Divorce lawyers are generally the most profitable. $750/hr if you’re good.

I haven’t seen an ad in years through careful ad blocking

Extensions API needs more granular controls and to remain functional

How the hell do you get by with that? I’m jealous. I’ve gotten pinged by my fucking EVP for not responding to questions in chat fast enough (non-critical, too!). At least no one gets on me for missing emails. I don’t even read those.

> How the hell do you get by with that?

You have a company policy that allows that. For example, if anything is decided in Slack, it has to be "codified" somewhere else, like a wiki. Then you'll be able to justify not reading through all messages.

In the real world you iterate, profile, and optimize

I am definitely a subscriber to not doing premature optimization, but in Python, there is a huge difference between

  found = searched_key in list(large_dict)

vs

  found = searched_key in large_dict

But also compare:

  searched_key in large_dict.keys()  # O(1)

and

  searched_value in large_dict.values()  # O(n)

So much this. Write code that you can reasonably expect to not be slow af, while not sacrificing readability. Then profile and optimize if necessary.

It’s a hygroscopic sticker made by 3m.

Communism will never work due to human ambition. There will be corruption, nobody will ever be equal. I have no opinion on who determines what other than corruption.

Cuba is full of rich and futile soil ripe for crops but the government owns the land and forbids it.

No system with humans will ever be perfect but communism doesn’t seem to be the answer.

Has it ever worked?

> nondeterministic IVs

Can you explain what this means?

In this case it's just a fancy way of saying "random". What's important about a GCM nonce is that it never repeat, not that it's unpredictable (to me, a distinction between a "nonce" and an "IV"; a CBC IV must be unpredictable).

Because you only get 96 bits of nonce space with vanilla GCM, there's common advice to use a counter as the nonce.

Someone who gets it. I work in security and everyone hates me because I add friction and cost. On the flip side, I have a lot of PII to protect.

I use a competitor to HackerOne. I view all submissions pre-triage and would have taken it seriously, even if I made a mistake in program scope. I have paid researchers for bugs out of scope before because they were right.

You can also view all submissions in h1 pre triage. This was incompetence on both h1 and zendesk as gp stated not a limitation of the platform per se.

Sure, that’s why I am not naming a competitor. Security leadership is the biggest wildcard. I always want to do the right thing. Not everyone does.

I went to interview at a fortune 50 company that is primarily based in India.

It was very clear my communication style and values is drastically different.

It was a good opportunity, but one of the most frustrating encounters I’ve ever had. I’m glad the offer didn’t go anywhere.