waynesoftware
One week shadowing a Director of Engineering at GitLab
Tell HN: I salute everyone on call/working support through the holidays
Thank you for keeping systems available and safe. I've been there many times in the past, including having to fly at the last minute to a non-internet-connected data center in NJ to babysit an emergency production bug fix that took the entire holiday to create, install, verify, and monitor.
CWE security trends from 2010 to 2023
GitHub: Social engineering campaign targets technology industry employees
The artificial intelligence startup Anthropic, founded by former OpenAI employees concerned about A.I. safety, is releasing a new chatbot called Claude. However, the company's employees remain deeply worried about the risks of powerful A.I. models like Claude becoming dangerous if misused. They compare themselves to the creators of the atomic bomb and obsess over existential threats that advanced A.I. could pose. Still, they argue that building cutting-edge models is necessary for researching how to make them safer, and that having safety-focused companies in the A.I. race is better than leaving it solely to profit-driven firms. So Anthropic pushes forward, attempting to balance competitiveness with caution.
Should we be using if an email is pwned as input to antiabuse systems to give them higher confidence?
It reminds me a bit of when the % of emails that were #spam vs ham crossed 50% many years ago.
Lessons learned when development teams engage on major customer escalations
How to impress a customer when you have only 2 employees
I was reminded today of the 1st CEO I worked for: She had a meeting with a big customer...and only 2 employees. She brought all 5 of her employees...yes 5. 2 employees and 3 neighbors who just dressed up, showed up, knew nothing, and didn't say anything. She got the contract!
Cyber unicorn Snyk to sack 198 employees, 14% of workforce
The best leadership lessons will be from your worst boss. Notes from Managing Up
Leaders should be clear about sticky bears
I have been using poised (https://www.poised.com/) for this as it does it and related things...but have backed off on it since they went from free to paid (though is still may pay for it).
Ask HN: What % of dev effort do you target for features vs. maint vs. bugs?
How GitLab Makes Agile Shine with Developers Spread Across 65 Countries
The world’s first full, closed-loop system for stress feedback (HanuHealth)
How to automate your meeting agendas in Google docs
OWASP top 10 change visualization from 2004 to now
There is no question that next-generation ‘auto-complete’ tools like GitHub Copilot will increase the productivity of software developers. However, while Copilot can rapidly generate prodigious amounts of code, our conclusions reveal that developers should remain vigilant (‘awake’) when using Copilot as a co-pilot. Ideally, Copilot should be paired with appropriate security-aware tooling during both training and generation to minimize the risk of introducing security vulnerabilities. While our study provides new insights into its behavior in response to security-relevant scenarios, future work should investigate other aspects, including adversarial approaches for security-enhanced training