News for hackers. Stuff that matters.
Re:The productivity of working from home: Evidence from Japan by thaumasiotes on Saturday March 13, 2021 @02:20PM (#26449133)
> More work gets done in a dedicated space for work, surrounded by other people engaged in related work

I don't think that first part ("dedicated space for work") is so significant.

In my experience working remotely answering bug bounty reports, what most helped with working was the presence of a chat channel containing the rest of the team. It was used, in part, to discuss or ask for help with difficult reports, but primarily for making fun of stupid reports. (One of my favorites in this category being "If I zoom in too far on your mobile app, the text starts to become blurry.")

That might not sound especially productive, but you can't do it if you're not looking at the reports. You could view the channel more abstractly as providing irregular notifications of the form "I just did some work" -- participating requires you to do some work, and that helps you keep working.

Re:The productivity of working from home: Evidence from Japan by lupire on Saturday March 13, 2021 @02:31PM (#26449232)
Why is it stupid? Vector fonts should render smoothly at all scales.
Re:The productivity of working from home: Evidence from Japan by thaumasiotes on Saturday March 13, 2021 @02:34PM (#26449249)
It might legitimately be a bug in the app, if you're on the UI team. It's stupid because it was reported to the security team, and it has no security implications whatever. Nobody pays UI bounties.
Re:The productivity of working from home: Evidence from Japan by jrockway on Saturday March 13, 2021 @03:57PM (#26449918)
Users are going to use whatever mechanism to provide feedback that they find first. They don't know what's a security issue, what's a bug, what's a sales request, and what's a support request. All I can say is that I hope whatever system you use for collecting security reports is shared by those other teams, and you just change the "security" tag to "ui" and move on. Because if you don't do that, you know whoever is reading that "ui bug" queue also has a slack channel where they make fun of people filing security reports as ui bugs, and then proceed to drop them on the floor.

Always be careful about shipping your org chart.

Re:The productivity of working from home: Evidence from Japan by astrange on Saturday March 13, 2021 @04:25PM (#26450151)
Maybe you should pay UI bounties. You're certainly losing money if customers leave because your app sucks.
Re:The productivity of working from home: Evidence from Japan by yunohn on Saturday March 13, 2021 @04:03PM (#26449959)
Well, did you forward it to the UI team...?
Re:The productivity of working from home: Evidence from Japan by thaumasiotes on Saturday March 13, 2021 @06:31PM (#26451210)
No, I marked it invalid and went on with my day. As the front line of security triage, I don't even work for the company and have no contacts on the UI team. You want me to escalate it to the internal head of security? It's not going to happen.
Re:The productivity of working from home: Evidence from Japan by yunohn on Sunday March 14, 2021 @04:50AM (#26453725)
It’s not an escalation. This would rather be an opportunity to improve the triage process to account for cross functional bugs.