saltypal
Joined 10 years ago
Karma
261
Submissions
50
Member since
Dec 10
Recent submissions
Comment · 2 months ago
Eleos Technologies (https://eleostech.com) | Remote Senior iOS Engineer | Permanently Remote (US-based applicants only) | Full time
Eleos Technologies is a growing company building communication software for truck drivers and the back-office workers who support them. We’re looking to scale up a second product engineering team to ship more advanced driver planning tools, automate outdated workflow, and a bunch of other wins to make drivers’ lives easier and more efficient.
We're looking for someone who has the experience to move fast on new stuff and knows how and when to pick their battles on old stuff. You'd be one of four iOS engineers at a company that's big enough to survive an economic downturn, but not so big you can't make immediate, direct impact that'll be seen and appreciated by the whole company. (We've also spent the last decade working really hard to make sure our tools, processes, and culture respect everyone's work/life balance. I'm the CTO and I don't text people on my team, and they don't text me, and that's true throughout.)
It's a native iOS app written in a mixture of Objective-C and Swift, leaning on Swift for new features. (But that said: if you chafe at the idea of maintaining or fixing bugs in battle-tested Objective-C that's paying our salaries, please look elsewhere!) We have about 1/3rd functional/UI automated test coverage and the rest is human-powered by our QA team.
If you're interested, please share your info via https://jobs.lever.co/eleostech/b4866f22-fab3-4f84-abec-6e74... and we'll get in touch!
Comment · 9 months ago
Check out https://github.com/anthropic-experimental/sandbox-runtime, which tackles this problem using the built-in userspace sandboxing on macOS and Linux.
I run Claude from a mounted volume (but no reason you couldn't make a user for it instead) since the Deny(~) makes it impossible to run from the normal locations.
export CLAUDE_CONFIG_DIR=/Volumes/Claude/.claude
Minimal .claude/settings.local.json:
{
"permissions": {
"allow": [
"Read(/)",
"Read(~/.claude/shell-snapshots/\*)",
"WebSearch",
"WebFetch(domain:example.com)"
],
"deny": [
"Read(~)",
"Write(/.claude/settings.local.json)",
"Write(/method_filter.py)"
]
},
"sandbox": {
"enabled": true,
"autoAllowBashIfSandboxed": true,
"allowUnsandboxedCommands": false,
"network": {
"allowLocalBinding": true,
"httpProxyPort": 9655
}
}
}Comment · 10 months ago
Eleos Technologies | DNS Consulting | REMOTE (US) | Contractor
We build mobile apps and supporting systems for long-haul truck drivers.
We have a critical DNS registrar/hosting migration to do this year and while I did the last one (on a less-critical domain), I'd really like support from someone who has done >5 of these to help our team get it right. Good news: no DNSSEC. =)
Please reach out to me at [email protected] and mention this post if this is you and you have a reference or two. It should be really easy project for the right person, but we'll compensate commensurate with the business risk.
Comment · 1 year ago
With two[1] other[2] great articles about the guts of how programs _actually_ get loaded and run, I was reminded of the above great (multi-part) article, which I remember reading on the subway in tiny chunks and being surprised it ever works at all.
My CS degree was from a liberal arts university, and while I wouldn't trade anything for the coverage of ethics, previous AI bubbles/winters, and my time in the business and mathematics departments, these articles along with the glibc author's What Every Programmer Should Know About Memory[4] rounded out my education. I still make use of concepts from both when profiling and debugging programs.
[1]: https://news.ycombinator.com/item?id=45706938
[2]: https://news.ycombinator.com/item?id=45706380
[3]: https://www.cs.dartmouth.edu/sergey/cs108/ABI/UlrichDrepper-...
[4]: https://people.freebsd.org/~lstewart/articles/cpumemory.pdf
See also: https://stackoverflow.com/questions/8126311/how-much-of-what...
Comment · 1 year ago
I hadn't yet seen it when I wrote this, but 2 is pretty much exactly what Arko says:
> Worried about the possibility of hacked accounts or some sort of social engineering, I took action as the primary on-call engineer to lock down the AWS account and prevent any actions by possible attackers.
https://andre.arko.net/2025/10/09/the-rubygems-security-inci...
Comment · 1 year ago
Putting myself in Arko’s shoes, I can imagine (charitably!) the following choice, realizing that I still have access and shouldn’t:
1. Try to get in touch, quickly, with someone with the power to fix it and explain what needs to be rotated.
2. Absent 1, especially if it cannot be done quickly, rotate the credentials personally to get them back to a controlled state (by someone who actually understands the security implications) with the intent to hand them off. Especially if you still _think_ of yourself as responsible for the infrastructure, this is a no-brainer compared to letting anyone else who might be in the same “should have lost access but didn’t, due to negligence” maintain access.
Not a legal defense, but let’s not be too hasty to judge.
Comment · 1 year ago
I would only partially agree that Kotlin is "much safer."
As one example, I just learned (by way of a nasty production app crash) that Kotlin chose to make all checked exceptions silently unchecked. Kind of a stunning own-goal for a language from 2010.
Comment · 3 years ago
Previously: https://news.ycombinator.com/item?id=3947903
(I feel incredibly old right now.)
Edited to add: Finally found the full form letter [1]. (I filed a copy back then and it still shows up languishing in Feedback Assistant even now!)
Comment · 3 years ago
Eleos Technologies (https://eleostech.com) | Remote Front-End Web Engineer | Permanently Remote (US-based applicants only) | Full time
Eleos Technologies is a growing company building communication software for truck drivers and the back-office workers who support them. We’re looking to scale up a second product engineering team to ship more advanced driver planning tools, automate outdated workflow, and a bunch of other wins to make drivers’ lives easier and more efficient.
We're looking for someone with several years of professional web experience who's looking to learn and flourish at a company that's big enough to survive an economic downturn, but not so big you can't make immediate, direct impact that'll be seen and appreciated by the whole company. (We've also spent the last decade working really hard to make sure our tools, processes, and culture respect everyone's work/life balance. I'm the CTO and I don't text people on my team, and they don't text me, and that's true throughout.)
The stack is Erlang/Elixir with a ClojureScript+React frontend with robust automated test coverage.
If you're interested, please share your info via https://jobs.lever.co/eleostech/629c95b5-2205-4d5e-af25-4ca5... or feel free to reach out to me directly if you have questions (email is in my about/bio).
No recruiters or consulting agencies, thanks. US only at this time. (Not something we can be flexible on.)