News for hackers. Stuff that matters.
Re:StockX was hacked, exposing millions of customers’ data by maxdata on Sunday August 04, 2019 @06:27PM (#20609629)
I very nearly worked there in their engineering department, but once I got through the initial HR interview into the technical stuff, there were so many red flags that I got outta there as soon as I could.

A few higher level people who were all let go with me ended up going there, and having met up with them a few times, I've heard some absolute horror stories about everything ranging from dev workload, to security, to extremely unqualified devs being hired to fill seats.

I'm not surprised by this in the least, and frankly, I'm surprised it's not worse.

Re:StockX was hacked, exposing millions of customers’ data by PopeDotNinja on Sunday August 04, 2019 @07:27PM (#20609908)
I had a similar experience, but I made the mistake of taking the job. I spent several months in denial about how smart people who act so... not smart. At one point, I asked the CTO for guidance on how to work with the team architect whose feelings I kept hurting. For example, I wrote a constructor for a class, and the architect asked me what "def initialize" was for, and got upset when I asked if they knew how OOP in the language worked. Another time they asked me for help on a weekend to figure a null pointer error on a machine that wasn't running the software they were trying to debug, and got upset when I pointed that out. I brought up both examples to the CTO. The CTO pointed out that the Architect had 10 more years of experience than I did, and while I might be right, I probably wasn't. Then the CTO said (direct quote) "you have delusions of grandeur about your technical abilities" to my face. I started looking for a new job immediately after that conversation. After I left, I heard the project got canceled, the architect got promoted, and they were hiring devs straight out of bootcamps because they couldn't attract anyone with experience.
Re:StockX was hacked, exposing millions of customers’ data by pgm8705 on Sunday August 04, 2019 @07:59PM (#20610038)
I used to work closely with Quicken Loans and other FoCs and can attest that this behavior is commonplace. There is this strange culture within the Family of Companies where non-tech leaders think that tenured Quicken engineers and tech people are these sort of super-geniuses. Many years back I was a part of a company in the Quicken led start-up space. We were often "encouraged" to meet with Quicken or FatHead senior engineers for advice. One time I reluctantly agreed and met with "the best programmer in Michigan" who's first piece of advice was:

"Delete your app and start over. Ruby on Rails is trash. Real programmers use C#. With C# you can create libraries that you can reuse across all your apps."

Re:StockX was hacked, exposing millions of customers’ data by jnbiche on Sunday August 04, 2019 @09:54PM (#20610408)
While I don't agree with the way he spoke, was C# one of the de facto or explicit in-house languages of the company, and Ruby was not? If so, he may have been referring to the fact that the company already had many libraries in C# that you could use. Plus, if C# was one of their areas of expertise, it's typically best to use that as opposed to a new, unfamiliar language unless you're explicitly testing out a new approach.

Also, in general, for programming in the large, many experienced programmers, having worked on multiple large-scale software projects, tend to prefer statically-typed languages. We've found by experience that in such large-scale systems, major refactorings are much, much smoother and feasible in statically-typed languages (although unit and integration tests are certainly still needed). And a whole class of errors are eliminated.

I don't think RoR is trash, but if you were starting a large program that would be used across multiple departments whose in-house language was C#, it was probably the right call to suggest switching to C#.

Please note: I'm not a C# programmer, and have never done any work in C# (although I've worked many dynamically-typed and statically-typed languages, and have a clear preference for the latter for large-scale software projects). So this isn't something I have any personal investment in.

Finally, I do get it, working for these types of companies is misery for most programmers. I've worked in such companies. But in this case, the senior may have had a good point.

Re:StockX was hacked, exposing millions of customers’ data by gruez on Sunday August 04, 2019 @10:19PM (#20610586)
>While I don't agree with the way he spoke, was C# one of the de facto or explicit in-house languages of the company, and Ruby was not? If so, he may have been referring to the fact that the company already had many libraries in C# that you could use. Plus, if C# was one of their areas of expertise, it's typically best to use that as opposed to a new, unfamiliar language unless you're explicitly testing out a new approach.

[...]

>I don't think RoR is trash, but if you were starting a large program that would be used across multiple departments whose in-house language was C#, it was probably the right call to suggest switching to C#.

According to the parent comment, he was working at a startup that was in the "Quicken led start-up space". My interpretation is that Quicken was acting like an incubator, and he isn't working in quicken, and so the engineering teams are separate. Therefore I don't think organizational inertia applies here.

Re:StockX was hacked, exposing millions of customers’ data by pgm8705 on Monday August 05, 2019 @10:59AM (#20614697)
This is correct. Our company was under the Quicken "Family of Companies" umbrella, but we were a 5 person start-up building a web app unrelated to Quicken.
Re:StockX was hacked, exposing millions of customers’ data by jnbiche on Sunday August 04, 2019 @11:33PM (#20611019)
It sounds like they were pretty well-integrated into Quicken engineering, although we'll have to hear from the OP to know for sure.
Re:StockX was hacked, exposing millions of customers’ data by throwawayfoc on Monday August 05, 2019 @01:46AM (#20611576)
Yikes. I worked on a team whose de facto tech lead (it wasn’t explicit because we were “flat”) had no idea what SQL parameter binding was (I had to explain why interpolating strings in SQL queries is dangerous). And we apparently went to the same university and got the same degree, and he had at least ten years of “industry experience”.

I’ve also had to explain why logging is a good idea and how to use SSH. What frustrates me isn’t that people don’t know these basics (nobody is born an expert), but that people get hired to do a job for which they lack core competencies. If your job is to fix engines and you don’t know what a spark plug does, you probably shouldn’t be fixing engines. This was at least an issue for me. I know people at Quicken proper who have told me even more ridiculous stories.

It’s a shame. Detroit’s got a lot going for it, but I think most of the tech companies there have some connection to Gilbert and Quicken, and no amount of coneys will get that taste out of my mouth.

Re:StockX was hacked, exposing millions of customers’ data by rsynnott on Sunday August 04, 2019 @09:01PM (#20610228)
What on earth is a ‘family of companies’? Googling for it just gets me some sort of crane conglomerate.
Re:StockX was hacked, exposing millions of customers’ data by nyolfen on Sunday August 04, 2019 @09:12PM (#20610262)
Re:StockX was hacked, exposing millions of customers’ data by rsynnott on Sunday August 04, 2019 @09:26PM (#20610293)
Huh, that’s a bit of a random collection of stuff.
Re:StockX was hacked, exposing millions of customers’ data by hn_throwaway_99 on Sunday August 04, 2019 @10:30PM (#20610640)
Rock Ventures, http://www.rockventures.com/ , was founded by Quicken Loans billionaire Dan Gilbert.
Re:StockX was hacked, exposing millions of customers’ data by kokowawa393 on Sunday August 04, 2019 @08:38PM (#20610154)
Wow that is so sad/hilarious.
Re:StockX was hacked, exposing millions of customers’ data by alephnan on Sunday August 04, 2019 @08:27PM (#20610112)
Sounds like you dodged a bullet.

Did you end up working at another Fashion-Tech company? I'm curious how much of this is characteristic of Fashion-Tech industry in general.

Re:StockX was hacked, exposing millions of customers’ data by PopeDotNinja on Sunday August 04, 2019 @10:07PM (#20610498)
I dodged a bullet indeed. Out of the dozen other devs there, there was exactly one person I'd care to work with again. They got pushed out a month or two later, and post-shenanigans felt infinitely better.

My advice is to do what you gotta do to pay the bills, but don't delude yourself into thinking that a crazy sauce employer will change its ways because you try extra hard to change them when they resist your attempts to do so.

Re:StockX was hacked, exposing millions of customers’ data by throwawayfoc on Sunday August 04, 2019 @06:33PM (#20609664)
This is endemic to the FoC. When your entire team is recent boot camp grads, this is the end result. The engineering culture is a joke. (Source: former employee.)
Re:StockX was hacked, exposing millions of customers’ data by maxdata on Sunday August 04, 2019 @06:42PM (#20609713)
I'm a current employee in the FoC (just not StockX), and with more than a decade in software development, I am easily the least experienced on our team by several years.
Re:StockX was hacked, exposing millions of customers’ data by bagels on Sunday August 04, 2019 @07:04PM (#20609800)
What is "FoC"?
Re:StockX was hacked, exposing millions of customers’ data by islanderfun on Sunday August 04, 2019 @07:11PM (#20609826)
I think its "family of companies" which StockX is a part of.

https://www.quickenloans.com/about/partner-company "

Re:StockX was hacked, exposing millions of customers’ data by elkos on Monday August 05, 2019 @02:34AM (#20611764)
They are so many of them!
Re:StockX was hacked, exposing millions of customers’ data by gist on Sunday August 04, 2019 @07:04PM (#20609801)
> there were so many red flags that I got outta there as soon as I could

Instead of joining the bashing party and lieu of making a broad statement why don't you detail what some of those red flags were?