Zoncolan: Using static analysis to prevent security issues - Facebook Engineering
Zoncolan helps security engineers scale their work by using static analysis to examine code and detect security or privacy issues.
Hasnain says:
I am unreasonably excited that I can finally share a bit more about Zoncolan which is one of our coolest technical innovations to date.
Watching on the sidelines/being partially involved with the development here has made me re-evaluate how I approach software development. Technical excellence combined with laser-focused attention to detail on user requirements does wonders.
"Zoncolan evaluates thousands of code changes per day. We have built extensive infrastructure for running Zoncolan, tracking the results, and providing access to those results. In 2018, Zoncolan helped find and triage more than 1,100 security issues with severity “significant” or higher, indicating they required immediate action. The distribution of those findings is as follows."
Posted on 2019-08-16T00:19:53+0000
Great Mentors Focus on the Whole Person, Not Just Their Career
There’s a lot more to us than our jobs.
Hasnain says:
This was a great read on mentorship and how one can become a better mentor.
"For example, a seasoned lawyer advising a new associate fresh out of law school how to climb the ladder to partner, might tell him or her to work 70-80 hour weeks on a consistent basis. But the senior person hasn’t asked about relationships, kids, health, etc., which could, for the junior, be more important than career and financial success. An added benefit of spending most of your time asking questions is that it prevents you from talking too much and providing too many solutions."
Posted on 2019-08-14T16:18:02+0000
'We all suffer': why San Francisco techies hate the city they transformed
Amid a homelessness crisis, sky-high rent and a surplus of rich people, insiders bemoan the effects of their own industry
Hasnain says:
Presented without comment.
"But what’s striking about the current winter of our discontent (yes, it’s July; consider this your obligatory Mark Twain reference) is that it’s not just the archetypal “evicted Mission District visual artist” complaining that techies ruined San Francisco: it’s the techies themselves, too."
Posted on 2019-08-13T15:58:19+0000
The Lonely Work of Moderating Hacker News
Can a human touch make Silicon Valley’s biggest discussion forum a more thoughtful place?
Hasnain says:
Great read that goes into the history of hacker news,and also into how moderation and communities have gotten so much harder over time.
Also TIL HN has >5M MAP
“And yet the influx of outsiders doesn’t just change a community; it exposes its assumptions. The tech industry as a whole is having its own Eternal September. The world, with all its experiences and opinions, has come flooding in, and technologists are now reassessing the consequences of the systems and structures they have built or inherited. Some of these systems are social, and include the general modes of thought and expression that Hacker News embodies.”
Posted on 2019-08-11T06:37:27+0000
MoviePass Worked Out Great
Also sidecars, bank supervision and blockchain pivots.
Hasnain says:
Matt Levine’s analyses are always so detailed and great. In this piece he looks at a bunch of fairly recent trends including the (in)famed MoviePass.
“Per Lowe's orders, MoviePass began limiting subscriber access ahead of the April release of the highly anticipated "Avengers: Infinity War," according to multiple former employees. They said Lowe ordered that the passwords of a small percentage of power users be changed, preventing them from logging onto the app and ordering tickets.”
This makes me realize that the one time I had to reset my password, it might not have been me messing it up...
Posted on 2019-08-08T05:00:01+0000
How To Help Your Anxious Partner — And Yourself
Anxiety can be consuming, and it doesn't have an easy solution. But psychiatrists and therapists say there are ways to help your partner navigate their challenges while also taking care of yourself.
Hasnain says:
Bookmarking this in case I ever need to find this and send this to someone.
It taught me a bunch of empathy I wasn't aware of, and seems to be well worth a read for anyone. It equally well applies for people that aren't your partners, and just folks you may care about.
Posted on 2019-08-07T03:56:36+0000
College Financial-Aid Loophole: Wealthy Parents Transfer Guardianship of Their Teens to Get Aid
The Education Department is looking into a tactic that has been used in some Chicago suburbs, in which wealthy parents transfer legal guardianship of their college-bound children to relatives or friends so the teens can claim financial aid.
Hasnain says:
I, uh.... This is both creatively smart and objectively terrible at the same time since it takes away aid from more deserving students. Some cherry-picked quotes:
"Today, her daughter attends a private college on the West Coast which costs $65,000 in annual tuition, she said. The daughter received a $27,000 merit scholarship and an additional $20,000 in need-based aid, including a federal Pell grant, which she won’t have to pay back. The daughter is responsible for $18,000 a year, which her grandparents pay, the woman said."
"“The guardianship law was written very broadly,” Ms. Berlin said. “Judges were given an immense amount of discretion. The standard is, best interest of the child, and I think it’s hard to argue that this is not in the student’s best interest.”"
Posted on 2019-07-30T16:34:30+0000
Comparisons in C++20
Barry's C++ Blog
Hasnain says:
I know people sometimes say C++ is boring... But hey, this managed to keep my attention for about 15 minutes close to midnight.
"The above covers the basics of C++20 comparisons: how all the synthetic candidates work, how they’re found, a brief intro to three-way comparison and how to write one. There’s a few more interesting topics that are worth talking about, but I want to keep these posts at a manageable length, so stay tuned for followups."
I do have to agree with the people that say C++ is too complex and big a language though. If you need this long an explanation and you're still not done...
(This is still worth reading as it'll simplify a ton of code).
Posted on 2019-07-29T07:02:14+0000
You Have a Moral Obligation to Claim Your $125 From Equifax
Even if the prospect of filling out a relatively brief online form fills you with more dread than the theft of all your personal data.
Hasnain says:
Please go ahead and do this. It took all of 2 seconds for the $125 and you are eligible for it if you have any credit monitoring at all (like Credit Karma).
If you also spent time checking your credit or doing other things afterwards, you can also claim additional stuff ($25/hr upto 20 hours, or upto 10 without supporting documents).
Posted on 2019-07-27T23:35:17+0000
This college dropout was bedridden for 11 years. Then he invented a surgery and cured himself
Doug Lindsay was starting his senior year in college when he was stricken by a mysterious illness. Doctors were baffled. He eventually realized that if he wanted his life back, he'd have to do it himself.
Hasnain says:
Heartwarming read about a person that suffered through a debilitating disease, and worked through creating a treatment for themselves and convincing doctors it was worthwhile.
"Eventually he recruited a surgeon from the University of Alabama-Birmingham. In September 2010 Lindsday went to the university hospital, where the doctor successfully extracted one of his adrenal medullas.
Three weeks after the procedure, Lindsay could sit upright for three hours. By Christmas Eve, he had the strength to walk a mile to church.
As he stood in the back of the church during midnight Mass, it finally felt like hope was winning.
But progress was slow. In 2012, he underwent a second surgery at Washington University in St. Louis to remove the medulla from his remaining adrenal gland.
A year later, he was well enough to fly with friends to the Bahamas. It was the first time in his life the Midwesterner had seen the ocean.
By early 2014, he was coming off some of his meds.
Coghlan, his champion, lived just long enough to see Lindsay's remarkable recovery. He died in 2015."