Hacker Newsnew | past | comments | ask | show | jobs | submit | m348e912's commentslogin

I'm not the first to suggest this, but I think "fly at your own risk" airlines would be popular with some people. Keep the cockpit door reinforced, and maintain a gentleman's agreement among travellers on what to do if a passenger threatens a flight. Airport security is now reduced to 10 seconds.

As noted elsewhere, that approach doesn't stop someone flying the plane into a building.

My understanding is that flight security protocols and cockpit hardening introduced after 9/11 made it significantly harder to replicate what happened that day.

I'm going to go out on a limb and say the 5.60 per person per flight doesn't cover the cost of TSA airport security operations leaving congress responsible for the gap.

If you are wondering how that could happen, it starts with no-bid contracts and ends with inefficiency and has been heavily influenced by a guy whose name sounds a lot like Schmical Schmertoff.


Not inherently, but it can introduce risk. Such as a bad actor using an old expired certificate it was able to acquire to play man-in-the-middle. But if that is happening you have bigger problems.

There are a number of similarities between applying for a job and looking for a partner (typically through online dating). In both cases, the process is impersonal, rife with rejection, and heartless.

The best tactic is to avoid the formal process, whether it's applying via the company website, or swiping right on a profile. Instead use an inside source, an employee you know at the company you are interested in, or a mutual friend who can play matchmaker in dating.

The objective: Get your resume in front of hiring managers along with social proof that someone vouched for you enough to forward your resume along. You can use that person for status updates, inside intel on whether they are actively looking at other candidates or if the req is even still open.

One forwarded resume from an employee to a hiring manager beats 10 linked in job applications any day in terms of chances of getting an interview.


>The best tactic is to avoid the formal process, whether it's applying via the company website, or swiping right on a profile. Instead use an inside source, an employee you know at the company you are interested in, or a mutual friend who can play matchmaker in dating.

As someone on the spectrum this is something I struggle with. I have few but close friends, and only 2 of them work in tech; neither of their companies are hiring right now.

I need to find ways in which I can make new connections with people who work in tech, but I am unsure how to go about doing so.


Meetups for special interests / tech adjacent fields. Go to more company events for the tech you use.

The other factor is finding “high elo” people with influence that can help you if you live in a “low elo” area. You’ll have to go to the “high elo” areas more often to increase chance of a better match.


> Go to more company events for the tech you use.

Careful: you don't want to poison the well you drink from.

Relationships can sour. Accusations (false or not) can easily translate directly to not having a job when your dating pool includes current, past, or future coworkers.


Maybe I should look into events being held in 'high elo' areas. Downtown Phoenix is not too far from where I live, maybe I should check there.


100% of the jobs I’ve gotten in the past 25 years have been through current or former coworkers. Some have become friends, yes - but some were merely work acquaintances who knew first hand what I was capable of and wanted me on their team / in their company.

Don’t overthink this - I’m sure you’re great at what you do, and the people you work with and have worked with in the past know that you are.


Join clubs / sign up for recurring things* that interest you and keep showing up.

Odds are there are at least a handful of people like you in those groups … and odds are that the everyone else connections to people who could be your contacts.

Just by being there regularly, you become "one of the people in tech I know" of everyone else. And connections and opportunities start magically coming your way.

*It does help if these are the types of things that attract energetic, helpful, confident people.


The problem with this becoming the only reasonable tactic writ large is that it creates social bubbles just like social media. You wind up with very insular cultures and I think at least some of the hype addiction problems seen in tech can be attributed to these echo chambers. It's a hard problem to solve, especially now with LLMs being force amplifiers to low effort hiring and job seeking attempts. But to not solve this problem will, I think, continue to make increasingly unwell companies and unwell industries as the "meme pool" gets very shallow.


I ah e not seen this play out in practice at all. In 25 years I’ve been at 8 tech companies, all of which came through connections.

None of those have had an insular bubble - typically you know a few people, and they each have worked with a few others, but unless you go all “6 degrees of Kevin Bacon” on it, none of these jobs look like what you’re describing.


If you can't see the bubble you are inside of it.


In other words, don't look for dates/jobs online, let your friends set you up. They handle the social proof both ways.

This is the danger of treating everything in life as transactional. If you are an anonymous coworker, employee, student, neighbor, citizen you are bankrupting your social capital. At the same time, if you are only engaged with others out of self-interest, it can backfire spectacularly when you are found out. Live authentically, take a genuine interest in others, play matchmaker and let others play matchmaker for you.


Maybe you can get the Bot to submit it. This video of Steve Mould yanking a Bot's chain while the Bot tries to get him to refinance his car.

https://www.youtube.com/shorts/GJVSDjRXVoo


> Instead use an inside source, an employee you know at the company you are interested in

I have been reading this advice for a decade, and I have been working as a software engineer as a decade, and I don't know anyone who got a job this way.

I'm not doubting it happens. It's just interesting that this obviously seems very common in some software engineering circles, but is virtually unheard of in others.


This AI website demo is very unappealing and does a good job showing how bad the user experience could end up, but I think there is a place for ADs in AI that I would very much welcome. But it would be different than you would expect.

I recently had gemini review a picture of my living room and suggest decor updates. It did a great job and generated some very appealing mockups. I then asked AI where I could find the pieces it recommended. It couldn't tell me and I am not sure they even could be found.

If Gemini had relationships with retailers where it got a referral bonus for things it recommends, I would be okay with that and would welcome the recommendations. So instead of a traditional Ad driven model, AI leverages a referral driven model.


>> Friendly reminder that the battery industry is filled with shady and evil stuff. Cobalt mining for example.

What I am about to say is going to come off as exceptionally insensitive, but bear with me. The mining conditions are horrific and of course it would be better if regulation was introduced and industrial methods of extraction was used. But you have to wonder, if there are thousands of men and teenagers willing to toil in the sun all day for a tiny amount of money, what other alternatives do they have for income?

If cobalt never existed in DRC, what exactly would they be doing for work and subsistence? Is this horribly unsafe and in-humane form of work a step up from whatever alternatives they have, or perhaps from nothing at all.

Again I am not condoning it, I am just wondering.


> If cobalt never existed in DRC, what exactly would they be doing for work and subsistence? Is this horribly unsafe and in-humane form of work a step up from whatever alternatives they have, or perhaps from nothing at all. Again I am not condoning it, I am just wondering

Is just wondering the new just asking questions?

Clearly they would be doing something else, perhaps what they did before the mine opened.

I feel by framing it as either a step up from nothing at all or from something lesser, you've already condoned it.


What is the something else? Starving? Looting and pillaging? Warring? Becoming software developers?


I know Ring is getting a bad rap for enabling state level surveillance, but the Ring app offers an option to enable end-to-end encryption between the camera and your phone.

The stored video is encrypted with key generated on your phone. You have to be physically close to the camera in order to share the key and complete the set-up. Once encrypted, the video can't be analyzed by AI or used in a broad surveillance effort.

It's entirely possible that the encryption keys have a backdoor, but I doubt it. Although there is no way to verify.


End-to-end encryption only means something if you trust the endpoints.


They often also tend to call HTTPS end-to-end encryption

https://aws.amazon.com/blogs/media/securing-your-origin-for-...

even Amazon Web Services:

    Benefits of using HTTPS connections:
    HTTPS provides end-to-end encryption


I wonder if that's why it's called Transport Layer Security.


When national interests require that, it can get a firmware update which sends a copy of data to comrades in U.S. Ministerium für Staatssicherheit even before that e2e encrypted copy reaches your phone.


>enable end-to-end encryption between the camera and your phone.

So… exactly not the part I care about?

Cool, it’s encrypted on transit to me… now what about at rest with them? Is it encrypted and they absolutely can not view or hand that footage to police/gov? No.


> Cool, it’s encrypted on transit to me… now what about at rest with them? Is it encrypted and they absolutely can not view or hand that footage to police/gov? No.

Technically yes, e2e encryption means video hosted on their servers is only viewable by devices with decryption keys. So if the police/gov brought a subpoena to request the video, Ring could only offer them the encrypted video. They would have to take possession of your phone and gain access in order to decrypt and view the video.

In this case the "ends" in the e2e encryption is the camera and your phone.


I used to work for a well known communication app, the kind everyone here used. Couple things I learnt about "end to end encryption":

- You can call your service e2e encrypted even if every client has the same key bundled into the binary, and rotate it from time to time when it's reversed.

- You can call your service e2e encrypted even if you have a server that stores and pushes client keys. That is how you could access your message history on multiple devices.

- You can call your service e2e encrypted and just retrieve or push client keys at will whenever you get a government request.


I just set it up e2e on Ring last week. It generates the a key and a word list (for backup) on your phone. You have to physically be in vicinity of the Ring camera to activate encryption on the camera. My impression is that Ring is truly offering a version of video collection which they can't access.

But I think your third point is valid, there is nothing stopping Ring from telling the app to share a user's keys and then give them to whoever is asking.


We already 100% know this is misleading though. Amazon has access to your ring footage.

They are acknowledging that the end to end TRANSIT is encrypted. They are not encrypting from themselves at rest.


>They are not encrypting from themselves at rest.

They are encrypting at rest, that's my whole point and what everyone in this thread seems to be missing. When you turn on e2e, the video is not viewable anywhere but your phone. That's why you can no longer view your videos on ring.com and a myriad of ring features will no longer work.

https://ring.com/gb/en/support/articles/7e3lk/using-video-en...


Who has the keys of the encryption algorithm?


For a Ring user, the keys are generated on your phone via the Ring app. So technically just the user/owner. However there is no certainty that Ring can't obtain access to the keys, just like crypto wallet maker Exodus could decide one day to retrieve private keys from their user's wallets with a software update.


If you are saying sketch shows like "Thank God You're Here" "Fast & Loose" and "Who's Line is it Anyway" are being killed off by short/low budget replacements on TikTok, we must be living in different worlds.

I haven't seen anything like them on TikTok and I'm on there enough to have noticed. Maybe you're talking about the dumb alien short videos of them telling a joke to each other and snickering, that doesn't compare.


"TikTok doesn't live up to the best of TV" is true, but that's not the argument I'm making.

OP asked for "newer", and yet you've not named anything created in the last 10 years. ( And named a 30+ year old improv show, which is definitely not the format I'm talking about. )

You're not alone, one second-cousin comment even went with the phrase "more modern", then named a range of shows that are at least over 20 years old. Green Wing was the 90's, that's closer to the time of Python's Life of Brian than today.

Clearly things aren't fine if there isn't fresh blood coming through.

Sketch shows never were the best of TV, they are a format where you throw a lot out there and then the very best bits of each episode might be particularly funny, with a bunch of filler in-between.

That can't compete with a medium where people just swipe the second they're not finding a particular piece funny or to their taste.


I agree the shows I named have aged, but I think my point stands. There really isn't anything _like_ those shows on TikTok that I am aware of, and maybe you've made a bigger point that there isn't anything like these shows at all anymore. (To be fair I don't watch much traditional TV anymore -- maybe that was your point all along and I just missed it)


>"Thank God You're Here" "Fast & Loose"

I've never heard of these shows, where are they out of?

>we must be living in different worlds.

While I'm not on social media like that, I do think so.


Australia and the UK respectively. Many of the best bits are available on YouTube.


>Jolani was propped up by Turkey not Israel

Probably accurate, but I think if Israel sincerely objected to Jolani's leadership in Syria, a state visit to the White House would not have happened.

Read into that what you will.


I know, I'm reading the GitHub page and was like.. what in the world? Is this real life?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: