Hacker Newsnew | past | comments | ask | show | jobs | submit | HollowMan's commentslogin

SEEKING WORK - Remote - EU Based

Technologies: Ruby/Rails - React.js - Node.js - Docker - AWS - HubSpot

New team of experienced Web Developers. We specialise in converting ideas to MVPs and then handle growth.

Email : contact{at}tbds.fr

Our short BIOs: https://www.tbds.fr/en


Location: France Remote: Yes Willing to relocate: No Technologies: Ruby/Rails, React.js, Node.js LinkedIN: https://www.linkedin.com/in/philippe-durix-29232546 Email: philippe@tbds.fr

Experienced senior web developer with over 10 years of expertise. I have collaborated with startups of all sizes, guiding tech projects from bootstrap to scaling. My specialization lies in Ruby on Rails full-stack development, along with proficiency in developing React.js frontend applications, Node.js backend systems, DevOps practices, and database design. I am available for freelance work through TBDSoftware, where I partnered with equally skilled developers. Together, we bring our combined experience to enhance your projects.


Hate to ask if this is obvious, but what are said red flags from the past couple years IYO?


They essentially have MITM capabilities over a significant portion of the web, undermining TLS security. They have a tendency to deny access to normal users using privacy-friendly setups (Tor, without Javascript, etc), and them operating in net loss (implying that the shareholders value growth, i.e. gobbling up even more of the internet infrastructure). Some people are also concerned about their emerging ability as a powerful force for censorship and surveillance, but they seem to have maintained a good stance on free speech so far (not sure about surveillance). Cloudflare threatens the nature of the web as a somewhat decentralized system, although it is not the only one doing that.


They essentially have MITM capabilities over a significant portion of the web, undermining TLS security

Cloudflare is on them edge of your infrastructure. It's not in the middle of your service's infra and the user. It's not undermining TLS security because you are explicitly sharing the decrypted data with cloudflare to let them cache and protect your site.

>They have a tendency to deny access to normal users using privacy-friendly setups (Tor, without Javascript, etc)

To protect yourself against a bad actor you will need to fingerprint them and then imposes restrictions on them. People who are using privacy friendly setups look like they are trying not to be fingerprinted or have a shady fingerprint. By getting rid of a unique fingerprint that Cloudflare can learn to trust you end up always looking suspicious. Cloudflare did develop privacy pass to give these people a better experience when accessing websites protected by Cloudflare.

>and them operating in net loss (implying that the shareholders value growth, i.e. gobbling up even more of the internet infrastructure).

There are many competing CDNs. Most web traffic doesn't even use Cloudflare. There is still plenty of room for Cloudflare to grow.

>Some people are also concerned about their emerging ability as a powerful force for censorship and surveillance

This is a problem in general with internet service providers. ISPs can just decided not to peer with you or just null route your IPs. Cloudflare is less of a problem compared to major consumer facing ISPs.

>Cloudflare threatens the nature of the web as a somewhat decentralized system

So do DDoS attacks. If the small guy can't keep a site online like the big guys can that leads to a less decentralized web.


> They essentially have MITM capabilities over a significant portion of the web, undermining TLS security.

There's actually some work being done to make CDNs not able to MITM the origin.

https://web.dev/signed-exchanges/

https://developer.chrome.com/blog/signed-exchanges/

Also, it's pretty common to use cloud X's load balancing service(/serverless product/etc) when hosting on cloud X, thus giving AWS/GoogleCloud/Azure similar MITM capabilities.


As a website owner, pretty much all traffic I see from Tor is malicious. I also block it outright now, it decreased bad traffic by a lot. So I can understand the decision of CF here. The problem is not Cloudflare or Tor, it's the people abusing Tor.


It happens even when you don't use Tor. It gradually creeps up in frequency the more privacy-friendly settings you use. You get stopped on a bunch of websites nowadays forcing you to run their proprietary JavaScript just to identify and track you to ensure you are not a robot.


> websites nowadays forcing you to run their proprietary JavaScript just to identify and track you to ensure you are not a robot.

Well yes, this is a good thing. The vast majority of human-made websites aim at serving humans, not unverified bots.


> they seem to have maintained a good stance on free speech so far

good by who's definition? because there are plenty of people who hate cloudflare for flip flopping on nazi sites and will also heap that hate on just regular SWEs who join cloudflare who dont really have anything to do with those decisions.


They’re a backdoor access point for the US government.


After 10 years in the industry I agreee with almost every bit.

Soft skills are never taught, rarely checked during interviews, but might well be themost important ones.


