HNHacker News
TopNewBestAskShowJobs

mooreds

96,653 karma · joined February 24, 2012

Solver of business problems, usually with software.

Senior Director, CIAM Strategy & Identity Standards at FusionAuth / https://fusionauth.io/

Personal site: https://www.mooreds.com, hn@mooreds.com, +1 720 560 8545 (email preferred).

@mooreds on Twitter. https://bsky.app/profile/mooreds.com on Blue Sky.

Editor/writer for https://letterstoanewdeveloper.com/

Writer at https://ciamweekly.substack.com/

LI: https://linkedin.com/in/mooreds

meet.hn/city/us-Boulder

submissionscomments
mooreds··on I don't want the details
Small tech companies (mix of product and consulting) primarily in Colorado, USA.

I would not say the hiring has been highly competitive (certainly not FAANG level) but the number of jobs are low because they are small. The tech was not cutting edge.

Could be luck?

FYI, $curjob is hiring: https://fusionauth.applytojob.com/apply

mooreds··on Nobody Has a Good Answer for Agentic Identity Yet
Anonymous credentials seem neat! I think there's also some interesting work going on with AAuth[0] and SPIFFE[1]

The issue is less in the identity of the agent and more in that:

1. We need to get users and companies used to issuing and using these credentials.

2. The systems agents are interacting with need to recognize these credentials.

3. Critically, the systems need to be able to limit the actions of the credential holders.

The last one, #3, is probably the doozie because it requires all kinds of rethinking of authorization models. Which tend to be baked into applications and tied to business logic.

0: https://www.aauth.dev/

1: https://spiffe.io/

mooreds··on I Don't Want the Details
I agree. Finding the time to update docs, processes and code based on a post-mortem is, from my experience, the hardest part. Critical, but difficult.
mooreds··on I don't want the details
Do the actionable items usually get implemented?
mooreds··on I don't want the details
That feels like a tough place to work. I would worry about burnout and churning employees if I didn't work at a place that tried to improve every day.

Maybe I'm a bit of a pollyana, but most places I worked had folks who cared and wanted to improve things.

mooreds··on When Is Software Done?
Hmmm. That's an understandable perspective, but I don't think that splitting things up between product and engineering is of much benefit or interest to the end user.
mooreds··on Tell the speakers that you liked their talks
I wrote a post a while ago about how to be a good audience member at a tech conference: https://www.mooreds.com/wordpress/archives/3522

tl;dr: even if you don't tell a speaker you like their talk, definitely pay attention. Or leave. People work hard on this stuff!

mooreds··on I Never Want to Use Third-Party Software Again
Reminds me of folks who built "load-bearing" applications using Microsoft access.
mooreds··on Burnout by the Kindness of Agents
Or, go slower?
mooreds··on What is perturbation, or reactive balance, training? (2021)
https://archive.is/WzF8q
mooreds··on I Never Want to Use Third-Party Software Again
So says a former VP of product design who spent 14 years at Facebook. Say what you will about Facebook, I'm sure she learned a lot about product design at that FAANG, as well as at Stanford and the startups since.

But guess what. The average person isn't going to want to build every piece of software they use. And if they do want to build it, they sure as heck won't want to maintain it.

I saw a colleague build a custom marketing workflow a few months ago using AI. It was cool, but I thought to myself "welcome to the world of software debugging".

mooreds··on Triple H Writes Anniversary Story for Spider-Man #1000
https://news.ycombinator.com/newsguidelines.html

OP here. I thought it was weird enough to be interesting.

mooreds··on The Best Sandwich in Every State (2021)
I tried to go to Katz Deli last time I was in NYC but it was way overstimulating and I bailed.
mooreds··on iPhone Duo
Please let us know how this works. It sounds like it might be a fit for my needs.
mooreds··on Hire Every Engineer Like You'd Hire a VP
> If I have a team in pain and we need more people on it, or different people, I don't know if I can wait six months for the one person I want to hire to become available and willing. Sometimes, you gotta go with who is available.

I think the point is that you should be building your network of folks before you need them. And that you should go to your network with a specific ask rather than "who is a good engineer?".

Related, slightly: I had a business idea a few years ago when things were tighter for engineers to build a system that collected interested engineers email addresses and send them content about what the company was building. Basically a drip campaign tool for engineering talent rather than sales. I still think this would work for a company that was hiring regularly but that wasn't sexy enough to have name recognition.

mooreds··on An Alien Mind
I don't know if he's right, but Peter Zeihan thinks the breakdown in globalization will negatively affect the ability to continue to improve the chips that AI depends on[0]. Too many steps in the supply chain, too widespread, too vulnerable to deglobalization.

0: https://zeihan.com/the-ai-race-to-regression/

mooreds··on AI is stopping startups from completing puberty
Did some searching and found:

- https://hbr.org/1990/07/reengineering-work-dont-automate-obl... from 1997 about how you shouldn't automate busted processes

- https://hbr.org/2018/06/before-automating-your-companys-proc... from 2018 about same

- https://cs.stanford.edu/people/eroberts/cs201/projects/produ... about the productivity paradox with electricity in the early 1900s

- Review of "The Box" which talks about this situation w/r/t the shipping container and the re-engineering that had to happen

All of these focus on the effort to re-engineer based on a new technology, because you couldn't get the true benefits without doing so. That's slightly different than the thesis of OP, which is that bad behaviors are being papered over by AI. But I think the first step towards re-engineering is to accept that some papering over is occurring.

mooreds··on AI is stopping startups from completing puberty
I wonder if the same thing could have been written about computers or the internet? Does every technology enable new good behavior but also lets you paper over previous weaknesses in process or business model?
mooreds··on Why Syracuse Can't Attract the Students It Needs to Pay the Bills
https://archive.is/0WLv3
mooreds··on Americans Hate Data Centers. Why?
https://archive.is/EHJrZ
mooreds··on Ask HN: Why do tools like customer.io abandon self-serve after their Series A?
Incentives matter.

Early stage founders have one set of incentives: finding product-market fit.

Founders who bootstrap have another set of incentives: making customers happy.

Founders who take VC money have two sets of incentives: making customers happy and making investors money in a reasonable timeframe, which means certain amounts of growth. These incentives are sometimes aligned but can be at odds.

mooreds··on US grain farmers face worst crisis in decades as Iran war sends costs spiralling
https://archive.is/o0iBD
mooreds··on New MCP Roadmap
Yeah. If we want fine grained "intelligent" authorization, there's a lot of work to be done. You can't simply slap a gateway on existing systems.

I wrote about this more on my employer's blog[0].

> The real long-term win is defining ground level permissions around common use cases, so that when composed they can alert as rarely as possible.

And this is an even larger effort to implement, especially as agent capabilities change over time (and they are changing rapidly).

0: https://fusionauth.io/blog/ai-authorization

mooreds··on "Sike" vs. "Psych"
I use "psych" too. Bummed me out when I learned "sike" was the correct spelling.
mooreds··on PostgreSQL for Everything
Often you start as the latter and grow toward the former.

That transition can be super super painful as you don't quite have enough work for the dedicated person.

mooreds··on Incident with Github.com [resolved]
This is the question.
mooreds··on Incident with Github.com [resolved]
No idea about the cost.

I do know that very few systems are designed to handle a 14x increase in traffic painlessly (275M*52 = 14.3B), especially at scale.

mooreds··on McDonald's built a 515-page dossier on one customer
Do you give them your phone number or participate in any of the games that require you giving them identifying info?
mooreds··on Incident with Github.com [resolved]
Found this reddit thread from a month ago that talks about the scale:

   Commit volume went from 1 billion total in all of 2025 to 275 million per week by early 2026. 
https://www.reddit.com/r/softwaredevelopment/comments/1uv5s7...
mooreds··on Ask HN: Who is hiring? (August 2026)
https://fusionauth.io/careers

and then click on 'view open positions'.

The reason for the 2 steps is because we may change ATSes in the future, but https://fusionauth.io/careers will always be a live page.

Page 1 of 34Next →