Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Ebay & Paypal pissed off a lot of people (Score 2) 87

Many years ago I disclosed a vulnerability to Ebay to get any user's email.

It took 2-3 hours to talk to their tech support and convince them that this is a serious problem. I had to show multiple examples of telling them emails of users randomly picked by tech support. Eventually they closed the hole. Within 12 hours actually, which was not too bad.

Several years later, when I had some issues with Ebay, they did not want to take that help into account.

Ebay & Paypal had so many changes over the past 5 years and pissed off a lot of people as a result. No wonder someone went public with the issues. I used to have multiple power seller accounts, and after all these changes I stopped selling there.

If I saw a vulnerability now with either ebay or paypal, I'd not bother telling them. I'd actually just wait for a story like that and laugh at them from a perspective of what goes around - comes around.

Comment Re:The same as I do when I see illegal stuff (Score 2) 168

Actually, I was laid off once because of a very similar situation. 1. Found a very expensive computer in a trash 2. Notified the manufacturer with all serial numbers. 3. Used work email 4. Half a year later some a*hole comes with a police officer to my work and accuses me of stealing it. 5. Next day I am laid off. Had another somewhat similar issue where I disclosed a serious vulnerability to a company where any user email could have been looked up through a certain web page. When I needed their help on an issue I had with their services - I got nothing back. The lessons I learned - if I first see some cooperation from actual developers and not management/support a*holes, I cooperate as well and report any issues I find directly to developers. If I do not see such cooperation - I do not tell anyone about issues. Coincidentally, the company I currently work for, cancelled the last service where I found some issue, and the CTO of the company was rather negative about what I was doing. Hopefully he'll learn to be more cooperative in the future.

Comment Re:Daily reports (Score 2) 468

I have been doing daily reports for a while. The way I do them - I keep an excel file where I have a column for a short summary of what I worked on during the day. If I had an issue and it needs to be fixed - I will write it there too. At the end of the day I'd send an email to my managers with a summary of what I did. Usually no more than 2 3-line paragraphs. What this really helps me with is to make sure management sees that I actually produce or research a lot each day. This also makes me want to complete things by the end of the day as opposed to leaving them for the next day.

Comment Developers at MS are smart. Some PMs are crappy. (Score 1) 168

I worked there in 1998 as an intern. Had many issues with management.

Yet, inspite of all the problems, it is a REALLY GREAT PLACE TO WORK. From a developer's perspective, you meet extremely smart people. And their suggestions potentially influence your development many years after.

The best thing that I saw was that Microsoft really values smart people and they will keep them at any cost not letting them leave. Very few companies do that. Most today's companies are just concerned with the rate per hour and all this crap which results in insane turnover and crappy productivity. Microsoft actually gives generous raises to those who really produce. And employee turnover in 90's was much lower than any other company.

The werst problem that seemed at the time was an insanely redundant chain of PMs. One would be responsible for the product, another for graphics, another for future localization and who knows what. The guy responsible for UI layout (in my particular case) was there for at least 10 years. Paid a lot and design stuff completely inconsistent with any other Microsoft product. Every time I would mention multiple examples from the most popular products like Windows itself or Office, I would be told that it's not my job. Yet his "design" looked like sh*t. Another really smart developer (who eventually became architect and evangeliest) told me he had the same issues with him. That PM always "worked from home" and never showed up.

It is very likely that such PMs were the ones who brought all this mess to the company that we see now. Yet, purely from software development perspective and learning from co-workers it was an amazing place.

Comment Re:Stats from a non-technical website (Score 1) 423

I have a non-technical video related website. It has more than 1mln visits per month according to Google Analytics.

My stats for the past month are:

Chrome: 49.06%
Firefox: 21.36%
IE 15.65%
Safari 6.14%

Windows 85.65%
Macintosh: 4.56%
iOS: 2.56%
Android: 2.54%

But I do remember seeing about 30% IE last year. So there's a chance different non-technical sites attract different browsers differently.

For example, you have 3 times more Apple users than me.

Submission + - I would switch jobs if I see

npetrov writes: 1. position paying 10% more
2. position paying 20% more
3. position paying 30% more
4. position with better benefits
5. position with less work hours

Comment Re:flexible work schedule (Score 1) 1201

You are probably doing much more involved things than I do. I still have a full time contract making money. The stuff I described were just short-term projects. usually in C#. Worth just couple of K each.

But from the same perspective of having "first steps" - I suggest a lot of people to start with Elance/Odesk when they are looking for a cheap way to do a project.

The idea is - if you are lucky - you get something done. If not, for just $1-2K you learn what not to do in the future. So it's still an inexpensive way to learn how not to waste more money later.

Comment Re:flexible work schedule (Score 1) 1201

I find it very easy to compete against India.

They usually try to quote on a project at about $10-20/hr and say it takes several weeks. I usually offer a demo by the end of the day and then a discussion on the total project cost. Sometimes this does involve working a lot and really fast. However it really blasts India out of equation after the demo since the most important question that comes after the demo "why did they ask for several weeks when someone else did most of it in one day".

I only did it twice successfully, but if you feel like you are bidding on a small/medium project against India, keep in mind that the way they try to outsource is by extending the development time to bill more or account for slow developers.

Comment Re:Artifact of Specialized Skills (Score 1) 1201

That's what I thought because I was in an INSANELY SMALL NICHE on my full-time contract. It was a C++ COM Internet Explorer Plugin DLL programming. Guess what? My new contract is pure C#, not even a single line of P/Invoke, some minor reading of legacy C++ MFC app is needed. Pays more.

Although this goes along the lines of 3 other minor projects I was doing besides the main contract.

To me it looks like even if you are super specialized in some areas, but work on small projects in others - you are still super valuable.

Comment Re:O RLY? (Score 1) 1201

do not necessarily have the exact skills needed for the job today.

Which, in turn, means taking less of a "Just In Time" attitude to hiring. Good workers are not items you can order off the shelf, along with a desk, a chair, and a PC.

There's a flaw in this logic. If everyone was trainable in the same way - it'd make sense. However, usually those who have more relevant experience and who want to be paid more because they have a lot of successful projects in the past are usually the ones that can train a lot faster. At my current contract, I was hired together with another guy at roughly the same rate (difference was only 10%). The project was speced for 3 months. Within the first week I already delivered an important component while the other guy couldn't even produce a demo of another part.

Eventually 3 weeks into the project we talked with the manager and he decided to get rid of the other guy because his lack of knowledge and learning abilities were quite bad. It took less than 2 days to do what he was trying to accomplish in 3 weeks.

I've seen the same before with a drastic difference in abilities between people paid similarly quite often. Usually those with more skills learned a lot faster or produced better code.

Slashdot Top Deals

Software production is assumed to be a line function, but it is run like a staff function. -- Paul Licker

Working...