Hacker Newsnew | past | comments | ask | show | jobs | submit | cdoxsey's commentslogin

Great article. Health checks often seem like an afterthought in most applications.


Never had psychosis but have had a few major depression episodes (sleep all day, lose a bunch of weight, get stuck in a cycle of negative thoughts, etc).

I did end up in the hospital once for a week. I found myself repeating the same actions over and over again because I couldn’t remember doing them, I had a hard time speaking (everything came out in slow motion and stuttering), and I think I had a bout of depersonalization. The DRs thought I was drunk or on something. I wasn’t. Never did figure out what happened.

It was probably all stress related. I had to quit my job and move closer to family. Ended up costing me $$$ due to bad timing (lost options that weren’t fully vested) I have to be very careful about work.

I tried therapy and medication. Maybe it helped. Maybe it’s just something you learn to cope with. Recognize it for what it is. You’re a person who’s somewhat fragile. You might have a breakdown. If you can recognize warning signs try to catch it early. I have a lot of respect for people who have grit and endurance - I want to be the kind of person who can do big things and work hard and accomplish the seemingly impossible - but at least in my experience, mental health doesn’t always play well with that and it takes a long time to recover.

Personally work was the “main” thing I put energy into for a long time. And it’s not anymore. And that makes me sad. But at least I’m not losing my marbles anymore (knock on wood).


First of all its not a misrepresentation of the memo. The memo states:

> Users should log into applications, rather than networks, and enterprise applications should eventually be able to be used over the public internet.

Second with regards to this statement:

> Opening up your internal network to the internet and rely on every app to do security correctly is a ridiculously bad strategy.

That's precisely what zero trust networking is. Ala Google's BeyondCorp:

> Virtually every company today uses firewalls to enforce perimeter security. However, this security model is problematic because, when that perimeter is breached, an attacker has relatively easy access to a company’s privileged intranet. As companies adopt mobile and cloud technologies, the perimeter is becoming increasingly difficult to enforce. Google is taking a different approach to network security. We are removing the requirement for a privileged intranet and moving our corporate applications to the Internet.

(https://storage.googleapis.com/pub-tools-public-publication-...)

Maybe they're wrong about all this, but it's not anti-advice. It's a legitimate security model being pursued by many different companies.


Even the BeyondCorp paper doesn't fully buy into this idea. If you're on a coffee shop's wi-fi network, you'll talk directly to Google's Access Proxy. But if you're in the building, you're 802.1x authenticating to their network before getting access.

The problem with VPNs is that enterprises have used them for decades as a crutch, extending their perimeter model out so that instead of a small SPOF, they have a gigantic, ever-changing SPOF. "ZTN-think" pushes this basic idea way past usefulness, to the point where all network controls are somehow suspicious. Which is crazy; BeyondCorp fundamentally relies on network access controls as well as application access controls, like every other modern network design. They're just different controls.


Zero trust is about not trusting anything, which means neither external nor internal network. Not trusting the internal network does not mean that you should open it up to everyone. You have misunderstood this gravely.

Google doesn't do what you suggest and I'll throw in another large security-aware company as well, known for their privacy-conscious phones. They protect the perimeter as well as the inside. As does any military organization. Stop spreading misinformation.


You're missing the point. There is no internal network in this new model.


That's not true. If you read what Google wrote regarding BeyondCorp the argument is that firewalls and VPNs were perimeter defences for weak internal networks and this is the main complaint, that breaching this defence would allow lateral movements as well as of course internal attacks. They have no issue with strong internal zero-trust networks.

So as I said previously, for most organizations, it would be crazy to the point of lunacy of their infosec team to allow the internet access to internal corporate systems and just rely on those to have been individually secured.

I would dare to say that nobody does this or I'll ask you to please give me the IP address of Google's internal DVCS server.


Good catch. It seems like they implemented binary search, but not the jump tables yet.


Your point stands, but the OPM breach was done by the Chinese government: https://www.fedsmith.com/2018/09/21/bolton-confirms-china-be....

It seems like governments have gotten good at cyber attacks but not so good at cyber defense.


The Chinese government did it but the public information about the attack does not show any advanced techniques or resources which would limit it to a nation state.


The US has social safety nets.

Nearly half the federal budget is spent on Social Security, Medicare and Medicaid. And there are numerous other programs: unemployment, housing assistance, snap, etc.

There are also state and local programs as well as private charities.


Social security and Medicare are both social safety nets that one cannot take advantage of while they're working in most cases, and everything else you've mentioned either requires a person to be in extreme poverty or severely disabled.

Meanwhile a healthy, young, gainfully employed person in France can take advantage of a wealth of social services and benefits.

Mentioning them the way you have requires a very uncharitable interpretation of the previous posters point.


The American system sounds like what something called a “safety net” should provide. Why would someone actually need to use a safety net while they are healthy, young, and gainfully employed?


I should have said "socialized services" in my original post. Sorry, I've been brainwashed by years of American right-wing owned media to call it a safety net.


> Meanwhile a healthy, young, gainfully employed person in France can take advantage of a wealth of social services and benefits.

If they have such an amazing welfare system, then why are the French perennially rioting[1]? And why do so many recent French presidents have abysmal approval ratings[2]?

[1] https://en.wikipedia.org/wiki/List_of_incidents_of_civil_unr...

[2] Macron: https://en.wikipedia.org/wiki/Opinion_polling_on_the_Emmanue...

Hollande: https://en.wikipedia.org/wiki/Fran%C3%A7ois_Hollande#Approva...

Sarkozy: https://en.wikipedia.org/wiki/Presidency_of_Nicolas_Sarkozy#...


The French have a strong welfare system precisely because they are willing to take action and forcefully protest when it is threatened.


The approval rating doesn't seem to be much better than US Gov't[0].

Also, the US is also constantly protesting too. What do you think Black Lives Matter, the Google Walkout, the Amazon protests in NYC, the current and ongoing unrest surrounding ICE camps, and the teachers union strike in LA are?

0. https://news.gallup.com/poll/1600/congress-public.aspx


But the GP was trying to point out how France is much better than the US. With a better system, I would expect less protests and better approval ratings.


And I am arguing that approval ratings and protests may not be highly correlated or have causational relationships with the amount of social services.


> I would expect less protests and better approval ratings.

You must not know the French very well, or you wouldn’t expect this. :)


> If they have such an amazing welfare system, then why are the French perennially rioting

because they are alive and free.


Unemployment insurance is state based and usually somewhere between $300 - $500 a week. The waiting list for housing assistance is years long in some places.


We definitely have safety nets. Ours just cost more and give less.

To be fair we are also a much larger country with more diversity (especially of culture) than many countries with robust social safety nets.

Basically what I want to know is, if I don’t have health insurance through my employer, make $50K a year, and get cancer, what happens? I don’t know for sure but here in the US I’m guessing the answer would be mountains of debt.


> Basically what I want to know is, if I don’t have health insurance through my employer, make $50K a year, and get cancer, what happens? I don’t know for sure but here in the US I’m guessing the answer would be mountains of debt.

You must apply to a charity such as a catholic hospital that provides care for such cases. I know people with expensive conditions that have done this.

If it gets so bad that you become disabled, you can get social security.

If you run up a mountain of debt you can get rid of it (and your credit rating) via bankruptcy.


I was given a 2-hour coding challenge once to build a language server for a programming editor. It had to implement 3 functions:

1. show help text (type/doc string) for a word

2. go to definition

3. find all references

My first thought was "this is an absurd request for a two hour coding challenge". My second thought was "boy I hit the jackpot, a few years ago on a whim I built my own language server for Go in sublime text and could probably crank out a new one pretty quick"

Sadly despite my best attempt they rejected me. They never did give me an explanation. (fwiw: https://github.com/calebdoxsey/languageserver-challenge)

I wish I could say it was a fluke, but I've been rejected by lots of companies due to the coding challenge. One day I'd really love to see what the passing code for these challenges looked like. Maybe I could learn where I dropped the ball.


FWIW. This is an absolutely awful coding challenge for an interview especially in a 2-hour setting. The challenge requires building off of implementation details for a few very specific technologies. Interviews are supposed to test for general problem solving capabilities within some domain of competence. Unless the job was specifically to work on a go language server, and that was your aforementioned domain of competence, I see no rationale for using this programming challenge to determine employment.


Here's an app that simulates bad networks named Comcast:

https://github.com/tylertreat/Comcast

:)


What if you use your Comcast connection to test, the universe might implode.


You might find freedom.to useful. You can block websites for certain times of the day and it works with all devices.

I've found that if you can break the habit of reaching to some site when you're bored the addiction falls off pretty quick.

Programming has a lot downtime sometimes - waiting for a build or a long test run - and there's sometimes a steep context switch to working on something else. (At least for me if I start something new I'll forget what I was working on before) It's those times when I found myself on Twitter or Reddit.

One thing I've been trying to do instead is read an actual book - non-fiction does ok, I can usually follow the argument reading a few paragraphs at a time. And Kindle makes it easy to read in your browser and pick up where you left off on an e-reader.

One tricky thing though: I blocked YouTube only to be reminded that Google's login still goes through a YouTube domain, so I inadvertently made it harder to login :(.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: