Aussie living in the San Francisco Bay Area.
Coding since 1998.
.NET Foundation member. C# fan
https://d.sb/
Mastodon: @dan@d.sb

  • 6 Posts
  • 2.23K Comments
Joined 1 year ago
cake
Cake day: June 14th, 2023

help-circle




  • Their strange stock vesting schedule makes me think that they’re aware that people won’t actually want to stay for four years. A back-loaded vesting schedule never benefits the employee, only the employer.

    Other companies usually have an even schedule, for example Meta vests 25% per year (actually it vests quarterly instead of yearly). Google is an outlier too, but they do the opposite of what Amazon does - 33% in year one, then 33%, 22% and 12%. I suspect Google do this so they can list a higher total compensation (since initial total comp is salary, stock, and benefits for the first year), but getting more of your stock sooner is a good thing.










  • My wife’s mum was helping me move everything from a two-bedroom unit, in a Toyota Yaris hatchback. Completely filled the car with stuff. It took maybe six or seven trips back and forth, but we got it done eventually.

    This was before I had a drivers license or much money, so I couldn’t just rent a truck, nor could I afford to pay a mover.



  • I mentioned this in another comment too: Nobody seems to reads the actual posts, just the headlines. They were accidentally stored in logs:

    As part of a security review in 2019, we found that a subset of FB users’ passwords were temporarily logged in a readable format within our internal data systems,

    which is something I’ve seen at other companies too. For example, if you have error logging that logs the entire HTTP request when an error happens, but forget to filter out sensitive fields.


  • Also, nobody reads the actual posts, just the headlines. They were accidentally stored in logs:

    As part of a security review in 2019, we found that a subset of FB users’ passwords were temporarily logged in a readable format within our internal data systems,

    which is something I’ve seen at other companies too. For example, if you have error logging that logs the entire HTTP request when an error happens, but forget to filter out sensitive fields.