Hacker Newsnew | past | comments | ask | show | jobs | submit | knappe's commentslogin


That is where I originally watched it. It was on Netflix at one point. And now, it is not. Which is most of the problem with streaming service in general.


Meanwhile that same Suncor facility that is keeping gas prices low is also routinely and continually violating EPA and Colorado air quality standards. [0]

It is so bad that the state has implemented fence line monitoring. [1]

As someone who lives in Colorado, I'd be happy to see Suncor go. Especially now that I just learned the oil they're refining is Canadian tar sand oil.

[0] https://coloradosun.com/2024/02/05/colorado-suncor-air-pollu... [1] https://cdphe.colorado.gov/public-information/air-quality-an...


No, no they're not. I would much rather people are warned about the guidelines and adhere to them going forward than the opposite and we then just let violations run rampant.


They're not "warnings". They're passive aggressive internet dick waving virtue signalling. The flag button exists.


I, for one, appreciate knowing why people have flagged my comments. The "flag and move on" strategy is for use against bad actors.


What really reinforced this for me was learning to what lengths some hedge funds are willing to go to get an edge. Case in point: buying GIS data on major retailer's parking lots to get a feel for holiday earnings. No retail investor is ever going to be able to match that kind of Intel, ever.

I buy index funds and leave the majority of my money there but allow myself to make small bets on trends in the market that I think will play over long periods. Sometimes it works, like buying lithium stocks in the 2010s and other times it sucks and doesn't, like buying solar stocks in the 2010s and watching the entire industry get shredded to pieces in the last 5 years.


Small speculators do have an advantage in that the market is much more liquid for them. If your position is $1k you can buy and sell without moving the market noticeably. If it's $1bn, not so much.


yeah vast majority is just index funds but I just had to prove to myself than I'm an idiot, so there's a separate account with a tiny bit of money in it that I get to play with. Sometimes you buy GME, sometimes you buy SVB.


>I’d say under 10% of junior résumés I look at give me confidence that they’d show up and know how to write real systems instead of just gluing things together

They're juniors. With that kind of mentality, I'm not sure you're looking for juniors, but instead are looking for someone with a few years in industry that is apparently masquerading as a junior. But perhaps my expectation of "real systems" is different than yours.

To put this into perspective, I mentor and have mentored lots of juniors from code schools and traditional, four year university computer science majors in web dev. Having some concept of both the web stack/language and a basic understanding of good coding practices is about the most I'd expect. All thing things that sit on top of it, like scaling the stack, performance optimizations and the like are things I wouldn't even come close to expecting a junior to know. Those are things I'd expect to have to coach on.


> They're juniors. With that kind of mentality, I'm not sure you're looking for juniors, but instead are looking for someone with a few years in industry that is apparently masquerading as a junior.

This is just how the junior job market seems to operate now. Barely anyone wants some open-ended, curious recent graduate who's eager to expand their technical knowledge with new skills that are taught to them at the job. Everyone wants juniors to punch well above their weight - to even have a chance of an interview, ideally your resume should indicate that you're already an expert at every required skill in the job listing. They fish out the top 1-5% of all graduates and the really desperate people who are willing to go work a junior job despite extensive work experience - everyone else is welcome to keep putting in hundreds of applications elsewhere. Of course, it makes sense that you'd want the best - but it feels like there's active pressure now to hire as few people as possible regardless of circumstance. Companies will keep searching for the miracle candidate - if they don't find one, they'll just repost the listing until one shows up. Everyone else has locked the doors on hiring altogether. We're probably going to see a push on juicing more value out of existing workers than paying new ones, so the average graduates will continue having nowhere to go.


Indeed, real systems is a lower bar than you imply. In this case it’s unclear from the CV that I’d be getting someone that has ever written more than a 50 line one-off Python script.

You mention mentoring people in undergrad. Sure, by a year-3 course I’d expect to have to coach beyond basic understanding. To say that basic understanding of performance optimization is out of scope for a BS graduate is not supported by my experience, however. We’re not talking about boot camp grads here.


Source for this claim?


snowden-cisco-nsa-tao-interdiction.jpg


My father just retired as a lab analyst looking at builder samples for both modern and historical construction, specifically for asbestos.

The day I moved into the college dorms he looked at me and said "Don't move the floor tiles, ceilings tiles or the touch the large ventilation pipe outside my door in the hallway." A lot of the buildings at my university were built with asbestos, so much so that the university had a 30 year contract with the lab he worked at to analyze samples.