> Estimations will be asked even when you don't want to give them

Actually this particular point reminds me of young-arrogant-me saying things like "I can't give you an estimate since its software, and everybody knows thats estimates are impossible, duh." to my boss.

Boy was I young, and arrogant!


When I was young I didn't want to give them because I thought they had to be accurate, and pined over being wrong, wasting hours trying to ensure I covered all my bases and basically doing the work to get there. I was quite good with accuracy, which helped feed my belief, but the effort to be accurate was monumental.

Thankfully, I eventually came to realize that you can choose a random number. Nobody gives it another thought after you've answered.


I think it's literally what the word estimate means though. There's a reason people use the word estimate and not prediction. They want to know whether it's going to take 3 days, 3 months or 3 years.


Yes, but what wasn't clear was around the margin of error. I assumed there was an expectation of being close. If I said eight hours and it took nine, close enough. But if I said eight hours and it took a year, that was once concerning, but I eventually learned that I could say eight hours for a year's worth of work and nobody would actually reflect back on it anyway. All that mattered was answering the question with something.


SEEKING WORK | Paris (FR) | Remote and on-site

Location: France

Remote: Yes

Willing to relocate: yes

Technologies: Ruby/Rails, PostgreSQL, Angular, Vue, Redis, AWS

Email: contact[at]coclick.io

---

We are a 3 persons team of software engineers with 10+ years of experience with web development, the startup scene and products.

We specialize in full stack development of MVP products as well as custom-made platforms.


Why is the article not talking about MSFT? Seems like it is holding up rather better than others non AAPL GAFAM values. What would be the explanation ?


One can find convenient charts that compare both revenue sources and profits for the big tech companies.

Revenue sources: https://www.visualcapitalist.com/how-big-tech-makes-their-bi...

Profit breakdown: https://www.visualcapitalist.com/cp/big-tech-revenue-profit-...

MSFT has more diverse sources of revenue than the FAANG members dependent primarily on consumer directed ads and so won't be as badly affected by a downturn in consumer directed ad spending.


Large installed Windows base (and Office, AD, SQL server, Sharepoint, …) in enterprises.


Having good products that it’s proven people and companies will actually pay for is useful like that.


MSFT value is even huger when you factor in dividend payments.


Recently turned 30, I can second you on a lot of points. I would add that we as human beings always tend to look at people luckier than we are, never the other way around. Doing so can make one relativise its condition. Obviously this is linked to your point 26 about social media.


Pollen AM (http://www.pollen.am) | Embedded Software Engineer | Paris, France, Full-time, Onsite

Pollen AM is a 4 year old French startup that developed the first new technology in the additive manifacturing industry for many years. Instead of using filament, powder or resin, our 3D printer uses industrial injection grade pellets, allowing all materials to be processed. And can use up to 4 different on a single piece. This allows our clients to use 3D printing to manufacture actual goods using real materials at a competitive price.

We are a team of 11 engineers, doctors and designers each with a specific skillset in materials, physics, mechanics, electronics and of course, software. We design every part of the printer internally, providing always more challenging projects to our team.

We are looking for an embedded software engineer with capabilities in electronics. Such a maker would take responsibility of everything close to the hardware here at Pollen. He would work with our software team of 2 and design, code, sold and solder on Pam, our 3D printer.

Send me an email if you're interested: pd@pollen.am.


Pollen AM | Software/Electronics Engineer | Paris | Full-time, Onsite | http://www.pollen.am

Pollen AM is a french start-up formed by a team of the best doctors and engineers within their various fields: they are PhDs in micro nano electronic, in physical chemistry of soft materials, electronics and mechanics engineer, optical specialized physicist and, of course, software. The company has been researching and developing its 3D Printer for 5 years under the radar. Pollen AM offers the first real technological breakthrough for 15 years in the 3D Printing field. Our printer is able to print multi-material finished products locally, on demand, for a fraction of the actual prices. Founded at the end of 2013, the company is supported by Business Angels and is currently undergoing its Series A round.

Pollen AM is looking for an embedded software developer with competences in the electronics field. Within the technical team, you will take care of the development of the low-level software and associated electronics. You will be particularly active on operational electronics problems. You will support other services from R&D and will create new prototypes, bring new solutions and support the product life cycle.

Skills & requirements: - Experience with embedded software development; - Proficiency in C/C++ languages; - Experience with micro-controllers; - Competent in electronics prototyping; - Comfortable with versioning tools (Git); - Autonomous.

Bonus points: - You have experience designing robots; - You love 3D printers; - You are capable of welding, screwing, drilling...

Technical details Workplace: Paris Job available: Now Contract: Full time position with flexible hours Salary: Depending on profile

Contact: jobs@pollen.am


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: