Recent submissions

Comment · 2 days ago
I’m curious of the use case, I use Sonnet for Insider Threat investigations and detection engineering daily without issue.
Comment · 9 days ago
It’s even an HN community guideline ironically, assume good faith.
Comment · 11 days ago
> The Product person wants to deliver the right product properties so they model their process around identifying the ones they want and then creating the right framework to get them.

You can try model all you like, but eventually you have to go argue with finance because you work at Snowflake and your new SaaS product needs a new SKU and is slightly different than this other offering because it has enhanced security on larger storage.

Don’t forget there is a new manual process for troubleshooting this because it overlaps with another feature potential that we found in testing. You need to go make sure your Customer success team is aware of this and has at least some internal documentation.

Ah crap your sales director says they had 2 other competing features that take priority over your feature to train up Sales Engineers to cross sell. So you have meet with existing customers to try and garner interest and also work with comms to make another product release post with higher visibility.

Oops do forget to grab your next ticket for next sprint that just started from Jira, since you are a dev too.

Comment · 11 days ago
To be fair, while the threads don’t show it, majority of companies that survive by processing payments. Shopify, Airlines, Rental Car companies, Banks, etc. are still doing and generally can prove at anytime 2 party review is happening on any PCI related code. It’s just that many people don’t work on that, and regulating a new feature for the ESPN Fantasy Football service seems silly.
Comment · 11 days ago
5. You do whatever works to Meets Expectations
Comment · 11 days ago
You just described the need to rewrite or abstracting out a new contract for a codebase because the fundamentals of a contract were broken. They are completely different objects.

This problem existed before AI and great when you caught it.

Comment · 11 days ago
I think we passed the inflection point of the normal 150-500 Lear code problems, understand DSA and systems design really well. Personally, I think companies are much more selective now and have all reduced the size of their engineering orgs.

There’s always been a percentage of luck getting offers from big tech companies, but it’s way more luck than than merit it has ever been.

Comment · 16 days ago
I'm assuming good faith for you, please do so for me when it comes to credibility. I don't think the supporting references and my argument that I think your position is too skeptical warrants reducing it to XKCD.

> What bad PR?

It literally changed Apple's marketing and privacy features for years to come [1] and at the next request of the FBI forced them to choose privacy and security as something the would like to be known for and incorporate into their products long term. [2] Snowden made a note how effective Apple's encryption had become in 2016. [3]

> Why would you even remotely believe that they are not under a similar situation with the current admin? It's just ridiculously naïve.

Multiple aspects of the larger program was done without the knowledge of the tech companies, PRISM was no where near the level of pervasiveness as Upstream. [3]. They inserted a man in the middle on the fiber lines leaving data centers to copy traffic, functionally making backdoors unnecessary.

> 3rd party contractors had access to your siri conversation

I'm glad that one was leaked, it's something that a lot of us thought was happening with many voice assistants, and it shows just why sensitive quality control should not be outsourced.

> Your position is just not credible in 2026 . . . ignores two decades of history. . . Reading such argument on HN tells me Snowden did throw away his life for nothing, damn.

Same goes to you, you ignored all improvements related to this discourse over that time. I'm highly skeptical of many corporations, including Apple, but my goals are to understand the whole picture and direction. Overall Apple has been up and down in terms of security and privacy commitments, but significantly better compared to companies such as Google, Huawei, and Meta.

[1]: https://www.apple.com/apples-commitment-to-customer-privacy/ [2]: https://en.wikipedia.org/wiki/Apple%E2%80%93FBI_encryption_d... [3]: https://www.youtube.com/watch?v=cJ6PpX6xg-E&t=1808s [4]: https://www.eff.org/pages/upstream-prism

Comment · 17 days ago
Comment · 19 days ago
I would never underestimate the potential multiplying force of open source, unless you have some real secret sauce.
Comment · 1 month ago
To be fair the cyclical nature of funding and defunding security teams which causes scaling up and scaling down, has always left a race to the bottom in security.

Any CISO or head of security loves the ideal of completely using AI to handle incidents, tune detections, implement mitigations, track vulnerabilities, pen testing, etc. This feels like it driving security teams to have less critical thinking.

Comment · 1 month ago
Seldom? There are a lot of solutions used everyday that are great and better than the alternative of building it yourself
Comment · 2 months ago
It’s apples to oranges at the end of the day, the question is why can one be automated and not the other.
Comment · 2 months ago
The whole point of the post is not to straw man CEOs it’s to point out that if devs can be automated then so can CEOs. Treating a founder and CEO as the same thing can be easily a false equivalency depending on the company.
Comment · 2 months ago
Happens often from what I remember reading and most grocery stores account for the loss. Definitely lots of accidents as well.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton