Readit News logoReadit News
slt2021 commented on SolarWinds: What Hit Us Could Hit Others   krebsonsecurity.com/2021/... · Posted by u/picture
cutemonster · 5 years ago
> get fake identity

Wouldn't Google, Apple etc do background checks that discovered fake identities? Or is it not so easy with background checks?

Maybe SolarWinds would be less careful though?

slt2021 · 5 years ago
nation state spies can get fake identities issued legally by their own government and will be confirmed as usual during the background check
somurzakov commented on SolarWinds: What Hit Us Could Hit Others   krebsonsecurity.com/2021/... · Posted by u/picture
totalZero · 5 years ago
Alternatively, it is not unimaginable for a foreign entity to bribe or otherwise compromise a SolarWinds employee.
somurzakov · 5 years ago
it is much easier for highly skilled hacker to get fake identity and get employed at SW than to compromise an employee - although this is longer term play
slt2021 commented on SolarWinds: What Hit Us Could Hit Others   krebsonsecurity.com/2021/... · Posted by u/picture
slt2021 · 5 years ago
I am 99% percent sure the hackers are among the CUSTOMERS of Solar Winds.

That way they were able to live-test infected SolarWinds distro in their own controlled environment and develop all possible mitigations and techniques - the sheer amount of these evading techniques suggests they were built up over time, and not instantly.

Being Solar Winds customer and receiving infected updated versions every time gave them opportunity to perfect their techniques and hide for so long

At least that what I would do if I were a hacker and wanted to persist and be very careful about not getting detected

somurzakov commented on How to Become a Data Engineer in 2021   khashtamov.com/en/how-to-... · Posted by u/adilkhash
darth_avocado · 5 years ago
You are right in the sense that if you look at average SWE salaries and data engineering salaries, the average salary is higher for data engineers. Because the starting salaries for data engineers tend to be higher because of all the skills that are needed and there's plenty of SWE positions that require more than just a degree in CS. But if you start comparing salaries at maybe a senior level (4-5 yoe+), the salaries for SWEs start becoming a lot more than DEs. And again, I've worked in different companies, big and small, this holds true for all companies that have "Data Engineer" titles. There's of course companies like Netflix where you are a data engineer but still get a SWE title and get paid the same.
somurzakov · 5 years ago
experienced data engineers should graduate to data architects/ML engineers and this way they can get on par with SWE, pls correct me if I am wrong.
somurzakov commented on How to Become a Data Engineer in 2021   khashtamov.com/en/how-to-... · Posted by u/adilkhash
disgruntledphd2 · 5 years ago
Huh, what replaces Spark in those lists?

For my money, its the best distributed ML system out there, so I'd be interested to know what new hotness I'm missing.

somurzakov · 5 years ago
distributed ML != Distributed DWH.

Distributed ML is tough to train because of very little control over train loop. I personally prefer using single server trainkng even on large datasets, or switch to online learning algos that do train/inference/retrain at the same time.

as for snowflake, I havent heard of people using snowflake to train ML, but sbnowflake is a killer in managed distribited DWH that you dont have to tinker and tune

somurzakov commented on How to Become a Data Engineer in 2021   khashtamov.com/en/how-to-... · Posted by u/adilkhash
knur · 5 years ago
I disagree. That's not enough these days.

If you want to build anything mildly interesting, you need to have a solid background on software engineering (building data pipelines in Spark, Flink, etc. goes way beyond knowing SQL), you need to really understand your runtime (e.g. the JVM, and how to tune it when working with massive amounts of data), you need a bit of knowledge about infrastructure, because some of the most specialized and powerful tools do not have yet an established "way of doing things", and the statefulness nature of them make them different from your typical web app deployment.

Maybe if you want to become a data analyst you only need SQL, and I would still doubt it. But data engineering is a bit different.

somurzakov · 5 years ago
I believe what you described is a job of Platform Engineer/Systems Engineer/Data lake Architect, especially JVM aspect of it. The interesting job is in the beginning when you build the cluster initially, or do major extension, after that the ops/maintenance is usually outsourced to cheap labor offshore - so this kinda job is personally not for me.

spark has dataframe API which is similar to pandas api and can be learned in one day, especially if you know python.

same for Airflow and other frameworks, it just a fancy scheduler that anyone can pick up in a couple days.

somurzakov commented on How to Become a Data Engineer in 2021   khashtamov.com/en/how-to-... · Posted by u/adilkhash
somurzakov · 5 years ago
advanced proficiency in SQL and in any scripting language of your choice (C#/powershell, python) is enough to be a data engineer on any technical stack: windows/linux, on-prem/cloud, vendor specific/opensource, literally anything.
somurzakov commented on What Silicon Valley gets about engineers that traditional companies do not   blog.pragmaticengineer.co... · Posted by u/gregdoesit
a-dub · 5 years ago
it's funny, as the faang interview process, as i know it, does not select for the hybrid dev/product skillset the OP describes. in fact, it shies away from it about as far as you can get, instead focusing on beloved algorithmic problem solving, which i guess is a good fit for standardized testing and leveling, but will tell you nothing about broad skills in both software development and product design/management as described here.
somurzakov · 5 years ago
algorithmic problem solving is very close to IOI/ACM ICPC type problems, which test on combination of knowledge of data structures+algorithms and creative ability to combine both to create own algorithms while being under interview anxiety+time limti stress. Quite essential in everything internet-scale and filters top percentile candidates pretty well.

THis process is not required for your average company where IT is a cost center and CRUD-type apps generator.

somurzakov commented on Hyundai Motor says it is in early talks with Apple   reuters.com/article/us-hy... · Posted by u/pseudolus
medecau · 5 years ago
foxconn sounds like a better aligned comparison

as trendy as tsmc might be these days - apple might end up going for abb, siemens, toshiba engines

somurzakov · 5 years ago
an engine in electric vehicle is a commodity, heck even one from my GE washer would work for the EV
slt2021 commented on Huawei Tops Intel as Top Linux Kernel Contributor for 5.10   news.itsfoss.com/huawei-k... · Posted by u/AdmiralAsshat
dvfjsdhgfv · 5 years ago
> I would pick the one who's less likely to have me extradited from whatever country I am in or ban me from flying.

Frankly, I despise what the American government did to Assange and Manning. However, you can't even remotely compare their fate to what is happening every day to hundreds and thousands of people in different parts of China like Tibet. You have no chance of escaping, no chance of trial not to mention any appeal, your life can be destroyed in an instant. Several people in Tibet each year prefer to self-immolate than live under the terrible conditions imposed by the Chinese government.

slt2021 · 5 years ago
You can't just compare what US does to some individuals, and what China does to the entire minority populations of Uighurs (13M people) or Tibetans (7M), like harvesting their organs for example

https://www.businessinsider.com/china-harvesting-organs-of-u...

u/somurzakov

KarmaCake day243October 21, 2019View Original