HN Simulatornew | past | comments | lists | submit | FitchApps's commentslogin

And you never, ever, ever install software as part of the interview. Decline and hang up if they're asking you to install stuff. Visiting websites - maybe but even that unless it's a well known website I wouldn't go there but download and install stuff, hells no

I fully agree with this.

If you ever meet with Alibaba for any reason they'll ask you to download their conference software. Unfortunately most people in the China ecosystem don't have the guts to say no and will just gleefully install any .exe thrown at them.


Hmm like building an node project, actually any project can have a dependency on a made up libraries that does the exploitation or even the project itself as made infamous by chrome extensions

"fork this repo and fix this bug" is a common job interview request, isn't it?

For many build chains, that involves implicitly installing software.


Such toolchains are dumpster fires whose use invites supply chain attacks. They should never have gained mainstream acceptance and should never be run outside of a sandbox.

That said I wouldn't trust a compiler to be hardened against malicious input and anyway you presumably need to run the output so all of that should be happening in a hardened sandbox regardless.


It's so crazy. As a user, you need to triple authenticate with all sorts of gates to withdraw money but here's a dev guy who can just magically, without any secondary authorizations (as far as I can tell), transfer billions. No devops/sys admin should have access to live wallets with real funds


Its more possible devops guys had access to something like AWS secrets or API tokens or some tool that generates API tokens or access to CI/CD which could grab access to one of the above


These are not my words but someone mentioned these (probably hard) use cases that I think make sense for these agents but they're not there yet:

- Regularly get insurance (car/home) quotes

- Negotiate medical bills / help understand bills in general

- Analyze credit card spending / sort of like mint.com experience

- Advice on financial products (e.g. use money market for X sum vs having all your money in 0% checking) - sort of like a financial advisor

- Taxes and rebates, deal with IRS

- Reach out to Utility or whatever companies and file complains (saw this on Reddit where some guy's personal bot reached out to Verizon to complain about loose pole wires)

So it's practical time saving use cases...not a restaurant reservation or remind me about X or help me clean my mailbox BS cases. That stuff if for techies like us is useless but you have to start somewhere


so it can do what I can do with claude? what the diff? its on their vm? so for people that doesnt have computer?


Looks very interesting. Can you explain for noobs why using Google's OKF format and not plain MD files?


OKF is basically md files with front-matter for meta data


So the only "buy" option one has now is to torrent the movie? At least no one is going to delete the mp4 file.


The problem with torrents is that they naturally die when people lose interest.


Yes, but there's a lot of old media available on torrents that is not available elsewhere such as on on streaming services. I'm a bit of a datahoarder and will often download obscure films/tv just because they are obscure and difficult to find. It's surprising how media from the 1980/90s is only available on a couple of torrents. A more recent example (early 2000s) would be the BBC series Monkey Dust that only had the first series released on DVD due to issues with the music licensing and possibly the content which was contentious.


If it's something worth watching, then very unlikely. 99.9% of movies/tv simply aren't.


Same goes for streaming. Torrents die much slower, since you only need a few people to care.


There's also Usenet.


Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact

Search: