Live data from Hacker News

We are retiring our bug bounty program

turso.tech

281–290 of 303 posts

Re: We are retiring our bug bounty program

#281

Earlier quoted context omitted.

Coming off of a health sabbatical, yes, I have more contracted work around than I can commit to. I can’t even imagine having 50 acquaintances I see in a year, currently, so I don’t know I’ll be able to offer advice specifically… but generally ?, I think I’d be pretty upset if I knew 50 people and none of them would bring me on their team, or start something up with me.

Well, I am upset. But -- bubbles. My health has been in decline for years and I am very slowly making some strides. Missed on a million networking opportunities by being unable to go to conferences and... yeah, I'll not turn this into a sob story. LLMs really accentuated the importance of networking, did they not?

They really accentuated the importance of continuing education, continued interest, continued ownership,

and, failing all of that, networking and nepotism type of safety-nets.

100%.

Re: We are retiring our bug bounty program

#282

Earlier quoted context omitted.

Well, I am upset. But -- bubbles. My health has been in decline for years and I am very slowly making some strides. Missed on a million networking opportunities by being unable to go to conferences and... yeah, I'll not turn this into a sob story. LLMs really accentuated the importance of networking, did they not?

They really accentuated the importance of continuing education, continued interest, continued ownership, and, failing all of that, networking and nepotism type of safety-nets. 100%.

I envy your bubble, and I am not being snarky or vile here -- 100% honest.

My education and experience matter exactly squat. And have not ever mattered in my 24 years of career.

I know I've done a lot of things wrong but I can't spend the rest of my life beating myself over it. Trying to find a way to attack the problem from different angles. But it's impossible with a hugely demanding job and my fear of being let go and how generally terrible the market is for niche-ish languages (like Elixir that I work with; I am pretty good at Golang and Rust but have not actively worked with them professionally in years; really went all-in).

So currently I am trapped. We'll see if I can figure out an exit. So far it seems mathematically impossible. If I don't change the game, I am toast.

Re: We are retiring our bug bounty program

#283

Earlier quoted context omitted.

They really accentuated the importance of continuing education, continued interest, continued ownership, and, failing all of that, networking and nepotism type of safety-nets. 100%.

I envy your bubble, and I am not being snarky or vile here -- 100% honest. My education and experience matter exactly squat. And have not ever mattered in my 24 years of career. I know I've done a lot of things wrong but I can't spend the rest of my life beating myself over it. Trying to find a way to attack the problem from different angles. But it's impossible with a hugely demanding job and my fear of being let go…

A few questions that may help your next steps:

1.) What do you have to be doing, daily, weekly, to be happy?

1a.) What do you have to NOT be doing, daily, weekly, to be happy?

2.) Do you prefer to remain an individual contributor, for one reason or another? Said another way: are you the right fit to seriously look at the path to management or consulting roles?

3.) You mentioned your bubble - a few times. Are you willing to move? Otherwise shake that bubble up?

PS my situation is not that enviable - the work I’m being offered is far from what I’d like to be doing - or enough to be comfortable financially.

But, I am finally sleeping well.

and that’s more important to me than anything.

Re: We are retiring our bug bounty program

#284
post #17

Earlier quoted context omitted.

Sounds a like a tactical tornado, made me think of this paragraph: “Almost every software development organization has at least one developer who takes tactical programming to the extreme: a tactical tornado. The tactical tornado is a prolific programmer who pumps out code far faster than others but works in a totally tactical fashion. When it comes to implementing a quick feature, nobody gets it done faster than the…

I have seen precisely zero consequences for these people because they usually leave after not too long and go somewhere else, sometimes for higher pay. The slower folks end up getting the worse code and no raises in exchange for comradery. But also I have no idea how that situation arises unless the slower folks are just auto-approving PRs. You kind of did that to yourself if you let the new person get away with it.

You fix the environment so that proper code reviews are explicitly part of the process regardless of priorities, unless management sign off on taking on responsibility of the shitstorm if things break in production

Re: We are retiring our bug bounty program

#285

Earlier quoted context omitted.

What's the alternative? You push back or you don't, leaving you likelier to leave in the future. For non-junior devs, the market is still humming along.

I don't see how the market is humming along for anyone . Then again, I have zero network. Maybe you can just call someone on the phone and jump ship next week? I can't. Many other people cannot as well. My idea right now is to find ways to do things mostly my way and introduce a near-perfect meritocracy in my team. No seniors or juniors; I am technically "the most senior" but we all have differing and unique experien…

> I don't see how the market is humming along for anyone. Then again, I have zero network

I mean, yeah, that's the issue. Even without a network my LinkedIn is full of recruiter spam because my profile is optimized, which is a skill anyone can learn and do, same concept as SEO.

> I like getting along with people.

Sure, who doesn't? The issue is when one becomes a doormat, just as in other social situations; in this case, it'd be being nice to others when in reality you'd need to be firm but fair that their writing huge PRs is negatively affecting everyone else. It's the paradox of tolerance applied to the engineering world.

Re: We are retiring our bug bounty program

#286

Earlier quoted context omitted.

I envy your bubble, and I am not being snarky or vile here -- 100% honest. My education and experience matter exactly squat. And have not ever mattered in my 24 years of career. I know I've done a lot of things wrong but I can't spend the rest of my life beating myself over it. Trying to find a way to attack the problem from different angles. But it's impossible with a hugely demanding job and my fear of being let go…

A few questions that may help your next steps: 1.) What do you have to be doing, daily, weekly, to be happy? 1a.) What do you have to NOT be doing, daily, weekly, to be happy? 2.) Do you prefer to remain an individual contributor, for one reason or another? Said another way: are you the right fit to seriously look at the path to management or consulting roles? 3.) You mentioned your bubble - a few times. Are you will…

> 1.) What do you have to be doing, daily, weekly, to be happy?

Be more in nature. I am in a tight metropolitan area and I hate my immediate surroundings. I've seen our multiple parks many times and I am not impressed. I'd prefer go hiking but my health condition is making me tired after a grocery shopping. Mind you, that is fixable but work is strangling me to the point of me not wanting to work out.

Also, just getting to one of those parks is an adventure; minimum 45 minutes. Not enough time or motivation for that. And that ruins a lot of stuff downstream in the graph of dependencies, sadly.

Also: be much more free. My work is demanding. Very demanding. A startup finally starting to make some money (far from the burn rate). CEO signing with new customers and not asking if we even can accommodate such a demand.

Work-wise I'd prefer to coast somewhere, cynically speaking, but more accurately: have more autonomy and time & space to show my talents. Have breathing room, if you will. Now I have nearly zero. Not like zero _zero_, but nearly.

> 1a.) What do you have to NOT be doing, daily, weekly, to be happy?

I don't want to care whether my CEO is going to make money. If I wanted to sign up as a cofounder (or start my own business) then I would. Normally I wouldn't mind but it's just too much work in this job.

Though on the other hand, I am getting priceless experience on what non-technical people value and generally finally started understanding that the techie's perspective is cripplingly limiting -- so I welcome the lessons. I just wish they were 1-2 a week, not 10+.

> 2.) Do you prefer to remain an individual contributor, for one reason or another? Said another way: are you the right fit to seriously look at the path to management or consulting roles?

I have been a contractor, consultant (somewhat), architect, educator, and IC (most of the time). I do fairly OK on reconciling differences and digging for the root causes of conflicts and misunderstandings (as I think I am proving with my recent replies where I try hard to ask people where do they see Rust zealots so we can at least argue from equal POVs, I get downvoted for me trying to be open-minded and then more or less trolled here and there). I am pretty good at compromising and changing my mind when faced with new info, as I think every science-profession-like professional must be.

"Strong opinions, weakly held" describes me fairly okay; though most of my opinions are not so strong either.

Management I don't care about. I am entering middle age and I need less calls during which I have to pretend to subscribe to the company's cult. No thanks. Only if I have generous equity and a guaranteed 9 months of severance upon being let go will I care enough. I am physically and psychologically extremely tired of all the circus and posturing. You want me to help you achieve success in your business? I WOULD LOVE TO! I take big enjoyment in turning business requirements into code; educates me every time I do it, in a way that I love and want to keep experiencing.

My problems however are crunches (i.e. soul-crushing fast speeds) and again, company cults. Just keep me the hell away from all parroting HR sessions please.

This is NOT to be mistaken with "typical introvert programmer hates meetings". Nothing of the sort. I am one of the first to exchange 5 Slack messages with you and if I don't see alignment I'll ask your permission for us to jump on a call. I love overcoming obstacles and don't hide in the corner. I just hate cults. Meaningful difference but many people conflate the two for some reason.

So TL;DR I'd prefer to be an IC simply because many other roles I've tried (the most trendy one: "product engineer") are masked N roles for 1 wage really, and even though I honestly don't care who in the org feels they scored some huge points by tricking an engineer into doing multiple roles, I still don't want to overwork myself -- and these roles kind of come with that implicit expectation. If my schedules and work regime are satisfying for me, it's all good for me and I'll not care if the CEO giggles thinking he "tricked" me to do the job of 4 people.

...But I do want to be left in peace to do my work. And my work =/= meetings. Meetings are a vehicle through which we (a) align with business / customers and (b) make sure we will write the right code. Managers have meetings as their main output. I am 100% against that in my life and career.

Mind you, I've been a team lead 3 times over the course of a 24-year career. All the devs that I was managing loved me and that by itself was a hugely rewarding experience, especially when multiple of them jumped in my defense when executives started criticizing KPIs that I was not ever informed about, but... that by itself can't compensate for the fact that I spent my days dreaming of being able to solve problems with code again while sighing deeply and opening the 7th spreadsheet barely into the 3rd hour of my workday. Never again.

I can and I do many adjacent-to-code activities in my current job. I don't mind it. I even enjoy the occasional pulls away from my IDE and Claude. But I would mind it if those other activities started taking >20% of my working hours, for example.

Hope that paints a well-explained picture.

> 3.) You mentioned your bubble - a few times. Are you willing to move? Otherwise shake that bubble up?

I am more than ready to GTFO from my country; we just got a full majority government with strong suspicions of strong Russian alignment (Bulgaria) and I am not keen on finding out how would that look in 4, or even 2, years. It's not only that though, I just hate the place already.

And also being an Eastern European, we are a target of extremely toxic companies for one reason or another. Guess we are known for soldiering on and never defending ourselves which I am very ashamed to admit: I was that stereotype for a _long_ time.

However, again: health. Even just moving all my and my wife's items from one location to another would put me into bed for 3-4 days only lying and reading books to recover. But also again: this is remediable, but not while being in my current job; too demanding, leaves no air in the room for almost nothing else. I need nature, I need my meditation, yoga, lifting and biking. I have not done almost none of those in 7 months and I am starting to feel it very acutely.

Before you say it: I manage my time and focus fairly well (recovering from ADHD-seeming symptoms all on my own with zero medication, and I never intend to get any) but I just don't have enough energetic hours in the day to outpace the hard demands of a startup. I manage to do a few good 2-3h 100% focused sessions of work and only hop on HN while I wait for a long Claude research and/or scoping/planning discussions.

I want to change my bubble but that requires me to make peace with what a frakkin nerd I was most of my life and took my programmer work position for granted and now I am 46 with zero contacts and shortening my lifespan in a company where I love everyone but still have to grind my arse off just not to fall _too much_ behind (progress? actual progress and outpacing the requirements? forget about it).

I would love to move to, I don't know, probably France or the USA. However, what I am _not_ willing to do is work in an office. I am a fairly serious guy who knows how to manage his time and energy and I don't need anyone looking over my shoulder; that would make me quit on the 2nd day. Trust culture or bust. I can prove myself in less than a month. If that's not good enough for a company then I don't need them. We all have boundaries. That's mine.

> But, I am finally sleeping well.

Same, for the last 6-7 months, first time in 8-9 years (health ruined almost to the point of a premature death). I very, very gradually recover, I'd say 0.1% a week. I can feel the difference from half a year ago but not from one month ago. Aiming to accelerate that but for that to happen I need to overcome despair and depression; not easy when your body betrays you and injects you with the desperation chemicals every day.

One final time: but to alleviate that, I need less work load! I need to know and see that if I concentrate I can do my work for the day in 2-3h and use the rest to invest in health, physical and mental. I know many view that as cheating and slacking but I'd vehemently disagree. I have worked a long time to build discipline and a plethora of skills to become much more productive than many. I am a heavy hitter.

Watched The Matrix, all 3 parts? If so, here's an analogy for you: if you remember the final fight, when Neo "died" shortly after, and even though he was fumbling and was visibly disoriented, he _still_ managed to hit Smith with strength enough to have him break through multiple layers of concrete.

If you pardon the dramatic expression: well, this is how I feel and conduct myself at work now. If you give me a good target, I'll demolish it with precision and strength even if I am half-dead. But make me do 50 quick weak strikes and I'll die on the spot.

(Or, as people say: "You don't pay me $500 because your task only took me one hour. You pay me for all the years I needed to become so good that I _can_ do your job in one hour." -- or something of the sort, don't remember concretely.)

Hope that helps. No idea why I even confessed as much but I still know enough to trust my intuition. So, full disclosure. Do with it as you please.

:)

Re: We are retiring our bug bounty program

#287

Earlier quoted context omitted.

I don't see how the market is humming along for anyone . Then again, I have zero network. Maybe you can just call someone on the phone and jump ship next week? I can't. Many other people cannot as well. My idea right now is to find ways to do things mostly my way and introduce a near-perfect meritocracy in my team. No seniors or juniors; I am technically "the most senior" but we all have differing and unique experien…

> I don't see how the market is humming along for anyone. Then again, I have zero network I mean, yeah, that's the issue. Even without a network my LinkedIn is full of recruiter spam because my profile is optimized, which is a skill anyone can learn and do, same concept as SEO. > I like getting along with people. Sure, who doesn't? The issue is when one becomes a doormat, just as in other social situations; in this c…

Yeah, you are sadly right. Took me a long time to stop being a doormat. Not sure I am nailing it even now to be honest, but I am doing _much_ better compared to two years ago.

Re: We are retiring our bug bounty program

#288
post #131

Earlier quoted context omitted.

Its the account that posted this PR https://github.com/tursodatabase/turso/pull/6257

I could have swear it said "0 contributions in the last year" when I opened the profile before, and it showed no activity in the contribution graph, but now I check again and it shows a bunch of stuff... Guess some request failed last time or something, my bad.

Given the troubles GitHub has had recently its not a stretch to think that you just got some sort of error.

Re: We are retiring our bug bounty program

#289
post #19

Earlier quoted context omitted.

I think people would be more interested in listening to "AI skeptics" if they offered realistic solutions to the problems they predict. Pandora's box has been opened, let's deal with the consequences now instead of trying to shut the box which cannot be shut.

"We created a massive problem but it's up to you, the people that never wanted this, to clean up our mess."

I never said it was up to AI Skeptics to “clean up the mess”. I just said if they want to be part of the conversation, realistic solutions need to be on the table.

Of course, I suspect you knew that.

Re: We are retiring our bug bounty program

#290

Earlier quoted context omitted.

> Now that doom is here, it's too late to do anything about it. Just accept the doom! What doom? This is a mildly annoying problem that will likely be self correcting long term.

You need to get out of your SV big tech bubble and go attend your local planning board meeting, the vast majority of the public hates this technology. It's literally killing members in their community and ruining the ecology. The question we should ask is why a subset of humans are so gung-ho about this technology when all it's done is induced mass misery at even a greater scale. We all know the actual answer to this…

Wait, what? How’d we go from crappy GitHub PRs to “literally killing members in their community and ruining the ecology”? If you’re talking about massive data centers, I’m sympathetic to significantly better environmental protection laws. But that’s orthogonal to the goals of anti-AI people and mostly something they signal-boost because it helps recruit, not because big industry screwing over regular people is unique to AI.

Your other complaints seem more to do with concentration of wealth and capitalism, which AI is accelerating, but is not the cause of. Banning AI because unregulated capitalism is making people miserable would be like banning shipping containers to stop sweatshops.

Post reply on HN