And it isn't only historical buildings that have asbestos. A very well known mall that was built in the 2000s had incurred some severe hail damage and while the repairs were ongoing samples were taken and found to be hot. Someone had introduced asbestos contaminated materials into the original build and rather than extensive repairs the mall had to do extensive remediation first, before continuing repairs.

Apparently there is still a large stock of "hot" building material that are sitting in warehouses and every once in a while they make it into the supply chain.


I'm currently working as a PCM analyst looking at samples to identify asbestos. There is a lot out there still, we are busy every week. (technically PCM doesn't identify asbestos, just the number of fibers during abatement, PLM will identify asbestos but that takes a lot longer to process).


Interesting, I had some vermiculite removed recently and got a response from the ZAI trust that the samples had fibers but they couldn't say specifically that it was asbestos. I assumed that was a legal distinction, it didn't occur to me that it might be from different test methods.


Yeah, for a PCM test we only count 100 fields, and identify the number of fiber end points (upto 2) which with math can give an approx number of fibers/cc2 - helps determine approx how much potential can be in the air (this is usually done during abatement - when it's being cleaned up).

A PLM analyst will use multiple methods to determine if the sample has asbestos, and takes a much longer time.

There are even more expensive tests that can be performed but I'm not so familiar with those.


> Apparently there is still a large stock of "hot" building material that are sitting in warehouses and every once in a while they make it into the supply chain.

Not working in the industry, what do they actually do with asbestos that has been removed? I presume it can't be 'destroyed', so it needs to be stored indefinitely somewhere where it doesn't cause harm? Dump it in an unused mine shaft and seal the entrance?


Few months ago I called local company that specializes in utilizing asbestos. He explained me on the phone that there are concrete bunkers/boxes in the ground and they just store it there. At least that's how I understood what he was telling me. Eastern Europe.


The danger is mechanical, not chemical. Think small sharp needles that you can breathe in.

Chemically it's just silicates. So you can melt it at high temperatures or do various other processes to get rid of it.

I'm not sure what they actually do.


> Apparently there is still a large stock of "hot" building material that are sitting in warehouses and every once in a while they make it into the supply chain.

I wonder how much of this is because folks in the supply chain might not be aware of what asbestos looks like.


It took them 67 days to disclose that their premier product, which is used heavily in the industry, had been compromised. Does anyone know why it seems like we're seeing disclosures like this take longer and longer to be disclosed? I would think the adage "Bad news travels fast" would apply more often in these cases, if only to limit the scope of the damage.


I can't help thinking that a part of it is that the supreme court has proactively & progressively been watering down the threat of class actions (in general, not specific to tech) since the early 2010s.

Sony & many others have proved pretty comprehensively that brand reputation isn't really impacted by breaches, even in high profile consumer facing businesses. That trickles down to B2B: if your clients don't care, why should you.

That leaves legal risk as the only other motivating factor. If that's been effectively neutered, it doesn't make economic sense for companies to do due diligence with breaches.

As far as I'm aware, Yahoo were the last company to suffer any significant impact from the US legal system due to a breach.


Their customer base are enterprise, so the issue can be addressed in private channels. There's little to be gained from making this particular breach public, from their point view. If anything, it's F5 customers who should advise their own customers downstream about the risks, when risks apply. Disclosure: I'm affected by this breach downstream at several sites and we have not been informed of risks by anyone but have been fighting fires where F5 was involved, but not necessarily blamed for anything.

But you are right, at F5's size and moneys, incentives for public disclosure are not aligned in the public's favor. Damage control, in all its meanings, has taken priority lately over transparency.


why did you purpose one hypothesis and then right after offer first hand evidence that contradicts it?

completely missed your point


Just to be clear, the attackers had access to the systems well before this date.

Sometimes when a company engages law enforcement, law enforcement can request that they not divulge that the company knows about the problem so that forensics can begin tracking the problem.

I won't speak how often or how competent law enforcement are though, but it can happen.


My understading is that the hackers had a copy of the source code for their app so they had to patch all their outstanding CVE that they where sitting on so the DOJ let them hold back until that was ready. It's not ideal but I suppose there is at least something people can do right now. Feels like they could have been a bit quicker with some of the information though.


This reminded me to go look up what Japan was doing with their space junk net. Turns out it failed to deploy in 2017, and nothing has really been done with the idea since. :|

https://www.sciencedirect.com/science/article/abs/pii/S00945...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: