News for hackers. Stuff that matters.
Re:Twitter names famed hacker 'Mudge' as head of security by lmilcin on Monday November 16, 2020 @05:30PM (#25117907)
For some reason, high level managers need very expensive consultants to tell them the obvious truths.

As a very expensive consultant I am frequently appalled at how management teams completely ignore their own employees.

Forget about wasteful, these companies can afford consultants. It is just disrespectful to their own staff. Developers and operations guys already know the solution but can't get through layers upon layers of management. And so it takes a guy with salary high enough that he can be allowed to talk to the a high level manager directly, to get the message.

Re:Twitter names famed hacker 'Mudge' as head of security by freeopinion on Monday November 16, 2020 @05:48PM (#25118086)
I was once in a uni class where the prof was a very expensive consultant. He said that a large % of his jobs for companies like GM or Ford was to grab a notepad and walk the floor. He would ask line employees why they did things the way they did and what they would change. He got reams of suggestions, typed them up, submitted them and collected a giant paycheck.

Sometimes they were blindingly obvious things. One employee would drive two bolts, quickly change heads, then drive a third bolt. While the carcass advanced to the next station, the emloyee would change back to the original head and be ready for the next carcass. That employee's suggestion: Make all three bolts the same size so I don't have to change heads.

Of course, that is just a fun anecdote. All such efficiencies have been implemented long ago... for auto assembly. But the point is still valid. Your employees know a ton about your business. Even the ones who do the most mundane tasks. Listen to them. Or... pay a very expensive consultant to listen to them.

Re:Twitter names famed hacker 'Mudge' as head of security by lukifer on Monday November 16, 2020 @06:44PM (#25118589)
I'm reminded of Robert Anton Wilson's SNAFU Principle: "Communication is only possible between equals." [0] Formal hierarchies can create perverse incentives that discourage passing vital information up the chain, lest you make someone in power look bad, or stick your neck out as a troublemaker / "not a team player" / etc.

While a good manager can mitigate the problem by cultivating mutual trust, individually and culturally, the problem gets compounded when hierarchies become nested, and the org scales beyond the Dunbar Number.

[0] https://en.wikipedia.org/wiki/SNAFU_Principle

Re:Twitter names famed hacker 'Mudge' as head of security by m463 on Tuesday November 17, 2020 @09:25PM (#25132495)
yes, equals.

a consultant can talk to the ceo as an equal.

however, a consultant can also talk to the mail clerk as an equal.

Re:Twitter names famed hacker 'Mudge' as head of security by motohagiography on Monday November 16, 2020 @06:03PM (#25118234)
Third generation expensive consultant here. Clients don't pay you for your time, they pay you for theirs. There's a level of abstraction in orgs that you need to be able to navigate and influence. The Twitter hire I get, it's strategic. Man, we all got old.
Re:Twitter names famed hacker 'Mudge' as head of security by rorykoehler on Tuesday November 17, 2020 @12:22AM (#25120523)
Consultants are often hired to sign-off on decisions already made but impossible communicate as such without causing internal division.
Re:Twitter names famed hacker 'Mudge' as head of security by rahoulb on Tuesday November 17, 2020 @08:04AM (#25123251)
Absolutely this.

One of my friends runs a market research firm that works for big retailers. She says 90% of their work is about producing evidence for the decisions that have already been taken - so they can be implemented without causing complaints.

Re:Twitter names famed hacker 'Mudge' as head of security by reader_mode on Monday November 16, 2020 @08:27PM (#25119340)
I mean if you talk to a bunch of developers about what they would change in a project you will get valuable feedback. You will also get a lot of stuff that's just wrong, stuff that ignores the big picture and business goals. If you can recognising which is which that's worth a lot of money because acting on a bad idea can be far more costly than not acting on a good one.
Re:Twitter names famed hacker 'Mudge' as head of security by DangitBobby on Monday November 16, 2020 @08:39PM (#25119416)
You can also ask your developers to ponder this question ahead of time if you are interested in better answers.
Re:Twitter names famed hacker 'Mudge' as head of security by lmilcin on Monday November 16, 2020 @08:50PM (#25119488)
I guess asking one person rather than 200 is one way of getting less communication noise.
Re:Twitter names famed hacker 'Mudge' as head of security by manquer on Monday November 16, 2020 @10:23PM (#25119966)
knowing the right person to ask is hard.
Re:Twitter names famed hacker 'Mudge' as head of security by lmilcin on Tuesday November 17, 2020 @04:38AM (#25121778)
If you manage these people, it is literally your job to know.
Re:Twitter names famed hacker 'Mudge' as head of security by manquer on Tuesday November 17, 2020 @02:11PM (#25128215)
For senior management, it is usually it is your job to hire people who know or help you know( a.k.a consultants )

It is not humanly possible to be knowledgable in all the fields of people working directly or indirectly under you. Good managers are not always technically knowledgable . It is useful skill to have, neither it is most important nor is it even essential.

While bad managers tend not to have the knowledge, the worst managers are strong technically but don't have other critical skills needed for the job.

Re:Twitter names famed hacker 'Mudge' as head of security by lmilcin on Thursday November 19, 2020 @05:24PM (#25155102)
Nobody expects you to know everything.

But as a manager, you need to know what your organization is doing and you need to know who to ask.

That is, by very definition, the job of a manager.

Re:Twitter names famed hacker 'Mudge' as head of security by freeopinion on Monday November 16, 2020 @06:04PM (#25118246)
Today, those three bolts are done by robots. Perhaps a modern very expensive consultant builds the AI to "interrogate" the robots for useful suggestions.
Re:Twitter names famed hacker 'Mudge' as head of security by gogopuppygogo on Monday November 16, 2020 @07:37PM (#25119018)
Do you really put it past a big company to have two robots with different screw heads on them for the three bolts?

Some maintenance guy who works the floor knows they don’t need two of them but no one will listen.

There is still room for a highly paid consultant.

Re:Twitter names famed hacker 'Mudge' as head of security by azinman2 on Monday November 16, 2020 @08:35PM (#25119391)
Is that actually true? My understanding is that there is still a lot of human labor necessarily baked in, and attempts to robotize everything largely have failed for a multitude of reasons (Tesla most famously so), but the most unsolvable is that of flexibility to change something fundamentally on a dime.
Re:Twitter names famed hacker 'Mudge' as head of security by ta76893547 on Tuesday November 17, 2020 @11:28AM (#25125644)
I work in manufacturing automation so I may be biased, but attempts to robotize the manufacturing of a product that's being iterated on continuously (Tesla) or automating the assembly of lots of low-volume products is always going to go poorly.

Large car companies like GM or Ford hire automation companies to build automation equipment that meets a very specific spec for assembly steps, tolerances, rates, etc. They design components with ease of manufacturing as a significant factor. How something will be assembled is a constant consideration while designing. The product being run on these lines never really changes and human are only used when the the operations are so complex that the equipment doesn't pay for itself in (typically) 2 years. This is very rare, mostly people are only there to keep the machines filled with parts.

In the sequence of

  design -> automate -> manufacture 
manufacture needs to be much larger than the others have good margins. You can't iterate on design without iterating on automate, so if you change the design a lot it's probably best to avoid trying to automate.
Re:Twitter names famed hacker 'Mudge' as head of security by njarboe on Monday November 16, 2020 @09:06PM (#25119569)
Elon Musk said the thing that was really hard to automate was putting in wiring. Tesla has now developed a whole new type of wiring system that is much more amenable to automation.
Re:Twitter names famed hacker 'Mudge' as head of security by ancientworldnow on Monday November 16, 2020 @10:56PM (#25120121)
Tesla uses more workers per car in assembly than other major manufacturer. By a lot. They are not the people to look for in terms of automating auto assembly anecdotes despite their PR efforts.
Re:Twitter names famed hacker 'Mudge' as head of security by njarboe on Tuesday November 17, 2020 @12:30PM (#25126596)
Elon Musk spends a lot of money/effort not to get stuck in local maxima. I guess time will tell if Tesla's trying lots of new ideas works out for them.
Re:Twitter names famed hacker 'Mudge' as head of security by anchpop on Tuesday November 17, 2020 @01:05AM (#25120747)
I googled but didn't see anything, source?
Re:Twitter names famed hacker 'Mudge' as head of security by agustif on Tuesday November 17, 2020 @03:43AM (#25121421)
The german auto-makers like BMW / VW build their own robots for assembly, I would look up there.
Re:Twitter names famed hacker 'Mudge' as head of security by njarboe on Tuesday November 17, 2020 @12:35PM (#25126669)
Tesla bought the german manufacturing automation company Grohmann Engineering in Jan. 2017, so there that also.
Re:Twitter names famed hacker 'Mudge' as head of security by throwaway201103 on Monday November 16, 2020 @06:44PM (#25118587)
Bolts may need to be different sizes due to the forces on them. Other solution might have been give the employee two wrenches, one each of the proper size.
Re:Twitter names famed hacker 'Mudge' as head of security by freeopinion on Monday November 16, 2020 @07:49PM (#25119102)
Classic.

Fictional employee. Fictional scenario. But you still assume that the employee isn't smart enough to know why bolts are different sizes and whether a bigger bolt could work in the place of the smaller bolts.

You assume you know more about this fictional car than the fictional employee actually (um, I mean fictionally) building it.

You should apply for management.

Re:Twitter names famed hacker 'Mudge' as head of security by jacobsenscott on Monday November 16, 2020 @08:16PM (#25119261)
There's really no reason to think the person turning the bolt knows what size the bolt needs to be. It isn't insulting to the employee, it just isn't there job. In the same way a web dev doesn't know how docker works, or how their OS's memory allocate works, or how a C programmer doesn't know how the hardware works, or how an EE can't write readable code to save their life.
Re:Twitter names famed hacker 'Mudge' as head of security by reificator on Monday November 16, 2020 @10:26PM (#25119990)
> In the same way a web dev doesn't know how docker works

Reductively it's CoW snapshots + chroot.

Guess I need to find a new job.

Re:Twitter names famed hacker 'Mudge' as head of security by jacobsenscott on Friday November 20, 2020 @12:30AM (#25157573)
Containers and a layered file system is closer to the mark
Re:Twitter names famed hacker 'Mudge' as head of security by jhardy54 on Monday November 16, 2020 @10:39PM (#25120049)
f u l l s t a c k
Re:Twitter names famed hacker 'Mudge' as head of security by jhardy54 on Monday November 16, 2020 @10:38PM (#25120044)
Two weeks ago I was writing a UI in React. Last week I was writing a Dockerfile. This week I'm building a circuit with a microcontroller.

People don't have to hyper-specialize to one specific role.

Re:Twitter names famed hacker 'Mudge' as head of security by dane-pgp on Monday November 16, 2020 @11:27PM (#25120260)
Weird flex, but okay.
Re:Twitter names famed hacker 'Mudge' as head of security by aurbano on Tuesday November 17, 2020 @06:41AM (#25122584)
How's that weird? It is perfect anecdotal counter-evidence to the claim it's responding to.
Re:Twitter names famed hacker 'Mudge' as head of security by dane-pgp on Tuesday November 17, 2020 @08:19AM (#25123385)
I interpreted the original claim as being:

> There's really no reason to think the person turning the bolt necessarily knows what size the bolt needs to be.

and also steel-manned the final sentence like this:

> In the same way a web dev doesn't need to know how docker works

As such, the (claimed) existence of one person who regularly uses very different skills doesn't disprove what I think jacobsenscott was trying to say.

Re:Twitter names famed hacker 'Mudge' as head of security by jhardy54 on Thursday November 19, 2020 @11:43AM (#25151286)
Sure, but there's no reason to believe the person turning the bolt necessarily doesn't know what size it needs to be.

Example using the same logic as the post we're discussing: Someone flips a coin in another room. It doesn't necessarily have to be heads, so we should assume it's tails.

Re:Twitter names famed hacker 'Mudge' as head of security by hajimemash on Tuesday November 17, 2020 @03:18AM (#25121289)
I thought this was cool.
Re:Twitter names famed hacker 'Mudge' as head of security by tstack on Monday November 16, 2020 @08:54PM (#25119506)
> But you still assume that the employee isn't smart enough to know why bolts are different sizes and whether a bigger bolt could work in the place of the smaller bolts.

It sounds like you are not familiar with this disaster:

https://en.wikipedia.org/wiki/Hyatt_Regency_walkway_collapse

There may be a very good reason things are the way they are.

Re:Twitter names famed hacker 'Mudge' as head of security by bravura on Monday November 16, 2020 @09:01PM (#25119536)
And apparently you a not familiar with what a cargo cult is?
Re:Twitter names famed hacker 'Mudge' as head of security by tstack on Monday November 16, 2020 @09:24PM (#25119659)
Uh... what? The comment I replied to argued that a random employee might understand why a particular bolt was chosen. The walkway collapse is literally about bolts/nuts being changed around. That design change by a third party resulted in a disaster that killed over 100 people... Seems like appropriate evidence that a line worker would not actually understand design details. That's not to say they couldn't make a suggestion and feedback their experience. Of course they should do that.
Re:Twitter names famed hacker 'Mudge' as head of security by rightbyte on Monday November 16, 2020 @07:59PM (#25119176)
You can have the same hexagon head size for different thread diameters within the limits of what is silly.
Re:Twitter names famed hacker 'Mudge' as head of security by syshum on Monday November 16, 2020 @08:37PM (#25119400)
While that may be true, it is equally possible that the engineer did engineer thing with out giving a crap about the assembly thing, this happens alot...
Re:Twitter names famed hacker 'Mudge' as head of security by rudolfwinestock on Monday November 16, 2020 @06:28PM (#25118435)
The following is a relevant quote from Clay Shirky.

http://www.shirky.com/weblog/2013/11/healthcare-gov-and-the-...

