Hacker Newsnew | past | comments | ask | show | jobs | submit | introvertmac's commentslogin

fair enough!

maybe it is just I saw 3-4 startups which "humanise" AI response and they are doing decent $, maybe just because of marketing


Are they profitable? Are thier employees making decent money or getting paid in “hopium” - ie illiquid equity that will probably be worthless?

Some great points in there. Yeah, in the boat of "wanting to have money" while having a job, where two years there is a layoff or restructuring. Trying to find a balance as an engineer in mid 30s and optimising for everything as life passed by, With little bit of fomo here and there!

I’m 51 and have had 10 jobs over 30 years. Those jobs have been everything from startups, to boring stable small and medium “lifestyle companies”, to boring big enterprise, to $BigTech and now I work in customer facing cloud consulting as a staff consultant.

And I’ve never seen a market this shitty. Even after the dot com bust if you were a regular old enterprise dev - and at the time I had 4 years of experience as a Windows developer in Atlanta - it was easy to find a job. 2009-2011 was a shit show but it wasn’t that bad.

While I did find a job quickly after being Amazon’ed in 2023 and again last year, things have gutted worse since then.

My only strategy is to keep our fixed living expenses way down (less than half my income and I’m the only one working by choice), stay out of debt, keep a years saving in the bank, keep my resume updated and a longer form career document [1], keep my skillset in line with the market (I lead a lot of “AI” related non chatbot projects) and keep a strong network.

I feel a tinge of FOMO knowing that an intern I mentored while they were an intern an a year after coming back makes a little more than I make. They are 25 and a mid level SA at AWS - similar to what I do. I have to think about the story of the “Mexican Fisherman”.

https://bemorewithless.com/the-story-of-the-mexican-fisherma...

[1] A career document is a detailed list of all of your accomplishments in STAR format that you keep updated quarterly.



Not yet but we can add it in the next version


Check out Space Dash, a new space adventure game where every line of code is written by Claude Sonet. The game combines classic arcade mechanics with a fresh twist. Feedback is welcome!


Amazing, thanks for this. Mind sharing more details? Would be very interested in info on prompts, how you iterated, etc.

Thank you!


Hey HN!

I've released an updated version of EasyScan, a lightweight website vulnerability scanner written in Python.

EasyScan analyzes the security of a website by inspecting its HTTP headers and DNS records, generating a comprehensive security report with recommendations for addressing potential vulnerabilities.

A complete security audit still requires manual testing and logical thinking, this script is meant for finding out basic server configuration and DNS issues.

Some of the key test cases covered by EasyScan include:

- Same Site Scripting - SPF and DMARC records - Public Admin Page - Directory Listing - Missing security headers - Insecure cookie settings - Information disclosure - CORS misconfigurations - Content-Type sniffing - Cache control

The script is easy to set up and use, requiring Python 3.6 or higher, along with a few dependencies (`requests`, `beautifulsoup4`, and `dnspython`). The generated report provides a quick overview of your website's security posture, helping you identify any issues that might need your attention.

Please note that EasyScan is not a substitute for a thorough security assessment, but it can be a great starting point for identifying potential vulnerabilities in your website.

Check out the project on GitHub: https://github.com/introvertmac/EasyScan

I'd love to hear your feedback and suggestions for improvement.

If you have any questions or need assistance, feel free to reach out on Twitter https://twitter.com/introvertmac.


Great point!


P.S. I've just complied few of recent findings from crypto websites. These issues are applicable to any website or REST APIs.

This post is not about security vulnerabilities in blockchain, smart contract or crypto protocols.


Nice compilation, thanks


I genuinely tried to complied the issues and yes, most of them are crypto websites.

Sorry for any confusion created by the title!


Security disclosure and private work have some responsible disclosure policies.

I've added added the public bug bounty website for the last one!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: