johngd

Would it be possible to use this method against something like a Java app loaded in tomcat where as to test for bugs within a certain library? Say, for instance that I wanted to see if certain malformed xml posts were able to cause unexpected behaviors in a passing endpoint? As I write this I think that in some cases some kind of httppenetration tool might be more suited but I think im wondering what would happen with a tool that isn't necessarily confined to a ruleset and pattern matching.

Curious how/if Redhat would deal with date-based versioning. 2.6.32 was originally released ~6 years ago and for-better-for-worse their frequent security patching would make the original release date fairly irrelevant.

I think the more interesting part is the comments that crept out of the wood work days after the article was posted to HN.

hautit 5 days ago (1 comment - account created 324 days ago) Get over it, CBInsights, your UX sucks.

theUXclub 4 days ago (brand new account)

CB Insights, cheap and creepy as always. A 'low-drama' group of people that decided to tweet and share the story all over the place claiming something like 'Look! They copied us!'- Your UX is bad as hell, I wouldn't be very proud. Plus, your site is Bootstrap (a framework created for people who have no skills or time to invest on CSS or design), did you also invent it and they copied you as well?

frumpywooly 4 days ago (brand new account)

"...12 folks from their team have signed up for our free trial since September including the CEO, head of product, designer, product manager and a senior ruby developer." CBInsights, creepiest company in America

Re #1: Correct.

Re #2: Unless you are a contractor. I was shocked to learn how much the about-to-retire ~20-30 year guys were making compared to my mid/senior level long-term contractor position was paying.

I am not sure about medium-risk public trust positions, but for high-risk public trust positions (think access to PII, social security # type stuff) they require an in depth personal history, including a meet and greet with an investigator (usually ex-law enforcement, so I was told).

Protip: Contractor or FTE, make sure you specifically ask HR whether or not there will be an additional screening, and whether or not it is a 'public-trust' position and what level that would be following your hiring.

I was pretty miffed when 'they' told me after the fact that my position required an additional background check and that my continued employment would be predicated on the outcome.

Indeed. You can do this using the BMW manufacturer software (which is comically not hard to find), at least for the E9* series of BMW's. Not sure about the newer F3* series, but I wouldn't be surprised.