?
These were such legit books. This description, in context, being like... the 5000th reason why.
mitchellst··on Bitcoin mining has driven up energy bills for residents and businesses
What I probably should have said: "maybe it will be fine, resolving itself with more clean energy and more electric grid capacity in mining-heavy areas, or more clever crypto tech. Or maybe we have a persistent incentives problem where the group that reaps the benefit (Silicon Valley inventors, Wall Street speculators) are distinct from the groups that bear the costs (including people near the welfare line in mining-heavy areas). A persistent incentive problem that isn't solved in relatively short order by general material abundance would be a case for regulation.

... better?

mitchellst··on Bitcoin mining has driven up energy bills for residents and businesses
It's a good question without an obvious answer. Best reasons to think it might be.

1) It's not evenly distributed over 330M residents. It's concentrated in certain areas, and we don't have a single nationwide electricity market where supply and demand operate. So it is concentrated in places like Upstate New York and Texas. Spread over few people.

2) It's priced into a daily necessity for people. The poor are the ones with difficulty paying electricity bills, so while $5 or $20 or $50 on an energy bill may not sound like a lot to some people, it depends on your economic situation. So, it's regressive.

3) Crypto mining is a growth sector. The figure is $1B now. Crypto is still growing and we still haven't seen the full effect of bans in China, which are fairly new. True, US power infrastructure is growing... but so is uptake of electric vehicles. (Another keen interest of the professional class.)

So we have a question of whether supply can keep up with demand, with the solvency of working class families hanging in the balance while that supply/demand problem works itself out. Maybe it'll be fine. Or maybe crypto warms the planet and hurts poor people in service of a neat intellectual toy and speculative asset for the Silicon Valley / Wall Street set.

mitchellst··on Launch HN: Fella (YC W20) – Tackling men's obesity using medication and coaching
Yep, exactly.
mitchellst··on Ask HN: Who is hiring? (September 2021)
The Points Guy | Engineering and Product Analysts | Austin / Charlotte / New York / Remote US | Full-time | https://thepointsguy.com

Hiring for:

* Engineering Manager, Travel APIs team

* Backend Engineer, Travel APIs team

* Senior Android Engineer (Kotlin), Travel Mobile Apps

* iOS Engineer (Swift), Travel Mobile Apps

* Performance Analyst, Travel Mobile Apps

Give me a shout with "Hacker News" in the subject line. mitchell.stoutin@thepointsguy.com

mitchellst··on Launch HN: Fella (YC W20) – Tackling men's obesity using medication and coaching
Wow. This is really interesting and important. I’m not your target customer and don’t know a ton about health tech, so I’m not sure I can help you, but I wish I could. thank you for taking this on. Someone should. Sometimes the science and medicine is there but branding, marketing, and positioning in a bigger value prop aren’t things that doctors and hospitals are prepared to handle at scale. So, this is cool.

I do know one thing about your space, from pure happenstance. I live in Texas and my wife is a fourth-year medical student here. One of her profs is a bariatric surgeon and she spent time in his clinic. One of the interesting things she learned was the correlation between weight loss for one adult and weight loss of a household. I don’t remember the exact stats, but this doc would have whole families weigh in at his clinic, before and after. The results were astounding. The person who got the surgery would often lose only the plurality of the weight, and sometimes not even that. It’s something to consider messaging around as you target men and try to get through the stigma to persuade them to seek treatment. You are doing something good for your family; this is about more than just you. Texan men in particular are likely to hold more traditional values about being the head of their household, however unfashionable that may be. Help these fellas— and help their families.

mitchellst··on Red Ventures has turned very specific advice into very big business
RV employee here, so take this as you will but... this comment is baffling. RV does not own or operate A Place for Mom. One of the private equity firms that owns a stake in RV also has a stake in A Place for Mom. Not the strongest connection in the world. RV bought Bankrate, Inc in 2017 (the acquisition through which I joined RV, in another division) which owned Caring.com. Because of the investor connection, RV never integrated Caring and sold it off immediately. So, maybe the senior care industry has some awful practices. But... RV does not do business in that industry. This is really what you hold against us?
mitchellst··on Red Ventures has turned very specific advice into very big business
"Company store" vibes aside, it's a really practical way to graduate from college and relocate to your first job without a cash / debt crunch. Also, I'm an RV employee who works in our Austin office, and having visited our Charlotte HQ, it's pretty inconveniently located and far away from things. Seems like there aren't many great apartment options available nearby. We know how it looks and we joke about it sometimes, too. But really, it's practical and lowers the barrier to entry for people into their first job, so I actually think it's pretty cool.
mitchellst··on Who Owns My Name?
Not a lawyer, but from my understanding of libel law, the "public figure" thing isn't the problem. Merely being famous (and famous for being falsely accused!) won't necessarily make you a public figure for libel purposes. But there's another part of the standard: a defendant must knowingly say things that are substantially false. Referring to Ms. Knox as a "convicted murderer" in a news article, for example, is deceptive in context but it is technically correct. She was convicted. And then on the movie side, it's explicitly fiction, and the character does not share her name. So they can claim the defense that any "false" claim is about their invented character, not about her... and by the way, they have lots of first amendment juice for artistic expression.

In the end, you're right. It's a sad story, but she doesn't appear to have legal protection from libel law. The filmmakers should probably be ashamed of themselves, but you don't make a Matt Damon movie without a go-ahead from some high-priced lawyers who know they're in the clear from a liability standpoint. Though, ethics perhaps weren't considered...

mitchellst··on Launch HN: Hera (YC S21) – macOS app to prepare, join and take notes in meetings
Thanks for the response, and the link.

The trouble with this method is that it creates a publicly-accessible, unauthenticated feed of my calendar and all the event data in it. I don't deal in a lot of particularly sensitive trade secrets, so I'm less concerned than others on this thread about the notes being unencrypted in your cloud. Encryption would be great, but I have a reasonable expectation that you're not just letting anybody who finds it scoop up your whole database. But that's what publishing a calendar feed does. I can't leave an open door to the internet (however obscure) to all the potentially confidential information that someone might send me as part of an event. I'll have to wait for "real" exchange support.

mitchellst··on Launch HN: Hera (YC S21) – macOS app to prepare, join and take notes in meetings
I'm very interested in this. I think I'm the target customer and the loom demo made me think, "I need this." I work for a big company and have many meetings with many different stakeholders, and I love the incremental adoption where I don't have to persuade the company to buy something, I can just get it and plug it in for myself.

I have a blocker on plugging it in, though: we're a Microsoft Exchange shop. Now, it's easy to sync Exchange to my Mac calendar, but it is not easy to sync Exchange to Google calendar. (Googling, seems like the most reliable way is to PUBLISH your calendar... something I don't think my security / IT folks would appreciate.) I could also use Zapier it looks like, but I'd quickly run over the 100 tasks/mo in the free tier.

I have nothing against electron—power to you for solving a real problem I have, and using javascript to do it quickly. But I do think popping open EventKit to hook into the system calendar would be a solid next feature. Then people like me who are locked into Exchange will be able to use your product without ugly/brittle/security-degrading hacks.

mitchellst··on Ask HN: Who is hiring? (July 2021)
The Points Guy | Engineering and Product Analysts | Austin / Charlotte / New York / Remote US | Full-time | https://thepointsguy.com

Hiring for:

* Senior Fullstack Engineer, Travel Authenticated Experiences

* Frontend Engineer, TPG Site

* Engineering Manager, Travel APIs team

* Backend Engineer, Travel APIs team

* Senior Android Engineer (Kotlin), Travel Mobile Apps

* iOS Engineer (Swift), Travel Mobile Apps

* Performance Analyst, Travel Mobile Apps

* Customer Experience and Operations Analyst, TPG General

* Customer Support Associate, TPG App

Give me a shout with "Hacker News" in the subject line. mitchell.stoutin@thepointsguy.com

mitchellst··on Ask HN: Who is hiring? (June 2021)
The Points Guy | Engineering and Product Analysts | Austin / Charlotte / New York / Remote US | Full-time | https://thepointsguy.com

Hiring for:

* Senior Fullstack Engineer, Travel Authenticated Experiences

* Frontend Engineer, Travel Authenticated Experiences

* Senior Frontend Engineer, TPG Site

* Frontend Engineer, TPG Site

* Engineering Manager, Travel APIs team

* Backend Engineer, Travel APIs team

* Senior Android Engineer (Kotlin), Travel Mobile Apps

* iOS Engineer (Swift), Travel Mobile Apps

* Performance Analyst, Travel Mobile Apps

* Customer Experience and Operations Analyst, TPG General

Give me a shout with "Hacker News" in the subject line. mitchell.stoutin@thepointsguy.com

mitchellst··on AMP pages no longer get preferential treatment in Google search
The coverage of this has, I think, been misleading. Google has not officially said (anywhere I can find) that AMP won’t get preferential treatment. They have only said that AMP won’t be required to rank. Those are very different statements. “Sure, we will include a few non amp stories,” is different from assurance that you will not be punished if you remove amp support from your site. The second one might be true— but Google hasn’t confirmed it.
mitchellst··on Ask HN: Who is hiring? (May 2021)
The Points Guy | Engineering and Product Analysts | Austin / Charlotte / New York / Remote US | Full-time | https://thepointsguy.com

Hiring for:

* Senior Fullstack Engineer, Travel Authenticated Experiences

* Senior Frontend Engineer, TPG Site

* Senior Frontend Engineer, Travel Authenticated Experiences

* Frontend Engineer, Travel Authenticated Experiences

* Frontend Engineer, TPG Site

* Backend Engineer, Travel APIs team

* Senior Android Engineer, Travel Mobile Apps

* Performance Analyst, Travel Mobile Apps

* Customer Experience and Email Analyst, TPG Site

About the teams:

Travel APIs is our core backend engineering team, responsible for developing capabilities that make the award travel ecosystem computable, thereby enabling our users to travel smarter. In practice, this means wrapping expertly crafted code around flight schedules, booking and routing rules, loyalty programs, credit card features, and partner API integrations. We build for security, reliability, fault-tolerance, and performance. It's a polyglot team that chooses the right tool for the job, working in java, node.js, and golang. Creating these products involves a lot of data, and while this isn't a "big data" or data engineering job, it's certainly medium-size data. Strong relational database skills are a must, and the ability to explore different datasets and relate them together will serve the team well. If you're not very familiar with AWS, that's OK... but you will become quite familiar with it.

Travel Mobile Apps exists to build mobile apps that delight our end users and make them smarter travelers. The mobile team works closely with the Travel APIs team to implement our capabilities in beautiful, useful mobile apps. The forthcoming TPG mobile app will launch this summer for iOS. Up to this point, we have been iterating and testing with users on a single platform in order to speed up development. Now, we're looking for an experienced software architect who can introduce us to the Android ecosystem and help us reach a wider market.

Travel AuthX is our web applications team, dedicated to front end consumer-facing experiences. The TPG web application is still in its planning phases, but this team is also responsible for launching the new website for our sister brand, ExpertFlyer, which is already in beta and nearing production-readiness. AuthX partners closely with the Travel API's team, but it takes an expansive view of "front end," with some backend APIs under its ownership in order to allow the team to iterate and test consumer features quickly and autonomously. Our tech stack is React/Redux, Node.js, Golang, and Aurora RDS. This is a newly formed team built around a collection of hand-picked leaders from our organization, and we intend to move quickly on some big goals as the travel industry comes back to life.

If any of this excites you, give me a shout with "Hacker News" in the subject line. mitchell.stoutin@thepointsguy.com

- Mitchell Stoutin, Sr Director of Engineering, TPG & EF

mitchellst··on Ask HN: Who is hiring? (March 2021)
The Points Guy | Engineering, Product Management | Austin / Charlotte / New York / Remote US | Full-time | https://thepointsguy.com

The Points Guy is an online magazine and digital lifestyle brand focused on award travel. We're currently developing an app that takes our brand's decade of editorial expertise earning and burning points and puts it in the user's pocket. Come make travel computable as the industry comes back to life.

Current Openings:

* Backend Engineer, Travel APIs team (Java/Spring, Golang, Node.js, Postgres, AWS)

* Senior Mobile Engineer, Android (Kotlin)

* Front End Engineer, Content Publishing (Wordpress, Front End, Martech integrations)

* Senior Front End Engineer, Content Publishing (Wordpress, Front End, Martech integrations)

* Product Manager, mobile apps - Launch and iterate a brand new big-budget product this summer.

* Data Analyst, mobile apps

Let's talk. Shoot me an email with Hacker News in the subject. mitchell.stoutin@thepointsguy.com.

mitchellst··on Ask HN: Who is hiring? (February 2021)
The Points Guy | Engineering, Product Management | Austin / Charlotte / New York / Remote US | Full-time | https://thepointsguy.com

The Points Guy is an online magazine and digital lifestyle brand focused on award travel. We're currently developing an app that takes our brand's decade of editorial expertise earning and burning points and puts it in the user's pocket. Come make travel computable as the industry comes back to life.

Current Openings:

* Backend Engineer, Travel APIs team (Java/Spring, Golang, Node.js, Postgres, AWS)

* Senior Mobile Engineer, Android (Kotlin)

* Front End Engineer, Content Publishing (Wordpress, Front End, Martech integrations)

* Senior Front End Engineer, Content Publishing (Wordpress, Front End, Martech integrations)

* Product Manager, mobile apps - Launch and iterate a brand new big-budget product this summer.

* Data Analyst, mobile apps

Let's talk. Shoot me an email with Hacker News in the subject. mitchell.stoutin@thepointsguy.com.

mitchellst··on Justice Department Sues to Block Visa's Proposed Acquisition of Plaid
- Plaid is hardly alone in its competitive space. Even if Finicity sucks and SynapseFi is mid-implosion, they don't have a corner on capabilities like this indefinitely. MX is pretty alright.

- That ignores FANG platforms that could implement similar money-moving features.

- Stripe trotted out their "Banking as a Service" APIs today.

- Let's not forget the Chinese giants that have obviated the day-to-day need for credit card networks in their country, whose strategists (and imitators) are eyeing global markets.

If Visa's approach to this competitive threat is really acquire-and-kill, I hate to break it to them but... not even they can afford it. With all the innovation and competition in the space, best case scenario is that they bought themselves a year. And it turns out that, oops, Plaid wasn't even the closest. Stripe was.

The case for monopolistic harm is slim. Even if there was monopolistic intent, it was probably incompetent.

mitchellst··on Disclosure: Unlimited Chase Ultimate Rewards Points
> Yes, he returned it all. Yes, he had no intent to keep it.

The post doesn't actually confirm this. Might that be the problem?

mitchellst··on Ask HN: What did you purchase that measurably improved your quality of life?
I like a lot of things I own, but the possession that rise to the level of _measurably_ improving my quality of life almost all have to do with being a parent.

Happiest Baby SNOO - because you only sleep when they sleep. Measured as, "no longer too sleep-deprived to conceptualize measuring this."

Arlo Baby connected monitor - I get a push notification when my baby cries, so I don't have to stay within earshot. Measure in allowable distance from sleeping child, allowable headphone volume.

Thule Chariot Lite double jogging stroller - The fitness advantage is obvious. Less obvious is the advantage for wrangling two young kids in airports, giving one at a time an enclosed, dark place to nap on layovers. Even better, we did a weeklong hiking trip (Sitka, AK) just renting bikes and towing the kids around to hiking trails. We left the carseats (which they detest) at home.

And, take with a grain of salt because I work in this industry, but: transferrable point credit cards (Chase, Amex) have saved me more than once. Last Christmas, circumstances forced us to book late. Ticket prices to get the family home were in the $700+ per seat range, just for a little domestic hop. Measured benefit: my Amex points were worth about 5 cents each for that one. You have to learn a bit about how to use them, but you can see the world... or just see your family.

mitchellst··on Ask HN: I can't do development any more, what should I transition to?
My advice would be to think about what you do want out of work. You can straightforwardly make that money as a math teacher, a welder, a healthcare administrator, a banker. All of those are “less technically demanding.” Hell, you can make more than that as a truck driver, if you can handle hazardous materials. Some of those options may be attractive to you, others not. Ask yourself why you feel the way you do about each, and work from there.

Another thing, though. Depending on how old you are, 7 dev jobs is a lot of dev jobs. You should consider whether you think the technical demands are really what’s making you unhappy. Because that many changes, depending on career length, suggests maybe you’ve given up too easily on a few. A successful career change requires both optimism and commitment. So keep your chin up, zero in on what you do want, and consider whether leaning into your current career and doubling down on your commitments could get it for you. Otherwise, best of luck. Go pick up a welding torch/green visor/trucker hat.

mitchellst··on Mozilla letter to Amazon Ring: stop sharing information with police
A really odd post. I am open to the argument but don’t think Mozilla makes it here. The only piece of evidence they cite for harm— hyperlinked to the phrase “facilitate racial profiling”— leads to a think piece by someone a little creeped out by posts on Nextdoor, which doesn’t mention Ring at all.

I get that people don’t love surveillance. But the evidence is not here that a homeowner or renter’s decision to install a cloud-connected security camera on private property makes them or their community less safe. Unless you make a slew of assumptions that go undefended here, namely: cops are natural aggressors, having these cameras will attract cops, and the harm which these aggressive cops are likely to cause when attracted is greater than the combined deterrent effect of the camera’s presence against other crime + their value for genuine investigative work on crimes which were not deterred. Again, I’m open to the argument, but you need to present really good evidence, not just virtue signal. Because I don’t like getting packages stolen off my porch, and Ring seems like a straightforward way to prevent that.

mitchellst··on Ask HN: Great fiction books that have had a positive impact on your life?
It’s interesting— I would say white noise had a positive effect on my life, but I’m not sure i would recommend the book. Part of the reason it was good for me was how powerfully I disliked it— and needing to question the reasons for that dislike at the time.
mitchellst··on Launch HN: SannTek (YC S19) – Breathalyzer for Cannabis
> It’s obvious that the police will want a device that produces more convictions, no point in disputing that.

Is that obvious? If this were as overwhelming an incentive as you say, we wouldn't have accurate breathalyzers for alcohol. But we do, and it's simple to see why. 1) Cops aren't the only customers; medical establishments, individuals, and workplaces also have a legitimate interest in measuring impairment. 2) Tech like this doesn't remain novel forever, it can be checked for accuracy, and if you made a device that exaggerated impairment your reputation would tank, your company name would become a political hot potato, and your sales would never materialize. 3) There is definitely a point in disputing the idea that cops are indiscriminate gangsters roaming the streets trying to lock up any citizen they don't like the look of. Police have their personal and institutional biases, but by and large, most are interested in tools that allow them to safely and fairly administrate the rule of law. Police don't have much career or institutional incentive to arrest someone for a DUI at a traffic stop or not—they just stop bad drivers and check. It's prosecutors who are trying to rack up conviction numbers as a matter of career advancement and political viability. But even that gets checked: their work will be subject to an adversarial legal system, at which point any evidence that the device doesn't work would come out in court and tank their conviction rate.

So... where do you see perverse incentives here, again?

mitchellst··on It's Gotten Too Hard to Strike It Rich in America
I stopped reading at the date ranges. It’s comparing the decade 1983-93 (start at recovery from long recession, measure across famous economic boom with only short 1990 downturn) versus 2003-2013. (Oldish data anyway and measures across the famously deep 2008 recession which had an unusually slow recovery.) and you want to make a point about economic mobility and inequality in 2019 with this? We may have problems with economic mobility but this is a very bad version of that argument.
mitchellst··on Show HN: What's My Aircraft?
This is kind of cool but there are other good tools for it, as commenters mentioned. (Seatguru, FlightAware.) I think the missing feature there is simplicity and “so what?” Tell me why my a321neo is so cool, how to tell it apart from other planes when I see it on the tarmac, when it was designed, how many are out there, which airlines operate lots of them. Others will beat you on feature richness, but I just want an app I can use to teach my kids about planes, and geek out on them myself.
mitchellst··on From Graduate School Student to Amazon Warehouse Janitor
Yes, life is bigger than commerce. But your comment makes me wonder, "then, whose art should we value?" It's not that the US doesn't value art— highbrow or low brow, we have some of the finest museums of visual arts and the biggest of big-hair country music. We (more than) adequately finance both. Our resources, time, attention, and interest are finite, so how do you propose we choose whom to pay for their art? By MFA degree? School ranking? Random lottery?

Honestly, I'm sympathetic to the author, not least because I think there's some irony in the piece. She recalls mournfully the time she revealed on social media that she was at the edge of homelessness if she could not raise money. If that was painful for her, the impetus behind this essay is not as self-indulgent as it appears. She did not relish publishing this, rather, she did it because Slate paid her for it, and she's still trying to make her ambitions work. She may or may not yet succeed, but there's something admirable—and, one fears, perhaps pitiable—in her dedication.

← PreviousPage 2 of 4Next →