Back in the mid-1990s, I did a lot of web work for traditional media. That often meant figuring out what the client was already doing on the web, and how it was going, so I’d find the techies in the company, and ask them what they were doing, and how it was going. Then I’d tell management what I’d learned. This always struck me as a waste of my time and their money; I was like an overpaid bike messenger, moving information from one part of the firm to another. I didn’t understand the job I was doing until one meeting at a magazine company.

The thing that made this meeting unusual was that one of their programmers had been invited to attend, so management could outline their web strategy to him. After the executives thanked me for explaining what I’d learned from log files given me by their own employees just days before, the programmer leaned forward and said “You know, we have all that information downstairs, but nobody’s ever asked us for it.”

I remember thinking “Oh, finally!” I figured the executives would be relieved this information was in-house, delighted that their own people were on it, maybe even mad at me for charging an exorbitant markup on local knowledge. Then I saw the look on their faces as they considered the programmer’s offer. The look wasn’t delight, or even relief, but contempt. The situation suddenly came clear: I was getting paid to save management from the distasteful act of listening to their own employees.

In the early days of print, you had to understand the tech to run the organization. (Ben Franklin, the man who made America a media hothouse, called himself Printer.) But in the 19th century, the printing press became domesticated. Printers were no longer senior figures—they became blue-collar workers. And the executive suite no longer interacted with them much, except during contract negotiations.

This might have been nothing more than a previously hard job becoming easier, Hallelujah. But most print companies took it further. Talking to the people who understood the technology became demeaning, something to be avoided. Information was to move from management to workers, not vice-versa (a pattern that later came to other kinds of media businesses as well.) By the time the web came around and understanding the technology mattered again, many media executives hadn’t just lost the habit of talking with their own technically adept employees, they’d actively suppressed it.

Re:Twitter names famed hacker 'Mudge' as head of security by hyperdimension on Monday November 16, 2020 @07:07PM (#25118793)
Whereas I appreciate the (terribly unfortunate) point made in the excerpt, the link didn't work for me. If anyone else wanted to read more, I found a working archive.org link:

https://web.archive.org/web/20140122141413/http://www.shirky...

Re:Twitter names famed hacker 'Mudge' as head of security by mistermann on Monday November 16, 2020 @06:59PM (#25118712)
> I remember thinking “Oh, finally!” I figured the executives would be relieved this information was in-house, delighted that their own people were on it, maybe even mad at me for charging an exorbitant markup on local knowledge. Then I saw the look on their faces as they considered the programmer’s offer. The look wasn’t delight, or even relief, but contempt. The situation suddenly came clear: I was getting paid to save management from the distasteful act of listening to their own employees.

I wonder if some parallels to this story (listening, without contempt) exist within the sphere of political polarization.

Re:Twitter names famed hacker 'Mudge' as head of security by shaneos on Tuesday November 17, 2020 @04:09AM (#25121553)
I think your perception of what a high level person like Mudge does is a bit off. At Stripe he did amazing work, but it was mostly organizational. He built a world class team, defined a set of short, medium and long term goals that enabled the company to reduce risks over time, had his team build tools to measure that risk and held them accountable for moving the needle.

That is to say, he did executive level work. I imagine he’ll do similarly great work at Twitter, setting them up for long term success, just as he did at Stripe

Re:Twitter names famed hacker 'Mudge' as head of security by manquer on Monday November 16, 2020 @10:25PM (#25119980)
Lot of consultants commenting seem to think what they do is simple, it is really not.

They have a long experience of asking the right questions to the right people , filtering out useless inputs, creating the right abstractions strategically from tactical inputs, there are very niche skills, it may be easy for us, but for the non technical manager it is black magic

Re:Twitter names famed hacker 'Mudge' as head of security by freyir on Tuesday November 17, 2020 @02:31AM (#25121089)
Isn’t that essentially a manager’s job? I’m not sure why any of that needs to be outsourced.
Re:Twitter names famed hacker 'Mudge' as head of security by ramblerman on Tuesday November 17, 2020 @03:58AM (#25121492)
> For some reason, high level managers need very expensive consultants to tell them the obvious truths.

As a very expensive consultant I'm surprised the reason is not more clear to you. Most managers like to pay consultancy firms so that they can cover their asses.

If they just followed the guidelines of what the McKinsey team said then surely they weren't in the wrong. Whilst if they followed the advice of a subordinate or god forbid made a decision it's on them.

Re:Twitter names famed hacker 'Mudge' as head of security by ska on Monday November 16, 2020 @06:47PM (#25118611)
Sometimes part of the service you are providing is cover. The outside/inside distinction can be important.
Re:Twitter names famed hacker 'Mudge' as head of security by bosswipe on Monday November 16, 2020 @10:04PM (#25119865)
The problem is usually in-fighting between middle managers protecting their turf. Why can't the incentives for middle managers be fixed? Seems like if a company took anonymous performance reviews of Directors and VPs from lower-level employees it would prevent a lot of the bullshit.
Re:Twitter names famed hacker 'Mudge' as head of security by natalyarostova on Monday November 16, 2020 @06:44PM (#25118588)
Leaders that make decisions that have ramifications that are trivially worth 9+ figures are willing to pay the extra 500k to take their trust in the word of a consultant from 95% to 99%.
Re:Twitter names famed hacker 'Mudge' as head of security by dionian on Monday November 16, 2020 @06:00PM (#25118214)
> but can't get through layers upon layers of management

i think you hit the nail on the head here. the problem is that the upper management usually arent clueless, they are just better leaders than they are doers...

Re:Twitter names famed hacker 'Mudge' as head of security by ALittleLight on Monday November 16, 2020 @06:06PM (#25118266)
I used to think middle management was stupid and clueless. Now I understand that we are simply playing different games. I am trying to make a good product. They are trying to get promoted.
Re:Twitter names famed hacker 'Mudge' as head of security by lostcolony on Tuesday November 17, 2020 @11:28AM (#25125640)
I think you may be making a mistake tying those together the way you are.

I've had highly effective managers before, who were trying to get promoted. Just like I've met highly effective developers, who were trying to get promoted. That's orthogonal to making a good product.

They wanted to get promoted because they wanted to be able to be more effective; everything they had control of went very, very well (we were empowered to make decisions, he helped us navigate organizational obstacles, and was the sacrificial lamb for useless meetings). All the issues we ran into were from outside his circle of influence; product had its own reporting hierarchy and they were a mess. Integrations with the rest of the org were more bureaucratic and less capable, and getting them to do anything required getting VP level support on our side, etc. Had he had more sway, we could have executed faster. We directly benefited when he got a title bump.

I think what you mean are those who are putting individual success over team success, and yes, those managers are either evil or incompetent.

Re:Twitter names famed hacker 'Mudge' as head of security by m463 on Tuesday November 17, 2020 @09:16PM (#25132431)
I think it's used to delegate unpopular decisions.

You need tools for your group.

IT wants to use tool MSFT.

Everybody has been using tool X for a while. They like it, but there is issue Y.

How does upper management resolve this?

Re:Twitter names famed hacker 'Mudge' as head of security by na85 on Monday November 16, 2020 @07:54PM (#25119143)
How did you get to be a very expensive consultant?
Re:Twitter names famed hacker 'Mudge' as head of security by cyberpunk on Monday November 16, 2020 @05:38PM (#25117983)
Ssssh! Don't give the game away ;)
Re:Twitter names famed hacker 'Mudge' as head of security by TheRealPomax on Monday November 16, 2020 @05:58PM (#25118188)
it's okay, folks at that level of management don't tend to read hacker news.
Re:Twitter names famed hacker 'Mudge' as head of security by Kaze404 on Monday November 16, 2020 @09:43PM (#25119754)
> As a very expensive consultant I am frequently appalled at how management teams completely ignore their own employees.

Tell me about it. On one of my previous jobs I would constantly speak out about what we were doing would cause people to lose hundreds of thousands of USD, and every time I was laughed out of the meeting for "overthinking" things (I guess that's what wanting to do things right is called these days). When one of our customers lost US$200k and nobody had any idea why or how or when I knew that company would be the death of me, and coincidentally I was on the same meeting I planned to use to quit my job.

If anything it taught me that working in finance is not for me :p